This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json) Hash identifier: fUIQXXdMpfbwhYE+3Tt9vZLkXoTgD/oB0tLi4wUV/9w= Subject key identifier: 66:F9:CD:AA:1C:40:EA:8C:63:B9:16:DA:84:28:CE:CC:90:21:3F:2F Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54 Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954 Certificate serial: 019B3CB518B6427C223F67F9DAE07DC32ACC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 17:00:59 +0000 Manifest this update: Sat 20 Dec 2025 17:00:59 +0000 Manifest next update: Sun 21 Dec 2025 17:00:59 +0000 Files and hashes: 1: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (hash: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=) 2: 6NfPgvm2R-DEhD59RilUaEstXMs.roa (hash: nHYetpjWCpzfXvmA5NqKKNkZO4+XknrY7xhjpxJgzio=) 3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: nC3kwQ5rm5iQaXkQtR1kn43GiP89Y24v4y7AX/tkDv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:18:b6:42:7c:22:3f:67:f9:da:e0:7d:c3:2a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954 Validity Not Before: Dec 20 17:00:59 2025 GMT Not After : Dec 21 17:00:59 2025 GMT Subject: CN=66f9cdaa1c40ea8c63b916da8428cecc90213f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c4:a3:9a:4f:6f:a4:62:cb:30:21:21:a3:58: 56:b7:7b:55:d1:5f:83:d0:75:c1:34:22:d2:a1:cb: 47:b3:5c:8c:db:d8:7b:bd:64:31:fb:f3:76:a0:10: 36:01:e3:9e:26:6a:17:72:11:75:4f:00:10:8c:4b: 06:b7:1f:3b:d2:0a:a1:99:09:74:a3:c5:22:11:bf: 12:84:84:9d:96:0b:f7:3a:3e:a2:ef:b0:21:bf:f9: 82:85:5c:ca:15:63:aa:1a:a3:d6:7c:32:31:a5:99: cc:b7:6f:ee:72:63:a5:d1:49:f9:95:8e:a4:81:62: 75:d5:f0:28:37:99:ed:15:4a:c9:6b:ee:96:e0:9b: b6:51:34:57:58:a9:0a:77:05:8c:73:c4:df:8c:9c: 0a:97:d4:cd:a1:09:50:93:04:bb:23:2b:d8:33:90: af:ff:e6:6e:98:35:8f:e2:30:3e:d1:23:4d:7b:78: 95:bb:43:9c:77:d5:1b:60:09:01:44:c6:b8:ad:d7: 96:6a:44:31:f4:02:98:0e:6e:ad:d5:88:eb:1f:a8: f1:56:8c:1b:73:79:67:7e:37:93:42:b2:09:c1:7e: 89:89:2a:eb:48:2e:a6:79:b1:41:a3:3b:d9:4a:22: 68:19:6e:cb:bd:59:9c:e7:bf:45:a7:b9:05:81:a9: ba:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F9:CD:AA:1C:40:EA:8C:63:B9:16:DA:84:28:CE:CC:90:21:3F:2F X509v3 Authority Key Identifier: keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:fa:3c:b2:e3:7d:0c:be:7e:23:26:40:62:ad:c6:a9:c5:1e: 9f:70:96:09:f7:f6:65:e3:fc:19:f2:45:b1:07:29:f5:1c:4d: 56:c8:ca:5b:70:f2:f3:cc:d8:fd:74:56:c1:48:5e:dd:bf:bb: 74:df:21:80:8f:fb:eb:fa:a5:f9:9d:18:3d:85:33:f0:93:30: ee:c4:00:8d:55:56:88:5d:85:54:6a:78:9c:b8:06:8e:74:50: 7a:4a:21:ad:83:45:7a:fe:b2:d8:35:d5:ea:d6:c5:b7:dc:fe: c9:0f:ca:a7:1b:8b:76:72:6c:e8:52:46:11:e5:a7:16:4e:f8: 81:3f:9d:94:d1:20:14:8d:d3:f2:47:ce:ec:cb:1c:bc:9a:b7: 2a:90:55:be:7d:d5:78:23:33:a5:89:55:c0:0a:58:3c:47:75: 10:5f:85:b2:06:08:cc:89:4c:df:76:85:29:16:0b:d7:e5:b4: 80:cd:75:07:96:65:81:22:a5:6a:4f:c7:cd:8b:48:08:78:7a: 70:13:e4:eb:de:71:2d:9e:72:1f:bd:c3:ce:b1:52:ea:65:70: e8:d5:85:3a:55:28:e4:c2:7a:78:3d:94:f0:57:9a:6c:12:46: 77:03:ea:e0:0e:d2:08:bd:25:0a:4b:2e:57:45:8d:b8:04:c4: 12:d8:53:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRi2QnwiP2f52uB9wyrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZmE4OGMyMmIxZTdjNTJkZTcxYTM3NjQzZGVhM2MzZmNk ZDQ5NTQwHhcNMjUxMjIwMTcwMDU5WhcNMjUxMjIxMTcwMDU5WjAzMTEwLwYDVQQD Eyg2NmY5Y2RhYTFjNDBlYThjNjNiOTE2ZGE4NDI4Y2VjYzkwMjEzZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsSjmk9vpGLLMCEho1hWt3tV0V+D 0HXBNCLSoctHs1yM29h7vWQx+/N2oBA2AeOeJmoXchF1TwAQjEsGtx870gqhmQl0 o8UiEb8ShISdlgv3Oj6i77Ahv/mChVzKFWOqGqPWfDIxpZnMt2/ucmOl0Un5lY6k gWJ11fAoN5ntFUrJa+6W4Ju2UTRXWKkKdwWMc8TfjJwKl9TNoQlQkwS7IyvYM5Cv /+ZumDWP4jA+0SNNe3iVu0Ocd9UbYAkBRMa4rdeWakQx9AKYDm6t1YjrH6jxVowb c3lnfjeTQrIJwX6JiSrrSC6mebFBozvZSiJoGW7LvVmc579Fp7kFgam67wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGb5zaocQOqMY7kW2oQozsyQIT8vMB8GA1UdIwQY MBaAFMz6iMIrHnxS3nGjdkPeo8P83UlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2Yjkt ODI3YjY0M2FmM2Q3LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2YjktODI3YjY0M2FmM2Q3 LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/o8suN9 DL5+IyZAYq3GqcUen3CWCff2ZeP8GfJFsQcp9RxNVsjKW3Dy88zY/XRWwUhe3b+7 dN8hgI/76/ql+Z0YPYUz8JMw7sQAjVVWiF2FVGp4nLgGjnRQekohrYNFev6y2DXV 6tbFt9z+yQ/KpxuLdnJs6FJGEeWnFk74gT+dlNEgFI3T8kfO7MscvJq3KpBVvn3V eCMzpYlVwApYPEd1EF+FsgYIzIlM33aFKRYL1+W0gM11B5ZlgSKlak/HzYtICHh6 cBPk695xLZ5yH73DzrFS6mVw6NWFOlUo5MJ6eD2U8FeabBJGdwPq4A7SCL0lCksu V0WNuATEEthTJw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:15:54 2025 by rpki-client