This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft File: zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json) Hash identifier: A/JEi2yOzLZ/fpOuVoiQBq7K2KBVfvxFyyfQVq5Zjy8= Subject key identifier: 36:47:02:E8:2B:44:2E:C4:02:1C:02:09:D9:48:CA:B8:A8:8E:06:48 Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94 Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194 Certificate serial: 019B3D22F653F945E5032EF81301960666E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 19:00:59 +0000 Manifest this update: Sat 20 Dec 2025 19:00:59 +0000 Manifest next update: Sun 21 Dec 2025 19:00:59 +0000 Files and hashes: 1: 2Ny-ueNvAFjL9IDe1yMO8HfDBJE.roa (hash: SriKAtzLJClJ8RYlJnsDDGPLefd9t0TyrlM6Ndh0w6s=) 2: HSDe33dztyDbbAh5edeiMrBstpw.roa (hash: hMHbKz19ucgy7N1gbQNpI/GP1wKSKMSFktFakjiCIw4=) 3: QRtKZhH9f2q5Qs4y3jok3HnjFK0.roa (hash: kTYNUIGwJLwA+YttUf3vVXejkVq8FL+41G3GFzyW8/w=) 4: jjYT0ual1nIv5rmaeDjlNg2jdtU.roa (hash: OjHVmf3z6fImr8f0+RF/L2hzt0WZmr2JT7HoyHilItc=) 5: vGoHfriPki42R6sM4AGNaZ6Sim4.roa (hash: QcwTT5U/Z4Mw3Ga8Qis4P0Rl1OjYiRfOAUfd5c277Jw=) 6: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: GwzL2V0wlHsg4XwU4PNa1nYm9nXZV6OhI7Npd734kDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:f6:53:f9:45:e5:03:2e:f8:13:01:96:06:66:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194 Validity Not Before: Dec 20 19:00:59 2025 GMT Not After : Dec 21 19:00:59 2025 GMT Subject: CN=364702e82b442ec4021c0209d948cab8a88e0648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:97:01:3b:71:da:52:de:ed:45:85:ac:eb:d0: 77:e4:7d:ea:3e:9c:15:32:49:25:bb:63:5b:78:10: d1:88:36:74:1d:25:30:48:ab:fc:a1:90:a4:35:b8: 2a:2c:bb:72:22:d7:59:0d:c8:ff:ad:bd:ee:71:2d: 20:e4:97:cd:2f:10:f9:b0:c8:db:e5:c3:57:60:5c: 14:b7:4b:72:20:3f:6b:5e:1c:42:99:fa:b7:2b:51: 38:44:98:41:ac:94:39:3d:e0:7e:82:14:29:6e:71: 9b:41:db:f0:7a:e6:de:e8:af:21:e0:80:55:78:d4: 4b:67:a5:75:7e:4e:0c:4b:08:63:eb:d8:6f:54:17: 16:c5:7d:c8:e5:ae:02:1c:c9:06:a1:5e:32:a7:52: df:c9:41:6f:60:61:34:79:7c:87:9e:a2:bf:03:c9: a1:09:3c:3a:0f:f3:ae:b3:db:57:4f:1f:8a:e1:25: 24:55:ba:02:35:a6:50:9a:14:06:22:00:2b:7b:7c: 91:57:2d:2a:88:e9:4a:4e:e3:33:d9:c2:fa:57:79: 77:9c:ca:d4:47:76:43:a6:df:b5:c2:82:80:fc:ae: 1b:5c:b7:ee:68:eb:4a:10:1f:93:ea:1b:63:40:fb: 37:42:70:81:32:ae:5b:9a:b5:58:a1:73:da:21:55: e8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:47:02:E8:2B:44:2E:C4:02:1C:02:09:D9:48:CA:B8:A8:8E:06:48 