This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft File: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json) Hash identifier: je1lBnY7WydByuhLKO/OtBc3/1iW0R4OsWltu0EW1ds= Subject key identifier: 4B:B7:6F:4D:3A:A5:90:C7:0E:94:19:5D:83:AF:A6:2E:2C:39:D2:10 Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00 Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300 Certificate serial: 019B3720B2789EB0CA89F31254EB3BFC8278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft Manifest number: 0821 Signing time: Fri 19 Dec 2025 15:00:48 +0000 Manifest this update: Fri 19 Dec 2025 15:00:48 +0000 Manifest next update: Sat 20 Dec 2025 15:00:48 +0000 Files and hashes: 1: CaWXYpKvbSJzF_mYByH9muE8M1Y.roa (hash: EeYUCquk5ABf/u1PAGxiO+fxjOU9b4kobfLQPidgSUo=) 2: FF0ktv0OPoF7jCtMQNOnbF5wwXU.roa (hash: HLhVlsk2Unfze1/M/TFW88bBXMX8DWQaGu5Q6NyMGnM=) 3: kZ7eyrCVE9sgtqrKRokEj4qTgAo.roa (hash: +7Bcl0ExuY0MXzkJn8UI65AlETMnOzrxtQ5UBzKR/Pk=) 4: nhH0f8YrsZbPIXW8xTSorKAhQWg.roa (hash: UkA3IcBbEJENHBzSBQlkD9Qpnz5ghpEJH4gNaI8ZrkE=) 5: vgmzsk5mJlVpOvg90oBMOrzEyD8.roa (hash: mlh/51JI3/xnvn2/YPy/vMvMSrdR3vTjEtNddu6PauM=) 6: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: TMd/iWmMbH2U3HImuAIBzvOYR8nS3X1mu6hrVG2N6tA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:b2:78:9e:b0:ca:89:f3:12:54:eb:3b:fc:82:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300 Validity Not Before: Dec 19 15:00:48 2025 GMT Not After : Dec 20 15:00:48 2025 GMT Subject: CN=4bb76f4d3aa590c70e94195d83afa62e2c39d210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:78:f6:a9:6c:16:19:fb:1d:88:37:1d:e6:c5: 5e:cb:ee:8f:cb:5c:ae:c0:d2:82:98:15:47:8d:8c: b4:fc:b9:96:df:9d:ca:b7:04:f2:b4:42:bd:c8:f1: a4:6b:ab:0a:b3:b7:fb:d6:97:73:aa:7d:b3:a5:e8: eb:5b:f5:ea:43:fb:d0:9b:35:16:ec:5a:52:18:53: a2:2e:66:f7:bb:fb:72:a7:3b:9f:2b:98:fb:ee:d5: 69:59:25:de:79:d2:37:9c:a9:8d:d4:84:a8:82:81: d5:00:6a:85:b5:e4:ff:72:ad:b1:b4:a2:6c:70:d5: 1b:cb:cf:53:be:d2:bb:c4:86:eb:5c:63:61:c1:f1: 48:4f:8f:e2:d6:b5:58:dd:af:f3:a9:83:03:79:a0: 03:ee:ba:23:04:72:fe:57:ef:ca:03:03:4c:f3:9a: a2:29:b0:75:d7:bc:58:93:61:40:9c:06:9a:d7:e7: 7e:8e:8e:33:f4:b5:0b:e0:20:7d:58:c2:e5:13:1d: cf:8f:81:59:22:a9:e3:84:83:7a:74:e0:18:bd:b1: fa:a6:d8:31:32:9d:71:27:0d:d6:de:09:93:29:dd: 78:b9:95:4b:66:5b:79:92:1c:ec:6c:7f:a6:b2:96: 