This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json) Hash identifier: PBEjjMB85XxZMGyh026eEQVGCwgWExjQNJjxds4JDfo= Subject key identifier: F0:BE:C9:F4:CE:92:F8:72:0E:D5:E1:89:CB:6E:2F:A1:B4:76:AE:CB Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54 Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854 Certificate serial: 019B4BF23364DCC37524189632177ABFDE61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 16:02:02 +0000 Manifest this update: Tue 23 Dec 2025 16:02:02 +0000 Manifest next update: Wed 24 Dec 2025 16:02:02 +0000 Files and hashes: 1: X-KNJVz9F02-eLDfaKPH63PtzRc.roa (hash: qtVoMR5Y45CsVcXQuHhRRS1BbnVU7jS1ywbPtWRVweo=) 2: Zi7Ur4wbJWR3EdLIxTIMt470yv8.roa (hash: 2ojUhQY/moH0LhM/gEFCEK3T0bFJRBAMK4gF5wvlAf4=) 3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: mwxV0yTwjApU3CYVAP4VzNchKcKhTer3wv5Z/4NlQmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:33:64:dc:c3:75:24:18:96:32:17:7a:bf:de:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854 Validity Not Before: Dec 23 16:02:02 2025 GMT Not After : Dec 24 16:02:02 2025 GMT Subject: CN=f0bec9f4ce92f8720ed5e189cb6e2fa1b476aecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:20:af:3c:9b:a1:1a:cb:05:48:49:5f:0d:ac: 77:70:bb:bf:da:5c:c3:64:54:ea:68:ca:7f:bb:b5: ee:17:0a:3c:2d:4b:9d:0d:12:86:48:5c:b6:6c:19: ae:c9:57:8b:d5:4d:de:d0:2a:3c:2f:0c:53:0d:3c: 6b:1b:f0:e5:ba:b5:80:5b:8a:42:00:fb:d7:bc:44: 89:c5:d4:10:ac:91:79:a7:e3:d4:5d:f9:d2:82:93: 4a:3f:ac:23:b1:3d:35:00:e7:33:c7:ad:96:be:ba: 41:dc:10:ab:98:d7:75:4f:42:46:b1:14:b0:b6:fc: a2:1f:77:fa:26:87:c0:3a:d9:f7:21:3c:85:d5:30: c2:c5:40:9c:de:f8:bd:6b:57:e7:0d:f9:36:66:9b: f7:b3:dc:8e:b3:04:e4:cd:e7:b3:c2:5c:81:b8:7a: b8:18:39:66:13:7f:c8:2b:aa:1a:b1:ed:6a:51:2d: 56:c9:12:b8:6e:b3:b1:dd:32:3f:17:c0:5f:6b:1f: 1a:91:34:37:2a:70:31:e1:e3:6e:28:ee:5c:93:e0: 39:5f:b5:57:bb:07:43:a0:42:0e:07:dd:02:e4:f2: ad:3f:83:0b:61:88:0a:b5:c1:17:00:98:03:51:0c: da:f4:1a:a7:ac:28:73:87:1d:b6:8b:cd:ce:bd:05: 20:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BE:C9:F4:CE:92:F8:72:0E:D5:E1:89:CB:6E:2F:A1:B4:76:AE:CB X509v3 Authority Key Identifier: keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:d5:25:92:01:44:7e:df:73:4b:15:01:6f:2d:00:ed:03:ef: 6b:c6:77:f1:29:ee:51:7b:b0:dc:ea:f6:7e:a6:35:71:96:b9: 28:0a:6a:fc:49:45:4f:79:9e:cc:32:3a:56:ff:1b:13:ab:70: cc:b4:a0:f5:5a:a2:69:87:1d:c4:71:87:cd:a9:ff:f7:42:28: 29:9b:9e:90:e1:79:ed:47:8c:57:6d:f5:01:35:12:b1:27:b2: 98:09:e0:98:68:37:79:0e:30:6c:7a:19:d3:a9:ea:e8:d4:51: 70:46:d3:48:dc:39:1d:1c:8f:1a:1d:20:44:0c:29:58:15:0c: 34:d9:f9:d7:3d:d5:67:36:d8:c2:b5:95:44:61:1f:04:fa:93: c3:ce:3f:76:80:00:28:01:ce:96:ea:26:f2:e4:9e:5e:35:64: 47:e9:0f:38:fd:45:73:3c:36:66:73:45:dd:47:d9:10:6d:e0: f5:21:d3:79:9a:7a:77:69:81:76:93:68:4a:12:68:5a:85:bb: b1:20:3e:fd:73:c1:72:6b:44:f5:29:b4:94:ba:02:f2:5d:51: 90:00:8b:b2:cd:89:c6:88:da:5d:cb:fa:cd:15:b4:cf:c8:67: e5:80:25:6d:bb:e3:80:e9:9f:2b:e0:b8:e6:c8:af:3d:ec:bc: 4c:4e:64:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8jNk3MN1JBiWMhd6v95hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZWU3OGFkODU3NjA3NTIzYjUwYjYwYWNkOWUyMmNhNWEx MDc4NTQwHhcNMjUxMjIzMTYwMjAyWhcNMjUxMjI0MTYwMjAyWjAzMTEwLwYDVQQD EyhmMGJlYzlmNGNlOTJmODcyMGVkNWUxODljYjZlMmZhMWI0NzZhZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iCvPJuhGssFSElfDax3cLu/2lzD ZFTqaMp/u7XuFwo8LUudDRKGSFy2bBmuyVeL1U3e0Co8LwxTDTxrG/DlurWAW4pC APvXvESJxdQQrJF5p+PUXfnSgpNKP6wjsT01AOczx62WvrpB3BCrmNd1T0JGsRSw tvyiH3f6JofAOtn3ITyF1TDCxUCc3vi9a1fnDfk2Zpv3s9yOswTkzeezwlyBuHq4 GDlmE3/IK6oase1qUS1WyRK4brOx3TI/F8Bfax8akTQ3KnAx4eNuKO5ck+A5X7VX uwdDoEIOB90C5PKtP4MLYYgKtcEXAJgDUQza9BqnrChzhx22i83OvQUgcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPC+yfTOkvhyDtXhictuL6G0dq7LMB8GA1UdIwQY MBaAFM3ueK2FdgdSO1C2Cs2eIspaEHhUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMt Y2YwMTI0Y2VkNGQ2LzEvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMtY2YwMTI0Y2VkNGQ2 LzEvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAztUlkgFE ft9zSxUBby0A7QPva8Z38SnuUXuw3Or2fqY1cZa5KApq/ElFT3mezDI6Vv8bE6tw zLSg9VqiaYcdxHGHzan/90IoKZuekOF57UeMV231ATUSsSeymAngmGg3eQ4wbHoZ 06nq6NRRcEbTSNw5HRyPGh0gRAwpWBUMNNn51z3VZzbYwrWVRGEfBPqTw84/doAA KAHOluom8uSeXjVkR+kPOP1Fczw2ZnNF3UfZEG3g9SHTeZp6d2mBdpNoShJoWoW7 sSA+/XPBcmtE9Sm0lLoC8l1RkACLss2JxojaXcv6zRW0z8hn5YAlbbvjgOmfK+C4 5sivPey8TE5k1Q== -----END CERTIFICATE-----Generated at Wed Dec 24 00:30:29 2025 by rpki-client