This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft File: zWJru3tp7sn2eQsDcFVFuJL6Loo.mft (raw, json) Hash identifier: b7VvfIKLrnTm1VilZZrD9BBiy1+Wm2jrMDnKplbQA6k= Subject key identifier: 0B:91:87:57:47:7E:EA:0E:52:E0:55:68:1B:C0:32:E7:6B:AF:0B:E2 Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A Certificate issuer: /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a Certificate serial: 019B3CEBA76730B33817AB7CEB39B3810B49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 18:00:35 +0000 Manifest this update: Sat 20 Dec 2025 18:00:35 +0000 Manifest next update: Sun 21 Dec 2025 18:00:35 +0000 Files and hashes: 1: ATyimqI77g-AMu4hV3pBmdCtEXg.roa (hash: 11jVXkXsEkuUDSd6rvGVSmD5KSMrdmnunLEgOgE3OYg=) 2: K6kdDHVXBtEX6Y5yk6AzfvDAYZs.roa (hash: yMvGXrOJ8jKu649BZz8BjRbOK0tvmiA9YPgOAftQlRo=) 3: n5MtE2vhRv0Xke4sPvLpyjbNKdk.roa (hash: 6D/P9sP0QpDLZzsaRjNurP0KEpujXlFHdjgICd7yLrI=) 4: phgdvuDIYy_goUCyzQBfZp_mR9M.roa (hash: k9I4r1Ni5T1KIlDeup8IjeMbYSjPKo4/8uvvro2RGP8=) 5: zWJru3tp7sn2eQsDcFVFuJL6Loo.crl (hash: +8m4vchyZhvFLyKOxFZLIQekCeE3DL2baqstl4Q4lqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:a7:67:30:b3:38:17:ab:7c:eb:39:b3:81:0b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a Validity Not Before: Dec 20 18:00:35 2025 GMT Not After : Dec 21 18:00:35 2025 GMT Subject: CN=0b918757477eea0e52e055681bc032e76baf0be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:df:21:0c:5d:49:d0:22:c0:fe:12:bb:d4:75: c7:49:f7:e7:d1:a9:97:44:87:b8:c9:ba:e5:55:d1: df:44:6d:44:d0:80:cf:7a:5c:a0:fc:64:fa:f1:d3: 8d:34:20:8b:6f:b1:89:79:b1:5b:1b:d4:45:d9:55: fb:f6:1d:ac:8a:51:64:7e:8f:a8:4d:24:fe:88:87: 95:6e:e5:94:de:24:fa:32:67:55:2c:c6:82:0b:f0: 47:e2:19:90:e8:31:de:62:27:49:72:7b:b5:33:36: 0f:53:a2:ec:9a:d4:1d:95:ca:a1:f2:3f:ed:f5:d5: 19:dc:12:9a:14:24:e8:bb:ad:e0:ab:c4:80:b7:d1: d9:ee:09:e2:bc:e4:d1:65:25:f1:d8:f0:de:79:b5: 5f:78:04:bf:57:8b:3a:2a:3a:60:7d:a9:c4:9b:09: 1b:c0:08:71:0e:c7:05:14:87:d9:be:34:ce:35:af: 1c:af:40:1e:1f:6c:ec:68:1f:a7:34:d8:69:42:5f: c7:a1:d4:58:47:a5:b9:e3:b6:ea:ac:cc:a6:90:d3: a4:42:7f:43:c2:25:4a:ec:7c:35:ce:ef:1c:96:f5: d8:03:77:ef:07:78:b0:51:c7:25:d8:69:4b:dd:23: 9b:52:4b:f7:e1:12:b6:44:5b:e9:70:ca:83:5f:d2: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:91:87:57:47:7E:EA:0E:52:E0:55:68:1B:C0:32:E7:6B:AF:0B:E2 X509v3 Authority Key Identifier: keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:a7:d9:74:bb:50:06:f4:91:c0:fa:c7:a5:27:04:1d:13:0a: 