This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json) Hash identifier: Bs3Hhtqr1Xedtrv0Z2aVbaIfWYlT52QjLwxAcM2bDT8= Subject key identifier: 48:46:E9:E9:56:AC:4D:AF:A3:48:9A:4A:CA:50:4D:C4:01:E5:A2:71 Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b Certificate serial: 019B34C5C4B4880FC46C8B03512AB0CED5CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft Manifest number: 117F Signing time: Fri 19 Dec 2025 04:02:14 +0000 Manifest this update: Fri 19 Dec 2025 04:02:14 +0000 Manifest next update: Sat 20 Dec 2025 04:02:14 +0000 Files and hashes: 1: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: xpK+l+cSz8m/R6Kcy0i+zURY/xJ5eYZJViSncj9BpHw=) 2: zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa (hash: EgP68fSUBBXlJuUGr4bTlwk3uiBoJBQFQ6/v7VJHcgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:c4:b4:88:0f:c4:6c:8b:03:51:2a:b0:ce:d5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b Validity Not Before: Dec 19 04:02:14 2025 GMT Not After : Dec 20 04:02:14 2025 GMT Subject: CN=4846e9e956ac4dafa3489a4aca504dc401e5a271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:a9:49:9e:14:ae:b1:cd:7c:27:46:78:83: 72:f2:87:13:70:6e:d7:71:72:61:8f:43:a4:0d:a0: bd:56:60:da:fc:24:03:1a:45:67:d1:78:25:70:93: f9:b5:63:60:f3:72:cc:81:37:39:ab:bc:79:0b:ad: 6d:20:7d:b5:1b:53:8f:7b:2e:14:98:79:0d:cd:1b: 9e:3a:06:46:d4:58:bc:02:3c:33:e3:e4:b1:c7:d2: ac:72:48:3e:0a:6e:a7:49:f2:a0:ec:35:2f:2f:60: ef:8c:12:be:85:fa:ae:b2:0e:ac:b7:86:14:40:03: f1:59:d7:e0:c6:ed:cd:4c:de:bc:ab:c5:c9:fa:5b: 2e:f7:cf:43:0a:15:e2:e2:65:da:22:f8:e9:f9:db: 11:ee:7f:2d:fb:e7:38:c7:b7:ce:dd:55:fc:19:1c: 41:0d:9c:7e:f3:88:35:55:36:21:ed:76:07:84:31: 6d:98:a7:57:02:54:ce:d6:bd:0b:bd:61:41:6b:ae: 61:2d:d4:f2:ac:39:a8:50:32:2d:fc:14:1f:3d:b8: 0e:9f:d4:69:49:0e:d6:af:94:73:34:2b:3c:60:52: ba:dc:e8:a2:63:88:4e:ca:aa:43:14:57:09:9e:91: 94:77:2d:4d:c2:52:a5:71:90:5f:7d:87:eb:88:49: 59:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:46:E9:E9:56:AC:4D:AF:A3:48:9A:4A:CA:50:4D:C4:01:E5:A2:71 X509v3 Authority Key Identifier: keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fc:ce:80:f9:87:bf:20:7e:d6:c4:f5:cd:9f:d8:d0:20:d4: ca:96:17:81:f3:3a:5a:09:34:5b:29:72:4a:39:af:d4:02:2f: e8:87:43:cb:90:58:c4:16:27:1a:01:c3:cb:d3:af:35:db:75: ad:df:aa:1c:6c:e5:1c:95:2b:e3:f3:6d:f8:7f:e7:e6:f1:b6: c6:b9:36:e9:57:62:2c:ed:45:be:ac:94:b5:15:fd:9d:07:2e: df:fe:29:23:fa:a8:8f:f7:f2:ee:e6:a2:cd:01:fb:a3:fd:02: 28:78:cd:64:b9:31:ab:ba:03:da:36:f4:ed:f5:58:d5:76:53: da:37:20:3e:81:5c:c3:59:a0:1a:b5:fb:79:7b:aa:e6:3e:22: f6:d1:51:3b:bf:b4:f3:19:d3:49:a2:33:ef:49:8c:f3:38:ae: fd:ae:e2:3b:81:69:90:72:d3:46:87:7c:76:43:df:4c:93:e5: ce:8f:ab:04:4b:24:9a:24:a4:94:21:8b:db:7a:2b:a8:34:5a: e2:1d:15:c9:72:82:67:ef:e6:cb:1f:9f:fd:1f:c0:7e:6f:dd: da:f4:aa:bc:7f:ae:f1:83:e2:43:08:4d:59:d8:12:61:c9:8a: 46:72:5e:ba:1f:42:db:6d:a2:f5:10:6b:43:68:c1:1f:dc:d5: e0:4c:46:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xcS0iA/EbIsDUSqwztXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjODFkNTRkYzBmZDE2YWM5MjUzNGI5YTc4MGUyNjc2NGIy ZjhmN2IwHhcNMjUxMjE5MDQwMjE0WhcNMjUxMjIwMDQwMjE0WjAzMTEwLwYDVQQD Eyg0ODQ2ZTllOTU2YWM0ZGFmYTM0ODlhNGFjYTUwNGRjNDAxZTVhMjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VipSZ4UrrHNfCdGeINy8ocTcG7X cXJhj0OkDaC9VmDa/CQDGkVn0XglcJP5tWNg83LMgTc5q7x5C61tIH21G1OPey4U mHkNzRueOgZG1Fi8Ajwz4+Sxx9Ksckg+Cm6nSfKg7DUvL2DvjBK+hfqusg6st4YU QAPxWdfgxu3NTN68q8XJ+lsu989DChXi4mXaIvjp+dsR7n8t++c4x7fO3VX8GRxB DZx+84g1VTYh7XYHhDFtmKdXAlTO1r0LvWFBa65hLdTyrDmoUDIt/BQfPbgOn9Rp SQ7Wr5RzNCs8YFK63OiiY4hOyqpDFFcJnpGUdy1NwlKlcZBffYfriElZ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhG6elWrE2vo0iaSspQTcQB5aJxMB8GA1UdIwQY MBaAFMyB1U3A/RasklNLmngOJnZLL497MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMt ZjNmN2JkMzFhMGZlLzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMtZjNmN2JkMzFhMGZl LzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfzOgPmH vyB+1sT1zZ/Y0CDUypYXgfM6Wgk0WylySjmv1AIv6IdDy5BYxBYnGgHDy9OvNdt1 rd+qHGzlHJUr4/Nt+H/n5vG2xrk26VdiLO1FvqyUtRX9nQcu3/4pI/qoj/fy7uai zQH7o/0CKHjNZLkxq7oD2jb07fVY1XZT2jcgPoFcw1mgGrX7eXuq5j4i9tFRO7+0 8xnTSaIz70mM8ziu/a7iO4FpkHLTRod8dkPfTJPlzo+rBEskmiSklCGL23orqDRa 4h0VyXKCZ+/myx+f/R/Afm/d2vSqvH+u8YPiQwhNWdgSYcmKRnJeuh9C222i9RBr Q2jBH9zV4ExGTw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:00:15 2025 by rpki-client