This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: tjkSJr43nP79BK1sRkTuuD2jiujTxCPNlTQU8OASF9w= Subject key identifier: 1E:37:79:0B:2F:1C:A7:C6:03:91:B8:4D:9E:0B:C5:24:F6:C9:C1:D4 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019B3AFE35E2234227D295E79936DAC4BF1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 174F Signing time: Sat 20 Dec 2025 09:01:37 +0000 Manifest this update: Sat 20 Dec 2025 09:01:37 +0000 Manifest next update: Sun 21 Dec 2025 09:01:37 +0000 Files and hashes: 1: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (hash: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=) 2: Itnfb5cOidqPHmrm9ItGmwZzqpE.roa (hash: iss4kvemyRAUGLNEu7CN/erlN+DUp3hzgmc3aCXZAfU=) 3: JaFKfYKslg0WUVhBG8hHu6LqTvw.roa (hash: 4GgDdTVxQxqewTP0EOz1RIPWIQ2EEWazgc1qxopxzyA=) 4: Krcq7ZeGH2Lmub3dy5F_WRkHwYE.asa (hash: btWWldiqWlNfihUeJ1u/kiPDZiSycBx+qnGB18Pzzk0=) 5: NiD2SDjoMC5kCqhJ0LqUs7rzMnw.roa (hash: 9+KHXzf6QQ6hX/XBCMhmaRntprEYELpBh7Oa+Qw01T4=) 6: ShXwELNENSFmGBdjnWGg5NqouYI.roa (hash: CvtdGpDGnIEThk2qtR3nRVqJ7XKDlnHvbjdMw3b5GEg=) 7: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (hash: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=) 8: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: LrbR8xBiQvyAL2I5UTWIujnzxtMr4rIm3hUoblzypxs=) 9: ccs7nyLFaW5A18K4O1qhpOVnDF0.roa (hash: kVq8Rt+cDTCddUdzX9poi4CfmBkJSUYFh1PJxqkXE8A=) 10: u3VJR1_M7JzYx842qLGTM0en5V0.roa (hash: qbP/xDwKS1NUr1YSZhW1L+ZrVrT39XIk/W4+EAm8kOI=) 11: y4Nw6VYuIuUZOv6I685fKqZhbWQ.roa (hash: JM0RAslsFdrhEKUBmY+ywDM/Jo6q24Igd7pWLFOkC9Q=) 12: zIstcjB0l5dXMsxLJF-PmySyWoY.roa (hash: sZKTonBPo728p5sx2a7KurcsOwIi7QOOMBd8o6TZnS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:35:e2:23:42:27:d2:95:e7:99:36:da:c4:bf:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Dec 20 09:01:37 2025 GMT Not After : Dec 21 09:01:37 2025 GMT Subject: CN=1e37790b2f1ca7c60391b84d9e0bc524f6c9c1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3f:22:46:a9:8d:90:77:c8:d8:70:17:01:e2: 90:e5:ca:a4:95:e8:2c:ac:f5:d5:d3:19:74:17:91: a9:3c:35:6d:1d:47:88:6e:3a:a6:9b:7d:47:f3:fb: e2:85:38:77:c2:bc:a8:0e:82:0c:e4:10:1e:7b:02: a0:72:1f:33:c9:ec:d0:f0:55:6a:68:ff:be:9e:f5: 58:1b:55:d6:e8:77:c2:0b:3b:58:cf:f2:fd:fd:3a: 7b:3d:8e:45:df:2b:97:32:ba:72:1f:2b:2b:6d:46: f2:4a:9d:62:1c:39:96:1d:12:f7:1a:5d:bb:7e:c4: 9f:ce:9d:96:34:fc:9d:97:7f:2e:35:dc:19:88:0a: 01:6c:77:f1:52:31:8c:9b:94:6e:46:0a:9c:54:29: 99:c0:c3:5e:e1:b9:84:45:b5:e7:c1:7b:39:3d:23: 