This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json) Hash identifier: s0SC99qUi0uBiB/p+XJS/iC+qNJirY0srgYxm2mdg5M= Subject key identifier: 7D:14:B8:CF:28:5E:6B:50:16:52:EF:78:14:91:2F:4D:35:B4:A4:A8 Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26 Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026 Certificate serial: 019B70341FD29932394C399E9AD7AFE6CCDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft Manifest number: 11C1 Signing time: Tue 30 Dec 2025 17:00:22 +0000 Manifest this update: Tue 30 Dec 2025 17:00:22 +0000 Manifest next update: Wed 31 Dec 2025 17:00:22 +0000 Files and hashes: 1: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (hash: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=) 2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: FBuMIQm205VvcOFlvIxGAugMmgfJLUxScE2EYTMdwG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:34:1f:d2:99:32:39:4c:39:9e:9a:d7:af:e6:cc:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026 Validity Not Before: Dec 30 17:00:22 2025 GMT Not After : Dec 31 17:00:22 2025 GMT Subject: CN=7d14b8cf285e6b501652ef7814912f4d35b4a4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:33:cc:ec:6e:9c:07:c4:18:d8:7d:b8:4d: 37:16:01:19:7e:1e:6a:0e:72:e0:50:bd:3e:2e:10: ab:71:c5:24:3e:66:33:ee:7d:ad:f6:4e:fb:fa:f9: 8e:9d:5f:3f:eb:52:98:60:2b:bc:22:5c:60:0b:ab: 81:96:37:17:7d:53:f6:81:ff:43:15:42:06:16:83: e6:27:18:2e:d3:98:a4:b7:25:2a:42:50:2a:91:e7: f1:ad:f3:87:73:d2:de:d7:87:9f:e2:89:5e:fc:ae: a7:df:6f:19:dc:22:db:70:02:f1:4a:23:a7:6b:77: e4:27:4a:60:f1:fb:f2:fa:2c:cb:c9:39:a7:4f:93: 25:e3:b4:1b:5b:77:b1:80:75:be:c9:72:21:df:77: 3c:0f:47:3c:f7:e8:74:f2:1b:21:77:60:e1:0d:69: 0d:78:47:1f:fa:f4:a8:a2:9a:8f:e2:60:c6:78:38: 88:2b:55:b8:2c:30:5f:fd:db:4c:3a:9f:4f:f7:33: 1c:70:b6:52:6c:a3:54:a1:63:d3:a8:e2:c0:bd:86: 11:31:ce:2d:97:d1:5c:08:02:21:34:65:6e:0d:98: 9f:77:fd:df:22:62:34:44:75:fa:33:a5:6f:0a:07: 3f:f5:1c:b8:2a:6a:3b:be:b1:f8:f9:a9:8a:6b:cd: b6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:14:B8:CF:28:5E:6B:50:16:52:EF:78:14:91:2F:4D:35:B4:A4:A8 X509v3 Authority Key Identifier: keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:fd:b9:92:84:75:df:d2:07:0f:97:5f:3e:0a:ce:95:c3:17: 0d:bb:d0:98:c3:72:6f:f9:e1:dc:cf:34:34:8c:95:36:3b:01: e4:21:8a:bf:65:3f:2b:c1:e9:c4:60:c9:33:a6:3d:6c:a2:c8: 5a:80:a2:a9:47:b6:c8:d8:2b:4a:ab:8b:7b:bb:d8:b3:d6:99: 74:39:fa:84:0c:f2:ea:93:3d:1a:2f:75:be:17:7e:2f:cd:17: cf:9b:05:e9:e6:94:aa:44:fd:65:67:36:5a:3e:e5:02:8b:92: d4:30:78:68:30:d2:e3:a2:d2:2c:aa:1e:79:68:a2:ed:66:ee: 50:e5:65:21:6f:dc:c9:7a:f0:75:bc:99:72:f9:f7:6c:18:89: 25:20:f8:b8:3b:d5:3d:66:69:09:0f:a1:63:07:21:45:d4:92: 54:b7:5e:5c:e1:d8:7d:a5:fd:4a:67:79:a6:d8:ed:7d:b2:d1: 44:92:ad:6c:78:b0:4a:e8:72:f1:b2:51:02:aa:a8:5e:67:e1: 1d:0b:df:e2:bb:ff:fb:fb:9b:a3:92:af:89:ea:ba:ae:f7:cb: b6:c8:0e:f3:44:1b:dc:54:1f:04:1f:9c:64:96:f5:0e:e1:1a: 57:85:27:97:3e:53:78:a8:cd:74:5b:dc:7d:0f:b8:85:1c:67: 37:d8:52:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwNB/SmTI5TDmemtev5szeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZjI0NzRkZTg0MTE2NzUyYjkwODBhN2EwZGIzMjI1MzVj NTYwMjYwHhcNMjUxMjMwMTcwMDIyWhcNMjUxMjMxMTcwMDIyWjAzMTEwLwYDVQQD Eyg3ZDE0YjhjZjI4NWU2YjUwMTY1MmVmNzgxNDkxMmY0ZDM1YjRhNGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXQzzOxunAfEGNh9uE03FgEZfh5q DnLgUL0+LhCrccUkPmYz7n2t9k77+vmOnV8/61KYYCu8IlxgC6uBljcXfVP2gf9D FUIGFoPmJxgu05iktyUqQlAqkefxrfOHc9Le14ef4ole/K6n328Z3CLbcALxSiOn a3fkJ0pg8fvy+izLyTmnT5Ml47QbW3exgHW+yXIh33c8D0c89+h08hshd2DhDWkN eEcf+vSoopqP4mDGeDiIK1W4LDBf/dtMOp9P9zMccLZSbKNUoWPTqOLAvYYRMc4t l9FcCAIhNGVuDZifd/3fImI0RHX6M6VvCgc/9Ry4Kmo7vrH4+amKa822+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0UuM8oXmtQFlLveBSRL001tKSoMB8GA1UdIwQY MBaAFMzyR03oQRZ1K5CAp6DbMiU1xWAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYt Y2M5MDYyMGU5OWNmLzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYtY2M5MDYyMGU5OWNm LzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGf25koR1 39IHD5dfPgrOlcMXDbvQmMNyb/nh3M80NIyVNjsB5CGKv2U/K8HpxGDJM6Y9bKLI WoCiqUe2yNgrSquLe7vYs9aZdDn6hAzy6pM9Gi91vhd+L80Xz5sF6eaUqkT9ZWc2 Wj7lAouS1DB4aDDS46LSLKoeeWii7WbuUOVlIW/cyXrwdbyZcvn3bBiJJSD4uDvV PWZpCQ+hYwchRdSSVLdeXOHYfaX9Smd5ptjtfbLRRJKtbHiwSuhy8bJRAqqoXmfh HQvf4rv/+/ubo5Kvieq6rvfLtsgO80Qb3FQfBB+cZJb1DuEaV4Unlz5TeKjNdFvc fQ+4hRxnN9hSHw== -----END CERTIFICATE-----Generated at Wed Dec 31 00:10:11 2025 by rpki-client