73:3f:ce:46:a0:90:e4:b3:12:98:b4:a5:8d:a5:5e:84:31:ea: 47:78:3b:50:c5:8f:9b:c7:a7:76:94:24:db:78:85:3e:80:92: ef:4d:b7:71:5e:df:aa:d8:c1:f2:43:0a:f4:77:a8:66:4a:1e: 61:0c:42:42:ce:17:89:df:f0:89:b1:79:e3:10:18:c5:0f:53: 27:51:76:80:54:0c:bb:92:7d:f3:13:a1:78:e4:1b:5f:1b:a7: 0f:ed:d0:43:56:ca:e5:11:29:ab:55:7f:9a:f2:df:af:3a:7d: 07:c0:78:7a:16:66:b4:fb:1d:6e:ff:78:9e:9b:fe:4f:da:27: eb:f5:9b:42:da:27:ce:fb:97:1b:dc:df:40:1d:aa:13:41:bc: 72:43:8d:25:d1:84:25:e7:59:e3:0d:c2:09:45:fe:26:37:ae: c7:28:7f:93:8a:a1:ba:9d:62:b3:8b:4e:35:5d:c7:30:9a:ca: 4a:92:f7:39:ee:25:37:b6:4f:69:6a:32:05:53:50:f3:ec:5a: 32:6f:38:45:7c:6e:b7:cb:f4:ed:95:47:6a:10:47:25:85:69: bd:e3:e0:09:30:32:3b:c6:4f:79:1f:96:47:96:6a:be:78:3c: 70:f9:f4:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs866dnMLM4F6t86zmzgQtJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjI2YmJiN2I2OWVlYzlmNjc5MGIwMzcwNTU0NWI4OTJm YTJlOGEwHhcNMjUxMjIwMTgwMDM1WhcNMjUxMjIxMTgwMDM1WjAzMTEwLwYDVQQD EygwYjkxODc1NzQ3N2VlYTBlNTJlMDU1NjgxYmMwMzJlNzZiYWYwYmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd8hDF1J0CLA/hK71HXHSffn0amX RIe4ybrlVdHfRG1E0IDPelyg/GT68dONNCCLb7GJebFbG9RF2VX79h2silFkfo+o TST+iIeVbuWU3iT6MmdVLMaCC/BH4hmQ6DHeYidJcnu1MzYPU6LsmtQdlcqh8j/t 9dUZ3BKaFCTou63gq8SAt9HZ7gnivOTRZSXx2PDeebVfeAS/V4s6KjpgfanEmwkb wAhxDscFFIfZvjTONa8cr0AeH2zsaB+nNNhpQl/HodRYR6W547bqrMymkNOkQn9D wiVK7Hw1zu8clvXYA3fvB3iwUccl2GlL3SObUkv34RK2RFvpcMqDX9JnnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuRh1dHfuoOUuBVaBvAMudrrwviMB8GA1UdIwQY MBaAFM1ia7t7ae7J9nkLA3BVRbiS+i6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldKcnUzdHA3c24yZVFzRGNGVkZ1Skw2TG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yYjM3ZGYtOGZmZS00MWU1LWFjMDct YzBmODlhZDM2YmNhLzEveldKcnUzdHA3c24yZVFzRGNGVkZ1Skw2TG9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yYjM3ZGYtOGZmZS00MWU1LWFjMDctYzBmODlhZDM2YmNh LzEveldKcnUzdHA3c24yZVFzRGNGVkZ1Skw2TG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6fZdLtQ BvSRwPrHpScEHRMKcz/ORqCQ5LMSmLSljaVehDHqR3g7UMWPm8endpQk23iFPoCS 7023cV7fqtjB8kMK9HeoZkoeYQxCQs4Xid/wibF54xAYxQ9TJ1F2gFQMu5J98xOh eOQbXxunD+3QQ1bK5REpq1V/mvLfrzp9B8B4ehZmtPsdbv94npv+T9on6/WbQton zvuXG9zfQB2qE0G8ckONJdGEJedZ4w3CCUX+Jjeuxyh/k4qhup1is4tONV3HMJrK SpL3Oe4lN7ZPaWoyBVNQ8+xaMm84RXxut8v07ZVHahBHJYVpvePgCTAyO8ZPeR+W R5Zqvng8cPn0MA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:04:07 2025 by rpki-client