This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft File: rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json) Hash identifier: IrD8v+OiMJ+waj16sJBr59ISiSWvmmw/qSKtIxSAAOQ= Subject key identifier: 79:07:15:82:86:96:3F:2A:0C:2B:63:92:85:B4:F3:89:44:83:1A:8B Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Certificate serial: 019B28F71C5F9CB42DE4BE49969EDF36FD1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft Manifest number: 1451 Signing time: Tue 16 Dec 2025 21:00:41 +0000 Manifest this update: Tue 16 Dec 2025 21:00:41 +0000 Manifest next update: Wed 17 Dec 2025 21:00:41 +0000 Files and hashes: 1: BF1bDepTrbKLANgNAxAuU4DpJj8.roa (hash: NVRWLfzQET9uM2U7kiX4t5MiOcl02yBYC6pVmP2/SUk=) 2: KjCkzUvZKYNWeQf2zi9Nm-JvqSQ.roa (hash: xUB/m7Q6H3DaFEVeyIG7vRKsPq1kqSbSavs4m7VW+5g=) 3: apwK_C2jLXYtjM1_rywqkSP6SXM.roa (hash: Brus3GnJlwWOcIOQznlG1EIg3MnsNQ8Kg3KCHt4fQYM=) 4: m7HwybdiPGFWv-KxpiFIAeDc2hA.roa (hash: qaCqJ2OehDpyBjrRuAzdPAOS4B3DtTV2bEBs1eCR7UY=) 5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: MXnxHLTxiCai9GoeY57MPAyTjoxj+xPvHAsWFgUGCsk=) 6: wserKdrEjvEaiB1L0as5xEScHOo.roa (hash: p6zeLIjpAjhjz53tHHHfbEf0nj4XjPM97zZUxXWhby4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:f7:1c:5f:9c:b4:2d:e4:be:49:96:9e:df:36:fd:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Validity Not Before: Dec 16 21:00:41 2025 GMT Not After : Dec 17 21:00:41 2025 GMT Subject: CN=7907158286963f2a0c2b639285b4f38944831a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:83:94:c7:bd:64:b9:c5:e6:37:fa:a1:3b:b4: 14:4d:00:28:9a:bd:39:39:c0:63:38:91:11:ea:5e: 74:a5:34:ca:4d:34:c8:3c:8b:20:2c:c7:f8:d1:54: 9b:71:02:91:bc:a5:92:ae:5a:66:22:9b:b7:b2:7b: 8c:aa:17:f5:35:0c:cc:e1:a4:e3:78:f2:e0:1d:62: 57:18:b3:af:c2:87:98:4c:85:c2:2b:2e:59:e0:a7: 94:24:1a:96:e9:a6:44:2f:98:5c:58:7b:ef:d6:07: aa:f7:c3:e1:db:df:4a:f3:49:2c:84:18:5c:74:e7: fe:3e:3d:2a:8b:79:13:9a:b8:87:56:62:e4:31:a2: 40:ab:b4:5f:4c:b4:eb:ac:64:71:b6:04:3a:37:03: 38:98:17:d2:ae:d1:13:4e:b1:e0:98:c8:5c:a9:6c: da:9c:24:20:b1:83:df:b4:73:be:31:fd:3f:c5:10: d0:7c:e9:7c:47:06:26:6d:c4:d4:5d:61:4e:80:bc: 57:8d:56:75:b7:7e:48:6c:32:30:90:3f:9b:32:26: ca:7f:3d:1d:b6:31:75:20:f3:0f:23:2d:c9:04:d3: 43:42:48:f5:d8:4f:28:4b:52:62:7f:12:99:d7:e3: a9:6f:9b:9d:24:ad:59:c4:3c:d7:cc:63:41:d3:b9: