This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft File: _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json) Hash identifier: 9njLn9qfjvLjoDdyAlEL0rRwcIxRf/tVWxikI8eqcf8= Subject key identifier: 56:1E:43:A7:E8:1B:2C:89:F3:86:C9:56:71:D0:CD:88:8D:B5:9B:E9 Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa Certificate serial: 019B46276858AD8141CAA408B552EA6FFDC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 13:02:26 +0000 Manifest this update: Mon 22 Dec 2025 13:02:26 +0000 Manifest next update: Tue 23 Dec 2025 13:02:26 +0000 Files and hashes: 1: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: kBt1xYOV+ha2d5eiUI9HNAUxoXu3e2UsR56FTGTZYLA=) 2: hb6ryi0zlarGbicwA660cAdO1uU.roa (hash: npI6mlOfecW2btMEPci2EHiqJhnGF4s0rXnIs0wQ4wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:68:58:ad:81:41:ca:a4:08:b5:52:ea:6f:fd:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa Validity Not Before: Dec 22 13:02:26 2025 GMT Not After : Dec 23 13:02:26 2025 GMT Subject: CN=561e43a7e81b2c89f386c95671d0cd888db59be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:84:49:f3:95:fc:78:12:fb:80:8e:6f:39:20: 0c:2b:9a:a7:97:7a:04:95:ff:a5:a9:06:67:f4:34: 67:16:15:34:f1:7e:87:66:cf:e9:10:9c:f3:2b:82: 32:cc:88:f4:4d:63:e9:78:7e:f6:de:2b:83:68:20: 84:be:e3:66:d9:69:d8:99:1f:4a:25:a9:94:22:16: 56:f7:71:99:97:e8:33:bc:2f:28:c7:b2:2e:7e:2b: b9:97:5a:51:6c:45:0a:2c:c8:a3:22:61:c6:df:b6: dd:86:ae:b5:bb:93:9e:d7:43:86:9a:18:69:ca:60: 54:7c:6d:46:e9:c2:27:4e:2f:c8:46:71:a2:39:64: 07:b7:68:41:6d:06:6e:6a:5d:f1:29:90:e2:e9:10: 55:ae:c8:51:18:42:d6:7e:46:24:1a:6c:c0:ad:2d: 44:1f:11:98:01:b3:b5:db:a9:ea:5f:c7:8f:1c:54: ba:e8:14:af:b1:01:52:19:c6:7e:03:1a:7a:13:c3: 4d:a0:3d:5a:8f:f8:88:fb:2d:0f:00:89:c4:ea:58: 69:26:9c:ce:96:a8:19:91:36:b8:47:5e:b9:21:8d: 87:f7:f7:f7:5a:68:08:43:e3:98:f5:49:a0:90:0f: 12:18:d4:20:0b:99:8c:49:54:5b:da:d8:00:cf:46: 27:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1E:43:A7:E8:1B:2C:89:F3:86:C9:56:71:D0:CD:88:8D:B5:9B:E9 X509v3 Authority Key Identifier: keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5d:35:7e:1b:1b:14:38:ba:db:27:f4:ec:d4:8b:2d:13:04: 68:ef:2a:36:53:c7:30:35:78:f9:86:db:04:c0:0b:36:3d:97: c2:a5:1b:3a:67:53:53:ac:8e:4d:ab:17:95:6f:17:96:0e:a7: bf:e8:67:bc:c9:21:d3:9b:00:a8:c7:5b:f8:55:10:fa:92:4a: e8:2b:db:c1:07:c6:31:c8:9c:c1:5b:77:0e:18:b8:86:1e:e4: 3c:ed:01:13:91:16:ed:d7:7a:13:f5:8d:be:b7:cd:e7:3a:d5: 4d:98:b0:60:da:73:e8:dc:c7:c0:b3:06:49:b1:dd:eb:ee:6d: 59:92:b1:a2:e7:e7:80:2d:17:23:18:95:7d:e9:05:85:6f:a6: ad:2b:60:00:cf:a8:25:1c:6e:68:c3:34:4d:60:9a:a0:51:31: 6f:1b:23:18:b5:0e:d8:dc:95:9d:ba:7b:46:4e:5d:1e:57:b8: 0e:e8:75:dc:99:69:ad:6c:bb:73:00:90:94:66:77:f3:7f:33: 74:99:da:60:f8:a0:df:38:7a:0d:1f:cc:ed:92:5f:fb:72:99: a3:ba:c0:a0:c0:06:5d:b9:18:37:50:50:65:4d:dc:8e:09:3a: 17:5f:7a:3b:d2:fa:dc:d7:23:04:53:b1:30:8c:ea:42:cc:e9: 86:55:ca:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ2hYrYFByqQItVLqb/3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOWY3ZGM1MDk1YWJkYjQ0NWQxODk4NTdkMzEwMWE4YWVl MjlkZmEwHhcNMjUxMjIyMTMwMjI2WhcNMjUxMjIzMTMwMjI2WjAzMTEwLwYDVQQD Eyg1NjFlNDNhN2U4MWIyYzg5ZjM4NmM5NTY3MWQwY2Q4ODhkYjU5YmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9oRJ85X8eBL7gI5vOSAMK5qnl3oE lf+lqQZn9DRnFhU08X6HZs/pEJzzK4IyzIj0TWPpeH723iuDaCCEvuNm2WnYmR9K JamUIhZW93GZl+gzvC8ox7Iufiu5l1pRbEUKLMijImHG37bdhq61u5Oe10OGmhhp ymBUfG1G6cInTi/IRnGiOWQHt2hBbQZual3xKZDi6RBVrshRGELWfkYkGmzArS1E HxGYAbO126nqX8ePHFS66BSvsQFSGcZ+Axp6E8NNoD1aj/iI+y0PAInE6lhpJpzO lqgZkTa4R165IY2H9/f3WmgIQ+OY9UmgkA8SGNQgC5mMSVRb2tgAz0YnhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYeQ6foGyyJ84bJVnHQzYiNtZvpMB8GA1UdIwQY MBaAFP2ffcUJWr20RdGJhX0xAaiu4p36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC81YjYwZTUtODIzNy00NjI4LTk0NmIt MjIyOWNkODNmM2U1LzEvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC81YjYwZTUtODIzNy00NjI4LTk0NmItMjIyOWNkODNmM2U1 LzEvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFV01fhsb FDi62yf07NSLLRMEaO8qNlPHMDV4+YbbBMALNj2XwqUbOmdTU6yOTasXlW8Xlg6n v+hnvMkh05sAqMdb+FUQ+pJK6CvbwQfGMcicwVt3Dhi4hh7kPO0BE5EW7dd6E/WN vrfN5zrVTZiwYNpz6NzHwLMGSbHd6+5tWZKxoufngC0XIxiVfekFhW+mrStgAM+o JRxuaMM0TWCaoFExbxsjGLUO2NyVnbp7Rk5dHle4Duh13JlprWy7cwCQlGZ3838z dJnaYPig3zh6DR/M7ZJf+3KZo7rAoMAGXbkYN1BQZU3cjgk6F196O9L63NcjBFOx MIzqQszphlXKPQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:43:42 2025 by rpki-client