This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json) Hash identifier: m1JbCwtqLGGCrZDrkTq0IPhDGOiDjr2D7X3oUGPJwmg= Subject key identifier: BA:A3:8C:BC:11:C3:83:98:DE:1F:64:0B:E4:D1:84:9E:1A:43:92:CE Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40 Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40 Certificate serial: 019B6EB45ED538B8549287F0932ABDCDDE04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft Manifest number: 0E00 Signing time: Tue 30 Dec 2025 10:01:13 +0000 Manifest this update: Tue 30 Dec 2025 10:01:13 +0000 Manifest next update: Wed 31 Dec 2025 10:01:13 +0000 Files and hashes: 1: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (hash: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=) 2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: fDws5oAS+seiB7cK2WrTZrbyHQ2ck3FaSUvDQC2T17w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 10:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:5e:d5:38:b8:54:92:87:f0:93:2a:bd:cd:de:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40 Validity Not Before: Dec 30 10:01:13 2025 GMT Not After : Dec 31 10:01:13 2025 GMT Subject: CN=baa38cbc11c38398de1f640be4d1849e1a4392ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:46:5e:a5:76:90:20:44:88:8e:2e:58:d1:f4: c3:f0:f8:a9:38:bf:ec:a7:c7:83:01:b2:58:04:c8: 2d:2b:4c:d3:de:2f:84:16:70:be:78:e4:28:34:37: 45:11:75:36:9b:8c:1e:91:16:00:57:6f:be:d5:af: e0:e8:99:2d:58:05:67:c0:91:c9:55:f0:a1:95:ae: af:6d:ae:2a:23:df:6d:19:9c:41:3a:66:3f:82:be: 6d:be:d7:9e:41:66:bd:40:b2:21:79:76:55:66:0a: 46:37:53:31:7a:29:8a:73:8c:e0:ee:46:b8:4e:f2: 86:7f:9f:a5:19:ab:d7:cc:9f:a8:e4:97:0d:22:e1: 2b:7c:a4:15:57:d8:45:c3:e3:99:2f:2b:68:97:9d: c7:12:d2:71:8b:14:8f:bb:18:d1:39:64:16:23:61: 24:04:b7:17:3e:eb:90:ce:99:4c:77:01:82:c4:7d: 2b:67:cf:13:05:42:ab:b7:d3:49:51:5e:81:1c:b2: 2a:88:d8:1a:d2:7d:77:e4:46:89:68:f2:74:1b:51: de:b6:c1:fc:38:2e:4e:76:3e:0f:62:ac:90:46:be: dd:f6:67:ff:73:e8:5a:5e:3a:98:1f:0b:7f:db:5d: 80:50:81:14:8e:26:ef:4e:b5:67:b5:43:1e:75:86: b3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A3:8C:BC:11:C3:83:98:DE:1F:64:0B:E4:D1:84:9E:1A:43:92:CE X509v3 Authority Key Identifier: keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:3e:ad:16:bf:fd:95:bc:6a:34:69:44:5c:af:0b:db:92:85: e0:c1:ec:c4:e6:de:2d:b1:88:e7:d8:d2:b6:30:e6:76:d4:eb: 2d:12:a3:19:84:8e:34:a1:97:59:23:9d:4c:e9:aa:61:35:71: 9e:b3:12:e9:5e:af:0d:94:65:e5:ef:4e:4a:4f:6f:e1:27:86: 66:99:e9:03:a1:09:2c:9d:69:9e:96:20:a4:ca:ce:9a:96:6d: 25:08:4d:c0:a8:84:b5:ce:e6:71:3a:57:42:cd:c8:0d:ea:57: 6e:64:89:eb:c6:3c:ad:e9:16:96:ba:3b:88:fd:37:8e:ad:1a: 1d:d3:ef:cf:6a:4d:4b:15:62:04:08:2d:33:ca:aa:c2:b0:80: fc:29:18:ad:e8:b8:4f:86:1c:25:30:15:b5:bd:8b:fc:ee:ef: 45:de:38:da:6f:14:f4:8f:78:70:74:eb:fd:5c:0e:ab:79:b9: 60:d5:0b:83:63:63:77:ae:5a:7f:9b:71:2a:9f:98:37:c3:25: a6:c8:14:5e:0e:cc:c9:d5:28:9f:cf:7b:e7:4c:dd:b5:64:17: f0:11:47:67:9e:1a:f4:bd:51:0a:9a:51:ee:5b:28:82:44:46: dc:d7:03:ce:04:a6:ad:83:7a:e3:24:d0:c5:af:04:7a:c2:c0: 13:0d:90:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutF7VOLhUkofwkyq9zd4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMDA3MmRhOTgxMTQxOTNjMTA0Y2UxYTYwOWQ5MmE2OTc2 ZjljNDAwHhcNMjUxMjMwMTAwMTEzWhcNMjUxMjMxMTAwMTEzWjAzMTEwLwYDVQQD EyhiYWEzOGNiYzExYzM4Mzk4ZGUxZjY0MGJlNGQxODQ5ZTFhNDM5MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kZepXaQIESIji5Y0fTD8PipOL/s p8eDAbJYBMgtK0zT3i+EFnC+eOQoNDdFEXU2m4wekRYAV2++1a/g6JktWAVnwJHJ VfChla6vba4qI99tGZxBOmY/gr5tvteeQWa9QLIheXZVZgpGN1MxeimKc4zg7ka4 TvKGf5+lGavXzJ+o5JcNIuErfKQVV9hFw+OZLytol53HEtJxixSPuxjROWQWI2Ek BLcXPuuQzplMdwGCxH0rZ88TBUKrt9NJUV6BHLIqiNga0n135EaJaPJ0G1HetsH8 OC5Odj4PYqyQRr7d9mf/c+haXjqYHwt/212AUIEUjibvTrVntUMedYazKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqjjLwRw4OY3h9kC+TRhJ4aQ5LOMB8GA1UdIwQY MBaAFMwActqYEUGTwQTOGmCdkqaXb5xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQt YzBlYzhiOTVhYjc3LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQtYzBlYzhiOTVhYjc3 LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeT6tFr/9 lbxqNGlEXK8L25KF4MHsxObeLbGI59jStjDmdtTrLRKjGYSONKGXWSOdTOmqYTVx nrMS6V6vDZRl5e9OSk9v4SeGZpnpA6EJLJ1pnpYgpMrOmpZtJQhNwKiEtc7mcTpX Qs3IDepXbmSJ68Y8rekWlro7iP03jq0aHdPvz2pNSxViBAgtM8qqwrCA/CkYrei4 T4YcJTAVtb2L/O7vRd442m8U9I94cHTr/VwOq3m5YNULg2Njd65af5txKp+YN8Ml psgUXg7MydUon89750zdtWQX8BFHZ54a9L1RCppR7lsogkRG3NcDzgSmrYN64yTQ xa8EesLAEw2Qrg== -----END CERTIFICATE-----Generated at Tue Dec 30 18:40:08 2025 by rpki-client