This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft File: cZhnMZJb6FUaUwka_m0Jct-jgH4.mft (raw, json) Hash identifier: ku7h5vVRmnQNjJwqtM0iO+8mCyENiRA+z282V7veyrI= Subject key identifier: 6C:D5:77:DC:70:95:52:30:AB:F3:DE:BF:61:F8:95:A3:A5:17:82:76 Authority key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E Certificate issuer: /CN=71986731925be8551a53091afe6d0972dfa3807e Certificate serial: 019B5261946FE6EAC7277D1C7F5B01D5BB01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft Manifest number: 0856 Signing time: Wed 24 Dec 2025 22:01:25 +0000 Manifest this update: Wed 24 Dec 2025 22:01:25 +0000 Manifest next update: Thu 25 Dec 2025 22:01:25 +0000 Files and hashes: 1: cZhnMZJb6FUaUwka_m0Jct-jgH4.crl (hash: 21nLrDFOJJWQQvN9Tl3WAA+Onn5qTYJey2kD+nrUw44=) 2: izKyNN07Ux3U5xT_e0LwmSxlm3g.roa (hash: 5sHxaNHhFHbIzK2JB6pJOwwX7f4oOth8b9V4EgOV6Mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:94:6f:e6:ea:c7:27:7d:1c:7f:5b:01:d5:bb:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71986731925be8551a53091afe6d0972dfa3807e Validity Not Before: Dec 24 22:01:25 2025 GMT Not After : Dec 25 22:01:25 2025 GMT Subject: CN=6cd577dc70955230abf3debf61f895a3a5178276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:34:bd:93:b9:70:10:f9:a2:b3:80:01:57: 59:d4:7a:b4:c1:66:6a:0b:19:a8:cd:25:af:2e:07: c6:be:6d:af:79:7b:44:e7:5d:d1:3a:32:05:bb:3e: d0:95:f4:1c:a7:e4:08:8b:1a:67:4c:27:4b:9f:2a: 64:7d:a3:a1:d9:d1:5c:81:99:5f:10:ef:30:e0:6c: 7a:e0:3d:cb:c5:f7:5d:ad:5d:ce:75:eb:39:96:68: 49:23:12:46:b8:15:03:2f:44:7d:a2:0d:57:41:fd: 04:dd:d2:0a:e7:f8:d3:19:b5:b2:92:24:e4:ab:b3: a5:35:92:ca:20:33:8c:7f:cd:46:7a:05:1b:2d:5e: 39:91:2f:c0:a2:1b:a6:b9:c8:36:6f:25:21:a9:29: 7c:f5:2d:56:9d:48:bb:b8:6e:e2:06:79:45:0f:fe: 42:9c:9b:a2:8f:dc:bf:0b:b6:0e:3a:52:af:66:e7: 19:4d:84:1d:69:af:11:f5:63:2a:a4:c5:4d:fe:5a: 3c:db:d7:50:de:d3:20:e1:89:d0:f7:5e:56:c0:c5: 93:78:d1:06:3e:63:4c:65:9a:8c:dd:f1:c3:65:95: 2b:eb:32:ae:6c:e9:d9:42:e8:10:5f:f2:b8:7b:65: 15:0e:0c:40:63:a1:95:3d:fd:c9:0f:be:a0:53:8f: 44:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D5:77:DC:70:95:52:30:AB:F3:DE:BF:61:F8:95:A3:A5:17:82:76 X509v3 Authority Key Identifier: keyid:71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:26:9b:dc:fb:f2:0f:cb:a8:c4:09:3f:bf:92:04:ed:28:0e: 60:94:cf:7b:97:12:30:b0:df:b2:48:e9:bc:68:eb:1a:bc:7e: 