This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft File: ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json) Hash identifier: Ek13I7LxAZ3TUX8CJCFO4i4etozzfU/Il4lzzwan/KY= Subject key identifier: 61:F5:F7:4E:ED:EE:17:DA:03:40:19:FE:1C:D3:53:B5:E6:D6:43:E9 Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73 Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173 Certificate serial: 019B4BF29A79E322A8786AC8B2CC9CACF513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft Manifest number: 1450 Signing time: Tue 23 Dec 2025 16:02:29 +0000 Manifest this update: Tue 23 Dec 2025 16:02:29 +0000 Manifest next update: Wed 24 Dec 2025 16:02:29 +0000 Files and hashes: 1: dVxPi-2BU6sN_zi1oxxkbrPcccA.roa (hash: LN+UvXmjMQ+4zMKoOoVm0IS9B+l8wMWW/8CPwN/xbVI=) 2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: ggXpWwyPCdQMyshXzuv69FSp5Fj4cG3/ei0WTmp7+cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:9a:79:e3:22:a8:78:6a:c8:b2:cc:9c:ac:f5:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce235c504019c504021e0662f70133b7ee733173 Validity Not Before: Dec 23 16:02:29 2025 GMT Not After : Dec 24 16:02:29 2025 GMT Subject: CN=61f5f74eedee17da034019fe1cd353b5e6d643e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:d7:84:0d:e2:78:f2:59:36:f9:9e:bc:5e: 07:a4:92:90:73:18:09:aa:1f:4f:5b:17:2d:3b:5f: 7e:dd:27:8e:39:7b:f9:0f:a6:b8:8f:e3:44:12:ec: 50:6d:c9:72:a3:99:53:07:ad:4b:90:01:d1:92:11: c5:60:5b:22:1d:dd:46:bf:0b:47:e5:5c:d5:51:8d: 98:cd:10:10:c7:1e:b0:7b:09:79:29:d7:8d:3e:76: b8:b8:d5:bb:83:af:27:d5:6f:1e:11:a5:1d:d3:b5: 5b:79:e9:c0:44:27:d3:f9:49:c1:2a:4d:35:09:56: be:70:df:64:89:03:1e:41:14:3d:db:ef:fa:6a:5b: 89:a0:b7:de:07:51:fb:f7:9b:e6:10:4e:77:fe:8a: 4a:0a:9c:8a:3f:50:d1:df:15:0b:f2:43:11:d0:cf: 5d:0b:fa:2b:ac:19:8c:4e:ee:34:b1:90:a4:a0:cf: e7:e3:fb:34:0e:9e:95:af:0d:5b:81:d0:f4:1e:aa: eb:88:f9:a3:16:db:66:73:23:28:3a:7e:9d:1a:93: 12:7c:dc:f9:21:be:07:27:33:f3:68:70:93:71:8d: bc:ed:9b:80:63:c4:81:36:ee:41:e0:ff:51:89:be: 6b:55:ff:68:6c:97:1e:87:38:b3:69:55:a0:d3:f4: b3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F5:F7:4E:ED:EE:17:DA:03:40:19:FE:1C:D3:53:B5:E6:D6:43:E9 X509v3 Authority Key Identifier: keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:81:3e:3d:94:86:39:25:0a:c1:6b:ab:c2:aa:94:ad:17:b4: 49:62:00:13:e1:d2:45:44:0b:83:68:bc:63:ef:25:17:2d:63: 