This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json) Hash identifier: 3VWyZjCH93AD7AGsiy0N+ZGfJ4HuL5JIqa32k86TMCU= Subject key identifier: 00:D1:70:0D:8C:B6:B1:6C:1C:AB:C6:F1:3F:89:5E:DD:97:E2:D7:1F Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c Certificate serial: 019B390EDF498667960F296A21A619639EA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft Manifest number: 1030 Signing time: Sat 20 Dec 2025 00:00:34 +0000 Manifest this update: Sat 20 Dec 2025 00:00:34 +0000 Manifest next update: Sun 21 Dec 2025 00:00:34 +0000 Files and hashes: 1: KV7R1N_V77pOGNFqnvFI6VhE9Go.roa (hash: ih2S77Xnd5LfWtkG7w1ATz4hnQOa5DPl2XBfQ5D61xc=) 2: YoriHP_16arPHdOvDoMYO04hQkM.roa (hash: /lTd6A0sIeKscoeYGd/TO3yXs/PZBXapXa0ik8V7+LM=) 3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: KdIQk9Hco1An6ekfcChAyhKrhmuk3aU7DoonAmxh2dw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:df:49:86:67:96:0f:29:6a:21:a6:19:63:9e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd394757e1416202a4022956dbf48d707458520c Validity Not Before: Dec 20 00:00:34 2025 GMT Not After : Dec 21 00:00:34 2025 GMT Subject: CN=00d1700d8cb6b16c1cabc6f13f895edd97e2d71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:29:f4:1a:9a:c3:61:bb:1d:b4:fb:b2:ae:bc: bd:1f:32:9d:2a:e4:e2:2b:ff:ca:66:c1:9e:14:87: 5d:00:b6:13:b2:b8:4f:ff:40:9d:ee:80:60:a4:6e: 27:0a:41:af:51:9e:1f:b2:8d:c5:17:52:0e:4f:bc: 23:9d:4f:ff:94:64:4d:90:e8:8e:30:0f:0d:9c:0b: 53:f3:74:92:47:30:07:1e:c8:41:37:a0:60:7d:70: 79:bb:e0:32:f9:a0:82:1d:3b:81:fa:29:4f:f0:f6: a3:c1:02:9d:d4:fc:03:91:9c:d7:5a:d0:75:4f:a5: aa:4b:08:bf:ae:3b:83:0f:32:75:06:21:98:75:bc: 13:6f:91:d7:0d:63:64:b8:55:4b:66:ae:42:d0:dd: b4:15:da:d0:d6:ff:9b:02:83:9f:95:c1:9b:89:af: 8f:bf:0f:52:94:1d:54:39:76:72:23:8b:79:5b:f4: 1b:76:17:d9:20:ce:5c:bd:71:48:bf:32:35:e5:78: 06:c5:f3:eb:c1:b6:89:23:0a:0f:a1:07:71:da:43: 26:1d:e7:0c:05:62:f7:c0:3c:4b:c6:da:fc:6b:b7: af:39:9f:eb:98:df:f8:65:c1:30:02:41:92:3a:b4: d6:ee:42:28:5d:5b:f0:8d:35:95:fe:8c:f5:fc:4f: ca:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D1:70:0D:8C:B6:B1:6C:1C:AB:C6:F1:3F:89:5E:DD:97:E2:D7:1F X509v3 Authority Key Identifier: keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:4a:1e:e8:73:53:87:f9:0f:26:6a:59:15:3f:4a:95:d1:fe: 42:dd:c2:d2:60:ac:ec:78:e1:c9:e3:33:33:57:0a:ff:4f:e6: 87:e8:bd:5d:ba:39:60:1b:ae:6b:36:52:3e:44:f6:4b:9a:77: 55:c2:93:bc:21:36:60:f9:08:9c:bf:d4:ef:bf:b9:5b:cd:81: e6:29:9d:7f:f2:8e:43:c3:18:48:c1:ce:f9:eb:68:e8:a8:5e: d7:3b:06:66:fe:c6:25:0e:47:1b:5b:27:32:f2:03:4e:c6:52: 43:13:dc:29:e1:f6:64:41:6f:7b:72:d0:b3:84:29:07:76:ed: 0e:1b:f2:f4:67:21:ca:52:6e:18:7d:39:27:e8:fd:4b:9d:9a: 9d:52:a3:bf:5f:92:62:28:ee:75:43:52:91:27:33:89:0c:ce: bf:8a:cf:bf:4b:8d:25:7d:fa:ac:06:20:1e:be:39:73:7b:c5: b6:6e:8e:58:42:a5:a5:3f:13:13:29:a0:a2:35:67:48:eb:99: e2:65:b3:57:e0:03:95:77:e7:47:53:52:49:61:65:17:79:58: 86:22:5d:e6:91:4e:77:27:c0:50:93:31:cb:82:69:d7:a6:e3: d3:4e:33:a9:49:4f:ff:43:fe:6f:b0:78:a5:61:3c:54:79:63: 66:28:23:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dt9JhmeWDylqIaYZY56kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMzk0NzU3ZTE0MTYyMDJhNDAyMjk1NmRiZjQ4ZDcwNzQ1 ODUyMGMwHhcNMjUxMjIwMDAwMDM0WhcNMjUxMjIxMDAwMDM0WjAzMTEwLwYDVQQD EygwMGQxNzAwZDhjYjZiMTZjMWNhYmM2ZjEzZjg5NWVkZDk3ZTJkNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxin0GprDYbsdtPuyrry9HzKdKuTi K//KZsGeFIddALYTsrhP/0Cd7oBgpG4nCkGvUZ4fso3FF1IOT7wjnU//lGRNkOiO MA8NnAtT83SSRzAHHshBN6BgfXB5u+Ay+aCCHTuB+ilP8PajwQKd1PwDkZzXWtB1 T6WqSwi/rjuDDzJ1BiGYdbwTb5HXDWNkuFVLZq5C0N20FdrQ1v+bAoOflcGbia+P vw9SlB1UOXZyI4t5W/QbdhfZIM5cvXFIvzI15XgGxfPrwbaJIwoPoQdx2kMmHecM BWL3wDxLxtr8a7evOZ/rmN/4ZcEwAkGSOrTW7kIoXVvwjTWV/oz1/E/KnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADRcA2MtrFsHKvG8T+JXt2X4tcfMB8GA1UdIwQY MBaAFM05R1fhQWICpAIpVtv0jXB0WFIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEt MmZjNmQxN2Y4YjU4LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEtMmZjNmQxN2Y4YjU4 LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEoe6HNT h/kPJmpZFT9KldH+Qt3C0mCs7HjhyeMzM1cK/0/mh+i9Xbo5YBuuazZSPkT2S5p3 VcKTvCE2YPkInL/U77+5W82B5imdf/KOQ8MYSMHO+eto6Khe1zsGZv7GJQ5HG1sn MvIDTsZSQxPcKeH2ZEFve3LQs4QpB3btDhvy9GchylJuGH05J+j9S52anVKjv1+S YijudUNSkScziQzOv4rPv0uNJX36rAYgHr45c3vFtm6OWEKlpT8TEymgojVnSOuZ 4mWzV+ADlXfnR1NSSWFlF3lYhiJd5pFOdyfAUJMxy4Jp16bj004zqUlP/0P+b7B4 pWE8VHljZigjOw== -----END CERTIFICATE-----Generated at Sat Dec 20 04:58:45 2025 by rpki-client