This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json) Hash identifier: y7vLB7xRZUYpX1HNOlDJBTbA7mc7SK/SRHZ63t8pVPM= Subject key identifier: B2:A2:F7:9F:EE:4D:31:46:86:50:C5:B3:4A:A0:B1:25:FE:C4:F1:F2 Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d Certificate serial: 019B42B70A43576F19DE3C0C80A54D410FB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 21:00:50 +0000 Manifest this update: Sun 21 Dec 2025 21:00:50 +0000 Manifest next update: Mon 22 Dec 2025 21:00:50 +0000 Files and hashes: 1: 85tLColHz2gs1kcjcHIOLXPmYtQ.roa (hash: 51Me4gSLKgXfTiir1H4AL3W1LXbfR1eI6xG1CchHRO8=) 2: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: vCEo0v6dRoEp03FlImrn1cgsQJknVTthlYla24wfeA4=) 3: b6QMF74wF01wlBWgUywRsmP3cGw.roa (hash: mCNVR2N9fZow4RurrMaom9Uu+qamMdZIjWplYZcfRCk=) 4: gVLVKsEHBgFO0HBzlpPgO1QXFuY.roa (hash: fKAtB5hizqASF48vAvN9nOmMRZOKAzC8UCmGWDZ4vi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:0a:43:57:6f:19:de:3c:0c:80:a5:4d:41:0f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d Validity Not Before: Dec 21 21:00:50 2025 GMT Not After : Dec 22 21:00:50 2025 GMT Subject: CN=b2a2f79fee4d31468650c5b34aa0b125fec4f1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:be:57:82:1c:c4:6c:4d:4a:26:31:43:56: e0:65:82:bd:e9:84:ca:06:30:48:43:5d:29:de:34: ba:71:92:70:0e:2e:0b:cd:3a:94:5a:d0:18:32:e4: 54:65:e7:4a:fb:eb:77:17:ed:04:12:92:1a:27:04: 6d:7d:53:92:52:6e:18:56:6a:03:6a:ea:0e:a6:0c: 17:ff:a1:b5:2b:0d:ab:95:23:17:7f:53:bd:82:b3: 06:f4:78:0e:26:39:ce:d5:6c:35:df:8f:9c:e2:aa: e3:4f:e0:fa:fa:0f:cf:80:81:a6:de:99:33:ea:89: 69:6d:f5:51:b2:6a:fb:2e:08:ce:e9:4f:43:23:e9: 8b:fb:1f:a8:6e:2d:e0:95:1e:72:cf:c9:e9:ea:61: dc:a8:69:a6:84:cd:38:85:d7:86:da:1b:90:5a:34: 26:d1:b5:82:b7:8f:ba:1d:4a:c9:19:bd:63:6f:a8: 09:9b:7b:7e:38:89:0f:bd:64:b5:4b:a4:87:fa:17: c7:c2:23:36:0e:e0:88:4f:22:01:c8:f7:ef:a3:34: 9f:99:a8:75:bc:b8:58:79:59:99:f0:8a:2a:c5:7a: 20:49:d0:5b:44:39:3d:f0:d9:3e:e4:ed:8f:95:1a: 94:db:9e:dc:ec:2f:ee:41:e9:d7:86:02:2d:81:2b: 77:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A2:F7:9F:EE:4D:31:46:86:50:C5:B3:4A:A0:B1:25:FE:C4:F1:F2 X509v3 Authority Key Identifier: keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:db:6d:b3:7c:29:d3:de:7c:99:00:10:6e:dc:ea:2e:1f:7f: 02:33:3a:49:30:9b:ac:da:d8:8b:71:6d:ab:42:f1:43:e8:32: 75:a7:9b:ef:18:5a:7b:34:a5:7e:03:46:1b:8e:e4:2c:fc:58: 25:8a:cd:17:8b:96:cb:bc:2a:14:39:75:cd:1c:2b:d4:86:6c: c3:b9:b3:12:f3:47:6a:d4:75:52:7c:83:00:40:44:f2:e8:c9: 88:f1:6c:6b:30:10:2b:06:05:f6:7e:a7:f8:03:42:94:ed:2b: ef:f2:96:d6:2b:29:51:c2:07:4d:0b:04:c4:2d:05:29:c9:0e: d1:bc:15:12:7a:c9:ad:9c:11:ef:20:51:2e:42:ab:b7:b6:ad: 1b:60:77:7d:e4:3f:3c:43:7c:6c:e7:67:ea:ef:9b:a9:97:68: 73:44:37:00:7c:ba:2b:ba:f1:08:2a:2f:0d:57:ce:64:ec:12: 3c:75:ac:33:26:6e:84:8f:f1:87:c1:42:a2:59:bc:28:5d:15: ec:3b:78:02:7e:d4:e8:58:a7:6e:64:9b:e8:f5:32:f1:1e:99: 02:89:5f:6f:1f:1e:db:83:ce:a9:17:66:f2:ee:f0:16:9d:2d: be:66:9b:80:44:f1:20:08:2f:60:dc:4c:1f:c6:91:e5:b7:9a: 2c:1f:25:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtwpDV28Z3jwMgKVNQQ+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Mjc5NGMyZDJjZmEwNTQ2MzhiYTk1MGE1ZjY2OGU4NzYw MTQxMmQwHhcNMjUxMjIxMjEwMDUwWhcNMjUxMjIyMjEwMDUwWjAzMTEwLwYDVQQD EyhiMmEyZjc5ZmVlNGQzMTQ2ODY1MGM1YjM0YWEwYjEyNWZlYzRmMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIe+V4IcxGxNSiYxQ1bgZYK96YTK BjBIQ10p3jS6cZJwDi4LzTqUWtAYMuRUZedK++t3F+0EEpIaJwRtfVOSUm4YVmoD auoOpgwX/6G1Kw2rlSMXf1O9grMG9HgOJjnO1Ww134+c4qrjT+D6+g/PgIGm3pkz 6olpbfVRsmr7LgjO6U9DI+mL+x+obi3glR5yz8np6mHcqGmmhM04hdeG2huQWjQm 0bWCt4+6HUrJGb1jb6gJm3t+OIkPvWS1S6SH+hfHwiM2DuCITyIByPfvozSfmah1 vLhYeVmZ8IoqxXogSdBbRDk98Nk+5O2PlRqU257c7C/uQenXhgItgSt3QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKi95/uTTFGhlDFs0qgsSX+xPHyMB8GA1UdIwQY MBaAFGQnlMLSz6BUY4upUKX2aOh2AUEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYt MDYxNjM5ODEyYzc0LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYtMDYxNjM5ODEyYzc0 LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9tts3wp 0958mQAQbtzqLh9/AjM6STCbrNrYi3Ftq0LxQ+gydaeb7xhaezSlfgNGG47kLPxY JYrNF4uWy7wqFDl1zRwr1IZsw7mzEvNHatR1UnyDAEBE8ujJiPFsazAQKwYF9n6n +ANClO0r7/KW1ispUcIHTQsExC0FKckO0bwVEnrJrZwR7yBRLkKrt7atG2B3feQ/ PEN8bOdn6u+bqZdoc0Q3AHy6K7rxCCovDVfOZOwSPHWsMyZuhI/xh8FColm8KF0V 7Dt4An7U6FinbmSb6PUy8R6ZAolfbx8e24POqRdm8u7wFp0tvmabgETxIAgvYNxM H8aR5beaLB8llg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:36:59 2025 by rpki-client