This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft File: _zEXrp1q4OHko4t0mrv52eSSwoU.mft (raw, json) Hash identifier: wGrOBVIZHQdL+HNElt60rrczkbHWvWhPCZ3klPEhrQU= Subject key identifier: 1A:B2:B8:1C:EE:F0:27:D4:BE:DC:C2:96:DC:4A:AB:3D:11:B2:F7:9C Authority key identifier: FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85 Certificate issuer: /CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285 Certificate serial: 019B6AD8E4350B6EC26EB79766004EE36ABE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft Manifest number: 034A Signing time: Mon 29 Dec 2025 16:02:37 +0000 Manifest this update: Mon 29 Dec 2025 16:02:37 +0000 Manifest next update: Tue 30 Dec 2025 16:02:37 +0000 Files and hashes: 1: _zEXrp1q4OHko4t0mrv52eSSwoU.crl (hash: UspLLZCHO/H1q+EwiyMHD77QGAliXaQ+G1vF5DbFd1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 16:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d8:e4:35:0b:6e:c2:6e:b7:97:66:00:4e:e3:6a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285 Validity Not Before: Dec 29 16:02:37 2025 GMT Not After : Dec 30 16:02:37 2025 GMT Subject: CN=1ab2b81ceef027d4bedcc296dc4aab3d11b2f79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:65:7b:48:df:1c:9a:48:65:cd:1b:93:11: 4e:8a:e4:c6:ca:8a:dc:ff:d9:40:6e:05:c9:1d:09: 30:21:7d:6e:aa:c3:c4:8d:72:e9:19:87:f3:64:0a: 2f:6d:59:49:b7:5e:5e:68:1d:45:58:f6:4c:da:e7: 97:20:22:f2:3e:f7:05:78:8a:7e:9e:33:a2:9c:26: 92:c3:d7:84:68:90:64:bc:de:c1:5e:db:8c:a5:84: 81:f7:67:45:f7:c7:cf:89:5a:9b:1c:ca:73:4b:46: 06:3b:2e:be:8f:00:a9:9e:6d:b0:8f:91:2a:cc:9e: 6a:91:4a:a6:84:29:44:65:2a:53:4b:1f:a1:ea:f8: ee:2d:45:ce:5c:46:14:fa:63:e8:19:db:c4:14:36: 4b:20:0c:cb:a1:08:52:cf:6a:dc:dd:e4:11:ea:29: 84:dd:6e:f4:51:0e:f1:ce:fa:69:1b:3a:15:69:db: a7:10:e8:b0:a9:03:0c:04:cd:8c:29:ac:1b:99:03: 1c:d2:40:80:e5:1d:89:ad:d0:55:55:ac:89:33:39: 1d:3a:52:ab:1f:6f:0a:41:d1:9e:4a:28:3b:6a:0b: c8:cd:17:fc:0f:5c:18:97:7f:33:29:64:9a:35:22: 62:b7:a8:6b:4e:0c:6a:70:f4:78:a3:a5:d5:74:3f: 6c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B2:B8:1C:EE:F0:27:D4:BE:DC:C2:96:DC:4A:AB:3D:11:B2:F7:9C X509v3 Authority Key Identifier: keyid:FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:78:22:b0:f2:90:dc:6e:7f:fa:7c:bf:09:c2:eb:71:58:91: 21:24:20:12:fa:5b:b8:93:92:a9:0c:7c:f1:cf:91:81:15:ed: 