This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json) Hash identifier: IGT32FcJqe37R7pGvV6vJe+7+qSvP7l1AtN8dAWqEG8= Subject key identifier: 1B:3D:01:A1:22:77:FE:06:AE:2B:DB:BF:20:56:74:7C:67:AD:26:D7 Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26 Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026 Certificate serial: 019B3FED473D2840475E40BD5B10A30F0386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft Manifest number: 11A8 Signing time: Sun 21 Dec 2025 08:01:13 +0000 Manifest this update: Sun 21 Dec 2025 08:01:13 +0000 Manifest next update: Mon 22 Dec 2025 08:01:13 +0000 Files and hashes: 1: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (hash: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=) 2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: VuBsu7EEQdiSvwJIdGeGLLW9uruQpcfUoSv64F/OwKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:47:3d:28:40:47:5e:40:bd:5b:10:a3:0f:03:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026 Validity Not Before: Dec 21 08:01:13 2025 GMT Not After : Dec 22 08:01:13 2025 GMT Subject: CN=1b3d01a12277fe06ae2bdbbf2056747c67ad26d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:be:cf:4e:6f:22:be:96:e9:24:c4:dd:c4:b2: 51:3e:8a:e9:39:20:cc:51:46:16:bb:a5:40:8a:f2: 5b:b3:13:30:e5:7f:07:1d:2a:fd:e7:a1:5f:b7:86: 7f:e4:2e:80:bd:f1:64:78:fe:41:17:c3:29:96:3b: da:d2:56:9b:2c:ba:5e:e1:10:b2:71:03:af:d4:61: 37:c6:8d:48:dd:2a:0a:0a:60:bb:be:d2:30:e5:00: 7f:58:92:58:90:98:02:89:01:74:17:eb:00:3e:95: 55:d3:a8:59:63:ae:03:76:f0:e0:f9:ce:50:ef:fe: e6:57:bb:b9:ac:32:ce:b1:c4:23:05:1b:65:8f:25: 97:d5:c4:b9:d3:a0:11:8f:4d:3a:03:f1:14:a9:74: 15:87:d9:27:57:88:95:c9:bb:c9:85:bb:79:ff:eb: 84:6b:00:49:d6:aa:e5:65:8e:0c:b5:22:50:b0:b1: 6a:8e:c7:c7:6e:5b:40:21:ab:db:68:5b:f7:ed:55: ee:d3:0d:27:bc:19:67:15:1f:94:d8:6a:fd:2e:aa: 3b:a1:86:8c:67:05:f5:8e:3a:e4:54:b7:cf:bb:27: 2f:43:b1:15:b1:65:55:77:51:72:68:77:e0:f0:93: 44:e9:21:67:e9:92:7f:db:26:c9:8b:2b:32:46:57: 4f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3D:01:A1:22:77:FE:06:AE:2B:DB:BF:20:56:74:7C:67:AD:26:D7 X509v3 Authority Key Identifier: keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:20:ea:bd:ef:fe:37:25:34:81:03:8d:db:45:32:86:96:2e: f4:13:05:53:0a:35:42:25:72:12:34:04:58:d5:66:34:2b:90: 4f:fd:c1:bf:8b:50:ca:84:ea:22:45:50:51:a4:b6:07:5b:1f: 8f:13:94:db:ce:3a:74:ae:de:e3:47:1c:c7:13:1f:b7:bc:de: 4f:5a:e1:b2:a9:f1:18:e0:87:65:b5:4d:7d:9c:86:1b:4e:29: 34:49:f0:fa:99:0b:02:f6:3d:e1:80:d3:b8:b7:70:94:67:16: 2c:cb:98:9e:68:1f:7a:40:2b:ea:5b:c3:7b:4f:04:56:74:e8: 82:3a:e5:a9:77:f3:bb:b3:ad:ca:0a:15:02:4a:c0:40:60:63: a5:68:5c:7d:86:aa:39:94:ef:e6:9b:8b:db:60:0a:cb:8b:5f: 53:91:fb:dd:50:46:98:04:64:dc:07:8f:9a:0f:17:47:96:cc: b8:0a:bf:1b:54:92:54:db:ab:c9:61:fc:32:2e:74:81:9a:d6: 45:23:0d:5e:0e:cc:14:2a:b8:52:a0:18:54:87:02:d8:d7:b9: a7:ab:83:f0:82:86:61:f1:97:56:86:aa:39:6d:23:0a:e1:7d: e9:15:fa:86:76:96:39:85:59:3d:b2:82:e3:ce:60:3e:4b:ab: d4:0a:c2:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7Uc9KEBHXkC9WxCjDwOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZjI0NzRkZTg0MTE2NzUyYjkwODBhN2EwZGIzMjI1MzVj NTYwMjYwHhcNMjUxMjIxMDgwMTEzWhcNMjUxMjIyMDgwMTEzWjAzMTEwLwYDVQQD EygxYjNkMDFhMTIyNzdmZTA2YWUyYmRiYmYyMDU2NzQ3YzY3YWQyNmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr7PTm8ivpbpJMTdxLJRPorpOSDM UUYWu6VAivJbsxMw5X8HHSr956Fft4Z/5C6AvfFkeP5BF8Mpljva0labLLpe4RCy cQOv1GE3xo1I3SoKCmC7vtIw5QB/WJJYkJgCiQF0F+sAPpVV06hZY64DdvDg+c5Q 7/7mV7u5rDLOscQjBRtljyWX1cS506ARj006A/EUqXQVh9knV4iVybvJhbt5/+uE awBJ1qrlZY4MtSJQsLFqjsfHbltAIavbaFv37VXu0w0nvBlnFR+U2Gr9Lqo7oYaM ZwX1jjrkVLfPuycvQ7EVsWVVd1FyaHfg8JNE6SFn6ZJ/2ybJiysyRldP3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBs9AaEid/4GrivbvyBWdHxnrSbXMB8GA1UdIwQY MBaAFMzyR03oQRZ1K5CAp6DbMiU1xWAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYt Y2M5MDYyMGU5OWNmLzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYtY2M5MDYyMGU5OWNm LzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASDqve/+ NyU0gQON20UyhpYu9BMFUwo1QiVyEjQEWNVmNCuQT/3Bv4tQyoTqIkVQUaS2B1sf jxOU2846dK7e40ccxxMft7zeT1rhsqnxGOCHZbVNfZyGG04pNEnw+pkLAvY94YDT uLdwlGcWLMuYnmgfekAr6lvDe08EVnTogjrlqXfzu7OtygoVAkrAQGBjpWhcfYaq OZTv5puL22AKy4tfU5H73VBGmARk3AePmg8XR5bMuAq/G1SSVNuryWH8Mi50gZrW RSMNXg7MFCq4UqAYVIcC2Ne5p6uD8IKGYfGXVoaqOW0jCuF96RX6hnaWOYVZPbKC 485gPkur1ArCtQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:16:05 2025 by rpki-client