This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft File: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft (raw, json) Hash identifier: cDIjIORflNpUUPQ8mVKERScQfuSB/phzMV3xNSnB3LU= Subject key identifier: DD:C5:6E:40:FE:61:F5:12:AF:73:63:99:7A:4C:DD:E8:DF:A6:BB:84 Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F Certificate issuer: /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f Certificate serial: 019B52CEEA8DF240CCE9AA6C11CE3B1A0911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft Manifest number: 179C Signing time: Thu 25 Dec 2025 00:00:50 +0000 Manifest this update: Thu 25 Dec 2025 00:00:50 +0000 Manifest next update: Fri 26 Dec 2025 00:00:50 +0000 Files and hashes: 1: 35bIez4DE4f8IctL5QEgdASB-4Y.roa (hash: TCPS2vFGt9j3BHs+mf2M0eQppw/ELA+Rm7h4Oyv00F8=) 2: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl (hash: vFPTcdOlUDQPmEuUvyS/KCuBdeMtKGFovuE8rTxfuP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:ea:8d:f2:40:cc:e9:aa:6c:11:ce:3b:1a:09:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f Validity Not Before: Dec 25 00:00:50 2025 GMT Not After : Dec 26 00:00:50 2025 GMT Subject: CN=ddc56e40fe61f512af7363997a4cdde8dfa6bb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7e:61:37:8f:aa:98:59:82:9f:c5:aa:36:5f: 16:e8:79:3c:bd:ec:f2:c3:cb:03:c0:06:57:f9:b0: 02:6b:67:9f:44:ec:db:ed:25:32:53:cc:4a:ab:32: 02:9d:35:1d:e0:96:11:56:45:19:0b:ed:2c:56:70: 7c:a5:04:00:09:21:97:85:bc:4e:97:7d:33:57:f0: 6d:bc:f1:1b:c0:af:e1:c5:b2:dc:2f:40:a8:ff:85: c3:ed:33:e0:b4:2e:1d:bc:48:cf:aa:c8:b0:c1:a9: 6b:ab:d8:dd:6d:32:67:db:77:40:6d:84:ac:fd:67: fd:ca:0a:d5:60:2a:10:bc:15:93:59:41:06:c6:cb: 20:2b:ad:09:ce:86:a4:75:9c:c7:a7:4f:03:a6:cc: d7:69:94:76:d7:2a:5f:bd:a5:4b:ea:8e:9e:32:8a: 24:76:ce:10:71:47:e2:bc:48:3f:31:4f:d3:2e:fd: 93:d4:ce:f6:9c:4b:b0:dc:5b:87:f6:3d:20:36:a1: 8b:13:4d:b1:48:df:a5:07:8e:1f:4c:70:11:cb:36: 83:52:3a:1d:4b:70:aa:b3:fc:aa:33:27:03:e2:f8: 50:26:1d:2d:a8:b9:96:87:4c:ac:02:68:bc:98:c1: 61:4d:7c:30:cd:02:56:5b:f3:22:55:ce:b9:6b:35: 3b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C5:6E:40:FE:61:F5:12:AF:73:63:99:7A:4C:DD:E8:DF:A6:BB:84 X509v3 Authority Key Identifier: keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:26:fc:5f:85:a2:f0:f0:09:18:92:fd:dc:94:73:cd:bd:52: c2:00:0b:c4:dc:ae:88:a2:0e:48:1d:4f:85:e5:d7:1e:21:f3: 4b:96:00:ea:d9:ce:a7:82:88:bf:5c:0a:2f:5b:18:ba:2a:f1: b3:5a:98:9b:8b:20:f4:f3:4b:c1:c9:b9:03:70:6f:48:d7:30: 0b:92:7d:37:09:41:b2:98:28:3d:3e:d9:46:d5:01:12:01:30: 45:ae:be:a3:9f:06:8b:7f:f4:e9:a5:cc:ae:25:cb:7e:85:8f: f8:cd:99:c9:72:00:f4:1a:9c:c1:92:fa:fa:0c:1c:33:8b:e8: 00:d4:f9:0b:4b:a3:d2:ce:b2:32:e8:d1:30:1c:67:01:3d:c9: 19:fa:c6:22:95:bd:10:db:1c:14:37:e0:77:da:bf:45:7a:53: e1:13:1a:92:30:69:98:43:86:ea:5c:f6:04:71:65:a6:1c:6b: e1:88:1a:ac:04:16:d3:58:af:0d:0d:ed:d0:86:70:e8:46:50: fd:28:c8:2b:06:de:a3:e0:af:79:96:93:85:8e:a1:33:38:41: 2a:f6:79:f6:3c:9e:dd:3d:c0:79:55:8d:c4:14:b7:54:bc:22: 11:92:ec:d3:1c:5c:11:f8:27:b0:58:20:be:3d:5d:5b:ef:fa: 91:67:1a:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzuqN8kDM6apsEc47GgkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYmY5NWI0N2FiMmI5OWMyMjJiZmU1NDUyMWVmZDFhYjY3 ZDI2N2YwHhcNMjUxMjI1MDAwMDUwWhcNMjUxMjI2MDAwMDUwWjAzMTEwLwYDVQQD EyhkZGM1NmU0MGZlNjFmNTEyYWY3MzYzOTk3YTRjZGRlOGRmYTZiYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X5hN4+qmFmCn8WqNl8W6Hk8vezy w8sDwAZX+bACa2efROzb7SUyU8xKqzICnTUd4JYRVkUZC+0sVnB8pQQACSGXhbxO l30zV/BtvPEbwK/hxbLcL0Co/4XD7TPgtC4dvEjPqsiwwalrq9jdbTJn23dAbYSs /Wf9ygrVYCoQvBWTWUEGxssgK60JzoakdZzHp08DpszXaZR21ypfvaVL6o6eMook ds4QcUfivEg/MU/TLv2T1M72nEuw3FuH9j0gNqGLE02xSN+lB44fTHARyzaDUjod S3Cqs/yqMycD4vhQJh0tqLmWh0ysAmi8mMFhTXwwzQJWW/MiVc65azU7UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3FbkD+YfUSr3NjmXpM3ejfpruEMB8GA1UdIwQY MBaAFMy/lbR6srmcIiv+VFIe/Rq2fSZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekwtVnRIcXl1WndpS181VVVoNzlHclo5Sm44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMjliOTUtY2NiMy00NjdiLWFiN2Et YWM1YjYxNDkzZTAxLzEvekwtVnRIcXl1WndpS181VVVoNzlHclo5Sm44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hMjliOTUtY2NiMy00NjdiLWFiN2EtYWM1YjYxNDkzZTAx LzEvekwtVnRIcXl1WndpS181VVVoNzlHclo5Sm44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyb8X4Wi 8PAJGJL93JRzzb1SwgALxNyuiKIOSB1PheXXHiHzS5YA6tnOp4KIv1wKL1sYuirx s1qYm4sg9PNLwcm5A3BvSNcwC5J9NwlBspgoPT7ZRtUBEgEwRa6+o58Gi3/06aXM riXLfoWP+M2ZyXIA9BqcwZL6+gwcM4voANT5C0uj0s6yMujRMBxnAT3JGfrGIpW9 ENscFDfgd9q/RXpT4RMakjBpmEOG6lz2BHFlphxr4YgarAQW01ivDQ3t0IZw6EZQ /SjIKwbeo+CveZaThY6hMzhBKvZ59jye3T3AeVWNxBS3VLwiEZLs0xxcEfgnsFgg vj1dW+/6kWcalQ== -----END CERTIFICATE-----Generated at Thu Dec 25 05:02:33 2025 by rpki-client