This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft File: zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json) Hash identifier: nfRXdJrXmyag709Hvizf3/Qmdl75dVrmkoufbnozWUU= Subject key identifier: 6F:EE:58:47:C7:A7:F6:92:A7:20:52:E1:0C:21:D9:41:A8:E7:22:40 Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44 Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44 Certificate serial: 019B6C8E7CAB4223CBFE97E0F23B58F78900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 00:00:35 +0000 Manifest this update: Tue 30 Dec 2025 00:00:35 +0000 Manifest next update: Wed 31 Dec 2025 00:00:35 +0000 Files and hashes: 1: 15l6GcmtBitHJjc-TIx2jp_ftA0.roa (hash: WUSHAd/2f1J5gqrAUBHY0LWX82YSkJayrODt6gkvkGA=) 2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: IpACBK9/pNEUuQkNo/BnOqtM1c0Rmz8vYUbEn9emvM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:8e:7c:ab:42:23:cb:fe:97:e0:f2:3b:58:f7:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44 Validity Not Before: Dec 30 00:00:35 2025 GMT Not After : Dec 31 00:00:35 2025 GMT Subject: CN=6fee5847c7a7f692a72052e10c21d941a8e72240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:22:36:59:2d:5f:76:e6:49:83:6e:27:c9:c4: 35:d2:f2:d8:61:15:3c:66:b9:1e:58:e1:e0:de:81: 9f:e5:af:01:9a:1e:6f:06:e1:a9:ef:33:82:55:23: 22:c1:f8:0c:38:51:eb:db:07:c5:3b:4c:0a:35:a6: 1b:ea:d7:cf:f9:d5:26:a4:20:26:d2:6f:11:3b:b4: e6:7e:0a:12:dc:e4:0b:59:21:c1:5f:ef:76:e3:53: 3a:18:02:7b:15:e2:6f:ef:0c:ab:15:af:3a:c3:76: 9f:53:4b:f5:85:b5:ef:22:1a:9b:3a:57:67:e8:82: 8d:04:9d:61:97:0d:c1:fd:b2:c7:ed:8c:ba:db:92: 76:29:5d:72:62:77:68:ad:3e:8d:14:e1:18:99:3f: 13:4f:35:c3:1c:ad:59:30:c8:34:5b:c0:41:05:8f: d3:b9:d2:02:34:f3:ce:b5:ec:8b:13:9e:26:8b:63: b9:a2:9e:62:69:be:8a:c5:02:96:e4:78:d1:82:91: b2:ef:4e:b3:bf:07:fe:77:47:f5:40:50:28:01:e3: e0:bf:60:62:5a:27:f2:2a:7c:ad:b0:dc:a1:ec:29: e8:20:75:26:f9:9a:52:90:9e:37:3b:c5:92:3c:ea: 9f:42:ed:86:fe:97:bd:c4:97:04:35:74:b4:e3:3a: 6a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EE:58:47:C7:A7:F6:92:A7:20:52:E1:0C:21:D9:41:A8:E7:22:40 X509v3 Authority Key Identifier: keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:34:d6:a9:2a:9e:e7:f1:1e:f7:3b:25:2f:0b:f0:93:bf:e8: b5:0e:ce:7f:69:19:36:fe:4c:0d:f0:1c:c8:80:42:f4:2c:2e: 51:7c:fd:ff:3f:4d:55:2e:cc:ee:2c:7c:f6:3b:00:af:4f:17: f0:a0:2e:14:a0:00:37:71:ef:4f:48:0a:6b:52:ae:ca:2e:35: 7c:87:d7:b5:1f:8e:22:81:b5:00:55:25:69:a9:3f:17:34:1f: 71:77:d9:8d:2e:b4:e6:04:3b:c2:92:4f:45:48:22:e1:72:3b: c1:c3:ad:b8:71:9f:4c:09:15:95:08:66:58:3d:8c:10:00:4a: d8:27:45:17:1e:68:53:20:2e:b0:8b:03:9a:e7:46:34:b9:08: 45:22:1c:79:bd:2f:37:51:45:90:ee:90:05:46:9a:f8:df:a5: 85:80:9b:c3:67:b7:f5:0d:57:1d:46:db:6f:fe:c8:e1:28:01: 71:6a:e5:6a:fb:51:43:9c:b7:1c:bf:40:90:96:95:d6:6a:6e: e3:3b:31:5b:29:9a:2a:91:f4:72:e5:4d:04:c8:32:5e:55:f7: c0:7b:b6:7b:23:67:74:70:9b:20:d8:60:70:39:0d:90:8b:f4: 5c:07:6e:c9:72:87:b0:0d:6b:64:00:bb:6c:df:40:f6:a7:74: 75:eb:09:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsjnyrQiPL/pfg8jtY94kAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDc5NDdlYzgzMTM2ZWY5NDQ2MzE2MjM1Njg2YTkxMDI1 NjJjNDQwHhcNMjUxMjMwMDAwMDM1WhcNMjUxMjMxMDAwMDM1WjAzMTEwLwYDVQQD Eyg2ZmVlNTg0N2M3YTdmNjkyYTcyMDUyZTEwYzIxZDk0MWE4ZTcyMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyI2WS1fduZJg24nycQ10vLYYRU8 ZrkeWOHg3oGf5a8Bmh5vBuGp7zOCVSMiwfgMOFHr2wfFO0wKNaYb6tfP+dUmpCAm 0m8RO7TmfgoS3OQLWSHBX+9241M6GAJ7FeJv7wyrFa86w3afU0v1hbXvIhqbOldn 6IKNBJ1hlw3B/bLH7Yy625J2KV1yYndorT6NFOEYmT8TTzXDHK1ZMMg0W8BBBY/T udICNPPOteyLE54mi2O5op5iab6KxQKW5HjRgpGy706zvwf+d0f1QFAoAePgv2Bi WifyKnytsNyh7CnoIHUm+ZpSkJ43O8WSPOqfQu2G/pe9xJcENXS04zpqpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/uWEfHp/aSpyBS4Qwh2UGo5yJAMB8GA1UdIwQY MBaAFMzXlH7IMTbvlEYxYjVoapECVixEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUt Mjg4NzY2MDYxZDk4LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUtMjg4NzY2MDYxZDk4 LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjTWqSqe 5/Ee9zslLwvwk7/otQ7Of2kZNv5MDfAcyIBC9CwuUXz9/z9NVS7M7ix89jsAr08X 8KAuFKAAN3HvT0gKa1Kuyi41fIfXtR+OIoG1AFUlaak/FzQfcXfZjS605gQ7wpJP RUgi4XI7wcOtuHGfTAkVlQhmWD2MEABK2CdFFx5oUyAusIsDmudGNLkIRSIceb0v N1FFkO6QBUaa+N+lhYCbw2e39Q1XHUbbb/7I4SgBcWrlavtRQ5y3HL9AkJaV1mpu 4zsxWymaKpH0cuVNBMgyXlX3wHu2eyNndHCbINhgcDkNkIv0XAduyXKHsA1rZAC7 bN9A9qd0desJiw== -----END CERTIFICATE-----Generated at Tue Dec 30 07:16:26 2025 by rpki-client