X509v3 Authority Key Identifier: keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:38:42:88:3c:1c:b9:b1:b2:78:fc:ce:31:40:c4:37:3d:fc: e4:b8:a9:23:95:d4:48:a3:1d:ba:a9:02:27:21:2a:88:97:6a: 85:87:c8:e9:fe:3e:09:c5:72:ab:9c:db:b6:d0:5b:32:43:6d: e2:39:e8:c1:87:cf:8f:8c:84:31:2c:58:e2:1f:66:54:51:81: fb:b9:9a:70:d4:4f:36:af:8c:ea:44:01:e7:ec:18:eb:af:d8: 9a:d2:b1:82:ba:9d:01:68:1d:93:79:9e:54:eb:fc:ef:d8:dc: 07:ae:6b:20:1a:d1:b9:0d:b7:65:c7:04:56:4d:dc:3d:99:41: 5a:aa:de:6e:da:35:32:b2:a9:ed:e2:09:79:89:05:47:1c:34: d3:e5:47:8e:33:3f:4e:56:3f:74:52:bf:10:fb:02:25:d1:84: 74:06:71:20:0f:a6:4b:cf:6c:a3:a1:7c:62:af:2d:58:30:1b: 5b:e7:da:36:f0:1c:e3:55:ba:3e:ce:62:63:8c:42:8e:b2:19: 58:0d:63:19:e2:90:6e:89:28:d0:6f:16:76:8e:eb:26:95:dd: 02:95:54:34:4b:c8:e5:b6:0c:f2:29:be:46:b7:1c:1e:cf:81: bd:43:d0:60:87:c2:1a:fd:74:bd:b1:13:b4:70:71:b2:a8:c7: de:e3:d6:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IvZT+UXlAy74EwGWBmbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMjE1ZjU4MTU5ZWM1NzZhMjAyMjc3NmVhNjRmNjFjNWJi MDAxOTQwHhcNMjUxMjIwMTkwMDU5WhcNMjUxMjIxMTkwMDU5WjAzMTEwLwYDVQQD EygzNjQ3MDJlODJiNDQyZWM0MDIxYzAyMDlkOTQ4Y2FiOGE4OGUwNjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5cBO3HaUt7tRYWs69B35H3qPpwV Mkklu2NbeBDRiDZ0HSUwSKv8oZCkNbgqLLtyItdZDcj/rb3ucS0g5JfNLxD5sMjb 5cNXYFwUt0tyID9rXhxCmfq3K1E4RJhBrJQ5PeB+ghQpbnGbQdvweube6K8h4IBV eNRLZ6V1fk4MSwhj69hvVBcWxX3I5a4CHMkGoV4yp1LfyUFvYGE0eXyHnqK/A8mh CTw6D/Ous9tXTx+K4SUkVboCNaZQmhQGIgAre3yRVy0qiOlKTuMz2cL6V3l3nMrU R3ZDpt+1woKA/K4bXLfuaOtKEB+T6htjQPs3QnCBMq5bmrVYoXPaIVXoyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZHAugrRC7EAhwCCdlIyriojgZIMB8GA1UdIwQY MBaAFMwhX1gVnsV2ogIndupk9hxbsAGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAt ODQzZWVlZTBhMjYwLzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAtODQzZWVlZTBhMjYw LzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDhCiDwc ubGyePzOMUDENz385LipI5XUSKMduqkCJyEqiJdqhYfI6f4+CcVyq5zbttBbMkNt 4jnowYfPj4yEMSxY4h9mVFGB+7macNRPNq+M6kQB5+wY66/YmtKxgrqdAWgdk3me VOv879jcB65rIBrRuQ23ZccEVk3cPZlBWqrebto1MrKp7eIJeYkFRxw00+VHjjM/ TlY/dFK/EPsCJdGEdAZxIA+mS89so6F8Yq8tWDAbW+faNvAc41W6Ps5iY4xCjrIZ WA1jGeKQboko0G8Wdo7rJpXdApVUNEvI5bYM8im+RrccHs+BvUPQYIfCGv10vbET tHBxsqjH3uPWMw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:09:05 2025 by rpki-client