This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json) Hash identifier: vC3KZjVLyfFfv/y5CLyBx7bTcNUFd3La3V5H7MfN0YA= Subject key identifier: D6:E7:79:BB:AB:A2:3C:C7:25:C1:6F:0A:96:C4:E9:AC:15:CA:F8:E4 Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40 Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40 Certificate serial: 019B5F427DBE631531B27BC7F8A0007D5BCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft Manifest number: 0DF8 Signing time: Sat 27 Dec 2025 10:02:31 +0000 Manifest this update: Sat 27 Dec 2025 10:02:31 +0000 Manifest next update: Sun 28 Dec 2025 10:02:31 +0000 Files and hashes: 1: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (hash: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=) 2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: vEUKla9jIFcRuAlfmoZ6trzJ3Ma88xEDNzZ4sP0AFkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:42:7d:be:63:15:31:b2:7b:c7:f8:a0:00:7d:5b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40 Validity Not Before: Dec 27 10:02:31 2025 GMT Not After : Dec 28 10:02:31 2025 GMT Subject: CN=d6e779bbaba23cc725c16f0a96c4e9ac15caf8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:3c:83:65:7e:82:e3:c2:ad:0b:bf:4e:45: ab:eb:c4:14:0f:16:f9:bf:b3:31:0b:7e:e6:37:b6: 56:57:42:54:ca:70:94:69:eb:6a:75:99:2d:36:17: e3:b0:5b:cd:b9:7f:7f:3c:ac:03:c7:9d:1d:7e:d2: ec:60:5f:77:fb:4e:44:b6:f7:fe:15:1c:59:45:dc: a5:15:63:61:99:f2:a9:0f:04:69:e9:6e:40:62:a4: ef:c1:3c:f5:bd:62:cd:90:97:00:30:af:d4:c8:66: 8c:b5:47:d0:c2:4c:bf:5f:8b:d8:e6:62:89:2d:aa: c6:ed:3e:2e:b4:96:92:22:07:78:ca:94:11:dd:c6: b5:3e:22:fb:b8:ef:fe:30:fa:f4:a6:93:f8:64:3b: 04:26:e2:fb:3c:9b:a0:aa:1c:85:90:4c:2e:2d:3f: 46:c7:fa:64:cf:26:33:f5:79:3b:49:d2:15:7e:38: 3a:00:26:92:c8:38:0d:15:0a:4d:d8:73:17:36:fc: 94:89:a2:10:e4:1b:69:af:88:52:f4:e3:ca:ce:5c: a9:58:66:e2:a7:de:02:5d:67:99:62:9f:8b:8d:84: 9b:93:a6:ba:f2:9c:06:5a:5b:c6:f1:8f:39:92:1c: 0e:c1:de:f5:42:fc:7d:47:f9:c8:71:91:ed:22:ee: b0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E7:79:BB:AB:A2:3C:C7:25:C1:6F:0A:96:C4:E9:AC:15:CA:F8:E4 X509v3 Authority Key Identifier: keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e4:7b:6d:f2:d4:81:79:16:6e:5b:26:5b:7c:43:fe:9f:17: cf:8f:5e:e0:e1:2a:c5:39:9d:01:ff:6a:a7:bb:9f:fa:2a:20: 00:19:7d:2a:6e:01:82:50:9c:8b:a7:88:b8:61:dd:ed:3c:75: 2f:31:9e:77:8c:40:e9:aa:4b:0f:18:4d:bb:9b:43:1c:f5:15: 15:bf:e9:d4:f0:e4:7e:cc:94:ce:a1:0f:43:c2:b6:07:9a:f9: e3:6a:b0:79:d8:26:05:96:3c:eb:34:22:3c:98:4c:6b:00:be: a1:d6:22:a1:ff:94:1d:6d:06:0c:60:82:0e:50:6a:0f:6d:4b: 19:13:4f:e5:6f:73:e0:8f:bb:3b:75:57:1a:42:bf:c1:b0:59: 10:2f:1a:cf:fe:9d:97:1c:cd:af:54:af:d2:ca:a9:bd:fb:ce: 8d:d4:1c:2c:b1:d4:4d:e9:2e:3e:0f:7d:52:82:92:9b:80:77: 27:7f:a1:27:7d:90:99:60:10:47:88:ad:37:1a:51:67:93:b6: ab:08:06:af:c1:ca:29:2f:9f:72:af:1e:01:9f:8b:81:76:2e: 2c:34:01:8e:d9:27:d4:e4:00:ea:b2:d3:c6:5c:69:86:e3:8c: 1f:54:a5:79:c1:58:d2:2d:35:2b:9b:22:00:b6:b0:7b:52:02: 55:5c:0a:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQn2+YxUxsnvH+KAAfVvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMDA3MmRhOTgxMTQxOTNjMTA0Y2UxYTYwOWQ5MmE2OTc2 ZjljNDAwHhcNMjUxMjI3MTAwMjMxWhcNMjUxMjI4MTAwMjMxWjAzMTEwLwYDVQQD EyhkNmU3NzliYmFiYTIzY2M3MjVjMTZmMGE5NmM0ZTlhYzE1Y2FmOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCY8g2V+guPCrQu/TkWr68QUDxb5 v7MxC37mN7ZWV0JUynCUaetqdZktNhfjsFvNuX9/PKwDx50dftLsYF93+05Etvf+ FRxZRdylFWNhmfKpDwRp6W5AYqTvwTz1vWLNkJcAMK/UyGaMtUfQwky/X4vY5mKJ LarG7T4utJaSIgd4ypQR3ca1PiL7uO/+MPr0ppP4ZDsEJuL7PJugqhyFkEwuLT9G x/pkzyYz9Xk7SdIVfjg6ACaSyDgNFQpN2HMXNvyUiaIQ5Btpr4hS9OPKzlypWGbi p94CXWeZYp+LjYSbk6a68pwGWlvG8Y85khwOwd71Qvx9R/nIcZHtIu6wcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbneburojzHJcFvCpbE6awVyvjkMB8GA1UdIwQY MBaAFMwActqYEUGTwQTOGmCdkqaXb5xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQt YzBlYzhiOTVhYjc3LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQtYzBlYzhiOTVhYjc3 LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeR7bfLU gXkWblsmW3xD/p8Xz49e4OEqxTmdAf9qp7uf+iogABl9Km4BglCci6eIuGHd7Tx1 LzGed4xA6apLDxhNu5tDHPUVFb/p1PDkfsyUzqEPQ8K2B5r542qwedgmBZY86zQi PJhMawC+odYiof+UHW0GDGCCDlBqD21LGRNP5W9z4I+7O3VXGkK/wbBZEC8az/6d lxzNr1Sv0sqpvfvOjdQcLLHUTekuPg99UoKSm4B3J3+hJ32QmWAQR4itNxpRZ5O2 qwgGr8HKKS+fcq8eAZ+LgXYuLDQBjtkn1OQA6rLTxlxphuOMH1SlecFY0i01K5si ALawe1ICVVwKkQ== -----END CERTIFICATE-----Generated at Sat Dec 27 15:55:47 2025 by rpki-client