21:c7:ad:18:ef:b6:11:a8:eb:2e:d5:c9:d1:61:d3:04:d6:2f: 6f:d2:67:a1:51:48:77:2b:b8:a7:2a:fd:0a:5c:c6:3f:2b:77: 90:d5:ec:96:7b:9e:22:7e:71:59:bb:65:ec:db:0a:fc:7b:1d: 3a:97:8c:25:36:16:7d:31:40:02:df:39:1e:cf:91:bb:bc:6f: 7d:38:b8:11:74:4b:9a:6d:14:95:e4:3f:22:70:f4:98:a4:6e: bd:ee:8a:14:d0:f4:50:74:62:2d:08:9d:ef:12:1f:d4:a2:d1: c3:bf:09:2e:75:e2:36:09:05:05:4f:4b:3f:a5:67:8b:70:70: fc:c5:58:a8:2e:f3:77:e8:16:d0:72:2c:cd:96:7a:bd:4b:53: 03:78:bc:f4:b1:b7:4f:33:4d:15:03:4d:a9:4f:11:a9:fb:ac: ae:22:22:56:fb:4d:3c:de:da:b7:ab:15:ce:33:bd:0a:a6:ff: e8:07:f3:41:5f:26:fe:ce:04:eb:d0:7a:6e:3e:e8:23:8f:ab: 23:d2:28:0b:95:0a:f4:5b:a0:7e:28:77:67:d6:82:f8:99:9e: ab:1d:7d:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8pp54yKoeGrIssycrPUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMjM1YzUwNDAxOWM1MDQwMjFlMDY2MmY3MDEzM2I3ZWU3 MzMxNzMwHhcNMjUxMjIzMTYwMjI5WhcNMjUxMjI0MTYwMjI5WjAzMTEwLwYDVQQD Eyg2MWY1Zjc0ZWVkZWUxN2RhMDM0MDE5ZmUxY2QzNTNiNWU2ZDY0M2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumPXhA3iePJZNvmevF4HpJKQcxgJ qh9PWxctO19+3SeOOXv5D6a4j+NEEuxQbclyo5lTB61LkAHRkhHFYFsiHd1GvwtH 5VzVUY2YzRAQxx6wewl5KdeNPna4uNW7g68n1W8eEaUd07VbeenARCfT+UnBKk01 CVa+cN9kiQMeQRQ92+/6aluJoLfeB1H795vmEE53/opKCpyKP1DR3xUL8kMR0M9d C/orrBmMTu40sZCkoM/n4/s0Dp6Vrw1bgdD0HqrriPmjFttmcyMoOn6dGpMSfNz5 Ib4HJzPzaHCTcY287ZuAY8SBNu5B4P9Rib5rVf9obJcehzizaVWg0/Sz7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGH1907t7hfaA0AZ/hzTU7Xm1kPpMB8GA1UdIwQY MBaAFM4jXFBAGcUEAh4GYvcBM7fuczFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlOY1VFQVp4UVFDSGdaaTl3RXp0LTV6TVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zOTEwOTItODJmMy00OGJjLWI0MjYt ZmNjNmQyN2Y0NDRmLzEvemlOY1VFQVp4UVFDSGdaaTl3RXp0LTV6TVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zOTEwOTItODJmMy00OGJjLWI0MjYtZmNjNmQyN2Y0NDRm LzEvemlOY1VFQVp4UVFDSGdaaTl3RXp0LTV6TVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYE+PZSG OSUKwWurwqqUrRe0SWIAE+HSRUQLg2i8Y+8lFy1jIcetGO+2EajrLtXJ0WHTBNYv b9JnoVFIdyu4pyr9ClzGPyt3kNXslnueIn5xWbtl7NsK/HsdOpeMJTYWfTFAAt85 Hs+Ru7xvfTi4EXRLmm0UleQ/InD0mKRuve6KFND0UHRiLQid7xIf1KLRw78JLnXi NgkFBU9LP6Vni3Bw/MVYqC7zd+gW0HIszZZ6vUtTA3i89LG3TzNNFQNNqU8Rqfus riIiVvtNPN7at6sVzjO9Cqb/6AfzQV8m/s4E69B6bj7oI4+rI9IoC5UK9Fugfih3 Z9aC+Jmeqx19sA== -----END CERTIFICATE-----Generated at Tue Dec 23 18:35:52 2025 by rpki-client