73:22:1e:99:6b:92:bc:15:af:dc:69:9a:85:af:32:82:69:91: af:e7:00:61:5e:f7:7f:7f:3a:4d:21:e2:a0:67:fe:51:87:86: 08:49:58:fa:a8:da:56:bd:a4:50:5c:99:2f:c9:95:67:16:a1: 42:69:ed:6c:6a:52:ec:59:e7:24:db:11:2e:3a:83:ff:c2:8d: 2a:89:9d:6d:4f:2d:5c:37:b5:8f:b8:78:c5:2a:9e:33:58:3a: 97:8b:a9:35:7f:88:ba:6d:91:30:59:f8:a4:f6:a7:7c:42:b4: 96:9f:6e:44:80:24:0b:fa:da:2b:6f:9f:58:fb:71:3f:26:67: 88:5d:87:39:e4:a7:76:6c:89:b9:bf:71:4d:92:c1:4e:36:28: 52:dc:e4:12:4c:71:98:81:16:92:13:7e:64:9a:5a:bb:20:82: 78:95:3d:e0:e8:0a:c2:2c:f3:fb:c7:5b:47:6b:af:55:06:fd: a3:b5:d3:41:34:4a:a0:8b:bf:73:cc:57:5b:1b:1f:a2:b6:c2: eb:39:a5:13:cc:f0:01:2d:64:b8:54:57:0e:e3:7d:d0:01:da: e5:2c:ec:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYZRv5urHJ30cf1sB1bsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTg2NzMxOTI1YmU4NTUxYTUzMDkxYWZlNmQwOTcyZGZh MzgwN2UwHhcNMjUxMjI0MjIwMTI1WhcNMjUxMjI1MjIwMTI1WjAzMTEwLwYDVQQD Eyg2Y2Q1NzdkYzcwOTU1MjMwYWJmM2RlYmY2MWY4OTVhM2E1MTc4Mjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2Q0vZO5cBD5orOAAVdZ1Hq0wWZq CxmozSWvLgfGvm2veXtE513ROjIFuz7QlfQcp+QIixpnTCdLnypkfaOh2dFcgZlf EO8w4Gx64D3LxfddrV3Odes5lmhJIxJGuBUDL0R9og1XQf0E3dIK5/jTGbWykiTk q7OlNZLKIDOMf81GegUbLV45kS/Aohumucg2byUhqSl89S1WnUi7uG7iBnlFD/5C nJuij9y/C7YOOlKvZucZTYQdaa8R9WMqpMVN/lo829dQ3tMg4YnQ915WwMWTeNEG PmNMZZqM3fHDZZUr6zKubOnZQugQX/K4e2UVDgxAY6GVPf3JD76gU49ErwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzVd9xwlVIwq/Pev2H4laOlF4J2MB8GA1UdIwQY MBaAFHGYZzGSW+hVGlMJGv5tCXLfo4B+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pobk1aSmI2RlVhVXdrYV9tMEpjdC1qZ0g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85YTEwYzMtMjEyZi00YzVlLTk3YmIt ZTBkNTc2YTU0NTBlLzEvY1pobk1aSmI2RlVhVXdrYV9tMEpjdC1qZ0g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85YTEwYzMtMjEyZi00YzVlLTk3YmItZTBkNTc2YTU0NTBl LzEvY1pobk1aSmI2RlVhVXdrYV9tMEpjdC1qZ0g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiab3Pvy D8uoxAk/v5IE7SgOYJTPe5cSMLDfskjpvGjrGrx+cyIemWuSvBWv3Gmaha8ygmmR r+cAYV73f386TSHioGf+UYeGCElY+qjaVr2kUFyZL8mVZxahQmntbGpS7FnnJNsR LjqD/8KNKomdbU8tXDe1j7h4xSqeM1g6l4upNX+Ium2RMFn4pPanfEK0lp9uRIAk C/raK2+fWPtxPyZniF2HOeSndmyJub9xTZLBTjYoUtzkEkxxmIEWkhN+ZJpauyCC eJU94OgKwizz+8dbR2uvVQb9o7XTQTRKoIu/c8xXWxsforbC6zmlE8zwAS1kuFRX DuN90AHa5Szs2w== -----END CERTIFICATE-----Generated at Wed Dec 24 23:23:04 2025 by rpki-client