This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft File: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft (raw, json) Hash identifier: S3MGXYI0BqQIIK+hv8lP304g059YRpgHtXM/Arn+anw= Subject key identifier: 51:9A:58:3C:C6:F4:20:46:0F:7F:82:C5:6D:22:BF:46:43:E2:AF:85 Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40 Certificate issuer: /CN=719e59b5017bfe634411949eff2d70ba0a07c540 Certificate serial: 019B39B3BAEC4B6849A6A1B08F390BFAB0A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft Manifest number: 0D39 Signing time: Sat 20 Dec 2025 03:00:38 +0000 Manifest this update: Sat 20 Dec 2025 03:00:38 +0000 Manifest next update: Sun 21 Dec 2025 03:00:38 +0000 Files and hashes: 1: NznO4CxJJ6L0xLB6PTLKpB7weFM.roa (hash: cSE4XxBXPFFORCEl811D1OzY3o/1e0FebNC7EW5YkMk=) 2: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl (hash: /VwFlSWvmcRlHTl6XHHghSzb6xDiJar36Zl7hDabxv8=) 3: hVV7bHBD-mLe_PCozGrmTHxovsM.roa (hash: YI06CwugD4QjZYDajA4+sFtJ0/JL/QvZ5A+ius2+OkM=) 4: i_ZSP4msxm1SkHkJA_HtKWJPNjY.roa (hash: XTx/K5oWGL66kYYSkjQ0rxGrZ4iJ40KRc43mQ3O3oXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:ba:ec:4b:68:49:a6:a1:b0:8f:39:0b:fa:b0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540 Validity Not Before: Dec 20 03:00:38 2025 GMT Not After : Dec 21 03:00:38 2025 GMT Subject: CN=519a583cc6f420460f7f82c56d22bf4643e2af85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2c:1b:2d:4b:1c:1f:57:ae:9b:16:63:cc:86: 67:a4:e2:ac:88:64:c6:43:c8:10:5f:d8:d5:ca:55: 4d:8b:5f:e5:8c:9e:b0:d5:61:b4:3c:b9:d8:1b:b3: b4:23:15:5b:02:df:ae:d2:04:ab:2b:7f:6f:0e:13: ed:8a:bb:6b:94:82:ec:68:81:a0:b2:66:27:dd:cc: 10:1f:c1:2e:6c:ce:41:38:d7:39:30:6d:8d:94:a3: 71:d7:e7:e7:69:f9:da:f6:a7:6a:e2:0f:80:a7:b3: 17:88:37:36:8f:bd:e0:81:a7:94:fc:af:83:82:ff: 6a:ad:27:b9:4c:fa:31:ed:2f:ee:bc:f4:e8:02:38: d9:3f:d3:cc:bb:95:fd:85:56:c0:3f:f9:fe:b5:5e: 17:74:b7:d5:91:2d:bd:d9:4e:21:a6:2e:5d:8f:f4: ba:b0:76:40:40:cc:63:8c:7e:59:0e:d5:00:43:07: 02:86:6b:a8:16:f6:b2:fd:f7:28:a7:e9:3b:2f:30: 68:91:1b:33:9a:59:32:82:b9:5c:67:be:b3:7b:22: c9:0e:c1:50:e9:a5:b2:a7:fa:7d:96:bd:bb:f3:9a: 37:27:43:1f:9b:61:a5:41:30:8b:ad:2e:93:d5:57: 8e:f7:30:9b:2b:59:d5:3f:7d:05:c4:f0:09:ea:a3: 2e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9A:58:3C:C6:F4:20:46:0F:7F:82:C5:6D:22:BF:46:43:E2:AF:85 X509v3 