This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json) Hash identifier: OXLfoXen4RDDMal505KKhjNSNehmXt0V0T/TxlF76+Q= Subject key identifier: A0:7F:07:59:37:1F:1F:AC:9B:A8:26:CD:42:15:01:BD:97:B5:48:D7 Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc Certificate serial: 019B3EDA525175D7CEC2001A8FDA7464DFF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 03:00:53 +0000 Manifest this update: Sun 21 Dec 2025 03:00:53 +0000 Manifest next update: Mon 22 Dec 2025 03:00:53 +0000 Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=) 2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=) 3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: T+CA8d2E/OBw8x9iTY2vVwQi6udTNg3+G7dBiuPQPSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:52:51:75:d7:ce:c2:00:1a:8f:da:74:64:df:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc Validity Not Before: Dec 21 03:00:53 2025 GMT Not After : Dec 22 03:00:53 2025 GMT Subject: CN=a07f0759371f1fac9ba826cd421501bd97b548d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:59:7a:16:0e:b7:65:b1:3a:88:32:25:bc:8f: c0:97:fa:e0:e9:20:5e:89:1e:0a:61:6d:60:4c:eb: e6:3f:d6:e8:4f:89:b9:99:9d:c1:30:30:2c:8a:ff: d8:47:c5:69:e7:b9:20:0b:9f:c9:67:eb:7c:89:be: 8f:13:27:98:52:ee:62:df:7a:a9:9c:09:f7:9e:b9: d1:17:2a:11:af:89:04:1d:f5:f0:73:db:75:cf:f9: e5:a1:e2:82:17:f4:99:a2:45:06:33:ed:13:12:c7: 01:e4:7b:cf:7d:82:a4:5b:46:1a:0a:11:77:3f:af: c6:c9:d8:84:09:9b:00:9c:e8:e1:2d:bd:c1:15:19: 6f:e9:79:8c:7d:9d:f7:59:12:5c:90:06:57:94:46: 97:d7:16:5f:6c:75:9f:7c:54:26:8e:f5:d9:7d:13: fb:63:d5:fd:89:2f:66:a9:13:ca:8c:19:46:de:ae: dd:a3:3c:70:01:78:77:13:e0:b7:c7:f0:ed:40:ed: 15:f8:be:3c:4f:4b:96:3a:5e:c9:54:78:f3:31:92: 3f:f1:33:2a:83:4e:d5:13:cc:68:fd:40:9c:52:9e: fb:58:4d:ef:f8:e2:d7:d5:e4:52:a6:37:93:c6:f9: cf:60:a7:ca:68:d2:af:f9:96:2d:fb:87:37:12:aa: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7F:07:59:37:1F:1F:AC:9B:A8:26:CD:42:15:01:BD:97:B5:48:D7 X509v3 Authority Key Identifier: keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:ec:5f:d7:ae:02:13:10:b4:36:f7:31:51:24:ae:92:75:9b: f3:a0:80:ae:f7:24:8c:a5:7c:38:3b:7d:95:2c:ca:84:10:36: e6:a2:f8:62:20:97:19:71:7f:cc:b2:f0:7f:57:29:6b:de:aa: 90:96:45:b7:23:f8:21:ca:8f:2b:dc:28:32:26:f7:05:07:bb: 8d:1d:34:d7:b6:78:f2:fb:0a:5a:ad:82:91:c6:ad:09:f5:7c: a4:95:24:27:8b:a2:a6:c5:d6:62:c1:33:f1:14:03:05:95:1c: dd:95:ec:79:56:c9:17:37:0f:28:d0:d0:90:d1:3c:99:f3:30: 24:5b:ce:d8:8b:0c:8e:46:20:6c:ff:31:ac:0d:9e:9a:0f:44: 69:da:76:e1:c2:83:4f:7d:b1:69:29:fb:92:f9:68:97:07:e2: 03:97:f5:15:d2:1e:68:c3:dd:a2:a8:df:0c:0e:7d:f2:ba:15: 82:fc:1d:00:84:9b:02:9e:1e:d4:0c:ad:52:e4:6c:e1:26:88: d0:c1:5b:5a:66:2c:6c:23:95:13:0e:20:39:25:33:3e:14:11: 91:c3:e1:71:39:db:0d:64:ad:fd:a4:20:17:25:76:e1:f3:10: 67:48:8e:c2:72:dd:cc:15:73:f5:7e:81:50:63:8e:e5:cd:25: 26:e3:c6:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2lJRddfOwgAaj9p0ZN/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNzJlNjMzZGY1NjM1YTlmOThkMmY2OGE2ZDJhZGNiNDQx NTVjZGMwHhcNMjUxMjIxMDMwMDUzWhcNMjUxMjIyMDMwMDUzWjAzMTEwLwYDVQQD EyhhMDdmMDc1OTM3MWYxZmFjOWJhODI2Y2Q0MjE1MDFiZDk3YjU0OGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1l6Fg63ZbE6iDIlvI/Al/rg6SBe iR4KYW1gTOvmP9boT4m5mZ3BMDAsiv/YR8Vp57kgC5/JZ+t8ib6PEyeYUu5i33qp nAn3nrnRFyoRr4kEHfXwc9t1z/nloeKCF/SZokUGM+0TEscB5HvPfYKkW0YaChF3 P6/GydiECZsAnOjhLb3BFRlv6XmMfZ33WRJckAZXlEaX1xZfbHWffFQmjvXZfRP7 Y9X9iS9mqRPKjBlG3q7dozxwAXh3E+C3x/DtQO0V+L48T0uWOl7JVHjzMZI/8TMq g07VE8xo/UCcUp77WE3v+OLX1eRSpjeTxvnPYKfKaNKv+ZYt+4c3Eqq1MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKB/B1k3Hx+sm6gmzUIVAb2XtUjXMB8GA1UdIwQY MBaAFMxy5jPfVjWp+Y0vaKbSrctEFVzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQt ZDAxMmNhOWVjMTk3LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQtZDAxMmNhOWVjMTk3 LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsOxf164C ExC0NvcxUSSuknWb86CArvckjKV8ODt9lSzKhBA25qL4YiCXGXF/zLLwf1cpa96q kJZFtyP4IcqPK9woMib3BQe7jR0017Z48vsKWq2CkcatCfV8pJUkJ4uipsXWYsEz 8RQDBZUc3ZXseVbJFzcPKNDQkNE8mfMwJFvO2IsMjkYgbP8xrA2emg9Eadp24cKD T32xaSn7kvlolwfiA5f1FdIeaMPdoqjfDA598roVgvwdAISbAp4e1AytUuRs4SaI 0MFbWmYsbCOVEw4gOSUzPhQRkcPhcTnbDWSt/aQgFyV24fMQZ0iOwnLdzBVz9X6B UGOO5c0lJuPGyw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:59:07 2025 by rpki-client