This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json) Hash identifier: wsNsDUMuY8KDRyJOxmqE6EIcK2Nt3ntbwS57HpK8D14= Subject key identifier: 43:1A:3D:06:D6:7A:E3:78:8B:05:ED:6F:98:6E:19:DD:7F:D7:DF:AB Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23 Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023 Certificate serial: 019B3E6DC9713F166F067DB459EAF39C92E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:02:20 +0000 Manifest this update: Sun 21 Dec 2025 01:02:20 +0000 Manifest next update: Mon 22 Dec 2025 01:02:20 +0000 Files and hashes: 1: 67RitCBEehLxJhsm7693l29x0Rs.roa (hash: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=) 2: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (hash: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=) 3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: ANns/IE7+61i1pJw+mBmLNIOamJTFE6gTiw3PytVCRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:c9:71:3f:16:6f:06:7d:b4:59:ea:f3:9c:92:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023 Validity Not Before: Dec 21 01:02:20 2025 GMT Not After : Dec 22 01:02:20 2025 GMT Subject: CN=431a3d06d67ae3788b05ed6f986e19dd7fd7dfab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:78:ba:c9:e5:af:e7:6c:ab:f0:53:aa:8e: 18:29:91:c4:39:19:a5:29:6a:95:d0:42:ae:8c:6b: 47:55:41:2c:35:84:ee:1f:6b:7f:1b:ab:0e:cc:21: 2c:5b:27:ed:ca:b6:4b:22:8d:18:35:11:33:24:b8: 9f:e7:28:d9:8b:a3:1e:0b:86:bc:f0:bb:b8:f4:01: 8e:f7:74:c8:b5:2d:14:71:1d:53:a1:a1:f9:f2:4c: 6f:82:69:d6:2d:54:85:f9:a9:83:c4:34:8b:cb:a6: c0:26:bb:86:52:f9:31:88:03:ca:86:8b:fc:5e:a9: ee:f3:9a:4d:23:39:e9:cb:fa:a7:ab:41:56:f2:61: a4:02:00:05:3e:50:2a:dc:dd:93:72:e2:7c:ca:c2: d2:12:17:22:a8:69:01:f9:15:b9:f1:1e:12:45:8c: b7:f5:e6:08:75:f0:cd:71:05:a4:55:94:eb:b5:e6: e0:de:f2:f0:4b:ad:88:a7:29:f7:1f:d3:0f:c6:a8: ca:f0:91:2a:2d:f3:d0:64:a4:51:48:17:ca:70:41: 53:6a:ae:5e:69:87:c8:33:e3:5e:34:e8:e8:28:58: f1:ce:a9:be:17:41:c7:c5:f0:4a:23:6e:39:90:9f: 22:8b:5b:6b:67:6a:d8:ba:00:c6:a7:63:fe:b6:a7: 1e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1A:3D:06:D6:7A:E3:78:8B:05:ED:6F:98:6E:19:DD:7F:D7:DF:AB X509v3 Authority Key Identifier: keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:a4:a9:ba:41:6b:b7:26:37:05:dd:8c:3c:58:c4:d2:de:38: 35:e6:9a:67:0a:42:bb:3a:03:08:d2:3c:4c:88:c8:cd:d8:c6: 85:9f:da:5e:a6:57:d8:e6:4c:1c:f2:81:91:1d:b8:ab:13:13: 48:1d:96:f8:2a:b4:b1:be:53:b6:cb:3f:4f:58:8d:30:a6:ad: 01:9e:e5:ab:86:6f:90:10:4c:e1:b4:ec:32:64:2d:57:c1:f4: bc:31:97:bf:66:01:9d:24:f3:4d:1a:32:93:5d:ca:cb:bb:f9: d5:99:e2:ab:2f:9d:5f:1a:df:ca:c3:b2:39:9d:6e:b5:1c:99: d5:92:16:df:15:c9:ea:e1:e3:e1:90:aa:c9:ed:4e:bc:9c:a4: 7c:40:ba:6b:a6:c6:2b:6f:63:fe:5b:44:6a:d9:0b:56:13:af: 3b:e2:d2:aa:20:ce:7d:b5:b6:1a:e7:9d:eb:f2:79:32:06:73: 69:34:8a:03:08:25:c0:eb:f2:f2:11:41:39:50:10:23:94:0b: 8e:ac:0a:01:af:01:20:a1:af:aa:18:d5:ac:33:9b:43:c7:a0: 9b:2e:85:b6:38:79:40:de:a7:3a:2a:47:28:33:4a:96:db:55: a1:62:cd:f6:7d:4c:c4:2d:5d:4d:54:a6:c3:02:6a:a4:6b:76: 89:5d:30:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bclxPxZvBn20WerznJLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjN2FjNDdhMTlmNjZmNDE4Mzk3ZWVhNWZlZjE1YTA3ZmYy YzAwMjMwHhcNMjUxMjIxMDEwMjIwWhcNMjUxMjIyMDEwMjIwWjAzMTEwLwYDVQQD Eyg0MzFhM2QwNmQ2N2FlMzc4OGIwNWVkNmY5ODZlMTlkZDdmZDdkZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAl4usnlr+dsq/BTqo4YKZHEORml KWqV0EKujGtHVUEsNYTuH2t/G6sOzCEsWyftyrZLIo0YNREzJLif5yjZi6MeC4a8 8Lu49AGO93TItS0UcR1ToaH58kxvgmnWLVSF+amDxDSLy6bAJruGUvkxiAPKhov8 Xqnu85pNIznpy/qnq0FW8mGkAgAFPlAq3N2TcuJ8ysLSEhciqGkB+RW58R4SRYy3 9eYIdfDNcQWkVZTrtebg3vLwS62Ipyn3H9MPxqjK8JEqLfPQZKRRSBfKcEFTaq5e aYfIM+NeNOjoKFjxzqm+F0HHxfBKI245kJ8ii1trZ2rYugDGp2P+tqce7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMaPQbWeuN4iwXtb5huGd1/19+rMB8GA1UdIwQY MBaAFMx6xHoZ9m9Bg5fupf7xWgf/LAAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2Et M2VlMWU2OTkxMjY5LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2EtM2VlMWU2OTkxMjY5 LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzqSpukFr tyY3Bd2MPFjE0t44NeaaZwpCuzoDCNI8TIjIzdjGhZ/aXqZX2OZMHPKBkR24qxMT SB2W+Cq0sb5Ttss/T1iNMKatAZ7lq4ZvkBBM4bTsMmQtV8H0vDGXv2YBnSTzTRoy k13Ky7v51Zniqy+dXxrfysOyOZ1utRyZ1ZIW3xXJ6uHj4ZCqye1OvJykfEC6a6bG K29j/ltEatkLVhOvO+LSqiDOfbW2Gued6/J5MgZzaTSKAwglwOvy8hFBOVAQI5QL jqwKAa8BIKGvqhjVrDObQ8egmy6Ftjh5QN6nOipHKDNKlttVoWLN9n1MxC1dTVSm wwJqpGt2iV0wCA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:49:25 2025 by rpki-client