Authority Key Identifier: keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:81:52:78:ac:d4:a7:b8:27:84:be:b8:4d:09:36:f1:cb:20: 72:61:d7:54:22:ec:d4:d7:22:c6:dd:88:18:72:0d:c8:27:20: 7b:b5:85:1d:95:6e:06:df:55:f8:83:a8:3b:de:ae:ac:c9:3f: 4d:d0:af:dc:b5:63:57:71:a1:25:41:4f:31:ad:ae:e5:02:8b: 8c:85:79:76:13:df:59:3f:5d:87:87:71:ad:c6:ec:79:e1:b8: 97:25:e8:f1:58:43:7e:27:6e:ce:42:2e:59:65:f0:6b:a1:c1: 51:4c:9e:1f:81:06:a2:24:1d:ad:59:28:c7:ca:c6:c9:99:5c: b7:36:17:81:4f:c4:9e:5e:c4:14:f9:bd:26:23:98:fa:ce:e1: 83:4b:07:c5:1a:c0:cb:06:f3:ad:ae:98:f6:5c:ab:d1:10:78: d0:7f:9d:69:0c:a7:3f:76:e9:0b:72:e1:af:8b:06:fc:53:a8: 11:45:6e:83:04:15:7a:e9:d4:de:5f:03:77:bf:19:98:29:3a: 7a:27:22:10:51:e2:06:a5:11:59:cc:5b:6a:4a:5d:e6:cb:4a: 26:03:08:e5:df:bd:e8:a5:44:eb:46:5d:58:1c:c6:25:94:c1: 49:11:b5:7f:0b:79:fd:2e:76:d5:a4:44:d0:11:c7:db:31:f6: b3:79:ad:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s7rsS2hJpqGwjzkL+rClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOWU1OWI1MDE3YmZlNjM0NDExOTQ5ZWZmMmQ3MGJhMGEw N2M1NDAwHhcNMjUxMjIwMDMwMDM4WhcNMjUxMjIxMDMwMDM4WjAzMTEwLwYDVQQD Eyg1MTlhNTgzY2M2ZjQyMDQ2MGY3ZjgyYzU2ZDIyYmY0NjQzZTJhZjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziwbLUscH1eumxZjzIZnpOKsiGTG Q8gQX9jVylVNi1/ljJ6w1WG0PLnYG7O0IxVbAt+u0gSrK39vDhPtirtrlILsaIGg smYn3cwQH8EubM5BONc5MG2NlKNx1+fnafna9qdq4g+Ap7MXiDc2j73ggaeU/K+D gv9qrSe5TPox7S/uvPToAjjZP9PMu5X9hVbAP/n+tV4XdLfVkS292U4hpi5dj/S6 sHZAQMxjjH5ZDtUAQwcChmuoFvay/fcop+k7LzBokRszmlkygrlcZ76zeyLJDsFQ 6aWyp/p9lr2785o3J0Mfm2GlQTCLrS6T1VeO9zCbK1nVP30FxPAJ6qMurQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGaWDzG9CBGD3+CxW0iv0ZD4q+FMB8GA1UdIwQY MBaAFHGeWbUBe/5jRBGUnv8tcLoKB8VAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEt ZjQ2ZjlkNjc0ZjZjLzEvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEtZjQ2ZjlkNjc0ZjZj LzEvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoFSeKzU p7gnhL64TQk28csgcmHXVCLs1Ncixt2IGHINyCcge7WFHZVuBt9V+IOoO96urMk/ TdCv3LVjV3GhJUFPMa2u5QKLjIV5dhPfWT9dh4dxrcbseeG4lyXo8VhDfiduzkIu WWXwa6HBUUyeH4EGoiQdrVkox8rGyZlctzYXgU/Enl7EFPm9JiOY+s7hg0sHxRrA ywbzra6Y9lyr0RB40H+daQynP3bpC3Lhr4sG/FOoEUVugwQVeunU3l8Dd78ZmCk6 eiciEFHiBqURWcxbakpd5stKJgMI5d+96KVE60ZdWBzGJZTBSRG1fwt5/S521aRE 0BHH2zH2s3mtWA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:30:21 2025 by rpki-client