This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json) Hash identifier: FZ2h21HpEa2FliBdBk99sRcSU6i2GnfPQ9HJHLeWZ0U= Subject key identifier: 82:A2:9D:9B:61:E9:16:79:AD:C7:0C:3A:89:68:82:41:04:86:F5:09 Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89 Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189 Certificate serial: 019B3A90B5E26060DB8C0D7579389EA72F50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft Manifest number: 08F7 Signing time: Sat 20 Dec 2025 07:02:00 +0000 Manifest this update: Sat 20 Dec 2025 07:02:00 +0000 Manifest next update: Sun 21 Dec 2025 07:02:00 +0000 Files and hashes: 1: UD4cQq7SyCABLCZHHC1Ou_EeL6M.roa (hash: tfgZKXi2rZuQqy6q4ZM+ZUGFDVqdyYkcUnUVHT5tgpI=) 2: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: MFvo/vdHzkGFHHnskRzPCspPdjZLxn5/o65BkXWHPoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:b5:e2:60:60:db:8c:0d:75:79:38:9e:a7:2f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccad68f7e8abadf4472623343a32561507224189 Validity Not Before: Dec 20 07:02:00 2025 GMT Not After : Dec 21 07:02:00 2025 GMT Subject: CN=82a29d9b61e91679adc70c3a896882410486f509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f9:fa:3a:5d:bb:64:0c:31:46:64:5d:4b:33: ba:d6:8c:58:b2:1d:9b:b6:81:6e:50:72:74:7d:71: fb:69:e5:22:54:ff:30:f4:80:57:a6:71:4c:e9:c8: bf:5d:1c:bf:54:9e:42:b2:4b:1c:43:e9:f2:61:26: d6:32:2a:21:86:89:19:b1:bc:8f:13:e4:a7:d9:63: 4d:93:45:10:d3:77:c5:10:bd:77:8d:45:07:37:72: 0e:2d:e7:f0:8f:b1:c9:96:e7:18:5b:90:95:17:3f: f0:2b:fe:61:95:c5:fa:b1:62:c1:0f:e2:7d:96:1b: ba:da:37:82:cf:cf:85:1b:9d:1c:71:c6:31:40:4c: 65:ca:9b:c4:e5:e5:d2:d4:df:4c:33:8c:e2:ef:bb: 2d:18:03:69:47:7d:0b:51:a0:65:a2:7d:71:86:39: 09:d2:9c:e5:39:e1:93:b4:de:32:fd:df:de:a5:d3: e5:3e:86:63:fb:ae:c9:5b:98:19:3b:25:fa:ab:eb: 6b:05:27:4c:ea:85:c8:f2:7d:e7:90:ec:b3:f9:4a: 6b:d1:b5:6a:71:26:49:c1:8f:10:cf:a0:cf:91:d0: 60:de:cb:2d:ab:f8:93:42:21:f2:3f:d8:46:db:3c: a2:63:d6:15:0f:3e:1c:e5:18:12:7b:21:9b:fd:72: 9d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A2:9D:9B:61:E9:16:79:AD:C7:0C:3A:89:68:82:41:04:86:F5:09 X509v3 Authority Key Identifier: keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:c3:68:9b:91:83:a0:06:ad:40:07:7c:e4:cb:3f:4a:b3:29: 45:fc:8b:9a:24:44:4a:10:d4:36:8d:2a:04:df:46:c9:fd:ba: 04:a9:08:bf:a4:2d:2f:42:a3:11:b0:af:46:dd:8d:85:80:ad: a2:a9:d8:4b:a4:3e:4e:b4:a4:b1:c1:29:59:ea:d1:47:b5:f5: ee:b0:9a:e6:ba:d9:8e:d1:5d:a1:a0:91:74:c7:4f:3b:20:40: f9:0a:c8:d0:c2:85:e2:7f:40:39:a7:f6:0c:e0:c4:24:2b:7e: 4e:47:be:b5:dd:c8:75:f3:2e:56:7b:9b:b9:c3:80:39:38:f4: 90:0f:39:c6:e4:af:d5:5d:61:fd:25:bd:d6:f4:08:82:ce:ea: b7:e6:51:d9:f2:b0:88:21:43:4b:cf:f0:b0:f8:81:86:93:4a: a9:8f:53:02:e5:79:6c:2a:d1:ed:43:c5:7b:ca:ab:79:c5:8d: ff:2b:ec:cf:8c:39:b9:f4:05:19:1d:ec:eb:2e:1e:88:75:ba: 84:e4:1c:4b:ee:c5:3e:61:73:6a:60:de:fb:e7:a1:d9:8a:0e: 3b:4b:c5:61:5f:8b:d6:86:1e:cc:04:29:16:3f:87:3a:70:f6: 02:b4:2d:34:bc:98:60:36:b2:33:af:c9:6c:7d:1e:7a:49:6d: af:23:ab:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kLXiYGDbjA11eTiepy9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYWQ2OGY3ZThhYmFkZjQ0NzI2MjMzNDNhMzI1NjE1MDcy MjQxODkwHhcNMjUxMjIwMDcwMjAwWhcNMjUxMjIxMDcwMjAwWjAzMTEwLwYDVQQD Eyg4MmEyOWQ5YjYxZTkxNjc5YWRjNzBjM2E4OTY4ODI0MTA0ODZmNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvn6Ol27ZAwxRmRdSzO61oxYsh2b toFuUHJ0fXH7aeUiVP8w9IBXpnFM6ci/XRy/VJ5CskscQ+nyYSbWMiohhokZsbyP E+Sn2WNNk0UQ03fFEL13jUUHN3IOLefwj7HJlucYW5CVFz/wK/5hlcX6sWLBD+J9 lhu62jeCz8+FG50cccYxQExlypvE5eXS1N9MM4zi77stGANpR30LUaBlon1xhjkJ 0pzlOeGTtN4y/d/epdPlPoZj+67JW5gZOyX6q+trBSdM6oXI8n3nkOyz+Upr0bVq cSZJwY8Qz6DPkdBg3sstq/iTQiHyP9hG2zyiY9YVDz4c5RgSeyGb/XKdAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKinZth6RZ5rccMOologkEEhvUJMB8GA1UdIwQY MBaAFMytaPfoq630RyYjNDoyVhUHIkGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMt NjM1OWY5MmUxZDJmLzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMtNjM1OWY5MmUxZDJm LzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMNom5GD oAatQAd85Ms/SrMpRfyLmiREShDUNo0qBN9Gyf26BKkIv6QtL0KjEbCvRt2NhYCt oqnYS6Q+TrSkscEpWerRR7X17rCa5rrZjtFdoaCRdMdPOyBA+QrI0MKF4n9AOaf2 DODEJCt+Tke+td3IdfMuVnubucOAOTj0kA85xuSv1V1h/SW91vQIgs7qt+ZR2fKw iCFDS8/wsPiBhpNKqY9TAuV5bCrR7UPFe8qrecWN/yvsz4w5ufQFGR3s6y4eiHW6 hOQcS+7FPmFzamDe++eh2YoOO0vFYV+L1oYezAQpFj+HOnD2ArQtNLyYYDayM6/J bH0eekltryOrdw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:46:05 2025 by rpki-client