This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json) Hash identifier: uksIMNJh6LcGwMUYTROpfysTji8zQ4Te3rDAx9Xjavg= Subject key identifier: 3D:EC:C9:C2:E7:66:42:2B:0D:ED:BE:23:33:E8:80:B9:79:D4:D5:CF Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d Certificate serial: 019B462608DB45C24EED03CE42733EE1A390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 13:00:56 +0000 Manifest this update: Mon 22 Dec 2025 13:00:56 +0000 Manifest next update: Tue 23 Dec 2025 13:00:56 +0000 Files and hashes: 1: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (hash: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=) 2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: KwFT0mceHV3VCRQ3Tnb8v74oGzdxcV5kzx9574YQlAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:08:db:45:c2:4e:ed:03:ce:42:73:3e:e1:a3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d Validity Not Before: Dec 22 13:00:56 2025 GMT Not After : Dec 23 13:00:56 2025 GMT Subject: CN=3decc9c2e766422b0dedbe2333e880b979d4d5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:34:f0:40:36:12:11:7c:4b:1f:6d:1b:7a: 1f:7a:ba:6c:a4:90:5f:e6:46:56:10:91:c6:83:9b: b5:28:f9:3a:e0:aa:21:6f:d2:b9:6d:b6:de:43:11: 60:63:ec:dd:d5:e3:99:85:85:0b:6d:4b:3d:05:e8: b0:5d:f0:e5:81:60:9a:13:7a:60:2d:f6:13:05:47: 99:10:f5:23:a9:c7:17:e7:a0:b1:35:ed:4c:95:30: e5:1b:2e:99:64:e2:9c:6d:32:fe:31:4d:ea:f6:2d: 7d:cd:e6:4c:88:e9:f9:63:e1:62:a8:c5:63:79:17: ca:ab:9c:3c:a4:3f:b1:c2:b0:82:a0:a7:60:f8:e3: ed:6a:65:24:f7:57:fc:82:08:51:7a:7f:c9:ea:12: 32:ec:24:41:7f:41:16:95:71:7e:fc:2c:77:36:6b: 16:d8:49:30:d1:91:79:3a:51:0a:d6:53:bf:aa:5e: b3:91:75:c7:8c:d0:df:52:f1:84:ff:4c:a2:d5:b3: 14:a1:87:31:37:78:8e:eb:e0:ec:12:c0:96:85:c1: 97:90:cc:ed:ce:b4:ab:df:e2:11:8d:31:b9:06:f4: 31:5c:75:a3:d7:76:7c:f6:44:2a:16:7e:67:3b:bd: ee:54:40:0f:16:35:56:46:91:9f:6d:b1:00:cf:c2: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EC:C9:C2:E7:66:42:2B:0D:ED:BE:23:33:E8:80:B9:79:D4:D5:CF X509v3 Authority Key Identifier: keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2c:3c:80:3f:a7:55:28:15:f5:71:c2:96:ce:dd:67:a9:58: 7c:8c:1b:89:c0:cf:16:d7:8e:4d:28:c9:6a:03:0d:ec:17:0d: 6e:90:2f:77:6e:c8:9a:40:db:ea:5a:e6:11:aa:f6:fd:df:88: 7a:04:de:e0:57:34:66:22:e5:6c:b3:37:4c:56:71:84:56:da: b4:d3:b5:b1:69:3e:6e:ac:88:8b:c1:3a:f1:d6:e5:7a:61:81: 99:55:34:b6:87:29:57:78:1c:cf:ee:eb:d2:31:5a:f4:38:fe: 7d:2f:5b:d5:84:67:d0:6f:f7:fb:6f:23:45:32:31:f2:06:4d: 02:dc:2d:65:1b:7a:f5:d3:aa:1d:e4:33:f2:eb:17:60:3a:d6: c8:08:dd:5a:99:d8:e8:a4:e2:45:ed:8e:d2:71:08:02:ef:d9: 1f:a1:e7:da:25:28:52:26:93:80:1b:d1:ef:d4:00:40:10:91: 98:c1:10:db:d3:71:8b:2d:eb:10:86:7e:37:6f:d0:ce:f2:47: 0b:1f:9d:a7:44:58:d5:b0:9b:1a:61:05:2e:57:83:64:92:5e: 27:fe:b3:ed:e9:fd:30:e7:ae:25:27:23:82:1d:63:b0:f7:06: c4:8e:62:0d:f9:e6:4c:64:f3:81:85:28:42:99:19:96:cf:69: 1c:07:29:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJgjbRcJO7QPOQnM+4aOQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjY2E3NjNmM2RiMjk2NWExZTRlYjBiZjc2YzFjYjg2OGJh YWU0NmQwHhcNMjUxMjIyMTMwMDU2WhcNMjUxMjIzMTMwMDU2WjAzMTEwLwYDVQQD EygzZGVjYzljMmU3NjY0MjJiMGRlZGJlMjMzM2U4ODBiOTc5ZDRkNWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOw08EA2EhF8Sx9tG3oferpspJBf 5kZWEJHGg5u1KPk64Kohb9K5bbbeQxFgY+zd1eOZhYULbUs9BeiwXfDlgWCaE3pg LfYTBUeZEPUjqccX56CxNe1MlTDlGy6ZZOKcbTL+MU3q9i19zeZMiOn5Y+FiqMVj eRfKq5w8pD+xwrCCoKdg+OPtamUk91f8gghRen/J6hIy7CRBf0EWlXF+/Cx3NmsW 2Ekw0ZF5OlEK1lO/ql6zkXXHjNDfUvGE/0yi1bMUoYcxN3iO6+DsEsCWhcGXkMzt zrSr3+IRjTG5BvQxXHWj13Z89kQqFn5nO73uVEAPFjVWRpGfbbEAz8JorQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3sycLnZkIrDe2+IzPogLl51NXPMB8GA1UdIwQY MBaAFMzKdj89spZaHk6wv3bBy4aLquRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2Zjct ZmFjNjNjMDNjMjVhLzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2ZjctZmFjNjNjMDNjMjVh LzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyw8gD+n VSgV9XHCls7dZ6lYfIwbicDPFteOTSjJagMN7BcNbpAvd27ImkDb6lrmEar2/d+I egTe4Fc0ZiLlbLM3TFZxhFbatNO1sWk+bqyIi8E68dblemGBmVU0tocpV3gcz+7r 0jFa9Dj+fS9b1YRn0G/3+28jRTIx8gZNAtwtZRt69dOqHeQz8usXYDrWyAjdWpnY 6KTiRe2O0nEIAu/ZH6Hn2iUoUiaTgBvR79QAQBCRmMEQ29Nxiy3rEIZ+N2/QzvJH Cx+dp0RY1bCbGmEFLleDZJJeJ/6z7en9MOeuJScjgh1jsPcGxI5iDfnmTGTzgYUo QpkZls9pHAcpxQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:38:44 2025 by rpki-client