This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json) Hash identifier: 29oiRnBnAyV18fbiIpWW6gJaYrY8pch6RJp+KM+rbW8= Subject key identifier: 5D:E5:B6:87:DF:BD:2C:06:9C:BC:1D:D8:93:57:D4:44:E1:A4:6F:F4 Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea Certificate serial: 019B3D5A746D6447C61F68EA43F3D4FD98F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft Manifest number: 1798 Signing time: Sat 20 Dec 2025 20:01:36 +0000 Manifest this update: Sat 20 Dec 2025 20:01:36 +0000 Manifest next update: Sun 21 Dec 2025 20:01:36 +0000 Files and hashes: 1: BLPtpElZC_p2IWrsn0eYA39TSUA.roa (hash: q8YlKe7zrrj4ZoEyny/W1gxonK4RscrAFG9IOAtgKRE=) 2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: jzuWL+slnTgej6D0yoN0wttbIyCCLPG4u9eZpiKVtMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:74:6d:64:47:c6:1f:68:ea:43:f3:d4:fd:98:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea Validity Not Before: Dec 20 20:01:36 2025 GMT Not After : Dec 21 20:01:36 2025 GMT Subject: CN=5de5b687dfbd2c069cbc1dd89357d444e1a46ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:43:f3:04:38:d7:68:a0:ed:7d:4a:84:61:ff: e9:86:86:41:93:f6:40:be:97:b8:52:e4:78:23:c4: cd:85:49:f6:4f:d5:e0:c3:a8:68:14:fc:26:a0:e1: ea:8b:dd:22:b9:25:60:ac:3f:dc:de:36:4c:7a:c4: f9:b4:13:94:13:51:12:ef:40:24:4d:3a:0c:ac:62: 3b:1e:80:26:08:b4:77:ab:bd:28:a9:87:cd:f1:62: 7c:a1:e4:27:2d:37:1d:25:69:66:0b:db:b5:8e:b3: 3e:88:3d:bd:6b:02:78:46:e7:75:30:bc:ce:0e:74: 95:e3:97:90:56:10:08:76:e0:82:fc:b3:c0:69:ce: d8:74:d5:a8:ce:9f:ab:08:8c:fd:22:dc:53:07:5c: 76:43:a1:30:26:21:5b:76:f9:17:23:e1:fb:a8:cb: be:24:93:02:fd:e7:fb:89:1f:2e:4c:d4:b7:e4:89: 14:39:19:12:18:0b:3f:c9:34:2e:f4:69:d4:c9:f5: 0b:06:ce:2f:ee:03:78:b3:60:28:d9:33:b3:c1:e2: f7:f9:48:4c:ea:8f:8b:3b:a4:49:40:37:9b:15:7c: 6e:8f:df:04:ee:83:4f:8d:59:f2:7e:3b:5f:35:d2: 79:5f:ac:c2:c0:3a:a0:d7:ff:67:51:28:bd:b1:d5: 6f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E5:B6:87:DF:BD:2C:06:9C:BC:1D:D8:93:57:D4:44:E1:A4:6F:F4 X509v3 Authority Key Identifier: keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a5:52:48:e3:7a:ee:e4:c6:c9:f2:11:31:6f:9b:4d:0f:ca: 94:5d:2d:06:09:a9:7b:29:58:62:77:d8:9f:11:34:24:5f:2c: 86:f9:ff:98:51:df:61:07:25:2d:d7:bf:6a:6a:1a:b0:b0:37: 89:3b:f3:b6:05:cb:db:ab:34:45:c9:2e:36:a6:2a:f2:b1:c6: 0d:7c:6d:77:4f:ca:75:24:44:c4:62:aa:29:15:39:c0:e0:f5: d8:97:14:c7:de:4e:99:bc:07:f5:01:92:28:9f:28:13:91:aa: b2:74:6a:8b:07:88:1b:e1:89:a6:17:cb:07:22:10:25:42:f2: fa:ba:55:65:5b:a7:50:ef:0e:91:76:ef:cb:f9:0b:fb:d1:80: 64:33:df:e8:db:a8:eb:97:8a:20:14:4c:53:cf:96:00:f0:cd: cd:90:6b:5d:62:8a:52:aa:22:6f:dd:d0:38:ca:0d:40:b3:11: 06:6b:55:69:48:9f:d2:94:80:b9:82:4c:df:b9:d7:18:c2:c8: c8:37:38:fb:5b:8f:c6:c3:51:2f:29:20:00:6f:dd:da:18:3a: 20:4d:a4:5e:6c:c6:bc:b2:a6:eb:29:32:33:23:93:ca:96:15: 91:51:1d:b3:a3:19:a6:49:a6:78:9e:04:05:3e:ba:29:f8:f9: ef:66:1e:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WnRtZEfGH2jqQ/PU/ZjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNzc3YTA4YTQ1NjQ1NDhiNTE4ZWMzODY0YjM0MWUxZmE1 MjI1ZWEwHhcNMjUxMjIwMjAwMTM2WhcNMjUxMjIxMjAwMTM2WjAzMTEwLwYDVQQD Eyg1ZGU1YjY4N2RmYmQyYzA2OWNiYzFkZDg5MzU3ZDQ0NGUxYTQ2ZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEPzBDjXaKDtfUqEYf/phoZBk/ZA vpe4UuR4I8TNhUn2T9Xgw6hoFPwmoOHqi90iuSVgrD/c3jZMesT5tBOUE1ES70Ak TToMrGI7HoAmCLR3q70oqYfN8WJ8oeQnLTcdJWlmC9u1jrM+iD29awJ4Rud1MLzO DnSV45eQVhAIduCC/LPAac7YdNWozp+rCIz9ItxTB1x2Q6EwJiFbdvkXI+H7qMu+ JJMC/ef7iR8uTNS35IkUORkSGAs/yTQu9GnUyfULBs4v7gN4s2Ao2TOzweL3+UhM 6o+LO6RJQDebFXxuj98E7oNPjVnyfjtfNdJ5X6zCwDqg1/9nUSi9sdVvSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3ltoffvSwGnLwd2JNX1EThpG/0MB8GA1UdIwQY MBaAFMx3egikVkVItRjsOGSzQeH6UiXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhkNkNLUldSVWkxR093NFpMTkI0ZnBTSmVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hNzJhNGItMDY5My00ZDFiLTliZmMt NzY3YjBjYzgwYzA4LzEvekhkNkNLUldSVWkxR093NFpMTkI0ZnBTSmVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9hNzJhNGItMDY5My00ZDFiLTliZmMtNzY3YjBjYzgwYzA4 LzEvekhkNkNLUldSVWkxR093NFpMTkI0ZnBTSmVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKVSSON6 7uTGyfIRMW+bTQ/KlF0tBgmpeylYYnfYnxE0JF8shvn/mFHfYQclLde/amoasLA3 iTvztgXL26s0RckuNqYq8rHGDXxtd0/KdSRExGKqKRU5wOD12JcUx95OmbwH9QGS KJ8oE5GqsnRqiweIG+GJphfLByIQJULy+rpVZVunUO8OkXbvy/kL+9GAZDPf6Nuo 65eKIBRMU8+WAPDNzZBrXWKKUqoib93QOMoNQLMRBmtVaUif0pSAuYJM37nXGMLI yDc4+1uPxsNRLykgAG/d2hg6IE2kXmzGvLKm6ykyMyOTypYVkVEds6MZpkmmeJ4E BT66Kfj572YeaQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:57 2025 by rpki-client