This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json) Hash identifier: bVCcOFEawp2FsK7IXmF1cKTeGhyYkpDLA8iCiEddkV8= Subject key identifier: 28:05:E7:E3:9B:2F:4A:A2:9A:4E:BC:E6:D6:E7:D3:41:5F:11:D8:35 Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3 Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3 Certificate serial: 019B39462964229695AC1488C405DBBE843B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft Manifest number: 07BE Signing time: Sat 20 Dec 2025 01:00:57 +0000 Manifest this update: Sat 20 Dec 2025 01:00:57 +0000 Manifest next update: Sun 21 Dec 2025 01:00:57 +0000 Files and hashes: 1: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (hash: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=) 2: tkPBYkbqHBQBIn0BHV-X-SO1suM.roa (hash: UbAqMwZmfegZ1hqELkSkDP8x8h7o/IponAOjYN5W65Y=) 3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: eAm35wtvgrOeYzx64KmXdz02UGZFg3Sc52e5LP5nm8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:29:64:22:96:95:ac:14:88:c4:05:db:be:84:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3 Validity Not Before: Dec 20 01:00:57 2025 GMT Not After : Dec 21 01:00:57 2025 GMT Subject: CN=2805e7e39b2f4aa29a4ebce6d6e7d3415f11d835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b4:27:bc:99:c8:2b:aa:81:3d:40:54:6b:65: 8d:73:84:39:43:82:31:2c:da:9f:b5:f3:90:13:72: a4:31:6f:b8:b7:34:03:48:c0:d4:02:15:5e:3f:18: 4b:63:6b:a0:11:ac:50:e7:e9:a8:5a:7b:53:8d:0f: 5c:35:22:67:73:4e:b9:67:c2:e6:0c:13:18:6c:7e: e3:b5:3d:8e:28:56:e5:15:60:02:c4:ae:41:32:c8: 31:8d:33:4b:4c:54:a1:a2:2b:9c:44:1d:e9:29:2a: e7:f4:64:0f:80:4a:ba:9a:e6:f9:38:c9:7c:35:03: a3:16:65:aa:74:d9:a8:2c:84:a1:46:64:8e:6d:74: 45:2c:18:5c:a6:25:6c:7e:68:5a:ca:1c:04:cc:0b: 08:30:96:d0:2b:1c:69:39:a7:e1:30:db:2c:62:4d: 7e:89:b7:de:8e:4b:aa:8f:77:ce:3a:29:cc:98:9b: 37:e5:48:03:e8:52:c3:20:00:c9:74:28:78:86:30: 10:7e:c9:ff:54:f9:41:e9:fa:ae:fa:8f:87:0a:19: 50:91:73:99:55:26:03:59:a7:85:cf:ff:7d:66:9f: 0a:ca:9e:f2:02:1f:74:ee:24:99:38:85:9f:c3:01: f1:f9:2e:9d:fe:18:f0:57:04:b5:0d:ac:ad:c1:d6: 2c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:05:E7:E3:9B:2F:4A:A2:9A:4E:BC:E6:D6:E7:D3:41:5F:11:D8:35 X509v3 Authority Key Identifier: keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:af:0d:35:ce:2d:a2:c1:23:cb:6b:fe:57:8e:88:5f:d0:76: ae:f0:09:93:60:62:58:60:cd:f8:f8:85:5b:3b:4c:22:55:2c: e6:a1:7b:f7:49:e3:76:ae:31:73:99:3f:27:78:b4:ca:dc:1c: 92:fa:a3:dc:ce:6d:fa:c4:e2:b3:e8:03:23:c6:03:a0:26:eb: 0e:92:9b:f3:47:d3:b5:6b:46:ae:a8:af:0f:28:94:09:00:3a: 23:e0:5d:75:ae:d9:fb:8a:76:f3:e5:25:63:41:ec:7e:be:01: bc:d4:92:35:7d:ef:fe:70:d0:bb:9a:76:74:f8:ce:d7:e5:1d: ee:88:a3:7e:ce:4b:ba:54:f4:bb:45:ed:fd:db:21:8d:ba:b7: 66:54:a8:47:47:94:86:f7:23:f5:25:fa:a3:c7:ae:f1:88:e7: d2:ac:2d:c4:e5:7c:fe:2c:89:51:a3:1c:07:92:e0:b6:cf:dd: 1e:cb:15:4d:79:a2:bd:d3:91:c3:11:0d:1e:17:99:e4:65:05: e1:a3:31:d5:4c:bf:1a:a6:cf:1e:b7:53:7f:72:db:63:50:39: f6:57:86:76:28:3c:cb:d4:dc:2a:49:ff:c9:23:84:11:04:6c: cc:d1:5e:a4:cc:73:bf:57:1b:c7:ce:e9:9c:4d:bb:e2:62:50: e0:87:1f:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RilkIpaVrBSIxAXbvoQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZWZmZmMxNWE4M2EzOGJkZGE4Y2ZlMTIwYzMzNTI2N2Rj ZTUwZjMwHhcNMjUxMjIwMDEwMDU3WhcNMjUxMjIxMDEwMDU3WjAzMTEwLwYDVQQD EygyODA1ZTdlMzliMmY0YWEyOWE0ZWJjZTZkNmU3ZDM0MTVmMTFkODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bQnvJnIK6qBPUBUa2WNc4Q5Q4Ix LNqftfOQE3KkMW+4tzQDSMDUAhVePxhLY2ugEaxQ5+moWntTjQ9cNSJnc065Z8Lm DBMYbH7jtT2OKFblFWACxK5BMsgxjTNLTFShoiucRB3pKSrn9GQPgEq6mub5OMl8 NQOjFmWqdNmoLIShRmSObXRFLBhcpiVsfmhayhwEzAsIMJbQKxxpOafhMNssYk1+ ibfejkuqj3fOOinMmJs35UgD6FLDIADJdCh4hjAQfsn/VPlB6fqu+o+HChlQkXOZ VSYDWaeFz/99Zp8Kyp7yAh907iSZOIWfwwHx+S6d/hjwVwS1DaytwdYsOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgF5+ObL0qimk685tbn00FfEdg1MB8GA1UdIwQY MBaAFMzv/8Fag6OL3ajP4SDDNSZ9zlDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTct NGJlYjVkZmYxNzAxLzEvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTctNGJlYjVkZmYxNzAx LzEvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATa8NNc4t osEjy2v+V46IX9B2rvAJk2BiWGDN+PiFWztMIlUs5qF790njdq4xc5k/J3i0ytwc kvqj3M5t+sTis+gDI8YDoCbrDpKb80fTtWtGrqivDyiUCQA6I+Bdda7Z+4p28+Ul Y0Hsfr4BvNSSNX3v/nDQu5p2dPjO1+Ud7oijfs5LulT0u0Xt/dshjbq3ZlSoR0eU hvcj9SX6o8eu8Yjn0qwtxOV8/iyJUaMcB5Lgts/dHssVTXmivdORwxENHheZ5GUF 4aMx1Uy/GqbPHrdTf3LbY1A59leGdig8y9TcKkn/ySOEEQRszNFepMxzv1cbx87p nE274mJQ4Icf1g== -----END CERTIFICATE-----Generated at Sat Dec 20 02:51:37 2025 by rpki-client