This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft File: zM1YPI1xokJ-AGDjzJJPMtwaggs.mft (raw, json) Hash identifier: tmm5e1t8k2Jr6+UkC9lXlP+eLPzN/vsUj3e+xFuHtdU= Subject key identifier: 49:08:A1:3C:7A:4E:FA:95:A1:C3:24:9C:56:01:AC:D7:78:E2:80:B2 Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b Certificate serial: 019AF352782008087E4E1E42561666449ED2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft Manifest number: 0CFE Signing time: Sat 06 Dec 2025 11:00:59 +0000 Manifest this update: Sat 06 Dec 2025 11:00:59 +0000 Manifest next update: Sun 07 Dec 2025 11:00:59 +0000 Files and hashes: 1: G8EdfZKFW8uYcHc--s5iLeZKssQ.roa (hash: umqam3Wbg2iqJ3zJ/1WLiY5F6ucm17RieGxMmVvzD0o=) 2: _2rlTorI9d4EskVB3Q2AELQgntg.roa (hash: MJ/JOjkufW/i3x6kFr8d78WsqqTFtkNpKnXIQ8qokdg=) 3: aXdWyB6YGPpk-J46No4vsmKxGCE.roa (hash: TIgYhNRVQ3p/R3gXtf1t15mu2N3p/Mr9E78IoFCU1PY=) 4: lTK57WKRl8JHYSn3Me1JiHVYX6c.roa (hash: OsSENyDZ+wkTwyFgI+grH7k0F+jqVnxydXIxiH9U0Ng=) 5: oJSpmKHDBTQennb3bFM-AUri38c.roa (hash: gaj/8isA/Vy8LzqeD5fj8KpWVmIYxfupI+6YOWca7WI=) 6: yroUuw1scM5vJqw9L2C1NZloBMg.roa (hash: tq+65QQs/oxlmOUT1sm7YA/yaQJk+Rn+QS41OHsKCiw=) 7: zM1YPI1xokJ-AGDjzJJPMtwaggs.crl (hash: E5jEQhq9yD2kTfplvGt0gGuBdo/yLoYne6xtlRA84Fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:78:20:08:08:7e:4e:1e:42:56:16:66:44:9e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b Validity Not Before: Dec 6 11:00:59 2025 GMT Not After : Dec 7 11:00:59 2025 GMT Subject: CN=4908a13c7a4efa95a1c3249c5601acd778e280b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:82:70:b0:d4:9b:0d:67:78:e0:6f:fb:e4:53: 92:da:c9:3a:70:95:4c:b3:17:32:be:4e:39:4e:e0: 9f:7d:12:a4:c6:ff:0f:be:66:78:7d:c2:1b:53:54: fb:a1:3e:d9:fd:bb:7c:55:06:3b:37:c2:7a:70:2d: 3b:5e:92:05:14:6a:c8:59:12:06:c3:5b:4c:ee:ca: a2:a5:b8:d5:66:c0:ff:8b:e5:da:58:70:4c:03:15: 32:34:6c:8c:3a:57:90:30:1a:12:2f:d2:13:1e:0b: 94:dd:0c:86:88:cf:1a:b9:4b:42:7c:ae:17:23:57: a8:b8:5c:ee:52:59:e2:a3:22:ed:60:36:09:a5:b8: b3:09:2b:20:07:dd:6b:ab:49:5b:d6:0b:a6:32:28: 2b:ab:87:14:14:d7:e6:b8:ff:23:41:22:a6:bf:15: 8a:99:d6:68:29:2f:f5:50:b8:48:38:46:e2:59:a2: d2:d1:b6:33:4e:64:d4:a3:6a:af:5b:8b:50:9c:cc: 15:31:1d:4d:99:d7:0b:77:96:e0:9b:0e:d0:18:4a: f0:b2:70:d3:a6:5a:1f:82:ca:a2:72:48:02:bc:12: 54:20:b3:88:e1:0e:63:79:30:2f:08:ab:8d:0a:07: 3c:f9:4e:ce:b6:69:d9:2a:0e:4f:75:ae:88:c4:ab: