This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json) Hash identifier: 9JeadEdnBQ4c7iBVbPyDSRCnuEA+q1GdbXvZi1h+434= Subject key identifier: CB:BE:4E:13:DB:46:48:92:4B:0D:78:F2:56:8F:0D:E8:7D:E2:FA:DC Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30 Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230 Certificate serial: 019B5DC0F575CAB176753CEB40A86CC1DD11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 03:01:25 +0000 Manifest this update: Sat 27 Dec 2025 03:01:25 +0000 Manifest next update: Sun 28 Dec 2025 03:01:25 +0000 Files and hashes: 1: 1KzANFt0aPj0q7oH7exbtu-amXU.roa (hash: mW2duFDxzUlFHO8La7Ej6q1lO3QaO9KQzC0XOixRqPM=) 2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: iUL7uKiSB9oddDCYC74PL5t7+tZDXcdet1+uDbI0SyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:f5:75:ca:b1:76:75:3c:eb:40:a8:6c:c1:dd:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230 Validity Not Before: Dec 27 03:01:25 2025 GMT Not After : Dec 28 03:01:25 2025 GMT Subject: CN=cbbe4e13db4648924b0d78f2568f0de87de2fadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:8f:1c:b0:e9:39:a7:37:2b:cb:cc:2b:13: e8:6c:fd:e2:cc:5d:c1:98:53:a8:ae:c9:f6:51:8b: ba:c8:67:f8:1c:a7:73:27:03:84:0f:a1:9b:4a:78: b8:31:c5:70:ee:c3:69:89:85:31:1f:04:14:b9:89: 78:1a:43:2c:88:d7:84:7f:64:20:17:9c:14:01:29: 68:55:36:04:ff:30:39:cc:a5:47:95:1f:76:76:1c: 43:39:49:81:85:75:79:4f:6d:08:03:d0:c6:36:07: b6:b0:c5:b2:ef:30:14:af:6a:64:ea:96:c3:ee:75: 66:b7:54:59:cf:c8:c6:36:c2:69:e0:d4:5d:23:f0: 88:cb:77:88:ee:c5:d1:09:e3:16:0a:4b:02:d2:56: a0:41:2f:4a:85:6e:41:46:3d:bc:22:28:38:3e:61: cb:98:f3:06:45:ed:ac:61:6f:02:ed:6d:b6:05:50: 4a:bf:c7:e0:21:80:46:dd:2e:ef:83:30:f1:9e:8f: fa:8e:d9:9f:63:18:11:a6:2d:09:06:b5:b3:70:be: f0:a8:32:79:16:a0:b0:df:36:06:62:5c:9a:b0:88: 6e:53:84:b7:48:9c:ab:7f:c4:48:ca:98:53:55:63: bc:ac:5e:b4:15:a3:cc:d8:ae:40:ef:99:64:81:87: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BE:4E:13:DB:46:48:92:4B:0D:78:F2:56:8F:0D:E8:7D:E2:FA:DC X509v3 Authority Key Identifier: keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:cb:71:a4:83:75:a4:7d:ab:d4:ef:bf:7b:15:a8:22:11:99: 85:b1:3a:6e:20:ec:51:80:a4:84:eb:c1:7a:04:03:45:12:ff: 43:99:99:c6:9e:4d:77:e3:f4:37:40:82:90:87:89:ae:18:d0: db:bc:f6:41:ab:a6:04:3d:e6:38:e9:03:e0:0f:6f:0d:bb:87: 06:c0:ea:b2:89:78:e2:52:43:b2:72:68:a0:c6:97:b8:fb:40: 51:8f:e0:b9:eb:fd:2a:58:4d:05:ac:23:0b:d8:60:dc:4b:e0: a8:c9:be:4f:f5:d3:31:e9:2b:c4:d8:07:18:36:ca:d6:db:5f: 23:80:2b:3e:53:12:b1:bd:dc:3f:17:87:3f:bc:11:db:8c:20: e5:f6:88:68:87:18:85:dd:5d:27:a9:fc:0b:a9:9b:fe:67:b7: de:35:2c:98:06:9c:99:46:51:8d:75:d4:65:d2:05:7a:92:1b: 00:04:53:00:46:e9:97:12:af:47:8b:c5:cb:56:89:4c:21:45: 4d:d2:97:f6:39:9a:95:c8:20:16:c3:c5:68:dd:72:2b:7a:cc: 29:03:01:c3:1d:d7:e0:73:ea:a5:90:68:a0:fa:ce:f8:db:8c: 7f:ec:41:3f:32:27:b1:24:01:25:7b:16:0a:70:1e:b5:69:7b: 51:d5:2c:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwPV1yrF2dTzrQKhswd0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWM3ODk5NzZkM2I1ODQwMTZjYWMxOWYzNGJiZWRlOTY2 Y2QyMzAwHhcNMjUxMjI3MDMwMTI1WhcNMjUxMjI4MDMwMTI1WjAzMTEwLwYDVQQD EyhjYmJlNGUxM2RiNDY0ODkyNGIwZDc4ZjI1NjhmMGRlODdkZTJmYWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRePHLDpOac3K8vMKxPobP3izF3B mFOorsn2UYu6yGf4HKdzJwOED6GbSni4McVw7sNpiYUxHwQUuYl4GkMsiNeEf2Qg F5wUASloVTYE/zA5zKVHlR92dhxDOUmBhXV5T20IA9DGNge2sMWy7zAUr2pk6pbD 7nVmt1RZz8jGNsJp4NRdI/CIy3eI7sXRCeMWCksC0lagQS9KhW5BRj28Iig4PmHL mPMGRe2sYW8C7W22BVBKv8fgIYBG3S7vgzDxno/6jtmfYxgRpi0JBrWzcL7wqDJ5 FqCw3zYGYlyasIhuU4S3SJyrf8RIyphTVWO8rF60FaPM2K5A75lkgYfSPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMu+ThPbRkiSSw148laPDeh94vrcMB8GA1UdIwQY MBaAFGbseJl207WEAWysGfNLvt6WbNIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wN2JmNWItMDM0MC00MzRlLWE0NDQt ZjA3NjFlMjllNmM0LzEvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8wN2JmNWItMDM0MC00MzRlLWE0NDQtZjA3NjFlMjllNmM0 LzEvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8txpIN1 pH2r1O+/exWoIhGZhbE6biDsUYCkhOvBegQDRRL/Q5mZxp5Nd+P0N0CCkIeJrhjQ 27z2QaumBD3mOOkD4A9vDbuHBsDqsol44lJDsnJooMaXuPtAUY/guev9KlhNBawj C9hg3EvgqMm+T/XTMekrxNgHGDbK1ttfI4ArPlMSsb3cPxeHP7wR24wg5faIaIcY hd1dJ6n8C6mb/me33jUsmAacmUZRjXXUZdIFepIbAARTAEbplxKvR4vFy1aJTCFF TdKX9jmalcggFsPFaN1yK3rMKQMBwx3X4HPqpZBooPrO+NuMf+xBPzInsSQBJXsW CnAetWl7UdUsdg== -----END CERTIFICATE-----Generated at Sat Dec 27 06:17:57 2025 by rpki-client