24:ec:08:5c:01:66:69:b1:af:5c:44:98:c9:a4:0c:cd:11:2a: 56:3b:c6:f1:08:1f:cf:09:db:9c:2a:d8:65:aa:62:2f:84:bd: 8c:a7:7d:bd:c8:16:da:e2:62:5a:de:da:44:89:da:a9:fb:0d: aa:37:31:10:e8:41:97:a2:6f:8e:1e:31:8c:f8:80:0e:c1:fd: 69:b9:2d:2b:8a:3f:c2:e9:58:1a:d8:6b:02:1e:56:aa:64:84: 11:9c:8a:df:47:56:63:64:93:24:03:67:ba:c4:6d:ac:81:09: ab:c6:91:84:a8:fa:4a:6d:be:cd:f9:94:6b:23:d8:41:0e:be: 3c:e4:8d:46:64:fc:10:14:75:a7:0c:10:66:79:7f:85:5b:66: c3:99:f4:7a:26:14:1b:08:dd:a3:eb:a0:7b:3a:a4:34:80:c2: 9d:e0:45:02:e2:15:e6:30:fd:15:7e:1a:2b:73:fe:aa:ae:68: ca:7b:cc:91:0f:f8:ba:ab:8d:86:f7:31:36:fa:80:ab:fd:84: 24:b6:c6:86:2e:b4:c7:fe:17:aa:a2:74:f0:78:91:4a:eb:ba: 40:dd:7f:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq2OQ1C27CbreXZgBO42q+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzExN2FlOWQ2YWUwZTFlNGEzOGI3NDlhYmJmOWQ5ZTQ5 MmMyODUwHhcNMjUxMjI5MTYwMjM3WhcNMjUxMjMwMTYwMjM3WjAzMTEwLwYDVQQD EygxYWIyYjgxY2VlZjAyN2Q0YmVkY2MyOTZkYzRhYWIzZDExYjJmNzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoNle0jfHJpIZc0bkxFOiuTGyorc /9lAbgXJHQkwIX1uqsPEjXLpGYfzZAovbVlJt15eaB1FWPZM2ueXICLyPvcFeIp+ njOinCaSw9eEaJBkvN7BXtuMpYSB92dF98fPiVqbHMpzS0YGOy6+jwCpnm2wj5Eq zJ5qkUqmhClEZSpTSx+h6vjuLUXOXEYU+mPoGdvEFDZLIAzLoQhSz2rc3eQR6imE 3W70UQ7xzvppGzoVadunEOiwqQMMBM2MKawbmQMc0kCA5R2JrdBVVayJMzkdOlKr H28KQdGeSig7agvIzRf8D1wYl38zKWSaNSJit6hrTgxqcPR4o6XVdD9sBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqyuBzu8CfUvtzCltxKqz0RsvecMB8GA1UdIwQY MBaAFP8xF66dauDh5KOLdJq7+dnkksKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pFWHJwMXE0T0hrbzR0MG1ydjUyZVNTd29VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mZmU3MmEtNWNiYi00MmZlLWExYmIt NDcyYmUzZTdjOGQ0LzEvX3pFWHJwMXE0T0hrbzR0MG1ydjUyZVNTd29VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mZmU3MmEtNWNiYi00MmZlLWExYmItNDcyYmUzZTdjOGQ0 LzEvX3pFWHJwMXE0T0hrbzR0MG1ydjUyZVNTd29VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOngisPKQ 3G5/+ny/CcLrcViRISQgEvpbuJOSqQx88c+RgRXtJOwIXAFmabGvXESYyaQMzREq VjvG8QgfzwnbnCrYZapiL4S9jKd9vcgW2uJiWt7aRInaqfsNqjcxEOhBl6Jvjh4x jPiADsH9abktK4o/wulYGthrAh5WqmSEEZyK30dWY2STJANnusRtrIEJq8aRhKj6 Sm2+zfmUayPYQQ6+POSNRmT8EBR1pwwQZnl/hVtmw5n0eiYUGwjdo+ugezqkNIDC neBFAuIV5jD9FX4aK3P+qq5oynvMkQ/4uquNhvcxNvqAq/2EJLbGhi60x/4XqqJ0 8HiRSuu6QN1/xw== -----END CERTIFICATE-----Generated at Tue Dec 30 01:29:43 2025 by rpki-client