This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json) Hash identifier: yd1iWmSLMTumA34HlbDWaJ8ApggEjlJHOrHi+tgWCt0= Subject key identifier: 60:3A:5A:28:CD:00:CC:7C:E7:CB:40:89:18:5C:17:EF:E1:DD:E4:36 Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e Certificate serial: 019B44DD27719FDC87012E99506C557706F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft Manifest number: 0D80 Signing time: Mon 22 Dec 2025 07:01:42 +0000 Manifest this update: Mon 22 Dec 2025 07:01:42 +0000 Manifest next update: Tue 23 Dec 2025 07:01:42 +0000 Files and hashes: 1: ZIl-tGPYsmILe8aUvhHfFRisBTg.roa (hash: ELX+nfW5VdhOFYsiqhpPo4rEHXv1DoXfvUrKNYNv+iU=) 2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: HE/fkKyn3Ws4cH6YL6JKRp1LJzb4s7wXSh5ebLjkkSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dd:27:71:9f:dc:87:01:2e:99:50:6c:55:77:06:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e Validity Not Before: Dec 22 07:01:42 2025 GMT Not After : Dec 23 07:01:42 2025 GMT Subject: CN=603a5a28cd00cc7ce7cb4089185c17efe1dde436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f1:75:9b:58:3d:df:27:e0:e2:20:56:39:c2: a8:b2:40:e0:78:f0:2b:62:a1:f4:8b:dc:9a:67:ed: 30:3e:c0:94:90:a6:cf:98:19:8d:8c:7b:04:62:05: b6:a0:9e:04:ff:c1:ea:17:af:5b:c6:1e:ed:2c:4e: 04:a4:e1:a6:3f:69:af:18:36:71:e0:66:1d:dc:e7: b4:81:64:d1:f4:b7:fd:2e:4a:c3:d2:76:34:6d:21: 9d:60:de:5e:f1:cc:70:fa:70:0d:bc:4b:97:20:e5: d4:45:bb:d4:42:1d:79:ae:4d:3c:3e:a0:25:a6:ad: 9d:ad:a4:a7:2a:8f:fb:70:b1:c9:da:f1:53:df:25: 33:a0:bf:73:e0:d0:83:cf:ca:4e:f8:68:15:53:3a: 04:e3:a7:f4:0b:4c:9e:c3:45:bf:d8:5d:9f:d9:e6: 66:f8:0a:4d:bf:58:da:e5:d1:e2:ef:30:19:91:2f: d6:15:fc:4a:e4:8c:7d:36:f1:d5:21:a2:95:aa:8c: 0c:70:6b:13:70:ce:83:2a:3a:5f:65:e4:7e:43:45: 6d:97:47:e8:8a:b4:9f:7d:f1:7a:75:2c:0c:fe:e0: b3:74:e0:0f:77:f9:a6:68:d8:a2:5c:2a:10:86:58: 94:50:9d:9c:0e:14:3c:ea:05:32:64:72:1f:aa:84: fe:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3A:5A:28:CD:00:CC:7C:E7:CB:40:89:18:5C:17:EF:E1:DD:E4:36 X509v3 Authority Key Identifier: keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:91:47:d4:ba:e0:cd:19:b9:2f:70:cd:7d:67:99:f0:39:02: ff:9f:cd:9b:9e:ef:1d:11:d6:00:cf:b5:d6:af:d1:56:4c:87: b0:8e:b5:f9:9a:39:ca:de:4a:bd:b4:ab:b5:1f:24:c1:b5:08: cf:45:50:58:91:3c:56:12:6e:13:6f:8c:3c:1f:9c:f5:08:2c: 6f:f6:7e:38:e9:3c:71:c3:0d:c7:dc:d3:cf:b3:30:c8:2d:94: 85:03:61:21:68:36:85:8a:6f:1a:8a:69:4e:75:6d:a2:10:cb: 1f:89:eb:6c:e5:f1:c3:21:a8:31:62:52:68:96:df:ec:d2:c1: 2c:0d:d0:07:4a:95:18:7f:4d:90:85:73:0a:cc:4c:41:d9:fd: 29:50:fd:df:76:0a:d5:e6:f0:fa:81:f5:e0:eb:75:38:3e:17: 1d:54:71:59:ad:8b:7a:ad:d3:9c:f3:61:60:c9:1f:e1:b3:6d: e8:e8:c6:53:91:8f:bc:dc:28:21:33:98:d5:b9:d3:ba:e9:6b: 2b:e1:ba:19:f0:58:40:54:97:14:2e:3f:eb:22:28:a4:6f:d2: 66:ae:66:28:44:98:f3:21:f5:8b:12:a5:fa:80:ab:3a:d0:09: a0:cf:b8:52:a3:fe:a1:f9:af:51:59:0f:dd:b0:f0:85:0b:92: 9f:e5:61:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3Sdxn9yHAS6ZUGxVdwb0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNzQxZTdkZTY1N2U0YTEwZjkzY2E5MmM1MTdhODFiMmMw YjI1MWUwHhcNMjUxMjIyMDcwMTQyWhcNMjUxMjIzMDcwMTQyWjAzMTEwLwYDVQQD Eyg2MDNhNWEyOGNkMDBjYzdjZTdjYjQwODkxODVjMTdlZmUxZGRlNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PF1m1g93yfg4iBWOcKoskDgePAr YqH0i9yaZ+0wPsCUkKbPmBmNjHsEYgW2oJ4E/8HqF69bxh7tLE4EpOGmP2mvGDZx 4GYd3Oe0gWTR9Lf9LkrD0nY0bSGdYN5e8cxw+nANvEuXIOXURbvUQh15rk08PqAl pq2draSnKo/7cLHJ2vFT3yUzoL9z4NCDz8pO+GgVUzoE46f0C0yew0W/2F2f2eZm +ApNv1ja5dHi7zAZkS/WFfxK5Ix9NvHVIaKVqowMcGsTcM6DKjpfZeR+Q0Vtl0fo irSfffF6dSwM/uCzdOAPd/mmaNiiXCoQhliUUJ2cDhQ86gUyZHIfqoT+bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGA6WijNAMx858tAiRhcF+/h3eQ2MB8GA1UdIwQY MBaAFM50Hn3mV+ShD5PKksUXqBssCyUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jOWE5ZDEtYjEzYy00MDNkLWJkMWMt ZDEyYTM3MmY1MTczLzEvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9jOWE5ZDEtYjEzYy00MDNkLWJkMWMtZDEyYTM3MmY1MTcz LzEvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZFH1Lrg zRm5L3DNfWeZ8DkC/5/Nm57vHRHWAM+11q/RVkyHsI61+Zo5yt5KvbSrtR8kwbUI z0VQWJE8VhJuE2+MPB+c9Qgsb/Z+OOk8ccMNx9zTz7MwyC2UhQNhIWg2hYpvGopp TnVtohDLH4nrbOXxwyGoMWJSaJbf7NLBLA3QB0qVGH9NkIVzCsxMQdn9KVD933YK 1ebw+oH14Ot1OD4XHVRxWa2Leq3TnPNhYMkf4bNt6OjGU5GPvNwoITOY1bnTuulr K+G6GfBYQFSXFC4/6yIopG/SZq5mKESY8yH1ixKl+oCrOtAJoM+4UqP+ofmvUVkP 3bDwhQuSn+VhDA== -----END CERTIFICATE-----Generated at Mon Dec 22 15:59:51 2025 by rpki-client