This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft File: zPFCMN6e_sYQ_90zngxEgLaLrUU.mft (raw, json) Hash identifier: mtkRy/ezmsfqqWM3zPkj29kuodv43CYOglZ4PUf6++I= Subject key identifier: 94:ED:02:7E:44:53:03:C4:9F:C7:C6:61:1E:AB:D8:49:11:05:C6:54 Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45 Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45 Certificate serial: 019B5975E8CD992EE164D69B630422087E9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft Manifest number: 04A2 Signing time: Fri 26 Dec 2025 07:00:58 +0000 Manifest this update: Fri 26 Dec 2025 07:00:58 +0000 Manifest next update: Sat 27 Dec 2025 07:00:58 +0000 Files and hashes: 1: Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa (hash: GAWYOmgt7SjOR4XrYGICCDsdlImXuLIEXBRuDs31QjI=) 2: zPFCMN6e_sYQ_90zngxEgLaLrUU.crl (hash: +8y9pH8hsQUj9Kk+Y3XooBaS4ykjybO8OrktwH2JqOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:e8:cd:99:2e:e1:64:d6:9b:63:04:22:08:7e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45 Validity Not Before: Dec 26 07:00:58 2025 GMT Not After : Dec 27 07:00:58 2025 GMT Subject: CN=94ed027e445303c49fc7c6611eabd8491105c654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:ab:1a:2f:16:7d:dd:f1:d0:bc:cd:b6:17: 9a:4a:c7:4a:3e:dd:eb:c6:2c:11:d2:7c:3b:1d:e9: fd:12:9c:0b:80:92:c3:ba:28:f0:b6:30:ff:1a:ea: d6:c3:b3:49:93:22:36:49:fb:39:7f:d8:22:68:0d: aa:c4:b3:02:59:ba:0b:3c:82:eb:66:50:1d:e3:c2: 35:cd:a2:45:77:78:31:c8:61:71:89:1d:35:48:7f: 7e:86:3a:4d:8f:37:5e:8c:59:62:56:16:9c:0b:10: 9d:b1:ca:51:6c:a6:24:ed:4e:21:76:2e:4a:52:40: fa:d1:b1:c6:85:fa:54:16:1e:a2:8b:d0:4d:71:70: fd:f0:0d:b6:95:ed:0f:0a:0b:5e:7c:a5:d9:55:c2: af:ca:57:61:18:9e:99:64:a6:d4:e3:9c:1a:a0:db: aa:27:52:81:bd:29:82:2a:cc:bf:0b:b2:bd:a9:30: f2:29:a8:9c:43:94:43:29:f1:b9:54:66:6e:00:9d: 9d:29:07:d2:33:86:ad:66:16:19:7d:a4:4b:b5:62: 97:85:21:8b:3d:83:ea:7c:4d:d6:d0:f2:92:7b:65: 3c:61:e5:42:9c:1a:79:0d:47:2e:2b:3a:91:ff:de: d2:7d:c8:84:6b:1e:d4:3b:01:5a:81:54:fd:77:7b: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:ED:02:7E:44:53:03:C4:9F:C7:C6:61:1E:AB:D8:49:11:05:C6:54 X509v3 Authority Key Identifier: keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:91:41:a2:8a:61:66:ff:96:34:81:1b:d4:6b:ca:60:e7:b0: 17:09:cf:20:2e:53:f6:9e:58:ec:46:25:7b:11:8d:9b:13:91: 5b:6b:51:c3:8f:11:02:fc:ea:4a:3f:12:59:c5:00:e2:82:d6: d2:43:e5:71:ca:71:47:b8:b1:62:24:d4:33:d3:11:2a:85:e9: a1:a6:3f:33:01:8c:65:1e:fb:cd:90:4f:04:01:6f:04:7a:f2: 09:37:24:64:dd:c2:b1:f1:cc:12:33:b5:00:a4:1c:ae:32:a9: 07:bf:cc:6f:99:47:5e:21:7c:a9:6d:6f:10:85:79:2e:d8:63: 9c:4a:1c:8d:f9:9e:62:fb:e5:bc:0f:e3:ca:f4:6b:d8:76:17: 62:18:2b:03:98:16:23:66:23:a4:76:4a:86:4f:05:c0:1f:8f: 83:30:be:ca:2f:f3:98:8c:95:ea:84:65:1b:b1:6d:42:4b:0f: ea:b9:05:39:50:69:85:b4:6a:92:90:9b:31:28:80:18:72:0a: da:b7:a4:60:bf:a2:55:31:20:19:b6:f6:ca:b1:99:9d:a5:04: cd:4f:04:7d:08:6d:97:ce:c3:b8:08:72:b7:51:5c:1a:14:4f: 0c:ba:53:d3:8f:9c:67:92:c9:1d:33:8a:91:d6:0e:3e:45:a5: d5:40:60:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdejNmS7hZNabYwQiCH6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZjE0MjMwZGU5ZWZlYzYxMGZmZGQzMzllMGM0NDgwYjY4 YmFkNDUwHhcNMjUxMjI2MDcwMDU4WhcNMjUxMjI3MDcwMDU4WjAzMTEwLwYDVQQD Eyg5NGVkMDI3ZTQ0NTMwM2M0OWZjN2M2NjExZWFiZDg0OTExMDVjNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqerGi8Wfd3x0LzNtheaSsdKPt3r xiwR0nw7Hen9EpwLgJLDuijwtjD/GurWw7NJkyI2Sfs5f9giaA2qxLMCWboLPILr ZlAd48I1zaJFd3gxyGFxiR01SH9+hjpNjzdejFliVhacCxCdscpRbKYk7U4hdi5K UkD60bHGhfpUFh6ii9BNcXD98A22le0PCgtefKXZVcKvyldhGJ6ZZKbU45waoNuq J1KBvSmCKsy/C7K9qTDyKaicQ5RDKfG5VGZuAJ2dKQfSM4atZhYZfaRLtWKXhSGL PYPqfE3W0PKSe2U8YeVCnBp5DUcuKzqR/97SfciEax7UOwFagVT9d3tDvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTtAn5EUwPEn8fGYR6r2EkRBcZUMB8GA1UdIwQY MBaAFMzxQjDenv7GEP/dM54MRIC2i61FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80ODI2MzMtYzlhOS00NjMzLWIxMzgt YTE3YjgyZTZkNzg2LzEvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80ODI2MzMtYzlhOS00NjMzLWIxMzgtYTE3YjgyZTZkNzg2 LzEvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJFBooph Zv+WNIEb1GvKYOewFwnPIC5T9p5Y7EYlexGNmxORW2tRw48RAvzqSj8SWcUA4oLW 0kPlccpxR7ixYiTUM9MRKoXpoaY/MwGMZR77zZBPBAFvBHryCTckZN3CsfHMEjO1 AKQcrjKpB7/Mb5lHXiF8qW1vEIV5LthjnEocjfmeYvvlvA/jyvRr2HYXYhgrA5gW I2YjpHZKhk8FwB+PgzC+yi/zmIyV6oRlG7FtQksP6rkFOVBphbRqkpCbMSiAGHIK 2rekYL+iVTEgGbb2yrGZnaUEzU8EfQhtl87DuAhyt1FcGhRPDLpT04+cZ5LJHTOK kdYOPkWl1UBgQQ== -----END CERTIFICATE-----Generated at Fri Dec 26 09:38:17 2025 by rpki-client