This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json) Hash identifier: bA2JbE4WJwZsU0Lx5OJjOOP3wDnfBuajFzkSMWC24ww= Subject key identifier: E3:CC:01:3F:36:DB:F7:31:8E:BC:9D:0B:56:6E:B2:3D:8C:6D:B1:13 Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1 Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1 Certificate serial: 019B42B6D3BDA3BE96567761769FA4E0CD4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 21:00:36 +0000 Manifest this update: Sun 21 Dec 2025 21:00:36 +0000 Manifest next update: Mon 22 Dec 2025 21:00:36 +0000 Files and hashes: 1: 3TjgfHBQ3TSR3m9y0lvASlg8xJE.roa (hash: xhRBJVrNxo2QfSSHQs80HTy1SPE+Tw63EIyLJNfW+98=) 2: O9iKTZs-NSCx-2a4wz3hixLMrQo.roa (hash: 9kWdgObviNsf7fH09ytaVex94ijVjQzdPVkcYWojJN8=) 3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: 8OR95hp3GHJeU2MnKsK8FRniCaf6oAsUuudhBdFsVj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:d3:bd:a3:be:96:56:77:61:76:9f:a4:e0:cd:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1 Validity Not Before: Dec 21 21:00:36 2025 GMT Not After : Dec 22 21:00:36 2025 GMT Subject: CN=e3cc013f36dbf7318ebc9d0b566eb23d8c6db113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:59:51:a5:6b:57:1c:07:43:3a:4b:08:7d: 56:e1:12:a1:5e:34:4b:66:eb:5b:83:7a:b1:af:6f: 97:9e:69:c6:fb:1e:21:d7:ea:1c:1d:8d:fd:f6:9e: 08:18:60:8d:66:90:92:2d:95:26:fb:b2:ac:c9:3a: 9e:77:eb:0c:79:10:8b:c0:a8:10:c5:a4:b6:a9:d4: de:8b:5a:ef:ac:af:13:ff:b0:37:26:6d:e3:31:5e: 90:a3:46:fc:b8:60:03:29:f2:5c:d1:e8:5d:f1:a6: 80:e8:a7:e3:48:c0:d3:9a:3a:61:9d:09:48:6b:13: 88:1b:ff:cc:40:bc:4b:33:c2:56:20:88:ec:60:26: 19:53:af:bf:12:05:dd:c5:0f:43:c4:4a:aa:78:c5: c1:21:be:f5:d8:f1:54:7f:36:32:b9:20:34:aa:54: bd:b4:d4:37:97:ab:04:be:48:c6:af:a8:0b:b4:95: 42:82:3f:a5:25:55:7d:5b:1f:51:4c:bf:85:ba:a6: cf:e2:34:9c:60:91:fa:81:1c:17:e8:cd:3c:80:66: b6:b0:c4:37:d0:aa:87:2f:8b:d4:5b:f1:46:7d:ab: c0:34:d8:72:a1:e3:a7:2e:23:b6:98:56:e0:9a:1a: 36:87:32:99:c6:7e:6e:b7:4e:3f:62:81:64:1b:0a: 04:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CC:01:3F:36:DB:F7:31:8E:BC:9D:0B:56:6E:B2:3D:8C:6D:B1:13 X509v3 Authority Key Identifier: keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:36:c4:43:63:da:17:2a:e8:ea:d4:4b:a8:d1:9d:d7:24:d4: 4f:aa:2f:8b:bd:63:a1:80:03:71:d5:9b:a3:2f:b0:35:ba:d7: 4f:b3:5c:ae:ba:0d:37:12:6a:5e:94:cf:c8:21:82:8e:ff:60: f6:13:62:53:4d:03:eb:9b:91:b5:1c:9c:56:a1:f5:01:67:a5: fb:8f:eb:ab:8a:bd:ec:33:8f:22:7b:08:fe:5f:9e:f5:92:68: ac:d8:15:f4:cc:f6:02:69:60:f5:bf:7e:e3:67:1f:8b:1c:fd: aa:95:53:91:02:69:38:83:18:2f:73:c9:ac:a5:e3:c0:eb:25: c6:4e:af:7c:6c:31:76:98:dc:0b:11:50:2c:52:5f:7c:30:a9: ad:cb:13:d2:bb:1f:80:f6:3b:49:87:fb:a5:12:3e:16:fd:15: 39:31:04:6a:85:8e:af:e6:6b:a9:33:da:f8:99:fb:a7:7f:85: 20:27:db:08:75:19:65:54:8a:4c:34:df:37:d3:39:7c:ef:a4: b0:5d:2d:61:f3:f1:11:1e:16:53:29:14:9b:39:2d:54:2a:21: 63:d6:3e:f2:b3:b2:97:2a:c2:24:7a:02:32:a0:8a:71:b7:af: 55:af:a0:82:0c:6a:c0:b8:c0:5c:66:40:97:a9:96:54:e3:e4: 98:56:30:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCttO9o76WVndhdp+k4M1KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYjBjYTIyOTEyNzZkN2QyYTJmOGE3MDUwZjRiYTgyN2Zl OTEwYTEwHhcNMjUxMjIxMjEwMDM2WhcNMjUxMjIyMjEwMDM2WjAzMTEwLwYDVQQD EyhlM2NjMDEzZjM2ZGJmNzMxOGViYzlkMGI1NjZlYjIzZDhjNmRiMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8pZUaVrVxwHQzpLCH1W4RKhXjRL Zutbg3qxr2+XnmnG+x4h1+ocHY399p4IGGCNZpCSLZUm+7KsyTqed+sMeRCLwKgQ xaS2qdTei1rvrK8T/7A3Jm3jMV6Qo0b8uGADKfJc0ehd8aaA6KfjSMDTmjphnQlI axOIG//MQLxLM8JWIIjsYCYZU6+/EgXdxQ9DxEqqeMXBIb712PFUfzYyuSA0qlS9 tNQ3l6sEvkjGr6gLtJVCgj+lJVV9Wx9RTL+FuqbP4jScYJH6gRwX6M08gGa2sMQ3 0KqHL4vUW/FGfavANNhyoeOnLiO2mFbgmho2hzKZxn5ut04/YoFkGwoERwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPMAT822/cxjrydC1Zusj2MbbETMB8GA1UdIwQY MBaAFMywyiKRJ219Ki+KcFD0uoJ/6RChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kMzgzNjAtNGQxZi00MjJlLTkwYWUt MDhiOWUxMTAxYWE3LzEvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9kMzgzNjAtNGQxZi00MjJlLTkwYWUtMDhiOWUxMTAxYWE3 LzEvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3zbEQ2Pa Fyro6tRLqNGd1yTUT6ovi71joYADcdWboy+wNbrXT7NcrroNNxJqXpTPyCGCjv9g 9hNiU00D65uRtRycVqH1AWel+4/rq4q97DOPInsI/l+e9ZJorNgV9Mz2Amlg9b9+ 42cfixz9qpVTkQJpOIMYL3PJrKXjwOslxk6vfGwxdpjcCxFQLFJffDCprcsT0rsf gPY7SYf7pRI+Fv0VOTEEaoWOr+ZrqTPa+Jn7p3+FICfbCHUZZVSKTDTfN9M5fO+k sF0tYfPxER4WUykUmzktVCohY9Y+8rOylyrCJHoCMqCKcbevVa+gggxqwLjAXGZA l6mWVOPkmFYw1g== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:13 2025 by rpki-client