d2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:08:A1:3C:7A:4E:FA:95:A1:C3:24:9C:56:01:AC:D7:78:E2:80:B2 X509v3 Authority Key Identifier: keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:60:ce:84:76:be:27:96:54:e5:8c:ee:60:a0:95:6a:65:f0: f7:d0:c1:95:de:ec:4c:a6:ca:19:22:bc:32:8a:3c:52:5e:e3: 14:c2:16:80:54:03:1e:32:ce:77:f5:57:99:48:29:c2:27:5f: 7c:6f:b2:aa:ec:6f:16:14:e1:6a:be:67:5d:db:88:ef:16:26: 51:cf:01:71:07:ca:77:e9:da:a1:5d:67:0d:a5:b0:a5:10:65: 45:08:a3:bd:f9:06:ea:70:03:54:ef:74:87:f9:29:98:fe:97: d1:1d:2c:73:e6:e5:de:2a:19:bc:11:42:ac:7d:db:ca:f7:b4: 7c:ae:ca:50:69:7f:3c:51:2e:56:aa:e8:5a:a5:a4:e7:21:7d: b1:d9:69:85:1a:25:08:9a:e8:21:fc:2d:47:7c:a3:d9:9f:4e: 38:02:60:d6:4d:de:f5:97:19:49:64:32:46:32:e5:f2:7f:be: f6:8e:a0:30:53:bd:6b:41:36:38:9d:fa:a6:35:63:65:4f:46: e0:3c:bd:9a:47:a0:7e:3a:d8:2d:99:1c:b5:d3:c2:09:3c:f6: 31:0a:bf:74:cb:de:ce:f5:25:c0:f8:d4:96:04:b7:69:ec:a5: 6c:e6:de:04:bb:6a:aa:ce:06:b2:9a:62:12:37:0f:0b:30:01: 8a:e9:13:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnggCAh+Th5CVhZmRJ7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjY2Q1ODNjOGQ3MWEyNDI3ZTAwNjBlM2NjOTI0ZjMyZGMx YTgyMGIwHhcNMjUxMjA2MTEwMDU5WhcNMjUxMjA3MTEwMDU5WjAzMTEwLwYDVQQD Eyg0OTA4YTEzYzdhNGVmYTk1YTFjMzI0OWM1NjAxYWNkNzc4ZTI4MGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYJwsNSbDWd44G/75FOS2sk6cJVM sxcyvk45TuCffRKkxv8PvmZ4fcIbU1T7oT7Z/bt8VQY7N8J6cC07XpIFFGrIWRIG w1tM7sqipbjVZsD/i+XaWHBMAxUyNGyMOleQMBoSL9ITHguU3QyGiM8auUtCfK4X I1eouFzuUlnioyLtYDYJpbizCSsgB91rq0lb1gumMigrq4cUFNfmuP8jQSKmvxWK mdZoKS/1ULhIOEbiWaLS0bYzTmTUo2qvW4tQnMwVMR1NmdcLd5bgmw7QGErwsnDT plofgsqickgCvBJUILOI4Q5jeTAvCKuNCgc8+U7OtmnZKg5Pda6IxKvSXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkIoTx6TvqVocMknFYBrNd44oCyMB8GA1UdIwQY MBaAFMzNWDyNcaJCfgBg48ySTzLcGoILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYt ZjQ4NTAyZDEzOTQ4LzEvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYtZjQ4NTAyZDEzOTQ4 LzEvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2DOhHa+ J5ZU5YzuYKCVamXw99DBld7sTKbKGSK8Moo8Ul7jFMIWgFQDHjLOd/VXmUgpwidf fG+yquxvFhThar5nXduI7xYmUc8BcQfKd+naoV1nDaWwpRBlRQijvfkG6nADVO90 h/kpmP6X0R0sc+bl3ioZvBFCrH3byve0fK7KUGl/PFEuVqroWqWk5yF9sdlphRol CJroIfwtR3yj2Z9OOAJg1k3e9ZcZSWQyRjLl8n++9o6gMFO9a0E2OJ36pjVjZU9G 4Dy9mkegfjrYLZkctdPCCTz2MQq/dMvezvUlwPjUlgS3aeylbObeBLtqqs4Gsppi EjcPCzABiukT5A== -----END CERTIFICATE-----Generated at Sat Dec 6 20:53:01 2025 by rpki-client