This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json) Hash identifier: df7/mPFb/GJw4zNfa+0HoDZdMWykRFi0rIKUQ4/bikQ= Subject key identifier: 36:A6:54:B8:ED:F6:29:67:3B:61:AA:0C:87:F8:EB:58:7A:E4:1E:13 Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b Certificate serial: 019B4DDFED034FE893ED036755861C2CA2B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft Manifest number: 098E Signing time: Wed 24 Dec 2025 01:01:19 +0000 Manifest this update: Wed 24 Dec 2025 01:01:19 +0000 Manifest next update: Thu 25 Dec 2025 01:01:19 +0000 Files and hashes: 1: cGaM1pqwI_iREeyFYU4bDaF6huI.roa (hash: ZX5FkbfvKLABufYmP9T9sbDn4rTGZcGZ9RNRwuV4C4s=) 2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: YkEX9P7m0Rj7Q/0vh0Dw0Xg5fcw0U6UceJcH+vnFGIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:ed:03:4f:e8:93:ed:03:67:55:86:1c:2c:a2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b Validity Not Before: Dec 24 01:01:19 2025 GMT Not After : Dec 25 01:01:19 2025 GMT Subject: CN=36a654b8edf629673b61aa0c87f8eb587ae41e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:06:6a:4f:a8:84:f5:90:d4:cc:0b:af:78: 4e:1d:4d:c4:24:a4:bb:f3:27:f2:0c:94:fc:01:33: dd:9f:90:eb:d1:87:7a:d0:e9:d5:e3:ae:44:b3:6e: ea:69:1e:26:96:1c:fc:ec:30:af:b2:85:e9:30:19: 50:6c:0c:ba:39:d5:6f:ed:da:37:81:e4:d7:23:51: fb:e8:4e:eb:e7:d6:bf:68:06:e2:05:73:54:62:6e: 5f:d1:97:99:46:42:8d:9d:bb:0d:d1:fa:ef:46:02: 1d:a1:cc:0e:e1:5f:6b:54:94:2f:f3:57:3b:32:ab: cc:8d:b8:3f:9f:cb:83:c1:25:f3:01:b2:30:29:b8: d7:b3:c9:22:96:26:f9:e5:ed:be:8a:25:d8:aa:ae: 4e:af:03:0c:f3:47:3d:3a:fd:c1:ac:e7:03:54:ad: 16:14:0e:d2:cc:43:fb:8b:47:75:30:78:01:97:ca: 49:ee:73:55:ab:1f:a8:a3:07:b0:1f:39:25:7d:65: 60:4c:38:16:44:29:1b:32:16:b8:a2:1d:24:32:cf: 46:33:d5:2b:ff:14:bf:7a:f5:e2:10:d0:38:2b:51: d0:cd:4d:e1:f5:3a:ac:7f:24:25:21:d7:3f:d8:31: e4:a0:9b:12:a1:c6:b3:a7:43:e3:a8:29:44:a6:45: 5f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A6:54:B8:ED:F6:29:67:3B:61:AA:0C:87:F8:EB:58:7A:E4:1E:13 X509v3 Authority Key Identifier: keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:5a:9a:d6:1b:d8:bb:2d:1e:57:b9:3f:b3:26:2c:f1:e6:3b: d1:25:e4:77:fa:99:75:4a:2d:22:a0:79:cc:da:bc:7a:5f:12: 17:cf:73:20:b9:b8:85:bf:9f:83:3f:d0:67:04:21:53:1c:46: c2:a0:c3:80:dc:48:08:4a:f8:56:b3:ef:83:99:f6:fd:3c:60: 28:f2:54:d5:85:ed:9a:32:84:80:cf:43:a5:a1:1c:78:df:c7: 4b:73:9e:70:c0:a3:e6:53:ec:ec:82:2d:bb:30:1e:8c:f2:68: 2c:73:1a:9d:16:8e:8c:d6:40:60:53:8c:0a:85:3f:dd:ff:8c: 84:bb:5b:b5:35:ab:97:a9:d4:32:d4:80:44:11:14:00:6b:e8: b0:5c:db:c9:b8:1a:84:45:fd:db:7c:21:aa:54:d2:e0:e4:92: c9:c0:2a:a5:70:7f:5c:ef:9a:85:fa:8a:a7:9f:0d:80:c0:f8: ae:92:70:f1:9f:e8:09:6b:c6:f1:1c:12:bf:9b:92:c5:6e:6d: ce:a0:1f:28:8f:0c:88:ed:bf:1e:91:81:b5:43:77:8f:57:cb: d2:d9:51:ed:d8:3e:56:a3:b1:2d:53:5e:3a:3c:e7:a4:f3:e5: c3:d8:fb:f4:f4:11:bb:ed:13:c8:7d:c4:00:4b:a6:7b:3d:c5: b6:5e:57:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN3+0DT+iT7QNnVYYcLKK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTRjMzFlMTVkZjRiN2E2MGU1ZDQwZGYzYWFjMTg1MmU4 ZGE3NGIwHhcNMjUxMjI0MDEwMTE5WhcNMjUxMjI1MDEwMTE5WjAzMTEwLwYDVQQD EygzNmE2NTRiOGVkZjYyOTY3M2I2MWFhMGM4N2Y4ZWI1ODdhZTQxZTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGcGak+ohPWQ1MwLr3hOHU3EJKS7 8yfyDJT8ATPdn5Dr0Yd60OnV465Es27qaR4mlhz87DCvsoXpMBlQbAy6OdVv7do3 geTXI1H76E7r59a/aAbiBXNUYm5f0ZeZRkKNnbsN0frvRgIdocwO4V9rVJQv81c7 MqvMjbg/n8uDwSXzAbIwKbjXs8kilib55e2+iiXYqq5OrwMM80c9Ov3BrOcDVK0W FA7SzEP7i0d1MHgBl8pJ7nNVqx+oowewHzklfWVgTDgWRCkbMha4oh0kMs9GM9Ur /xS/evXiENA4K1HQzU3h9TqsfyQlIdc/2DHkoJsSocazp0PjqClEpkVfjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDamVLjt9ilnO2GqDIf461h65B4TMB8GA1UdIwQY MBaAFM6Uwx4V30t6YOXUDfOqwYUujadLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lZDdjYjItZTM4Ny00N2JmLWJlNGEt MDhmMjI2M2E0MTNjLzEvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lZDdjYjItZTM4Ny00N2JmLWJlNGEtMDhmMjI2M2E0MTNj LzEvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlqa1hvY uy0eV7k/syYs8eY70SXkd/qZdUotIqB5zNq8el8SF89zILm4hb+fgz/QZwQhUxxG wqDDgNxICEr4VrPvg5n2/TxgKPJU1YXtmjKEgM9DpaEceN/HS3OecMCj5lPs7IIt uzAejPJoLHManRaOjNZAYFOMCoU/3f+MhLtbtTWrl6nUMtSARBEUAGvosFzbybga hEX923whqlTS4OSSycAqpXB/XO+ahfqKp58NgMD4rpJw8Z/oCWvG8RwSv5uSxW5t zqAfKI8MiO2/HpGBtUN3j1fL0tlR7dg+VqOxLVNeOjznpPPlw9j79PQRu+0TyH3E AEumez3Ftl5XbQ== -----END CERTIFICATE-----Generated at Wed Dec 24 02:55:47 2025 by rpki-client