This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json) Hash identifier: tBG7w/E5QLBbb3bfsXtpCJfGgSguzH+0MHLStLQ1PAY= Subject key identifier: 06:CC:F3:4F:5E:73:6E:D6:D5:90:3B:99:C6:9D:F3:1C:91:1C:81:A0 Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44 Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044 Certificate serial: 019B410017A69E9C60ED7D838BDA72B32995 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 13:01:23 +0000 Manifest this update: Sun 21 Dec 2025 13:01:23 +0000 Manifest next update: Mon 22 Dec 2025 13:01:23 +0000 Files and hashes: 1: CGIluw5b3rFNq3TYcrDu-mJjjcY.roa (hash: 7XYO0sh+h2BXkgYXdxURNA8WGt1oRVxjTX46cE0gy/o=) 2: RLQ2xMmRZoZiAtZFS_YRcySPvAc.roa (hash: P8RbzLYf4UK0GuClJazmarq7imv/ewysF1Ivpx0otS4=) 3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: PnaR5Yje0ErAQ2gRqcvTBMpjPEYMZDH26ual2Y/2ZlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:17:a6:9e:9c:60:ed:7d:83:8b:da:72:b3:29:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044 Validity Not Before: Dec 21 13:01:23 2025 GMT Not After : Dec 22 13:01:23 2025 GMT Subject: CN=06ccf34f5e736ed6d5903b99c69df31c911c81a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:67:de:2b:2e:d7:91:35:e2:51:23:e4:45:35: bf:ed:34:a8:6d:69:a5:5d:16:e5:7b:8d:3a:4c:ba: 65:81:5c:be:2f:4d:d2:40:92:33:be:3c:d9:fc:31: 83:27:89:eb:f7:6b:88:46:71:a6:f1:fa:02:14:7b: 29:6e:fc:57:ba:b8:dd:4d:e2:90:14:49:c4:28:c5: 18:3c:9c:62:49:0e:5f:de:4c:e0:ac:d4:9a:93:52: f3:8e:61:de:40:5e:20:3d:6e:a1:0e:26:40:04:9b: 6b:15:cf:00:df:59:69:e3:49:75:fd:df:6d:6b:02: a7:47:c4:f5:3f:f5:ed:f4:43:72:d1:f0:d4:87:02: 96:d2:69:85:8e:2b:a7:31:6b:ba:2a:88:c6:61:9f: ec:73:8d:26:46:69:a9:68:32:97:a8:07:df:45:7d: 56:2b:a7:93:1b:b4:62:c6:7e:89:14:b9:2a:9b:9b: 20:96:17:c0:20:2f:ed:6d:b6:f4:a2:3f:c8:ff:c6: 44:26:3f:cd:f6:27:d5:cf:84:01:59:4b:4a:ea:e8: b2:ce:6e:8f:31:23:3b:b0:fd:b1:d6:12:b9:81:bf: 04:b3:61:54:1a:24:0a:b0:07:2b:77:01:d5:74:dd: a4:ae:3b:88:aa:e6:2c:0f:33:61:46:ba:13:50:fc: 13:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CC:F3:4F:5E:73:6E:D6:D5:90:3B:99:C6:9D:F3:1C:91:1C:81:A0 X509v3 Authority Key Identifier: keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4e:98:0e:9d:62:77:3d:6f:27:83:bc:6d:1a:26:a1:73:ed: 9d:90:09:f5:c2:69:d2:73:47:a1:83:f2:50:0b:e0:d3:76:bd: 2e:00:36:b1:bf:68:a5:20:e2:7c:20:6b:99:5a:1e:5e:b6:6f: 1a:9f:a8:cc:3a:07:d1:e9:3f:ec:a0:20:66:69:cb:69:19:c6: a0:8b:4b:7d:53:86:67:0e:b1:d4:f5:ee:1d:db:d7:2a:9c:69: 93:22:41:1d:fc:37:dc:b9:d0:a7:fa:9d:1e:fc:b6:7b:2e:e4: 61:0f:b6:fd:98:c6:8a:fd:76:95:92:ca:a5:54:96:9e:b5:f7: e2:1d:a3:45:21:bb:d7:cd:a1:f3:35:b6:2b:07:75:6b:03:b4: b8:79:78:74:17:dd:07:c4:cf:71:96:e6:57:f8:10:77:76:e6: a9:c7:ee:77:86:d8:8b:47:c8:bb:03:cf:a8:42:54:6b:7c:b8: 4c:0c:29:82:19:7e:c0:40:9c:f5:ce:c0:6f:02:8e:74:e8:fd: d4:db:52:c7:97:f3:e6:94:f2:6a:b4:24:d5:6f:83:b8:94:69: 39:d4:58:70:2f:ba:10:ff:7f:3f:40:05:4d:09:79:23:e2:8e: 12:90:f5:fb:2a:8c:cb:8a:cb:2a:83:35:71:9b:1a:be:ab:48: ab:07:6f:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBABemnpxg7X2Di9pysymVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOTRmMDMwNGVlZGQzNjNjNjYyMmZkOTFjNTliMTA4NzFh YTMwNDQwHhcNMjUxMjIxMTMwMTIzWhcNMjUxMjIyMTMwMTIzWjAzMTEwLwYDVQQD EygwNmNjZjM0ZjVlNzM2ZWQ2ZDU5MDNiOTljNjlkZjMxYzkxMWM4MWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWfeKy7XkTXiUSPkRTW/7TSobWml XRble406TLplgVy+L03SQJIzvjzZ/DGDJ4nr92uIRnGm8foCFHspbvxXurjdTeKQ FEnEKMUYPJxiSQ5f3kzgrNSak1LzjmHeQF4gPW6hDiZABJtrFc8A31lp40l1/d9t awKnR8T1P/Xt9ENy0fDUhwKW0mmFjiunMWu6KojGYZ/sc40mRmmpaDKXqAffRX1W K6eTG7Rixn6JFLkqm5sglhfAIC/tbbb0oj/I/8ZEJj/N9ifVz4QBWUtK6uiyzm6P MSM7sP2x1hK5gb8Es2FUGiQKsAcrdwHVdN2krjuIquYsDzNhRroTUPwTxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbM809ec27W1ZA7mcad8xyRHIGgMB8GA1UdIwQY MBaAFLGU8DBO7dNjxmIv2RxZsQhxqjBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUt YWZiZGJkYWQ1OGE1LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUtYWZiZGJkYWQ1OGE1 LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbk6YDp1i dz1vJ4O8bRomoXPtnZAJ9cJp0nNHoYPyUAvg03a9LgA2sb9opSDifCBrmVoeXrZv Gp+ozDoH0ek/7KAgZmnLaRnGoItLfVOGZw6x1PXuHdvXKpxpkyJBHfw33LnQp/qd Hvy2ey7kYQ+2/ZjGiv12lZLKpVSWnrX34h2jRSG7182h8zW2Kwd1awO0uHl4dBfd B8TPcZbmV/gQd3bmqcfud4bYi0fIuwPPqEJUa3y4TAwpghl+wECc9c7AbwKOdOj9 1NtSx5fz5pTyarQk1W+DuJRpOdRYcC+6EP9/P0AFTQl5I+KOEpD1+yqMy4rLKoM1 cZsavqtIqwdvjg== -----END CERTIFICATE-----Generated at Sun Dec 21 16:14:11 2025 by rpki-client