This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json) Hash identifier: RHgGznsCzDVCPQWfjT+WosChaONli4C6wsKfRcIxV/w= Subject key identifier: CA:25:93:69:36:91:20:C7:B5:9F:07:64:83:EA:D6:C3:DD:D9:54:46 Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91 Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191 Certificate serial: 019B39EA97B283FEA9EC07B440BBD9DEE6FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft Manifest number: 1494 Signing time: Sat 20 Dec 2025 04:00:34 +0000 Manifest this update: Sat 20 Dec 2025 04:00:34 +0000 Manifest next update: Sun 21 Dec 2025 04:00:34 +0000 Files and hashes: 1: Njt0C_REwUu3SbLYdsWOldKXTok.roa (hash: FKU9goGKUIXguBLGBxGdYgnZkFhCbVsBMNq8D5V01Qo=) 2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: 0hJPoahVVR9ebSqYYJWD0PddxB57cigPzM8Sn+luJSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:97:b2:83:fe:a9:ec:07:b4:40:bb:d9:de:e6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191 Validity Not Before: Dec 20 04:00:34 2025 GMT Not After : Dec 21 04:00:34 2025 GMT Subject: CN=ca259369369120c7b59f076483ead6c3ddd95446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c3:a3:6b:c9:e2:e3:16:4f:3b:d6:9b:42:e4: ba:31:bf:09:3a:54:86:b1:bf:85:78:e9:22:a0:9b: 7d:98:c6:e3:b6:4d:57:48:8f:0e:c0:e1:1f:e1:61: 33:11:8c:d4:48:90:d5:be:24:78:47:b8:50:36:28: ae:f7:de:e8:f0:be:60:13:50:38:5a:22:15:d0:48: 8e:15:bf:1a:53:0a:d6:1b:42:66:80:f0:b2:15:72: 64:69:2a:32:aa:4a:28:74:19:4d:89:75:71:dc:fb: a1:c1:3f:9d:4a:2a:d6:a5:81:33:55:1c:a2:3f:54: 90:78:e5:09:d3:23:33:d7:c4:8d:7a:88:56:08:7a: 3f:8b:41:63:4f:7b:d5:85:a5:c2:02:d9:50:b6:22: d3:7f:31:85:d3:d4:9f:9c:41:6b:1a:c0:a1:1b:02: ec:6d:9f:aa:b9:f0:86:ed:82:7f:28:25:9c:9d:fb: fa:d7:e3:fb:b1:02:84:1a:7c:7c:d0:c5:b6:15:ca: b9:2b:ec:87:f7:b1:db:69:1b:46:c9:d9:9b:d1:7f: 3f:f3:b5:8c:6a:a3:17:b8:b9:1e:3b:7c:d2:5a:6d: fb:a1:e6:15:26:59:6c:33:11:5a:03:8d:71:25:6d: 29:9f:b7:db:1d:99:93:72:fc:30:87:f3:98:8f:68: 26:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:25:93:69:36:91:20:C7:B5:9F:07:64:83:EA:D6:C3:DD:D9:54:46 X509v3 Authority Key Identifier: keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:35:d1:4d:d3:00:d8:c8:53:39:64:21:13:24:27:dc:9c:32: 9e:55:17:8b:df:b9:a1:85:44:dc:03:79:30:ab:66:b8:37:bc: 39:17:9a:95:08:62:0b:eb:e7:6d:9f:a8:cc:d5:26:cb:18:92: 90:0f:87:50:9b:8e:b4:43:5d:c9:7f:35:43:22:5f:84:d7:72: 16:21:90:43:f7:17:c8:22:f9:3c:48:9c:90:52:eb:c8:51:34: 36:ad:7f:9f:f3:5e:27:51:5c:e2:72:4a:40:b5:35:9e:b1:84: 1d:59:4d:50:ae:62:40:d1:e7:31:1a:57:3b:2c:23:b3:75:fd: 69:48:75:9e:95:47:81:d0:43:f6:94:1c:92:00:b1:c6:8e:d2: 68:26:15:5d:fa:d9:ca:ee:b2:e1:b6:2f:a6:e2:d4:a0:01:10: 9a:17:d9:ab:f1:8c:b8:65:9b:d4:cf:73:99:a2:c4:ea:40:2c: 2e:bc:98:3c:6b:64:38:52:73:33:34:70:9a:ac:61:16:45:69: 41:23:6c:8b:ac:47:84:95:3b:88:56:a3:8f:ed:ca:92:b1:04: 76:91:72:fc:e9:04:22:ec:fd:b9:14:7b:d3:33:03:80:b3:95: e2:3b:32:8a:c5:75:31:02:4b:8c:9d:d6:87:53:a2:eb:b6:d0: af:3a:55:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56peyg/6p7Ae0QLvZ3ub7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZmZlNjRmNDJhOWYwNGI5ZmQ2Y2Q3NTgzNzJhMWRiNWNk OGIxOTEwHhcNMjUxMjIwMDQwMDM0WhcNMjUxMjIxMDQwMDM0WjAzMTEwLwYDVQQD EyhjYTI1OTM2OTM2OTEyMGM3YjU5ZjA3NjQ4M2VhZDZjM2RkZDk1NDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58Oja8ni4xZPO9abQuS6Mb8JOlSG sb+FeOkioJt9mMbjtk1XSI8OwOEf4WEzEYzUSJDVviR4R7hQNiiu997o8L5gE1A4 WiIV0EiOFb8aUwrWG0JmgPCyFXJkaSoyqkoodBlNiXVx3PuhwT+dSirWpYEzVRyi P1SQeOUJ0yMz18SNeohWCHo/i0FjT3vVhaXCAtlQtiLTfzGF09SfnEFrGsChGwLs bZ+qufCG7YJ/KCWcnfv61+P7sQKEGnx80MW2Fcq5K+yH97HbaRtGydmb0X8/87WM aqMXuLkeO3zSWm37oeYVJllsMxFaA41xJW0pn7fbHZmTcvwwh/OYj2gmHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMolk2k2kSDHtZ8HZIPq1sPd2VRGMB8GA1UdIwQY MBaAFMz/5k9CqfBLn9bNdYNyodtc2LGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5Mjct OWQyZTQyZjdmOWFjLzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5MjctOWQyZTQyZjdmOWFj LzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjXRTdMA 2MhTOWQhEyQn3JwynlUXi9+5oYVE3AN5MKtmuDe8ORealQhiC+vnbZ+ozNUmyxiS kA+HUJuOtENdyX81QyJfhNdyFiGQQ/cXyCL5PEickFLryFE0Nq1/n/NeJ1Fc4nJK QLU1nrGEHVlNUK5iQNHnMRpXOywjs3X9aUh1npVHgdBD9pQckgCxxo7SaCYVXfrZ yu6y4bYvpuLUoAEQmhfZq/GMuGWb1M9zmaLE6kAsLryYPGtkOFJzMzRwmqxhFkVp QSNsi6xHhJU7iFajj+3KkrEEdpFy/OkEIuz9uRR70zMDgLOV4jsyisV1MQJLjJ3W h1Oi67bQrzpVHA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:35 2025 by rpki-client