This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json) Hash identifier: H55G8/09Epne8WYfFfiBq+JkOqbZvkbvhUDnnvQWn6U= Subject key identifier: 9A:B3:7E:EE:C4:A5:45:B0:39:91:28:BF:4D:86:C1:67:BA:AC:64:FE Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de Certificate serial: 019B41DBBC5C5428FC80BBCE5B58F56ADFC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft Manifest number: 149A Signing time: Sun 21 Dec 2025 17:01:17 +0000 Manifest this update: Sun 21 Dec 2025 17:01:17 +0000 Manifest next update: Mon 22 Dec 2025 17:01:17 +0000 Files and hashes: 1: cNg_w6FNDPxXpKdIkq9A_UpQRD4.roa (hash: syLuSdgaorQGcBipXNeo5+gDHDzPudwTqzWzLW2dWo4=) 2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: D6BDJzKQBEazKDprpPeJ9b5RhQ4UB+EM58pDKedc3kc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:bc:5c:54:28:fc:80:bb:ce:5b:58:f5:6a:df:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de Validity Not Before: Dec 21 17:01:17 2025 GMT Not After : Dec 22 17:01:17 2025 GMT Subject: CN=9ab37eeec4a545b0399128bf4d86c167baac64fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9f:3e:f8:75:aa:19:d3:6a:ad:56:5d:cd:f2: f8:a4:2c:f8:ad:d6:48:0f:6f:a1:f0:7d:28:97:14: 0b:47:91:02:62:c1:43:22:a5:5c:9a:eb:4c:49:26: ba:b3:3a:d8:a2:81:32:12:bc:3c:f2:fe:ce:11:4b: 97:dc:91:c8:bc:63:af:73:7d:72:d0:fd:c8:ab:0e: d9:98:c1:dc:a6:bf:1a:e4:ad:be:b9:ad:1c:fd:6f: 94:71:f2:ba:69:22:9b:c4:8e:18:8e:2b:0f:a3:77: 06:9c:ad:66:6d:f9:4b:9a:84:b3:cb:43:1f:6a:b3: cc:08:e6:9a:23:5b:97:ea:01:58:39:25:bc:fd:05: bd:72:ca:df:2c:37:30:fd:66:9b:5c:63:12:90:a3: 96:7c:6f:a8:a5:4e:11:55:2b:d4:77:dc:8a:d7:1d: a3:4f:98:e6:c7:c3:30:25:7b:a7:bb:95:b9:87:a3: 69:0d:02:f7:4e:c2:92:4b:49:f0:3b:f2:6b:a3:b5: 55:58:5b:b9:66:84:e8:25:7e:a5:44:54:66:90:2f: 9b:e4:c2:d3:66:c0:a7:a7:99:aa:33:07:86:0b:59: 33:2e:3e:d9:62:52:ad:bb:55:fc:db:4f:73:29:8c: 9d:e1:b3:b6:ed:83:bd:57:9c:d0:eb:3a:ac:be:a4: 4d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B3:7E:EE:C4:A5:45:B0:39:91:28:BF:4D:86:C1:67:BA:AC:64:FE X509v3 Authority Key Identifier: keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:25:c7:ab:e3:e4:6a:d2:bd:71:f9:86:a9:ff:a1:ae:5e:b0: 5e:02:9f:fa:fe:64:fc:c5:87:00:01:45:1a:5d:7f:6b:20:b2: 7d:f3:d4:66:10:51:ea:59:ff:9c:1c:0d:f0:72:31:bc:bb:c0: 69:e3:57:26:4c:1d:64:7f:dc:5e:c2:c6:83:99:98:e6:92:84: d2:ae:81:f4:db:ce:6b:f7:46:41:f2:19:39:45:f5:7b:da:05: 69:14:02:f9:86:df:cb:a6:d7:be:e1:fe:36:0e:59:2f:0b:4e: 4b:55:77:9b:77:bf:3f:92:ed:4b:2c:0d:bd:c1:db:45:81:8b: 24:17:53:01:ae:5e:4c:84:bc:7b:8a:d8:e9:e6:d4:a8:3a:7d: a2:b5:e6:80:86:25:9c:b3:4d:41:ed:7f:14:bd:2e:1b:2a:c5: eb:7a:ab:80:b9:2c:b9:d2:13:75:c3:1f:8a:71:5a:53:37:f5: 91:3d:25:f6:e8:1b:d7:eb:78:a7:dc:40:17:37:c8:52:8b:88: 16:e1:33:20:c5:ea:1a:c1:53:70:58:f2:3b:6a:0d:3e:33:53: 7c:0d:4d:68:d1:9d:86:a7:27:4a:9f:f2:64:2f:ed:c3:b4:d3: 54:1e:15:d6:e6:48:42:e9:0e:66:7a:5f:4c:50:c9:63:89:e7: 96:e7:6b:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB27xcVCj8gLvOW1j1at/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNGRjMzA4ZmU2ZDg2MTIxMDI2Zjk3NDRhZGQ0MGUxMTcz NTQzZGUwHhcNMjUxMjIxMTcwMTE3WhcNMjUxMjIyMTcwMTE3WjAzMTEwLwYDVQQD Eyg5YWIzN2VlZWM0YTU0NWIwMzk5MTI4YmY0ZDg2YzE2N2JhYWM2NGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn58++HWqGdNqrVZdzfL4pCz4rdZI D2+h8H0olxQLR5ECYsFDIqVcmutMSSa6szrYooEyErw88v7OEUuX3JHIvGOvc31y 0P3Iqw7ZmMHcpr8a5K2+ua0c/W+UcfK6aSKbxI4YjisPo3cGnK1mbflLmoSzy0Mf arPMCOaaI1uX6gFYOSW8/QW9csrfLDcw/WabXGMSkKOWfG+opU4RVSvUd9yK1x2j T5jmx8MwJXunu5W5h6NpDQL3TsKSS0nwO/Jro7VVWFu5ZoToJX6lRFRmkC+b5MLT ZsCnp5mqMweGC1kzLj7ZYlKtu1X8209zKYyd4bO27YO9V5zQ6zqsvqRNSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqzfu7EpUWwOZEov02GwWe6rGT+MB8GA1UdIwQY MBaAFMxNwwj+bYYSECb5dErdQOEXNUPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGNmYTYtYzQ0Ni00ODg2LTk2ZWQt ZDIyNmEzYjFmNDJkLzEvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGNmYTYtYzQ0Ni00ODg2LTk2ZWQtZDIyNmEzYjFmNDJk LzEvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyXHq+Pk atK9cfmGqf+hrl6wXgKf+v5k/MWHAAFFGl1/ayCyffPUZhBR6ln/nBwN8HIxvLvA aeNXJkwdZH/cXsLGg5mY5pKE0q6B9NvOa/dGQfIZOUX1e9oFaRQC+Ybfy6bXvuH+ Ng5ZLwtOS1V3m3e/P5LtSywNvcHbRYGLJBdTAa5eTIS8e4rY6ebUqDp9orXmgIYl nLNNQe1/FL0uGyrF63qrgLksudITdcMfinFaUzf1kT0l9ugb1+t4p9xAFzfIUouI FuEzIMXqGsFTcFjyO2oNPjNTfA1NaNGdhqcnSp/yZC/tw7TTVB4V1uZIQukOZnpf TFDJY4nnludrIw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:15 2025 by rpki-client