This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft File: zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json) Hash identifier: saYkEpzZ+JJKgegq39BL1srb+pKvUxKaQjrJltm8Pxo= Subject key identifier: B1:95:19:6A:D7:8E:1C:EB:1A:65:92:7A:0C:E8:A5:B7:F5:91:FA:DF Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16 Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516 Certificate serial: 019B3757D11364CED0F94981BCB6DE12844B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft Manifest number: 1793 Signing time: Fri 19 Dec 2025 16:01:00 +0000 Manifest this update: Fri 19 Dec 2025 16:01:00 +0000 Manifest next update: Sat 20 Dec 2025 16:01:00 +0000 Files and hashes: 1: 51l0ZaazViO-9DNCdW3GnWR4GwI.roa (hash: UwPqa23rEDmYBVT49o12uDR12sWWmyh1Kinzo0LGRpA=) 2: 6MwiHlH7brP7gkYxWGSzNKL3O8w.roa (hash: uucPBDwTY0D+/18evXxrCTaPjIOWXa7urOwmQvZx8kM=) 3: Mm7HYiP_1vnYW3J82fX3wCESTvw.roa (hash: xaFYkDwgR40Vgrh0kc+VfgTZztWDJTezEXCbvse9oig=) 4: Vf3KOZmAgXwsv3aJ9v6n81tZxJk.roa (hash: VIja1t2wHpssk2GDc0sbNbLZHRB1tapmUzbQerIfxjw=) 5: jEDoIOuzE2brdF7d7iq9hFOFlPY.asa (hash: kX7sndI49J41h5949MxSdq1CeT/ptM/wjBq7+tQD3mw=) 6: nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa (hash: XhxPnrvDqx0alyntNHd6QEfUT7v4BfXJpEnK8r6nu/w=) 7: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: fFuJndJQIHHhp8pzYhqBfLsjzwji8w7f6VFttRiaWPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:d1:13:64:ce:d0:f9:49:81:bc:b6:de:12:84:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516 Validity Not Before: Dec 19 16:01:00 2025 GMT Not After : Dec 20 16:01:00 2025 GMT Subject: CN=b195196ad78e1ceb1a65927a0ce8a5b7f591fadf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:67:b9:ba:54:e1:90:b1:33:03:be:31:30: d1:91:4a:87:27:12:e0:41:a5:b4:1b:62:3b:d9:5a: 5d:54:74:67:29:d0:e8:33:fb:c0:ca:69:dd:37:26: 2d:77:e8:0c:2b:de:dc:eb:78:74:c4:97:fc:a6:eb: 0b:73:77:92:8b:6f:8b:04:33:51:e1:b5:c3:00:b5: fe:52:e3:0b:46:92:c5:0b:d5:3f:0c:91:86:49:cc: fa:cf:43:a1:ce:5d:6c:58:ef:39:7f:f2:64:85:04: 70:6c:60:46:3d:45:2b:e0:ad:15:1e:51:68:bc:02: 40:d5:1f:55:24:78:61:a5:32:67:5d:91:10:b7:ae: 3a:b8:25:15:05:24:b9:cf:04:5a:8e:55:12:4f:20: 5d:2a:67:fc:4d:d5:be:9f:6e:ee:b4:4d:88:70:95: 14:1a:47:b9:31:45:6b:63:5e:dc:fb:00:b6:94:b1: bb:28:f9:9a:29:0d:d7:5d:61:7f:5f:4f:e9:69:54: 91:5f:10:ed:4b:0d:72:91:fd:95:7f:0b:b1:6f:fb: d8:82:b1:e3:8d:92:07:85:a7:52:d2:a1:65:8b:2a: ea:ed:a1:8c:d8:5b:24:c8:c8:1b:9e:6e:26:04:91: 07:35:32:28:a2:9a:ff:32:e6:41:2e:bd:cb:6a:e7: 69:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:95:19:6A:D7:8E:1C:EB:1A:65:92:7A:0C:E8:A5:B7:F5:91:FA:DF X509v3 Authority Key Identifier: keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:bb:97:ad:c0:d3:46:c7:49:21:a8:a8:82:67:c0:75:93:32: 42:4e:67:79:2a:51:69:1b:53:10:b3:39:b4:c5:f4:50:db:c4: 0d:9f:26:ba:7a:71:6d:98:eb:b4:7d:01:e3:1f:37:27:b5:29: 37:49:ff:9b:ad:38:9f:a7:14:94:09:2d:c7:61:02:81:e5:b5: df:0b:d8:19:40:27:e0:07:18:4c:64:85:77:c3:62:1d:e6:3b: 67:5f:a3:08:34:86:dc:9b:35:94:52:92:69:00:16:95:94:22: 40:d6:32:a0:ac:35:67:cf:fa:4b:29:ac:ed:6e:a5:35:00:6b: 06:7b:7e:88:01:a0:06:86:55:b4:36:6d:62:a2:0f:ca:d1:c8: 0b:e2:2e:4d:a5:65:62:22:ed:19:ae:10:6d:40:75:5e:71:80: 76:ff:d1:fc:90:9c:c9:39:e1:ae:c5:7b:cf:84:3a:a8:ae:52: 07:30:9e:7e:c9:b9:2c:e5:b9:47:70:b0:62:fd:d7:58:52:cc: 34:0c:b3:1f:01:c0:0c:7b:c3:17:c3:0f:f9:e7:09:02:25:cb: 9a:2c:1e:57:a7:61:0a:2d:35:1e:b2:ae:e8:d8:94:e1:94:fa: 86:13:77:10:d0:70:93:c7:70:a9:dd:ae:0a:82:7f:a4:e6:c4: 90:0b:77:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V9ETZM7Q+UmBvLbeEoRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMmViNWIzOGJiNjJlZGU1Yzk4Y2JmYmNmZjk1MzI4NTIx ODA1MTYwHhcNMjUxMjE5MTYwMTAwWhcNMjUxMjIwMTYwMTAwWjAzMTEwLwYDVQQD EyhiMTk1MTk2YWQ3OGUxY2ViMWE2NTkyN2EwY2U4YTViN2Y1OTFmYWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqhnubpU4ZCxMwO+MTDRkUqHJxLg QaW0G2I72VpdVHRnKdDoM/vAymndNyYtd+gMK97c63h0xJf8pusLc3eSi2+LBDNR 4bXDALX+UuMLRpLFC9U/DJGGScz6z0Ohzl1sWO85f/JkhQRwbGBGPUUr4K0VHlFo vAJA1R9VJHhhpTJnXZEQt646uCUVBSS5zwRajlUSTyBdKmf8TdW+n27utE2IcJUU Gke5MUVrY17c+wC2lLG7KPmaKQ3XXWF/X0/paVSRXxDtSw1ykf2Vfwuxb/vYgrHj jZIHhadS0qFliyrq7aGM2FskyMgbnm4mBJEHNTIoopr/MuZBLr3Laudp8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGVGWrXjhzrGmWSegzopbf1kfrfMB8GA1UdIwQY MBaAFMwutbOLti7eXJjL+8/5UyhSGAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEt ZjFmODAyZTY2MTNiLzEvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEtZjFmODAyZTY2MTNi LzEvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADruXrcDT RsdJIaiogmfAdZMyQk5neSpRaRtTELM5tMX0UNvEDZ8munpxbZjrtH0B4x83J7Up N0n/m604n6cUlAktx2ECgeW13wvYGUAn4AcYTGSFd8NiHeY7Z1+jCDSG3Js1lFKS aQAWlZQiQNYyoKw1Z8/6Syms7W6lNQBrBnt+iAGgBoZVtDZtYqIPytHIC+IuTaVl YiLtGa4QbUB1XnGAdv/R/JCcyTnhrsV7z4Q6qK5SBzCefsm5LOW5R3CwYv3XWFLM NAyzHwHADHvDF8MP+ecJAiXLmiweV6dhCi01HrKu6NiU4ZT6hhN3ENBwk8dwqd2u CoJ/pObEkAt3UA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:53:23 2025 by rpki-client