This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json) Hash identifier: AUOWEQsdcwrf9+GNzvqT/ditoNv65C8H3TnAzCalers= Subject key identifier: 14:1A:E4:D1:C8:30:FD:13:47:48:16:32:A8:87:00:27:DC:B5:46:07 Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89 Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289 Certificate serial: 019B4CCD54C32FC1E875AB4D6177C867A1EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft Manifest number: 0DE6 Signing time: Tue 23 Dec 2025 20:01:23 +0000 Manifest this update: Tue 23 Dec 2025 20:01:23 +0000 Manifest next update: Wed 24 Dec 2025 20:01:23 +0000 Files and hashes: 1: O_Eyba2hWiJ1G1yko5jMVf-Hi74.roa (hash: 6Ep9rh8riGcgqLK1eN8d8mtWbuCz5+WFjzg4sxJvKMw=) 2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: IxZU54P1W6YIOWTGqfMcrX4DWEiSLG8lCfvYS1a2cGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cd:54:c3:2f:c1:e8:75:ab:4d:61:77:c8:67:a1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289 Validity Not Before: Dec 23 20:01:23 2025 GMT Not After : Dec 24 20:01:23 2025 GMT Subject: CN=141ae4d1c830fd1347481632a8870027dcb54607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:17:45:a0:5a:05:78:c0:b8:c1:4b:ae:33:60: 65:cd:17:a6:e2:46:e1:17:47:26:90:b0:89:c0:69: a1:6c:34:d8:de:36:da:1e:0c:22:59:4d:fd:34:23: ad:29:fa:a2:11:e6:4e:ad:88:bb:93:1c:b3:47:fc: d8:31:8b:13:5f:01:5b:dd:0f:26:a0:66:8c:c6:f7: ca:ac:7e:12:06:62:6a:9b:38:9f:7e:f9:a3:04:90: d1:e8:f4:f1:0f:b7:32:86:bf:a3:39:b5:09:85:e2: 07:ff:8f:dc:27:3a:26:7d:86:c2:a9:f3:78:58:d8: bc:d7:0f:0d:ac:ae:8a:ec:0e:91:72:ea:b9:80:00: f2:cf:2c:c9:8e:34:70:ad:f8:b7:d0:1a:8c:ad:ba: c1:3a:4f:97:9d:c1:87:cd:01:b1:17:c8:0e:74:60: 7f:e6:97:23:09:7f:a2:7b:7c:48:4a:d6:4c:e0:2f: ca:67:e8:46:b3:21:86:a0:a9:58:b1:a7:f9:86:5c: 5e:65:85:4c:47:28:60:69:c0:15:f1:f5:86:35:33: e6:00:20:2d:ca:48:38:f4:b6:c5:98:0f:73:cd:03: b5:68:ef:24:49:d9:38:e1:54:2e:1d:de:ad:87:2c: e0:04:08:5a:3f:9e:d8:cc:73:9c:b9:8d:3d:11:03: 88:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1A:E4:D1:C8:30:FD:13:47:48:16:32:A8:87:00:27:DC:B5:46:07 X509v3 Authority Key Identifier: keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:93:a9:03:4d:43:72:12:b8:f9:e6:2f:a9:0a:c1:fa:91:f8: d8:b9:e6:d2:94:2d:39:ec:16:60:41:df:05:60:e0:f3:8b:ec: a6:aa:70:52:72:e0:b7:ee:32:c0:ff:ac:c9:58:6e:7d:b9:8c: d8:d8:2a:1d:91:0d:26:ad:90:0d:8b:20:97:ef:b7:af:f2:3f: 7f:88:de:c7:d4:db:49:3b:fd:db:8e:64:95:72:86:45:36:93: d3:71:a5:53:fc:e0:3f:f8:51:75:85:10:8e:75:9b:0f:c9:ee: 3c:9f:2a:4d:bc:c7:78:0a:e5:2e:73:df:05:09:aa:e3:9d:ee: f6:f5:e9:f2:f3:96:f6:5d:af:c2:2f:ba:82:10:a9:93:7c:4a: a8:17:ec:77:4f:6b:60:66:76:10:c4:00:8c:cb:86:68:46:09: bd:fe:bb:16:4c:ff:f9:8b:49:ff:a5:bd:44:00:7e:23:cf:e5: f8:99:c4:f4:19:2f:1e:f9:29:38:4f:c1:4f:c8:59:3c:b0:1a: 9c:30:55:72:07:b7:b0:e3:16:1c:f4:bf:d2:75:f5:16:d7:26: 50:8d:99:f9:dd:34:3e:66:f7:e6:d2:16:d5:01:41:9a:b8:0a: c1:50:00:19:54:40:ee:50:00:fd:e1:63:47:11:37:c3:3b:96: 04:f0:ce:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzVTDL8HodatNYXfIZ6HvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNDA2NTk2N2RlYzA5MmI1ZmM5MDE1MmU0YTk1MzM5YmEx ZDIyODkwHhcNMjUxMjIzMjAwMTIzWhcNMjUxMjI0MjAwMTIzWjAzMTEwLwYDVQQD EygxNDFhZTRkMWM4MzBmZDEzNDc0ODE2MzJhODg3MDAyN2RjYjU0NjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRdFoFoFeMC4wUuuM2BlzRem4kbh F0cmkLCJwGmhbDTY3jbaHgwiWU39NCOtKfqiEeZOrYi7kxyzR/zYMYsTXwFb3Q8m oGaMxvfKrH4SBmJqmziffvmjBJDR6PTxD7cyhr+jObUJheIH/4/cJzomfYbCqfN4 WNi81w8NrK6K7A6Rcuq5gADyzyzJjjRwrfi30BqMrbrBOk+XncGHzQGxF8gOdGB/ 5pcjCX+ie3xIStZM4C/KZ+hGsyGGoKlYsaf5hlxeZYVMRyhgacAV8fWGNTPmACAt ykg49LbFmA9zzQO1aO8kSdk44VQuHd6thyzgBAhaP57YzHOcuY09EQOInwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQa5NHIMP0TR0gWMqiHACfctUYHMB8GA1UdIwQY MBaAFM1AZZZ97AkrX8kBUuSpUzm6HSKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NDRmMmEtZjY3My00MmJmLTllM2Qt ZWRjZWY3NDUxZWY0LzEvelVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85NDRmMmEtZjY3My00MmJmLTllM2QtZWRjZWY3NDUxZWY0 LzEvelVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZOpA01D chK4+eYvqQrB+pH42Lnm0pQtOewWYEHfBWDg84vspqpwUnLgt+4ywP+syVhufbmM 2NgqHZENJq2QDYsgl++3r/I/f4jex9TbSTv9245klXKGRTaT03GlU/zgP/hRdYUQ jnWbD8nuPJ8qTbzHeArlLnPfBQmq453u9vXp8vOW9l2vwi+6ghCpk3xKqBfsd09r YGZ2EMQAjMuGaEYJvf67Fkz/+YtJ/6W9RAB+I8/l+JnE9BkvHvkpOE/BT8hZPLAa nDBVcge3sOMWHPS/0nX1FtcmUI2Z+d00Pmb35tIW1QFBmrgKwVAAGVRA7lAA/eFj RxE3wzuWBPDOFA== -----END CERTIFICATE-----Generated at Wed Dec 24 03:33:20 2025 by rpki-client