This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json) Hash identifier: zxwsmJ8mIJjWPZxuLOLrhQIxtLLu831dyjct2wotlJM= Subject key identifier: 16:28:D8:50:81:53:E5:C1:1C:54:C2:A5:CC:D7:36:E3:B8:D1:0E:BA Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a Certificate serial: 019B462706424B4CC5A909A561F8AC3695FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 13:02:01 +0000 Manifest this update: Mon 22 Dec 2025 13:02:01 +0000 Manifest next update: Tue 23 Dec 2025 13:02:01 +0000 Files and hashes: 1: oi2OU2MII40wJvGP04NHRArOFvs.roa (hash: VTkXyNDb4jg5wGXFkKirwnltERuwe0Q4j4rmz+H0ul4=) 2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: y075Uo0EmySsrR2WMxcXAgEXQ53xx+FkFPtjfzFRmIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:06:42:4b:4c:c5:a9:09:a5:61:f8:ac:36:95:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a Validity Not Before: Dec 22 13:02:01 2025 GMT Not After : Dec 23 13:02:01 2025 GMT Subject: CN=1628d8508153e5c11c54c2a5ccd736e3b8d10eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:5d:1b:e2:23:53:53:9f:d0:0f:c4:53:27: e8:d1:a3:dd:1f:5d:3f:74:c9:7e:ab:08:6e:a0:19: d3:89:55:8d:94:d3:27:50:e6:e7:8c:ff:51:bc:d5: c3:6b:31:c7:06:30:06:61:1e:84:4b:5f:99:2a:37: a7:e8:b5:85:6c:9d:de:f3:b1:76:c3:35:42:d1:ae: 03:cf:d8:9f:c5:7c:3a:5b:43:91:a9:6f:e2:38:f7: 42:40:e6:ed:39:c7:ec:a1:23:30:f0:74:8d:de:ad: f7:a5:cb:22:12:0b:c7:71:37:32:1b:57:ac:34:03: 8d:df:85:0a:6b:00:68:76:18:b5:55:d2:9d:92:fb: 1c:b0:f1:61:ef:ca:92:34:19:b2:7a:3e:27:8a:52: aa:6c:7a:78:9c:d5:b5:71:5c:55:96:f9:9c:58:cb: a9:3b:bd:f5:de:8c:c9:20:9c:b5:08:a1:95:56:4a: 9b:d7:a6:fd:5a:bc:80:f4:e7:61:10:f7:51:4f:e1: 1a:01:0f:74:67:b2:95:e8:7e:df:69:dd:1c:5d:6f: e4:02:89:25:76:d3:1d:7e:d8:53:1b:15:63:c4:ce: 55:3b:9b:c6:f1:01:e1:e3:11:6f:3d:92:58:61:9e: 10:46:19:f6:ba:9b:23:c7:29:f3:dd:c5:a7:e4:8c: 5e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:28:D8:50:81:53:E5:C1:1C:54:C2:A5:CC:D7:36:E3:B8:D1:0E:BA X509v3 Authority Key Identifier: keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8f:74:84:c5:f7:5d:3c:d7:04:5d:a2:11:57:35:97:ef:e0: a3:1b:0a:7c:42:69:e1:91:40:d4:f6:69:59:34:d0:2a:da:8e: 5c:53:23:de:d0:6e:7e:79:81:d9:b1:a6:ff:f3:c9:70:68:31: 9b:a5:19:ab:9c:f2:af:2a:86:c7:d2:84:5f:f4:50:ed:8f:35: 09:68:ca:24:b5:3f:0e:49:43:e2:6d:0c:cf:fc:6d:c0:42:fb: 69:c7:23:40:18:8c:bb:34:34:52:c3:6b:b3:bd:5b:d6:1b:8f: 82:05:c4:d3:c9:85:b7:99:c6:03:c0:72:77:5d:7d:bb:fd:28: cc:ec:cb:3f:9b:5b:b5:b8:5c:b5:d3:5d:ac:93:c1:f8:9a:1b: 10:77:cb:43:56:de:b1:b0:16:4b:d0:63:e3:a9:2c:b1:45:dc: 69:89:82:39:c2:02:a7:6e:da:c3:74:cd:06:53:71:cb:0a:68: 2e:ca:3b:6f:cf:c2:49:bc:79:c6:0e:bd:ac:57:ef:4d:ea:e3: 7e:f1:24:96:e0:64:44:20:19:ff:31:e6:56:ab:aa:80:69:bc: 33:a8:72:0c:78:a6:5f:af:8b:8e:fd:b7:4a:0e:cd:a8:89:ff: 77:3f:2a:80:e5:8f:b3:56:84:06:a1:14:da:3e:6f:dc:61:ed: 7c:37:15:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJwZCS0zFqQmlYfisNpX+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMjc1MzFhZDk5OWI2ZDVhMDQ0MWI3NWZhZWE3ZDU3ODY1 M2U0MmEwHhcNMjUxMjIyMTMwMjAxWhcNMjUxMjIzMTMwMjAxWjAzMTEwLwYDVQQD EygxNjI4ZDg1MDgxNTNlNWMxMWM1NGMyYTVjY2Q3MzZlM2I4ZDEwZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmddG+IjU1Of0A/EUyfo0aPdH10/ dMl+qwhuoBnTiVWNlNMnUObnjP9RvNXDazHHBjAGYR6ES1+ZKjen6LWFbJ3e87F2 wzVC0a4Dz9ifxXw6W0ORqW/iOPdCQObtOcfsoSMw8HSN3q33pcsiEgvHcTcyG1es NAON34UKawBodhi1VdKdkvscsPFh78qSNBmyej4nilKqbHp4nNW1cVxVlvmcWMup O7313ozJIJy1CKGVVkqb16b9WryA9OdhEPdRT+EaAQ90Z7KV6H7fad0cXW/kAokl dtMdfthTGxVjxM5VO5vG8QHh4xFvPZJYYZ4QRhn2upsjxynz3cWn5Ixe3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYo2FCBU+XBHFTCpczXNuO40Q66MB8GA1UdIwQY MBaAFMwnUxrZmbbVoEQbdfrqfVeGU+QqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekNkVEd0bVp0dFdnUkJ0MS11cDlWNFpUNUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85MjUyZTItNDVkZS00YmNjLThmNTgt ZmE0MTE3ZGIxNTU1LzEvekNkVEd0bVp0dFdnUkJ0MS11cDlWNFpUNUNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC85MjUyZTItNDVkZS00YmNjLThmNTgtZmE0MTE3ZGIxNTU1 LzEvekNkVEd0bVp0dFdnUkJ0MS11cDlWNFpUNUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeY90hMX3 XTzXBF2iEVc1l+/goxsKfEJp4ZFA1PZpWTTQKtqOXFMj3tBufnmB2bGm//PJcGgx m6UZq5zyryqGx9KEX/RQ7Y81CWjKJLU/DklD4m0Mz/xtwEL7accjQBiMuzQ0UsNr s71b1huPggXE08mFt5nGA8Byd119u/0ozOzLP5tbtbhctdNdrJPB+JobEHfLQ1be sbAWS9Bj46kssUXcaYmCOcICp27aw3TNBlNxywpoLso7b8/CSbx5xg69rFfvTerj fvEkluBkRCAZ/zHmVquqgGm8M6hyDHimX6+Ljv23Sg7NqIn/dz8qgOWPs1aEBqEU 2j5v3GHtfDcVdw== -----END CERTIFICATE-----Generated at Mon Dec 22 15:43:58 2025 by rpki-client