This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json) Hash identifier: W2u5I2o3MFR+gv6vY/UgVxtP2Xo/EW6PeKQrut5vIlM= Subject key identifier: 95:AC:D6:12:1C:D9:2C:0C:B0:ED:6F:0D:EC:4A:25:F7:30:B9:58:E3 Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f Certificate serial: 019B3D909ADF800D2E1EF2EE9CC08AD13107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft Manifest number: 0511 Signing time: Sat 20 Dec 2025 21:00:45 +0000 Manifest this update: Sat 20 Dec 2025 21:00:45 +0000 Manifest next update: Sun 21 Dec 2025 21:00:45 +0000 Files and hashes: 1: x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa (hash: vQ6QPNwnnIFhCOXdhX1rKb14Trxw+IBL89xByl8hgdM=) 2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: sr785UHqn47HgrnOunN+ZvXW8Wd7GGCqUb49SLOn058=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:9a:df:80:0d:2e:1e:f2:ee:9c:c0:8a:d1:31:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f Validity Not Before: Dec 20 21:00:45 2025 GMT Not After : Dec 21 21:00:45 2025 GMT Subject: CN=95acd6121cd92c0cb0ed6f0dec4a25f730b958e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:f4:e1:00:29:af:db:f8:d3:08:ea:32:e4: e9:d1:00:bb:65:42:c2:ad:26:f7:a2:7b:80:bf:5e: 1e:91:45:8c:c7:8c:61:2c:61:56:15:c1:08:d9:50: e9:64:58:71:68:42:ea:c9:ad:51:fe:1b:32:60:ef: 8e:5a:16:e9:f9:72:ac:63:87:44:19:86:ce:fe:2e: 0b:ac:83:26:1e:b2:92:81:5d:d5:8c:36:a6:7e:e6: 96:49:72:79:15:93:0f:a0:76:3c:e1:d6:1a:16:49: cb:23:96:09:09:86:14:19:12:18:76:cb:b4:67:52: e2:ba:fb:74:bf:21:e7:bd:b9:f5:15:a4:71:7e:b5: 09:a8:58:e1:a6:9d:88:56:b3:1a:56:8f:a4:74:63: 53:d5:4f:e4:0a:53:3d:64:e2:12:de:37:44:ec:4a: 73:d2:e7:73:8c:c1:06:d1:17:48:da:ba:aa:e1:50: ef:29:e9:7a:47:fe:cf:44:8e:ec:3d:88:a8:50:30: 28:af:62:fc:f9:28:5a:61:9c:10:fb:ab:59:ff:12: e5:1b:5e:7c:9a:e2:37:67:87:c0:a5:d6:b3:e3:41: 8c:c9:36:7b:44:ad:ea:f4:67:9c:80:a4:17:90:d5: 31:71:d3:c7:18:27:15:f5:68:fd:d4:65:43:be:16: e1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AC:D6:12:1C:D9:2C:0C:B0:ED:6F:0D:EC:4A:25:F7:30:B9:58:E3 X509v3 Authority Key Identifier: keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4d:aa:b6:64:1a:66:4d:1f:16:5d:28:ec:c0:4b:a0:ce:bb: 4f:a0:5b:3b:c3:72:df:cd:2c:6e:19:16:7c:30:ef:17:19:e9: 4c:34:25:dd:57:44:d2:10:6d:84:3b:1c:ec:76:f9:73:0d:0e: 55:e6:c8:99:4e:25:61:81:30:c2:da:9c:a1:6a:95:17:b6:a9: 07:22:47:3c:51:a9:66:d0:07:67:32:80:8c:d9:a4:bf:70:8d: a2:81:54:9a:f1:9e:91:60:65:76:fa:48:a1:b4:ad:73:0a:d7: 0c:0b:30:a1:c2:e2:57:d5:bf:63:d7:40:25:26:8d:53:78:3e: 31:9c:0b:37:43:f8:88:b2:df:c3:a2:f2:d5:85:43:3a:e7:8a: fb:e9:c5:dd:fc:0e:b9:38:95:ea:a6:42:58:22:6f:6d:12:91: d5:0f:b6:f7:1e:f4:8a:a0:ee:9d:4c:5a:fd:ac:4c:1e:58:ab: a4:e0:5d:50:a8:0e:4b:32:81:77:14:d3:c1:4d:b1:41:5b:e1: 60:1c:1d:ff:2e:f0:52:a7:74:f7:d4:6f:78:1b:95:2c:ec:d9: 55:a3:5f:82:e5:46:b6:df:93:58:78:78:ca:07:fb:e5:b8:a6: 2a:c7:8d:00:7e:87:d8:ef:a3:2a:cb:e4:fa:d1:a0:f8:57:eb: 3a:26:41:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kJrfgA0uHvLunMCK0TEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOWRlMDhiMzA1M2JhYzYxNzEzYzQ2YjQzZDQwOTM4MThj MjA0NmYwHhcNMjUxMjIwMjEwMDQ1WhcNMjUxMjIxMjEwMDQ1WjAzMTEwLwYDVQQD Eyg5NWFjZDYxMjFjZDkyYzBjYjBlZDZmMGRlYzRhMjVmNzMwYjk1OGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUL04QApr9v40wjqMuTp0QC7ZULC rSb3onuAv14ekUWMx4xhLGFWFcEI2VDpZFhxaELqya1R/hsyYO+OWhbp+XKsY4dE GYbO/i4LrIMmHrKSgV3VjDamfuaWSXJ5FZMPoHY84dYaFknLI5YJCYYUGRIYdsu0 Z1Liuvt0vyHnvbn1FaRxfrUJqFjhpp2IVrMaVo+kdGNT1U/kClM9ZOIS3jdE7Epz 0udzjMEG0RdI2rqq4VDvKel6R/7PRI7sPYioUDAor2L8+ShaYZwQ+6tZ/xLlG158 muI3Z4fApdaz40GMyTZ7RK3q9GecgKQXkNUxcdPHGCcV9Wj91GVDvhbhMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWs1hIc2SwMsO1vDexKJfcwuVjjMB8GA1UdIwQY MBaAFM2d4IswU7rGFxPEa0PUCTgYwgRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zNGJmZjMtMzlkYS00ODc3LWI3NWMt NTAxNmNlOTJmMTIyLzEvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zNGJmZjMtMzlkYS00ODc3LWI3NWMtNTAxNmNlOTJmMTIy LzEvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArU2qtmQa Zk0fFl0o7MBLoM67T6BbO8Ny380sbhkWfDDvFxnpTDQl3VdE0hBthDsc7Hb5cw0O VebImU4lYYEwwtqcoWqVF7apByJHPFGpZtAHZzKAjNmkv3CNooFUmvGekWBldvpI obStcwrXDAswocLiV9W/Y9dAJSaNU3g+MZwLN0P4iLLfw6Ly1YVDOueK++nF3fwO uTiV6qZCWCJvbRKR1Q+29x70iqDunUxa/axMHlirpOBdUKgOSzKBdxTTwU2xQVvh YBwd/y7wUqd099RveBuVLOzZVaNfguVGtt+TWHh4ygf75bimKseNAH6H2O+jKsvk +tGg+FfrOiZB7w== -----END CERTIFICATE-----Generated at Sun Dec 21 01:11:16 2025 by rpki-client