05:5a:42:78:ca:db:f1:d6:3a:fa:53:c8:18:11:be: 9b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B7:6F:4D:3A:A5:90:C7:0E:94:19:5D:83:AF:A6:2E:2C:39:D2:10 X509v3 Authority Key Identifier: keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:41:fe:66:55:f2:ff:c3:a7:c2:73:46:87:9e:1d:ec:da:71: 81:85:3a:6f:4f:9a:94:e3:55:5f:7a:e3:28:c5:41:c2:ac:35: 09:fe:9b:b6:f3:e1:37:0d:c6:41:cf:d9:76:95:61:41:c7:33: 4a:5a:3f:64:a8:4e:a3:09:4e:4e:a2:b1:a6:21:90:1f:87:f3: 48:f2:7a:d6:34:0c:f5:5a:80:5a:58:b3:b6:20:54:9a:b7:44: f3:ac:ac:74:b1:b5:a2:5d:a7:53:27:b4:a6:f4:8b:c9:44:ce: 51:df:68:92:8d:00:37:13:91:e0:cf:19:92:59:d7:dd:69:c6: 2b:4d:91:70:73:31:b6:4a:25:05:b5:79:8c:86:eb:04:27:c1: c1:c2:85:e0:27:29:73:4b:a1:57:aa:b2:b3:5e:fb:8b:79:0d: a5:11:26:63:4b:a9:f0:88:5b:ff:c5:07:5b:a8:b0:81:d3:b2: 61:48:60:4e:ec:f3:06:11:3a:32:b4:78:82:4e:b7:9e:c2:b6: 06:c6:f8:49:64:52:a4:c4:97:37:8b:3e:32:4a:73:1e:c0:58: 43:1d:77:63:16:0a:8e:f5:84:e0:a7:52:4e:eb:44:cd:f8:b9: 8a:58:76:e4:7d:fd:5d:f1:cf:93:8d:f4:bd:a5:f8:6e:73:c0: 3d:57:e0:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3ILJ4nrDKifMSVOs7/IJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0 ZDgzMDAwHhcNMjUxMjE5MTUwMDQ4WhcNMjUxMjIwMTUwMDQ4WjAzMTEwLwYDVQQD Eyg0YmI3NmY0ZDNhYTU5MGM3MGU5NDE5NWQ4M2FmYTYyZTJjMzlkMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63j2qWwWGfsdiDcd5sVey+6Py1yu wNKCmBVHjYy0/LmW353KtwTytEK9yPGka6sKs7f71pdzqn2zpejrW/XqQ/vQmzUW 7FpSGFOiLmb3u/typzufK5j77tVpWSXeedI3nKmN1ISogoHVAGqFteT/cq2xtKJs cNUby89TvtK7xIbrXGNhwfFIT4/i1rVY3a/zqYMDeaAD7rojBHL+V+/KAwNM85qi KbB117xYk2FAnAaa1+d+jo4z9LUL4CB9WMLlEx3Pj4FZIqnjhIN6dOAYvbH6ptgx Mp1xJw3W3gmTKd14uZVLZlt5khzsbH+mspYFWkJ4ytvx1jr6U8gYEb6bFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEu3b006pZDHDpQZXYOvpi4sOdIQMB8GA1UdIwQY MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt YTk4ZWYzMDA4NTgwLzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkH+ZlXy /8OnwnNGh54d7NpxgYU6b0+alONVX3rjKMVBwqw1Cf6btvPhNw3GQc/ZdpVhQccz Slo/ZKhOowlOTqKxpiGQH4fzSPJ61jQM9VqAWliztiBUmrdE86ysdLG1ol2nUye0 pvSLyUTOUd9oko0ANxOR4M8ZklnX3WnGK02RcHMxtkolBbV5jIbrBCfBwcKF4Ccp c0uhV6qys177i3kNpREmY0up8Ihb/8UHW6iwgdOyYUhgTuzzBhE6MrR4gk63nsK2 Bsb4SWRSpMSXN4s+MkpzHsBYQx13YxYKjvWE4KdSTutEzfi5ilh25H39XfHPk430 vaX4bnPAPVfgog== -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:17 2025 by rpki-client