9b:61:88:7d:88:87:bb:5c:36:7b:f6:80:4c:88:cd: df:b2:f2:52:f4:03:70:05:c8:73:1c:07:b9:01:f3: ae:07:bb:7d:8f:ad:cc:a9:aa:44:b7:9c:6a:ae:17: d2:e2:b5:02:e5:c2:10:4b:fc:ef:bf:63:e6:36:77: 23:7f:68:42:c5:3b:3a:6a:2c:c1:c6:31:bb:c5:c5: 3b:90:b6:81:2a:ff:67:b1:c4:d8:c9:c1:23:67:80: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:37:79:0B:2F:1C:A7:C6:03:91:B8:4D:9E:0B:C5:24:F6:C9:C1:D4 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ed:fc:a7:cc:b4:ea:03:d0:04:74:a7:d6:aa:45:35:b7:83: 4c:51:04:7c:7f:6b:47:ca:9c:22:8c:1a:ea:3a:57:4f:99:fd: 17:3a:22:f0:6d:7a:d7:c2:12:9e:c1:37:aa:3e:6c:68:08:03: 43:2d:12:cd:c5:1f:b2:3b:7e:96:95:5a:48:a0:3f:30:6c:4e: ce:6d:39:fe:d2:1a:be:92:1a:29:07:2b:f8:6b:5d:bc:76:76: 59:6e:e8:b7:0b:9e:5c:ea:bb:93:27:15:00:02:db:94:6d:ad: 1a:34:a6:0e:e7:b2:4c:7c:09:dc:c0:c9:d5:df:0f:d1:f0:e9: e5:7f:6a:44:5c:ba:56:39:64:ca:af:da:c9:a8:0e:36:8c:e9: 3a:35:30:bc:ad:c9:29:6e:39:1d:4e:6c:55:f7:38:df:e0:c1: 43:f0:08:dd:df:9c:31:f4:55:b7:92:46:51:18:89:60:0b:09: 61:b0:af:24:cf:65:64:30:df:4f:54:39:6a:ad:f1:24:5e:f1: bc:9a:30:2b:76:02:2b:a4:b4:61:1c:81:0e:9b:fc:9a:59:38: 39:84:e3:95:23:ae:a9:68:da:49:8f:35:3b:c9:61:e8:ad:a6: 25:b0:be:ff:4e:e0:24:ac:1f:61:da:21:dd:ca:54:a4:df:30: 71:41:58:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/jXiI0In0pXnmTbaxL8fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjUxMjIwMDkwMTM3WhcNMjUxMjIxMDkwMTM3WjAzMTEwLwYDVQQD EygxZTM3NzkwYjJmMWNhN2M2MDM5MWI4NGQ5ZTBiYzUyNGY2YzljMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T8iRqmNkHfI2HAXAeKQ5cqklegs rPXV0xl0F5GpPDVtHUeIbjqmm31H8/vihTh3wryoDoIM5BAeewKgch8zyezQ8FVq aP++nvVYG1XW6HfCCztYz/L9/Tp7PY5F3yuXMrpyHysrbUbySp1iHDmWHRL3Gl27 fsSfzp2WNPydl38uNdwZiAoBbHfxUjGMm5RuRgqcVCmZwMNe4bmERbXnwXs5PSOb YYh9iIe7XDZ79oBMiM3fsvJS9ANwBchzHAe5AfOuB7t9j63MqapEt5xqrhfS4rUC 5cIQS/zvv2PmNncjf2hCxTs6aizBxjG7xcU7kLaBKv9nscTYycEjZ4BDjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB43eQsvHKfGA5G4TZ4LxST2ycHUMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+38p8y0 6gPQBHSn1qpFNbeDTFEEfH9rR8qcIowa6jpXT5n9Fzoi8G1618ISnsE3qj5saAgD Qy0SzcUfsjt+lpVaSKA/MGxOzm05/tIavpIaKQcr+GtdvHZ2WW7otwueXOq7kycV AALblG2tGjSmDueyTHwJ3MDJ1d8P0fDp5X9qRFy6Vjlkyq/ayagONozpOjUwvK3J KW45HU5sVfc43+DBQ/AI3d+cMfRVt5JGURiJYAsJYbCvJM9lZDDfT1Q5aq3xJF7x vJowK3YCK6S0YRyBDpv8mlk4OYTjlSOuqWjaSY81O8lh6K2mJbC+/07gJKwfYdoh 3cpUpN8wcUFYIQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:11:48 2025 by rpki-client