This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft File: zWXuI7_0LM9nnXN3_k2mldNBrvA.mft (raw, json) Hash identifier: 4FLS5NRJnRJ7VWFfQ3vfLqtrZnWInsryxii9YBF6uY8= Subject key identifier: DE:CB:40:5D:5E:ED:36:D2:13:0D:3A:77:6E:01:67:91:01:C4:67:9D Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0 Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0 Certificate serial: 019B3BA235A0430220F1CDC71A52AB473D65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 12:00:44 +0000 Manifest this update: Sat 20 Dec 2025 12:00:44 +0000 Manifest next update: Sun 21 Dec 2025 12:00:44 +0000 Files and hashes: 1: 8oT7fOBgdsUIIWZBhypDTwG_INQ.roa (hash: WRDiXAITdWeeibEg69ylgGin7yKTe8ComkxuvcQwoIQ=) 2: BkPt0aJALr6XVU6twrxQRhczZl4.roa (hash: GquW1GHGVn0JJFYtKkWU3g1jrNnF5g+2QT4CBc2mNJo=) 3: CT-3l0p9gg6VPqpkvwK6-YeB6pE.roa (hash: RUIJZLk9xg0lGoyDdhD+bJMX1WkdWP7lO6yMUzIdGIw=) 4: QE0murogrnfrhBNI-lIB055tOnQ.roa (hash: Ksxv7cylSwkoYU8exidDycgsWvNKpl/+njghNlj/jds=) 5: XgCZLSw672Y4fHLKF3VdR-oVpqY.roa (hash: ZVPJim/tPagRJuy806SzJxw1pNpmAJ8WphC4x+fYVdY=) 6: dPQfoA35Gpb11fSOLi6nPVp7H2I.roa (hash: X2zxEmCkV2bmI4Ai/dqf9r0pDpMKOTmxsA77tOPqEAo=) 7: zWXuI7_0LM9nnXN3_k2mldNBrvA.crl (hash: 2//B38rPfJKqv6wQsFtxzpiFTueWn7eDmh0E3AwlCz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:35:a0:43:02:20:f1:cd:c7:1a:52:ab:47:3d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0 Validity Not Before: Dec 20 12:00:44 2025 GMT Not After : Dec 21 12:00:44 2025 GMT Subject: CN=decb405d5eed36d2130d3a776e01679101c4679d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:75:e5:42:3a:f3:b0:8a:43:fd:7b:f3:b7: d6:43:c6:c5:98:de:47:fe:da:9d:b8:7b:0c:81:5c: e3:e6:53:79:38:90:ca:1c:80:89:65:ed:ff:28:49: 50:6a:fd:60:24:04:ec:18:bf:46:f6:50:b4:bb:c5: 22:cc:b3:ea:be:89:9b:61:8f:8d:f3:57:b6:bd:68: 9b:e3:57:72:24:b9:39:2e:e6:96:57:86:35:4d:c7: 40:14:a2:ab:9d:d4:1a:01:07:9f:f7:72:d6:84:ea: c4:74:be:b8:4e:a6:af:4c:71:32:25:2d:6f:cc:6f: dd:58:81:af:89:45:c6:14:45:e3:23:5b:30:fd:a3: a5:a1:dc:6e:f4:c9:29:ab:02:73:35:1f:58:81:22: 3b:11:c0:f1:fd:12:53:71:ad:e5:23:0d:06:0b:62: 01:03:43:71:e1:0d:e1:f1:a7:39:19:b2:34:51:01: 1c:84:a2:6f:08:70:02:c5:ef:fc:8b:05:7a:d4:17: 01:03:99:30:07:0b:de:4a:6c:74:21:f5:5a:2c:4d: 50:ce:f4:00:62:43:b5:dd:5e:24:f3:e5:70:3a:d7: 5f:d0:76:43:70:d6:16:c5:72:3e:98:5b:e7:6f:f6: b4:37:20:21:dd:47:db:46:51:7c:37:9d:84:30:41: 06:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CB:40:5D:5E:ED:36:D2:13:0D:3A:77:6E:01:67:91:01:C4:67:9D X509v3 Authority Key Identifier: keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:48:13:2f:b2:98:26:0e:3c:73:06:94:eb:c3:a5:e4:8c:0d: a0:fd:2b:3a:ce:d9:2e:65:3c:19:4e:2f:76:61:7c:09:64:37: 8c:b9:d6:01:4a:70:e2:20:3b:8a:29:87:ee:b7:4d:6a:4e:43: a5:28:44:9f:09:4a:3e:2e:e5:0e:86:46:d8:bd:46:76:9a:6e: a0:a8:1a:af:44:6d:dc:50:c3:75:64:d3:4b:04:28:26:37:36: 96:33:7d:e4:58:dd:bb:ba:75:55:41:34:df:65:4f:4d:79:4a: 3f:d3:ad:91:9e:bd:c0:ff:1b:e5:4f:54:a5:e3:3a:75:49:57: 52:68:c3:97:8d:f5:dd:0a:fb:28:78:f2:93:8e:38:7d:52:ca: 66:7a:82:a7:17:cb:e2:8e:83:0f:80:9f:d0:36:47:1d:f4:74: 41:9b:b3:9e:05:6b:c8:c9:93:91:11:4f:20:a2:0d:61:7a:5c: ee:7e:59:43:cb:ba:86:b5:d1:f8:24:d0:6c:5e:d2:54:4c:5c: 5b:ff:33:cd:e5:44:d8:7d:16:19:b6:fd:9d:87:53:09:27:ff: e6:a9:17:77:e8:05:62:1f:b4:dd:55:cd:a2:d8:56:e4:9e:eb: 3c:30:a5:0b:bf:1a:e9:35:ef:82:f0:9e:b0:14:32:5f:65:e5: f5:36:86:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ojWgQwIg8c3HGlKrRz1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjVlZTIzYmZmNDJjY2Y2NzlkNzM3N2ZlNGRhNjk1ZDM0 MWFlZjAwHhcNMjUxMjIwMTIwMDQ0WhcNMjUxMjIxMTIwMDQ0WjAzMTEwLwYDVQQD EyhkZWNiNDA1ZDVlZWQzNmQyMTMwZDNhNzc2ZTAxNjc5MTAxYzQ2NzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjR15UI687CKQ/1787fWQ8bFmN5H /tqduHsMgVzj5lN5OJDKHICJZe3/KElQav1gJATsGL9G9lC0u8UizLPqvombYY+N 81e2vWib41dyJLk5LuaWV4Y1TcdAFKKrndQaAQef93LWhOrEdL64TqavTHEyJS1v zG/dWIGviUXGFEXjI1sw/aOlodxu9MkpqwJzNR9YgSI7EcDx/RJTca3lIw0GC2IB A0Nx4Q3h8ac5GbI0UQEchKJvCHACxe/8iwV61BcBA5kwBwveSmx0IfVaLE1QzvQA YkO13V4k8+VwOtdf0HZDcNYWxXI+mFvnb/a0NyAh3UfbRlF8N52EMEEGGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7LQF1e7TbSEw06d24BZ5EBxGedMB8GA1UdIwQY MBaAFM1l7iO/9CzPZ51zd/5NppXTQa7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQt NWRjMmZhNmEzNTAzLzEveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQtNWRjMmZhNmEzNTAz LzEveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEgTL7KY Jg48cwaU68Ol5IwNoP0rOs7ZLmU8GU4vdmF8CWQ3jLnWAUpw4iA7iimH7rdNak5D pShEnwlKPi7lDoZG2L1GdppuoKgar0Rt3FDDdWTTSwQoJjc2ljN95Fjdu7p1VUE0 32VPTXlKP9OtkZ69wP8b5U9UpeM6dUlXUmjDl4313Qr7KHjyk444fVLKZnqCpxfL 4o6DD4Cf0DZHHfR0QZuzngVryMmTkRFPIKINYXpc7n5ZQ8u6hrXR+CTQbF7SVExc W/8zzeVE2H0WGbb9nYdTCSf/5qkXd+gFYh+03VXNothW5J7rPDClC78a6TXvgvCe sBQyX2Xl9TaGNw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:07:57 2025 by rpki-client