This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json) Hash identifier: 2Uj3UzxVce9Aokt6Y8QxviOjrThXKhJDTtWl4k5pLmI= Subject key identifier: E9:B9:0C:D5:23:0F:46:7B:41:FF:C2:56:ED:D9:BF:C0:E0:7B:56:FA Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b Certificate serial: 019B2E1D556ABB523679A9DDB3F3C506D20A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft Manifest number: 0499 Signing time: Wed 17 Dec 2025 21:00:32 +0000 Manifest this update: Wed 17 Dec 2025 21:00:32 +0000 Manifest next update: Thu 18 Dec 2025 21:00:32 +0000 Files and hashes: 1: seG0cSvUmJpa8tNqX_V-DMKTXGE.roa (hash: 0BF0vQ0Y+DaO6qvrnPzJ13hBughhON940nySfXNNYFI=) 2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: 2/YPnQq3pnM4RkizsFG3KS6QfpGhwdyb7YSXPQiu++c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:55:6a:bb:52:36:79:a9:dd:b3:f3:c5:06:d2:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b Validity Not Before: Dec 17 21:00:32 2025 GMT Not After : Dec 18 21:00:32 2025 GMT Subject: CN=e9b90cd5230f467b41ffc256edd9bfc0e07b56fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a4:3a:77:94:59:d2:bf:88:d9:12:d8:ce:40: ee:46:e3:ac:f5:81:b7:4f:05:11:e4:b6:e2:cf:ea: 92:b3:d1:53:8f:77:d0:3c:99:c7:08:8f:7f:56:3c: 0a:38:ab:59:6d:c2:e6:3f:86:3e:eb:e3:66:0b:38: 32:f8:89:76:54:c2:93:b8:7b:93:33:10:91:53:3a: a6:e5:9d:68:08:21:45:7b:91:77:90:5e:21:3b:04: 4e:d5:06:76:bb:64:41:12:40:53:8a:20:9f:26:79: 25:a9:3e:9a:74:34:c3:15:e9:56:2c:a8:63:ff:a6: 02:1a:36:04:3b:70:9f:86:3c:a0:f3:dc:17:67:a8: b0:7d:c9:b1:39:e3:0f:18:6e:48:df:a6:cd:7e:3a: 73:56:db:d8:22:9b:06:56:6e:27:0a:2d:f7:f6:82: 85:92:33:a8:de:b1:a3:d8:db:5b:01:05:d3:f6:46: 88:de:7c:77:1e:9f:10:48:68:3c:42:18:85:54:2a: 17:7a:2c:3c:ae:4e:fa:b6:90:14:a7:6c:87:fe:6e: 48:a0:da:0e:f0:8a:0f:0e:92:7c:fd:f8:dd:a9:4a: 40:6b:7d:ee:fa:e1:1e:9a:33:35:f9:af:2c:35:70: 61:0d:0b:33:db:0a:72:d7:de:3e:0f:e8:15:e5:d5: 7c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B9:0C:D5:23:0F:46:7B:41:FF:C2:56:ED:D9:BF:C0:E0:7B:56:FA X509v3 Authority Key Identifier: keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:03:4e:ef:78:20:ca:e3:73:f6:98:da:ca:fe:61:9c:6b:13: db:a3:57:23:c3:d3:61:14:4d:bb:49:49:55:3a:8f:4e:24:2c: b0:76:05:cd:cd:6d:2f:43:9f:26:82:a4:82:7c:ea:11:d4:91: d8:7f:9d:bb:c6:ab:09:dc:c4:a3:54:7a:f8:86:dd:b3:85:a0: 89:07:e8:9f:e5:92:dd:72:e8:5b:39:25:f6:d3:8c:59:b1:58: fb:a4:5d:b8:cf:4f:9c:ab:f4:11:d1:29:82:07:99:e5:a0:37: 0d:3c:a9:bf:12:c7:a4:81:c1:53:f4:4e:62:86:e2:06:41:14: 67:0a:7e:40:a4:ac:4a:00:a9:ce:67:35:ba:49:dc:e2:7c:fe: 95:f2:dd:d8:c6:21:7f:1b:59:22:50:39:28:cc:d4:38:a3:e9: b1:14:1b:26:c4:a0:dc:2c:12:e7:75:27:72:8a:70:76:b3:8c: 86:bc:22:47:d7:1a:2f:87:31:aa:96:4f:ef:69:b2:60:a9:0a: 6d:4f:8f:92:83:ce:d4:d8:dd:ae:e5:63:b1:e9:a7:dc:2c:da: a7:2d:d2:5d:5a:e4:35:a2:04:6d:80:f5:c3:08:1f:ee:0c:be: cb:87:71:c7:10:57:c5:e0:45:3a:b6:ad:d9:c0:a8:cc:0e:26: e7:cd:8d:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHVVqu1I2eands/PFBtIKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkN2NiOTdiNTIzYzczZjE0MDZkNjNjNzY3YzczZDljOTU3 ZDQzM2IwHhcNMjUxMjE3MjEwMDMyWhcNMjUxMjE4MjEwMDMyWjAzMTEwLwYDVQQD EyhlOWI5MGNkNTIzMGY0NjdiNDFmZmMyNTZlZGQ5YmZjMGUwN2I1NmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqQ6d5RZ0r+I2RLYzkDuRuOs9YG3 TwUR5Lbiz+qSs9FTj3fQPJnHCI9/VjwKOKtZbcLmP4Y+6+NmCzgy+Il2VMKTuHuT MxCRUzqm5Z1oCCFFe5F3kF4hOwRO1QZ2u2RBEkBTiiCfJnklqT6adDTDFelWLKhj /6YCGjYEO3Cfhjyg89wXZ6iwfcmxOeMPGG5I36bNfjpzVtvYIpsGVm4nCi339oKF kjOo3rGj2NtbAQXT9kaI3nx3Hp8QSGg8QhiFVCoXeiw8rk76tpAUp2yH/m5IoNoO 8IoPDpJ8/fjdqUpAa33u+uEemjM1+a8sNXBhDQsz2wpy194+D+gV5dV8mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOm5DNUjD0Z7Qf/CVu3Zv8Dge1b6MB8GA1UdIwQY MBaAFM18uXtSPHPxQG1jx2fHPZyVfUM7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jMmUxOGMtYzYzZi00ZGQzLTg5MjEt MDUxMTZjOWY4YWVmLzEvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9jMmUxOGMtYzYzZi00ZGQzLTg5MjEtMDUxMTZjOWY4YWVm LzEvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwNO73gg yuNz9pjayv5hnGsT26NXI8PTYRRNu0lJVTqPTiQssHYFzc1tL0OfJoKkgnzqEdSR 2H+du8arCdzEo1R6+Ibds4WgiQfon+WS3XLoWzkl9tOMWbFY+6RduM9PnKv0EdEp ggeZ5aA3DTypvxLHpIHBU/ROYobiBkEUZwp+QKSsSgCpzmc1uknc4nz+lfLd2MYh fxtZIlA5KMzUOKPpsRQbJsSg3CwS53UncopwdrOMhrwiR9caL4cxqpZP72myYKkK bU+PkoPO1NjdruVjsemn3Czapy3SXVrkNaIEbYD1wwgf7gy+y4dxxxBXxeBFOrat 2cCozA4m582N9Q== -----END CERTIFICATE-----Generated at Thu Dec 18 06:50:21 2025 by rpki-client