This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft File: 10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json) Hash identifier: qFtKOgyik3iV5HDFmjO/kj8daiJWL+QzdYzd1SaEnZs= Subject key identifier: 70:63:9D:25:98:AF:A3:C2:0B:1F:BB:82:60:B1:64:43:1A:50:D1:77 Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84 Certificate issuer: /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184 Certificate serial: 019B5D89ABF20E58D421138066A4B260D1DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 02:01:02 +0000 Manifest this update: Sat 27 Dec 2025 02:01:02 +0000 Manifest next update: Sun 28 Dec 2025 02:01:02 +0000 Files and hashes: 1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: F1eZ4eft+FlEaB9/J7riQl8bOEJlPNf7jloJEWmlUQw=) 2: ukTm-wxzEJj-s_OEsyy8V9c_Wr4.roa (hash: fj9aOH6SJjD+OTCiFFLafnYvA1jJNlZv9daAJcHZMJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:ab:f2:0e:58:d4:21:13:80:66:a4:b2:60:d1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184 Validity Not Before: Dec 27 02:01:02 2025 GMT Not After : Dec 28 02:01:02 2025 GMT Subject: CN=70639d2598afa3c20b1fbb8260b164431a50d177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:08:19:24:81:27:aa:20:fd:4d:b8:de:f1: ce:1d:b1:07:0f:cd:93:a5:04:cd:64:45:c9:23:31: 6d:4a:e7:84:e1:65:a1:82:c7:7e:e2:2e:74:44:db: 0a:51:d7:09:5b:c6:9b:4b:bf:dc:23:e6:eb:f0:c9: dd:fa:e8:75:91:b8:61:8a:8f:ee:a8:b0:dc:6b:91: 81:6e:b9:49:de:a5:50:3d:64:6e:d4:91:65:aa:f0: 24:ea:ea:7c:28:2b:30:9d:74:24:41:25:99:7c:12: 6c:2a:f4:a6:23:61:03:d9:f6:6a:80:b3:38:e3:eb: d6:71:07:2b:74:c9:6e:06:79:c6:21:8a:35:75:22: a3:9a:86:ba:fa:9d:84:04:af:27:dc:a8:83:7a:08: 48:5d:5a:60:ea:e3:ae:b7:e1:37:88:a9:e8:ef:1e: bf:bc:fc:a3:ad:66:f8:25:87:f5:8d:40:ee:6f:a2: 4e:e5:14:14:1a:eb:6a:14:20:27:b0:2f:11:d2:4f: 48:7c:38:1a:e9:ce:f9:e7:86:b1:7d:81:1a:39:f6: 9b:a1:91:a3:b5:08:d2:2a:7e:7b:58:84:53:7e:2a: 53:08:3e:bc:23:5e:63:0a:bd:9a:10:88:6b:4a:64: 00:00:8e:c3:0a:27:ff:de:2f:85:5f:04:1f:43:cc: 88:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:63:9D:25:98:AF:A3:C2:0B:1F:BB:82:60:B1:64:43:1A:50:D1:77 X509v3 Authority Key Identifier: keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:57:a2:f9:34:84:89:df:07:70:39:91:c2:d9:93:5a:67:9a: 98:d0:35:a7:1b:03:f6:fb:b5:61:b9:6e:85:de:5d:dc:e0:48: ac:da:14:82:27:9e:2d:96:51:31:68:aa:67:07:71:67:e3:c1: fc:1a:ec:13:b0:47:35:fb:20:45:db:eb:31:a8:e3:a9:d8:09: aa:9f:50:dc:f0:90:36:32:54:8e:65:d2:06:b9:15:e5:26:ef: 6a:a4:b8:e5:a9:a1:a7:06:47:24:96:2a:c0:36:9a:bd:52:96: e2:8a:f6:f0:c6:51:24:c9:2a:13:be:95:8e:15:b5:17:a6:29: 46:0c:7c:58:53:28:af:77:c9:b9:01:b5:1b:ff:0b:c8:61:45: 7d:8e:02:a4:97:7f:42:94:ef:e9:8b:9a:04:53:bd:9f:a8:23: 45:5d:af:ca:4c:dd:1c:0e:51:74:b7:12:a0:8f:af:87:3a:9a: 76:c2:8c:ea:d8:6a:17:b3:1a:cf:bd:dc:20:96:0b:2f:81:93: 36:ac:bf:74:cc:60:d7:ea:7e:20:c1:ca:fd:3c:70:59:a4:b8: 46:e7:06:ef:fb:5d:61:54:ec:a9:d8:6b:cc:f6:c0:f2:be:3a: e0:77:aa:a6:e1:85:18:91:4b:6f:11:a2:97:9a:15:65:89:42: bb:f0:d4:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiavyDljUIROAZqSyYNHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NGNlOWQ5ZTE4YTJhOGEwNmNiNGQ5YjA4YjU5Y2Q3NmIy MjExODQwHhcNMjUxMjI3MDIwMTAyWhcNMjUxMjI4MDIwMTAyWjAzMTEwLwYDVQQD Eyg3MDYzOWQyNTk4YWZhM2MyMGIxZmJiODI2MGIxNjQ0MzFhNTBkMTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf8IGSSBJ6og/U243vHOHbEHD82T pQTNZEXJIzFtSueE4WWhgsd+4i50RNsKUdcJW8abS7/cI+br8Mnd+uh1kbhhio/u qLDca5GBbrlJ3qVQPWRu1JFlqvAk6up8KCswnXQkQSWZfBJsKvSmI2ED2fZqgLM4 4+vWcQcrdMluBnnGIYo1dSKjmoa6+p2EBK8n3KiDeghIXVpg6uOut+E3iKno7x6/ vPyjrWb4JYf1jUDub6JO5RQUGutqFCAnsC8R0k9IfDga6c7554axfYEaOfaboZGj tQjSKn57WIRTfipTCD68I15jCr2aEIhrSmQAAI7DCif/3i+FXwQfQ8yIwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBjnSWYr6PCCx+7gmCxZEMaUNF3MB8GA1UdIwQY MBaAFNdM6dnhiiqKBstNmwi1nNdrIhGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzct NjNiOTUyNDBkNzQ1LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lZDVjMWUtMmQ1Zi00MjIyLWJkYzctNjNiOTUyNDBkNzQ1 LzEvMTB6cDJlR0tLb29HeTAyYkNMV2MxMnNpRVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1ei+TSE id8HcDmRwtmTWmeamNA1pxsD9vu1Ybluhd5d3OBIrNoUgieeLZZRMWiqZwdxZ+PB /BrsE7BHNfsgRdvrMajjqdgJqp9Q3PCQNjJUjmXSBrkV5SbvaqS45amhpwZHJJYq wDaavVKW4or28MZRJMkqE76VjhW1F6YpRgx8WFMor3fJuQG1G/8LyGFFfY4CpJd/ QpTv6YuaBFO9n6gjRV2vykzdHA5RdLcSoI+vhzqadsKM6thqF7Maz73cIJYLL4GT Nqy/dMxg1+p+IMHK/TxwWaS4RucG7/tdYVTsqdhrzPbA8r464HeqpuGFGJFLbxGi l5oVZYlCu/DUhg== -----END CERTIFICATE-----Generated at Sat Dec 27 07:46:52 2025 by rpki-client