This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json) Hash identifier: nnbV3Ksv4TZHYnUo56Uvw/cclGZwyaLhgkdtkz0xhV0= Subject key identifier: AC:65:53:A1:3F:0F:F6:B3:3E:30:E7:A8:59:11:7B:26:2D:A8:76:06 Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a Certificate serial: 019B38D7F8D5EAA983416F9E4CFCDBAED1D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft Manifest number: 0E6E Signing time: Fri 19 Dec 2025 23:00:36 +0000 Manifest this update: Fri 19 Dec 2025 23:00:36 +0000 Manifest next update: Sat 20 Dec 2025 23:00:36 +0000 Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=) 2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=) 3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: WoQjmRCRF6cztKHTPIIoxhnB7KTAl8mhtL0E/V6JG9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d7:f8:d5:ea:a9:83:41:6f:9e:4c:fc:db:ae:d1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a Validity Not Before: Dec 19 23:00:36 2025 GMT Not After : Dec 20 23:00:36 2025 GMT Subject: CN=ac6553a13f0ff6b33e30e7a859117b262da87606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:59:25:ca:7c:fc:16:2b:8b:c0:49:f9:9e: fb:64:3b:a3:16:6f:d7:f7:fb:77:90:0f:4c:c7:e0: 6d:e5:b0:75:a2:6a:d4:e3:fb:4c:9a:19:65:ae:49: 32:7c:4a:09:c6:6e:47:92:d1:c2:b9:3a:80:df:2d: 6b:b2:4e:be:47:04:29:0e:a5:4a:99:28:8c:9d:b3: db:41:c8:1f:ea:ec:fd:3a:c9:0e:2e:11:59:a5:1d: b8:3f:5c:e1:38:7c:d7:15:08:c3:e2:84:c2:a2:a6: 61:eb:36:c8:c9:78:5d:7f:30:f3:1c:a5:b8:73:3e: 88:81:f2:f1:e8:f6:64:38:3a:3f:d5:7e:3d:75:3d: 18:82:69:58:24:cd:a5:31:1d:88:17:6f:5e:10:0c: f2:56:eb:e2:23:c6:7c:21:a9:6f:3b:4d:53:73:28: 5e:8d:f1:de:92:fd:c3:c9:d2:f8:a1:4f:f9:2d:66: f0:44:a3:80:7d:66:04:80:85:f1:7c:bf:8e:f6:61: 98:64:f5:7b:77:2c:d7:65:6f:68:c6:e5:54:1a:54: 40:d3:86:cd:b7:5b:d7:7c:74:af:88:bd:0d:0e:95: 97:3b:27:4d:7d:40:7c:3b:48:a5:99:56:ef:7d:98: f2:b0:05:f5:62:68:82:63:32:46:1b:f2:77:8b:0d: 2c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:65:53:A1:3F:0F:F6:B3:3E:30:E7:A8:59:11:7B:26:2D:A8:76:06 X509v3 Authority Key Identifier: keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:25:da:fd:0f:0a:86:9f:8f:a2:98:a7:0c:aa:60:70:4a:72: 2e:71:31:d0:d4:18:9a:b8:db:d6:44:57:f7:4d:a4:6a:96:ce: 77:e7:6e:3b:8d:b8:d7:d0:c6:42:b0:83:8d:a1:a4:ac:e7:92: fc:12:b8:8a:bc:f8:2d:d8:3d:3f:c7:68:8b:ce:0e:ad:a2:a2: c4:9d:9c:b8:10:c5:45:b1:4e:b2:6a:3d:e3:5f:0e:a1:cb:a9: 61:86:3d:51:be:ee:b2:0d:50:ef:d6:cb:50:b2:d9:fe:79:5f: 3d:00:27:71:be:69:22:aa:81:6c:df:f2:5a:79:81:59:a6:21: 64:00:1c:9c:96:a1:35:50:53:4d:57:54:db:af:bc:93:e6:ef: 27:3a:90:85:d8:69:4e:99:dc:92:57:b8:41:e2:ac:5e:aa:43: 45:2d:a1:ee:39:18:a4:bf:2a:ac:44:85:64:c8:10:2d:28:62: bc:24:6a:85:f9:7c:80:5e:ad:00:68:95:84:53:cf:f7:ce:9f: 4b:2a:cf:17:98:81:31:2d:1e:b2:b6:2c:78:d0:1c:97:57:53: 1c:8c:42:11:91:e6:a4:f5:92:4a:56:36:8e:62:4a:4a:9a:27: 82:9c:14:de:00:b4:b8:2b:f4:57:41:08:d4:f8:09:dd:bc:05: e4:e0:3a:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs41/jV6qmDQW+eTPzbrtHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYjc1MzQxNTAwODA3YTk3NTBhOGNmNTViZjRlNDVmZjAz ZjMxMmEwHhcNMjUxMjE5MjMwMDM2WhcNMjUxMjIwMjMwMDM2WjAzMTEwLwYDVQQD EyhhYzY1NTNhMTNmMGZmNmIzM2UzMGU3YTg1OTExN2IyNjJkYTg3NjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31tZJcp8/BYri8BJ+Z77ZDujFm/X 9/t3kA9Mx+Bt5bB1omrU4/tMmhllrkkyfEoJxm5HktHCuTqA3y1rsk6+RwQpDqVK mSiMnbPbQcgf6uz9OskOLhFZpR24P1zhOHzXFQjD4oTCoqZh6zbIyXhdfzDzHKW4 cz6IgfLx6PZkODo/1X49dT0YgmlYJM2lMR2IF29eEAzyVuviI8Z8IalvO01Tcyhe jfHekv3DydL4oU/5LWbwRKOAfWYEgIXxfL+O9mGYZPV7dyzXZW9oxuVUGlRA04bN t1vXfHSviL0NDpWXOydNfUB8O0ilmVbvfZjysAX1YmiCYzJGG/J3iw0s6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxlU6E/D/azPjDnqFkReyYtqHYGMB8GA1UdIwQY MBaAFMy3U0FQCAepdQqM9Vv05F/wPzEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUt YTk5YTIxMDE1OTM3LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUtYTk5YTIxMDE1OTM3 LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCXa/Q8K hp+PopinDKpgcEpyLnEx0NQYmrjb1kRX902kapbOd+duO42419DGQrCDjaGkrOeS /BK4irz4Ldg9P8doi84OraKixJ2cuBDFRbFOsmo9418OocupYYY9Ub7usg1Q79bL ULLZ/nlfPQAncb5pIqqBbN/yWnmBWaYhZAAcnJahNVBTTVdU26+8k+bvJzqQhdhp Tpnckle4QeKsXqpDRS2h7jkYpL8qrESFZMgQLShivCRqhfl8gF6tAGiVhFPP986f SyrPF5iBMS0esrYseNAcl1dTHIxCEZHmpPWSSlY2jmJKSpongpwU3gC0uCv0V0EI 1PgJ3bwF5OA6vw== -----END CERTIFICATE-----Generated at Sat Dec 20 01:28:20 2025 by rpki-client