This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json) Hash identifier: SL+UPTZSLkbqMuoWT2D1csc+TxSPOLUCar5tr63sUd4= Subject key identifier: 8B:83:5B:E9:73:89:FC:44:40:29:CC:76:03:5D:85:73:1D:95:02:AF Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b Certificate serial: 019B4439001E0401483E5945B42A8FBE2EAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 04:02:24 +0000 Manifest this update: Mon 22 Dec 2025 04:02:24 +0000 Manifest next update: Tue 23 Dec 2025 04:02:24 +0000 Files and hashes: 1: bveNVNZQRYaQggK5H4XE-ImTkzI.roa (hash: RsefAt4XMHkoKxXyBZqmXBMXlqDjbew2tMCZMb8OiUg=) 2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: VkdEVk2e+uv4G7ScA+afPhLWIEoCXUg+vZXRDabeyCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:00:1e:04:01:48:3e:59:45:b4:2a:8f:be:2e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b Validity Not Before: Dec 22 04:02:24 2025 GMT Not After : Dec 23 04:02:24 2025 GMT Subject: CN=8b835be97389fc444029cc76035d85731d9502af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:14:db:73:0e:61:82:8a:1e:1b:3a:d3:92: 69:1b:d6:56:3d:79:99:97:ea:f4:b8:59:41:c7:e4: 56:86:0c:f8:da:c3:ff:9a:4c:73:d5:30:96:b6:01: 0a:cb:a8:fe:d9:5d:5a:be:db:48:82:45:1f:f1:4d: 08:7a:29:bc:0c:b3:43:c1:68:70:da:d5:d8:01:a8: 07:80:3b:18:1c:25:e3:f8:20:e9:45:fe:aa:54:6c: ed:9b:1a:67:a2:be:66:45:7f:a9:a9:b6:12:d4:c7: 7e:3a:de:64:8a:e8:c0:b5:7d:9e:4b:f6:65:8f:99: ee:0a:8e:ca:a2:0c:b2:08:ad:0c:23:98:ca:5b:9c: 0e:b0:36:cc:71:94:a7:77:ef:de:bc:64:32:9a:53: 96:ce:5b:a3:78:b5:d5:3b:7c:88:e5:63:af:91:3d: 3b:a0:c3:b3:d8:c1:66:a0:0f:11:b0:10:63:12:d4: c6:c8:11:18:44:29:00:af:ea:d3:c3:16:b4:b1:cd: b8:ce:a3:40:59:90:f0:fb:34:24:9e:54:29:51:e4: 0e:ea:b5:60:83:06:09:94:df:56:93:9f:b0:63:2f: 10:fc:7f:ed:11:d7:82:0c:0a:34:bb:32:b0:c5:04: ff:46:88:a3:f3:ac:d3:f3:e3:c9:a1:06:8a:81:b6: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:83:5B:E9:73:89:FC:44:40:29:CC:76:03:5D:85:73:1D:95:02:AF X509v3 Authority Key Identifier: keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:57:a2:70:cb:04:e3:eb:ca:fc:c9:74:31:c0:fa:3f:67:d7: 13:18:fc:32:c7:86:6b:43:9e:2f:14:bd:93:bd:e8:23:3f:38: f8:e7:77:fd:77:73:34:aa:ee:f8:95:09:c0:71:82:f5:4e:2d: 8a:86:ba:41:d2:9c:89:75:91:cf:b1:79:0e:17:37:29:58:84: d2:69:9b:35:65:c8:d0:b8:d7:aa:69:00:78:a3:7e:e0:bf:57: 6d:91:23:b9:f3:6e:18:69:ab:74:10:fd:9a:3e:a7:73:69:c2: 12:38:11:72:7f:05:77:d1:64:42:5b:2d:91:e2:40:36:f9:e3: e4:bb:9f:05:20:ec:58:d7:01:72:76:c3:27:70:6a:c3:1b:ff: b3:7f:69:a6:ce:0b:61:0f:cf:ed:84:40:b7:23:f6:84:72:a2: 01:1d:08:e5:6a:7c:32:01:7a:f3:b5:f7:cb:e1:0d:e3:bc:11: f8:1e:2d:0b:db:eb:1a:e9:43:df:a7:59:02:e5:3a:a9:3d:22: ae:3c:f3:0a:d6:08:6d:2b:95:9f:34:db:77:b1:9b:d6:7f:d7: d7:16:86:94:b4:9d:4c:ab:a1:c8:ec:8e:4d:e1:86:2f:db:f3: de:40:05:91:a0:ef:8f:3c:d5:a6:6d:07:bc:24:5c:84:43:27: f8:fa:22:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOQAeBAFIPllFtCqPvi6rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNGNhZjZhZWNjOGMzMTA3YjRiNzExNzRlYjI5OTc0ZTBm ZDg1NWIwHhcNMjUxMjIyMDQwMjI0WhcNMjUxMjIzMDQwMjI0WjAzMTEwLwYDVQQD Eyg4YjgzNWJlOTczODlmYzQ0NDAyOWNjNzYwMzVkODU3MzFkOTUwMmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNcU23MOYYKKHhs605JpG9ZWPXmZ l+r0uFlBx+RWhgz42sP/mkxz1TCWtgEKy6j+2V1avttIgkUf8U0Ieim8DLNDwWhw 2tXYAagHgDsYHCXj+CDpRf6qVGztmxpnor5mRX+pqbYS1Md+Ot5kiujAtX2eS/Zl j5nuCo7KogyyCK0MI5jKW5wOsDbMcZSnd+/evGQymlOWzlujeLXVO3yI5WOvkT07 oMOz2MFmoA8RsBBjEtTGyBEYRCkAr+rTwxa0sc24zqNAWZDw+zQknlQpUeQO6rVg gwYJlN9Wk5+wYy8Q/H/tEdeCDAo0uzKwxQT/Roij86zT8+PJoQaKgbb0bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuDW+lzifxEQCnMdgNdhXMdlQKvMB8GA1UdIwQY MBaAFM5Mr2rsyMMQe0txF06ymXTg/YVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAt NzgxYWRhNmJlM2EwLzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAtNzgxYWRhNmJlM2Ew LzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqleicMsE 4+vK/Ml0McD6P2fXExj8MseGa0OeLxS9k73oIz84+Od3/XdzNKru+JUJwHGC9U4t ioa6QdKciXWRz7F5Dhc3KViE0mmbNWXI0LjXqmkAeKN+4L9XbZEjufNuGGmrdBD9 mj6nc2nCEjgRcn8Fd9FkQlstkeJANvnj5LufBSDsWNcBcnbDJ3Bqwxv/s39pps4L YQ/P7YRAtyP2hHKiAR0I5Wp8MgF687X3y+EN47wR+B4tC9vrGulD36dZAuU6qT0i rjzzCtYIbSuVnzTbd7Gb1n/X1xaGlLSdTKuhyOyOTeGGL9vz3kAFkaDvjzzVpm0H vCRchEMn+PoiYg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:23:38 2025 by rpki-client