f7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:07:15:82:86:96:3F:2A:0C:2B:63:92:85:B4:F3:89:44:83:1A:8B X509v3 Authority Key Identifier: keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:44:3c:26:33:48:ff:9f:fa:db:49:9e:cf:78:6c:49:1d:76: 5f:3e:99:91:a7:62:ae:31:e6:27:de:24:17:7f:d0:81:87:63: da:59:2f:66:3f:2e:cc:7a:85:a6:ea:cf:8d:63:23:51:58:47: b6:cd:56:83:9a:52:94:b5:f6:fb:8c:dd:d1:e4:17:90:16:af: 6b:3e:9f:7d:e2:9e:ac:38:75:03:4f:e8:45:4d:0d:fc:6f:65: 24:df:b1:73:54:4b:ef:71:8a:92:70:7f:05:ab:42:6f:1f:19: 88:16:dd:2c:98:08:f5:fc:b0:ea:86:82:a2:5b:17:bb:e0:22: 90:87:53:95:01:a8:da:7d:bf:11:73:c7:5a:4d:ce:2d:35:26: 46:0f:33:70:67:40:d0:8b:23:78:2c:5b:f0:4d:cc:0f:ef:9b: a3:05:29:2d:18:2a:6d:eb:ec:42:09:1a:31:47:9d:65:a0:0b: 63:39:59:d9:00:cf:69:fe:99:22:3f:32:41:c8:aa:59:b3:95: 2a:a9:68:0d:4f:55:61:d3:1f:de:ba:dc:f3:76:22:7c:d0:96: 08:3d:9b:a5:03:cf:36:00:8e:af:b6:5d:f5:1d:dd:0c:12:50: 46:bb:0d:d2:81:3f:c8:35:a1:50:3b:16:0c:24:61:3b:43:4c: 10:6b:61:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZso9xxfnLQt5L5Jlp7fNv0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj NWZlYzIwHhcNMjUxMjE2MjEwMDQxWhcNMjUxMjE3MjEwMDQxWjAzMTEwLwYDVQQD Eyg3OTA3MTU4Mjg2OTYzZjJhMGMyYjYzOTI4NWI0ZjM4OTQ0ODMxYThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oOUx71kucXmN/qhO7QUTQAomr05 OcBjOJER6l50pTTKTTTIPIsgLMf40VSbcQKRvKWSrlpmIpu3snuMqhf1NQzM4aTj ePLgHWJXGLOvwoeYTIXCKy5Z4KeUJBqW6aZEL5hcWHvv1geq98Ph299K80kshBhc dOf+Pj0qi3kTmriHVmLkMaJAq7RfTLTrrGRxtgQ6NwM4mBfSrtETTrHgmMhcqWza nCQgsYPftHO+Mf0/xRDQfOl8RwYmbcTUXWFOgLxXjVZ1t35IbDIwkD+bMibKfz0d tjF1IPMPIy3JBNNDQkj12E8oS1JifxKZ1+Opb5udJK1ZxDzXzGNB07n3OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkHFYKGlj8qDCtjkoW084lEgxqLMB8GA1UdIwQY MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt YTNhMTNlM2E3ZDgwLzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkQ8JjNI /5/620mez3hsSR12Xz6ZkadirjHmJ94kF3/QgYdj2lkvZj8uzHqFpurPjWMjUVhH ts1Wg5pSlLX2+4zd0eQXkBavaz6ffeKerDh1A0/oRU0N/G9lJN+xc1RL73GKknB/ BatCbx8ZiBbdLJgI9fyw6oaColsXu+AikIdTlQGo2n2/EXPHWk3OLTUmRg8zcGdA 0IsjeCxb8E3MD++bowUpLRgqbevsQgkaMUedZaALYzlZ2QDPaf6ZIj8yQciqWbOV KqloDU9VYdMf3rrc83YifNCWCD2bpQPPNgCOr7Zd9R3dDBJQRrsN0oE/yDWhUDsW DCRhO0NMEGth/Q== -----END CERTIFICATE-----Generated at Tue Dec 16 22:35:00 2025 by rpki-client