This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft File: zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json) Hash identifier: JvHv6bTvxOWHnFYPOBVDjNAWDbOdbkJ9Utc+k0qRvWw= Subject key identifier: 1F:03:7D:57:01:76:98:54:43:79:2B:E1:63:A8:34:37:F5:A3:2C:93 Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c Certificate serial: 019B3FB6126CB59969AA1C1281C8A7109CEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft Manifest number: 0A11 Signing time: Sun 21 Dec 2025 07:00:55 +0000 Manifest this update: Sun 21 Dec 2025 07:00:55 +0000 Manifest next update: Mon 22 Dec 2025 07:00:55 +0000 Files and hashes: 1: ECAqPGx51Z00QIK2nsNsbPmpugU.roa (hash: HZJH2KP+4GUjxS9EOgilXL7MO2BjwBbNTgaJKakCYf0=) 2: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: Z89K2Uz7XslyIU1lx0kGRRF0X1m7zl9YI8V3/9oEnDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:12:6c:b5:99:69:aa:1c:12:81:c8:a7:10:9c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c Validity Not Before: Dec 21 07:00:55 2025 GMT Not After : Dec 22 07:00:55 2025 GMT Subject: CN=1f037d570176985443792be163a83437f5a32c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:03:ad:4d:14:38:53:90:fd:ac:9c:9d:79:6d: 2a:3b:3e:d2:66:c0:e6:77:e4:45:69:7d:c6:c0:bc: b6:a1:03:92:ef:e7:8e:c3:ec:ec:46:f0:44:10:b5: f5:6e:51:11:9f:91:eb:59:e0:79:ff:2a:87:53:f6: f1:75:61:cb:8a:e8:41:74:ed:00:bd:20:5d:78:09: 19:d7:e6:79:5d:51:53:fd:e9:8c:08:86:95:13:64: a3:2a:f0:87:42:36:27:40:42:3d:16:bf:06:22:96: 1b:0f:cd:0c:08:2b:47:2f:40:4f:c4:03:59:b9:6c: 38:79:66:f2:8c:c5:74:02:f5:dc:b6:79:ab:be:01: ff:0d:e2:d0:8c:9c:a2:f5:dd:f3:96:fe:4b:a5:14: 59:ac:3c:1e:b4:2f:02:e3:35:d5:de:51:9b:2a:7a: 69:3a:69:94:e4:1d:13:7a:cb:b5:08:8f:f5:19:5e: 99:f4:eb:68:3d:1e:2d:65:f9:4c:eb:ea:43:cc:6e: 42:bf:a3:2d:5e:2f:b2:9e:fb:49:b9:f6:3b:62:29: 19:2a:d6:f5:f5:d2:03:b4:b1:9c:df:f6:a8:7a:03: 5b:19:24:89:a2:42:e2:c0:5c:0a:52:10:f8:c0:68: 89:5b:8b:93:11:01:1f:9a:01:0c:26:a9:08:be:d6: bc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:03:7D:57:01:76:98:54:43:79:2B:E1:63:A8:34:37:F5:A3:2C:93 X509v3 Authority Key Identifier: keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8a:92:45:62:f6:60:5f:53:c0:9f:31:fa:fa:96:59:ae:e9: e4:52:fe:76:43:31:d9:08:d2:0d:24:47:21:c6:c5:d4:45:a3: 22:41:ef:d0:c3:4c:56:92:f8:52:e0:6e:ff:52:5f:3f:9f:2b: 65:dd:29:db:8b:a3:54:99:94:46:2e:fe:28:67:41:80:46:b4: 70:dc:fc:f5:9d:96:d4:67:48:69:23:f8:07:b6:6c:45:b8:8e: 36:25:e8:25:b8:e9:32:cc:47:5c:cd:6c:f9:14:72:b4:8b:69: f8:a5:e5:e8:34:ef:5e:53:f6:a0:54:52:23:e7:11:4d:70:98: e8:fb:00:f6:25:6c:17:58:16:9d:a4:8e:7b:89:29:32:b4:ae: 12:e6:22:4a:37:e3:1e:a3:45:2b:fd:f3:b6:bf:48:9e:e7:e4: e0:fb:5e:3d:59:90:30:5c:8c:c6:cf:c4:e9:42:46:29:4d:59: 8e:56:12:cf:f4:3f:2d:b8:15:b0:fd:ad:27:02:b0:97:a9:97: c0:dc:49:89:b9:c9:c7:d6:10:8a:a2:f7:85:ab:b2:92:3a:70: ec:47:0c:54:6d:90:92:c8:5c:76:f5:86:72:53:e5:d8:ca:3b: 1a:e1:1d:57:ff:7f:4c:40:8a:bc:6a:c5:8f:a7:d8:48:aa:bd: ab:6b:0a:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/thJstZlpqhwSgcinEJzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjYyY2JkNmNmN2U4MDgyMjRmNmNmODcyNWUzNmUyYTk2 NTM1MmMwHhcNMjUxMjIxMDcwMDU1WhcNMjUxMjIyMDcwMDU1WjAzMTEwLwYDVQQD EygxZjAzN2Q1NzAxNzY5ODU0NDM3OTJiZTE2M2E4MzQzN2Y1YTMyYzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwOtTRQ4U5D9rJydeW0qOz7SZsDm d+RFaX3GwLy2oQOS7+eOw+zsRvBEELX1blERn5HrWeB5/yqHU/bxdWHLiuhBdO0A vSBdeAkZ1+Z5XVFT/emMCIaVE2SjKvCHQjYnQEI9Fr8GIpYbD80MCCtHL0BPxANZ uWw4eWbyjMV0AvXctnmrvgH/DeLQjJyi9d3zlv5LpRRZrDwetC8C4zXV3lGbKnpp OmmU5B0Tesu1CI/1GV6Z9OtoPR4tZflM6+pDzG5Cv6MtXi+ynvtJufY7YikZKtb1 9dIDtLGc3/aoegNbGSSJokLiwFwKUhD4wGiJW4uTEQEfmgEMJqkIvta8sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8DfVcBdphUQ3kr4WOoNDf1oyyTMB8GA1UdIwQY MBaAFM32LL1s9+gIIk9s+HJeNuKpZTUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUt ODQ5NDE3YWU2MzRkLzEvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUtODQ5NDE3YWU2MzRk LzEvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYqSRWL2 YF9TwJ8x+vqWWa7p5FL+dkMx2QjSDSRHIcbF1EWjIkHv0MNMVpL4UuBu/1JfP58r Zd0p24ujVJmURi7+KGdBgEa0cNz89Z2W1GdIaSP4B7ZsRbiONiXoJbjpMsxHXM1s +RRytItp+KXl6DTvXlP2oFRSI+cRTXCY6PsA9iVsF1gWnaSOe4kpMrSuEuYiSjfj HqNFK/3ztr9Inufk4PtePVmQMFyMxs/E6UJGKU1ZjlYSz/Q/LbgVsP2tJwKwl6mX wNxJibnJx9YQiqL3hauykjpw7EcMVG2QkshcdvWGclPl2Mo7GuEdV/9/TECKvGrF j6fYSKq9q2sKDQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:04:39 2025 by rpki-client