This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json) Hash identifier: 8h+uid1tVFW71dBtbtr/G7ac+nsdXUw0uV2CpuQQkpY= Subject key identifier: 98:75:19:1A:08:83:AD:8B:D3:40:A5:28:C5:1E:00:27:7A:E5:D2:E1 Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b Certificate serial: 019B3C7FCCBB9910164A1E5EB223A6D38F8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft Manifest number: 1183 Signing time: Sat 20 Dec 2025 16:02:47 +0000 Manifest this update: Sat 20 Dec 2025 16:02:47 +0000 Manifest next update: Sun 21 Dec 2025 16:02:47 +0000 Files and hashes: 1: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: lXQiipixGDfh0SEHZMzNxmgW/NAKURlJQOSFPQ3ZFqg=) 2: zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa (hash: EgP68fSUBBXlJuUGr4bTlwk3uiBoJBQFQ6/v7VJHcgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:cc:bb:99:10:16:4a:1e:5e:b2:23:a6:d3:8f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b Validity Not Before: Dec 20 16:02:47 2025 GMT Not After : Dec 21 16:02:47 2025 GMT Subject: CN=9875191a0883ad8bd340a528c51e00277ae5d2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:66:da:d2:a8:03:83:46:6a:b1:29:51:4d:f6: aa:f9:f2:40:57:2e:26:a3:2c:31:6d:75:0a:01:58: 31:4d:1a:c5:65:46:95:65:65:bf:0f:34:a7:46:9d: 00:ad:f0:08:74:fd:ab:04:af:7e:20:a8:7e:f5:0d: c5:da:3f:f9:27:5a:2e:c5:ad:4d:86:bd:49:d8:fe: 83:e1:fa:6c:9e:ac:94:33:b7:ac:43:4c:ce:b1:ed: de:4e:d1:23:ee:14:33:63:ac:84:f0:2f:c3:4c:0d: 5d:a4:8b:ae:f0:08:df:dc:71:3a:66:38:12:4c:4d: 9f:d6:fd:4a:e5:3a:f3:19:da:f8:a8:57:6e:ca:ff: 0f:57:80:ef:b4:f8:79:97:6a:6d:6e:6b:35:e9:71: 98:48:d5:5e:a5:06:b4:ca:4a:63:ce:07:f4:62:5b: 9c:66:4c:11:4f:56:ef:34:4a:3f:c9:02:1c:bb:4a: 99:d7:3d:d0:4d:92:ec:f4:e3:39:ab:d6:71:67:fa: 5d:a7:8b:fb:f6:cb:62:1b:91:7f:fd:b1:fd:2b:31: 8b:52:84:f0:7a:50:7e:99:3b:24:19:9b:04:cc:88: 12:28:47:3c:ba:57:55:1f:f7:4a:d0:5e:52:b7:c5: ab:7a:c0:76:26:fa:c7:4b:a5:73:3e:f4:c1:17:05: 47:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:75:19:1A:08:83:AD:8B:D3:40:A5:28:C5:1E:00:27:7A:E5:D2:E1 X509v3 Authority Key Identifier: keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a0:20:6d:bc:08:6b:de:3b:2d:15:8d:42:71:a6:75:52:0f: 7c:b5:f9:99:25:ff:aa:b0:76:79:cd:c2:8c:e8:aa:61:2b:f8: 0e:e2:d9:9d:b5:35:86:23:9b:c9:2b:bb:66:e8:31:77:d1:ed: cb:da:dd:4f:11:10:d5:9e:ac:e3:bf:db:bd:a1:83:c3:17:a2: 7c:01:57:f2:70:42:09:d0:8b:72:87:94:db:59:ad:7b:c1:7b: 50:97:fe:8b:3b:71:bf:a9:e2:5a:f1:1e:3a:86:13:9a:a0:16: 01:d3:ed:81:07:fc:a8:e5:03:0c:f3:0c:29:38:a3:18:04:8a: 08:48:9d:53:b7:b2:ac:85:b0:36:74:63:78:a6:4a:0d:75:5c: 4b:9f:fe:67:b0:0b:40:72:48:37:0f:21:4a:85:b7:c6:0c:6c: e8:a7:23:e1:04:08:e2:15:a8:b7:8f:87:61:79:ea:70:4c:8a: 98:0b:25:0e:94:f3:5f:4f:ce:cb:4d:82:4c:84:c7:4b:14:29: 2c:46:86:0b:73:40:68:0e:25:f3:71:fd:0f:45:c0:b5:b0:ba: 74:b4:67:9d:1d:4a:dc:64:b2:70:ba:56:10:f8:cd:b3:5f:74: 75:44:1b:78:6f:b0:c0:c5:d3:85:ef:9f:ab:5e:90:61:8b:1f: 29:84:fd:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f8y7mRAWSh5esiOm04+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjODFkNTRkYzBmZDE2YWM5MjUzNGI5YTc4MGUyNjc2NGIy ZjhmN2IwHhcNMjUxMjIwMTYwMjQ3WhcNMjUxMjIxMTYwMjQ3WjAzMTEwLwYDVQQD Eyg5ODc1MTkxYTA4ODNhZDhiZDM0MGE1MjhjNTFlMDAyNzdhZTVkMmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mba0qgDg0ZqsSlRTfaq+fJAVy4m oywxbXUKAVgxTRrFZUaVZWW/DzSnRp0ArfAIdP2rBK9+IKh+9Q3F2j/5J1ouxa1N hr1J2P6D4fpsnqyUM7esQ0zOse3eTtEj7hQzY6yE8C/DTA1dpIuu8Ajf3HE6ZjgS TE2f1v1K5TrzGdr4qFduyv8PV4DvtPh5l2ptbms16XGYSNVepQa0ykpjzgf0Yluc ZkwRT1bvNEo/yQIcu0qZ1z3QTZLs9OM5q9ZxZ/pdp4v79stiG5F//bH9KzGLUoTw elB+mTskGZsEzIgSKEc8uldVH/dK0F5St8WresB2JvrHS6VzPvTBFwVHFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJh1GRoIg62L00ClKMUeACd65dLhMB8GA1UdIwQY MBaAFMyB1U3A/RasklNLmngOJnZLL497MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMt ZjNmN2JkMzFhMGZlLzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMtZjNmN2JkMzFhMGZl LzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqAgbbwI a947LRWNQnGmdVIPfLX5mSX/qrB2ec3CjOiqYSv4DuLZnbU1hiObySu7Zugxd9Ht y9rdTxEQ1Z6s47/bvaGDwxeifAFX8nBCCdCLcoeU21mte8F7UJf+iztxv6niWvEe OoYTmqAWAdPtgQf8qOUDDPMMKTijGASKCEidU7eyrIWwNnRjeKZKDXVcS5/+Z7AL QHJINw8hSoW3xgxs6Kcj4QQI4hWot4+HYXnqcEyKmAslDpTzX0/Oy02CTITHSxQp LEaGC3NAaA4l83H9D0XAtbC6dLRnnR1K3GSycLpWEPjNs190dUQbeG+wwMXThe+f q16QYYsfKYT9WQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:47 2025 by rpki-client