This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft File: znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json) Hash identifier: OpIQnBpuW99uk9g88QSGYkGxew5AicPXJWSMUk1ypR8= Subject key identifier: B9:F9:28:B7:AE:76:FD:09:DD:1B:EF:5D:39:27:89:A2:26:52:2D:17 Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65 Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265 Certificate serial: 019B35A028127B74F1E9A15BCD3C106D012F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 08:00:47 +0000 Manifest this update: Fri 19 Dec 2025 08:00:47 +0000 Manifest next update: Sat 20 Dec 2025 08:00:47 +0000 Files and hashes: 1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=) 2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=) 3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=) 4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: /54tHqP16XlMRJWcfqC+06cDrk89PKSYaeb1GSYxz9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:28:12:7b:74:f1:e9:a1:5b:cd:3c:10:6d:01:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265 Validity Not Before: Dec 19 08:00:47 2025 GMT Not After : Dec 20 08:00:47 2025 GMT Subject: CN=b9f928b7ae76fd09dd1bef5d392789a226522d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:26:f4:2b:1c:dd:52:29:b8:2c:67:1d:ea: d9:85:96:b4:bc:6e:7b:2f:c6:e0:c8:1d:3d:2f:54: c9:0e:8a:87:14:7c:1d:af:7c:39:64:c4:20:2c:90: 67:86:3e:27:f1:8f:d2:90:01:d8:2e:ca:7b:9d:17: 4b:e5:bf:2b:30:71:5f:df:46:80:1f:f5:e9:cd:65: 55:67:46:c6:6f:dc:b5:a6:d2:77:16:02:a2:0e:97: 8f:99:d7:ba:ce:93:c1:cb:ee:50:0f:04:ea:1a:8f: a1:da:08:80:b2:d9:97:c2:c9:92:91:6f:79:cf:2f: 19:f7:57:0c:c3:28:97:be:6e:ca:ba:93:c5:1d:4a: 9e:67:c1:2e:1f:e7:da:e8:57:c6:e5:09:d4:ca:6c: b1:71:dd:e9:cf:b0:76:af:d7:aa:d9:8f:e7:a1:80: 1e:c8:3b:a9:5d:56:00:aa:2f:87:df:90:ec:1f:7a: 8c:af:d7:25:ec:82:a7:2d:39:07:e8:11:df:51:16: 08:3d:c7:77:1a:86:c6:c6:5f:1f:b6:a6:9d:ea:6a: d7:8b:17:1e:5d:4b:be:d1:5d:a5:84:89:a2:a0:42: 90:6e:0e:69:93:6d:23:a9:7c:28:c9:c0:cd:dd:2c: a9:ea:0c:60:c4:80:b1:53:58:ea:c4:ee:67:0c:da: e3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F9:28:B7:AE:76:FD:09:DD:1B:EF:5D:39:27:89:A2:26:52:2D:17 X509v3 Authority Key Identifier: keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ac:ba:85:75:98:d7:68:1d:87:3a:c4:40:99:89:ba:70:72: 38:68:9b:1d:d9:d2:7e:1f:72:cd:f3:d3:77:e5:e6:e0:6d:f6: 55:7d:e3:26:5d:a0:84:c6:f4:d9:bd:2e:55:58:40:71:f7:b4: c5:df:14:c8:42:32:7e:8b:60:43:fe:c0:c7:26:db:62:6f:bc: 31:67:1d:af:60:7b:59:51:b8:6c:c8:fb:72:8e:d2:d7:c1:ac: 24:ff:b3:29:7c:4e:0c:04:3b:5a:e5:b3:e0:65:57:f7:be:6a: 0d:f6:de:ea:e2:f9:8b:ca:71:39:b5:b8:f5:d8:30:0e:56:5d: 2a:37:b7:b8:f1:90:e8:bb:1a:78:81:dc:8a:be:08:a1:8b:4e: cb:47:b8:b9:08:4c:1c:50:c8:af:48:df:83:de:9e:2a:c7:e5: 33:51:d2:fa:ec:ed:a4:b3:30:15:8a:77:34:13:92:92:d7:aa: 57:0e:9c:49:3e:c2:d5:32:d4:eb:82:d4:a5:a7:82:5b:8f:85: 8b:fc:45:50:84:eb:3f:ec:c9:d1:1d:b4:8d:88:01:e4:12:a7: a9:e1:7e:57:d3:bb:45:a0:c9:91:45:3d:b3:dd:dd:1c:43:c1: 82:83:55:65:28:c9:1d:38:06:30:cd:ea:66:a5:47:89:b6:71: 42:e3:c1:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oCgSe3Tx6aFbzTwQbQEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNzA0ODU4YjY0MzI2NmY3YzcxMDc3MjFjOThmMmJhOTNk ZDUyNjUwHhcNMjUxMjE5MDgwMDQ3WhcNMjUxMjIwMDgwMDQ3WjAzMTEwLwYDVQQD EyhiOWY5MjhiN2FlNzZmZDA5ZGQxYmVmNWQzOTI3ODlhMjI2NTIyZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk8m9Csc3VIpuCxnHerZhZa0vG57 L8bgyB09L1TJDoqHFHwdr3w5ZMQgLJBnhj4n8Y/SkAHYLsp7nRdL5b8rMHFf30aA H/XpzWVVZ0bGb9y1ptJ3FgKiDpePmde6zpPBy+5QDwTqGo+h2giAstmXwsmSkW95 zy8Z91cMwyiXvm7KupPFHUqeZ8EuH+fa6FfG5QnUymyxcd3pz7B2r9eq2Y/noYAe yDupXVYAqi+H35DsH3qMr9cl7IKnLTkH6BHfURYIPcd3GobGxl8ftqad6mrXixce XUu+0V2lhImioEKQbg5pk20jqXwoycDN3Syp6gxgxICxU1jqxO5nDNrj2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLn5KLeudv0J3RvvXTkniaImUi0XMB8GA1UdIwQY MBaAFM5wSFi2QyZvfHEHchyY8rqT3VJlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5CSVdMWkRKbTk4Y1FkeUhKanl1cFBkVW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wMjdhYWUtNDkyMi00MmE5LWE0Yzkt MzhmODBkNjk2MWVjLzEvem5CSVdMWkRKbTk4Y1FkeUhKanl1cFBkVW1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wMjdhYWUtNDkyMi00MmE5LWE0YzktMzhmODBkNjk2MWVj LzEvem5CSVdMWkRKbTk4Y1FkeUhKanl1cFBkVW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZay6hXWY 12gdhzrEQJmJunByOGibHdnSfh9yzfPTd+Xm4G32VX3jJl2ghMb02b0uVVhAcfe0 xd8UyEIyfotgQ/7AxybbYm+8MWcdr2B7WVG4bMj7co7S18GsJP+zKXxODAQ7WuWz 4GVX975qDfbe6uL5i8pxObW49dgwDlZdKje3uPGQ6LsaeIHcir4IoYtOy0e4uQhM HFDIr0jfg96eKsflM1HS+uztpLMwFYp3NBOSkteqVw6cST7C1TLU64LUpaeCW4+F i/xFUITrP+zJ0R20jYgB5BKnqeF+V9O7RaDJkUU9s93dHEPBgoNVZSjJHTgGMM3q ZqVHibZxQuPBEw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:40:19 2025 by rpki-client