This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft File: ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json) Hash identifier: Tn5+jGmakSIZ8YpY/UxkLeG8e5fEWtUmryliIALQIVY= Subject key identifier: FE:36:31:5A:BE:22:53:6C:6F:B3:F9:EF:A5:1B:6F:5D:07:7C:50:A0 Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27 Certificate issuer: /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27 Certificate serial: 019B3AFE012A22AFAF773E8E65F8C40D5C15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 09:01:23 +0000 Manifest this update: Sat 20 Dec 2025 09:01:23 +0000 Manifest next update: Sun 21 Dec 2025 09:01:23 +0000 Files and hashes: 1: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: QXyQ7je56pG1uJBsjjRQ0lFKSQWHTNrryTLSnyltY3Y=) 2: jl2QMltgucjm6DsSRtvejzHwgVk.roa (hash: 2ICsrOX/Ng80gGFWmU3eag4CX8TEZwSeNwBpo27725Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:01:2a:22:af:af:77:3e:8e:65:f8:c4:0d:5c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27 Validity Not Before: Dec 20 09:01:23 2025 GMT Not After : Dec 21 09:01:23 2025 GMT Subject: CN=fe36315abe22536c6fb3f9efa51b6f5d077c50a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:47:36:37:7c:66:70:ef:70:20:d8:38:7e: 9d:6e:c6:a9:f1:da:ef:dc:5c:66:9e:6c:a6:e3:47: 28:29:bc:b9:a3:af:22:96:69:dc:54:3c:f8:11:62: 96:29:69:3a:45:50:92:fc:a1:7c:e8:2e:1a:01:83: 47:c1:6a:f3:92:fc:33:70:d4:8e:03:dd:26:99:77: 08:b2:53:1c:9d:f3:22:ff:17:65:30:1e:8e:f6:4c: 64:6f:ee:c6:fa:a5:3b:f4:57:70:df:9b:84:22:5d: 90:fc:93:2c:9b:1b:67:3d:70:78:81:f0:31:4b:54: 88:1a:8d:49:4e:5b:9e:19:9a:55:8a:00:6e:3b:db: 6a:1e:d8:10:b2:12:7e:aa:e1:0e:bd:d0:2c:ae:b7: b1:88:80:96:25:66:21:bc:c4:9d:6a:3a:ee:e5:66: 06:61:6c:9e:6e:96:1e:4d:51:fb:26:ed:b2:b8:64: 76:ce:df:86:34:6f:46:6c:a7:ef:12:c3:1a:63:cf: 02:4f:dc:a8:2c:e4:92:3c:8f:2b:21:e8:e3:bd:ec: a5:e2:f8:e3:34:45:29:71:15:17:d2:f6:e2:cd:5a: fe:40:70:6f:43:06:bf:a7:38:96:ab:85:32:12:bd: 54:1d:90:73:a4:23:87:a4:e6:67:c2:6c:f7:9b:2c: 30:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:36:31:5A:BE:22:53:6C:6F:B3:F9:EF:A5:1B:6F:5D:07:7C:50:A0 X509v3 Authority Key Identifier: keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:bd:24:b5:ae:03:0e:fe:0c:e8:8a:d7:ee:66:df:cb:8e:c0: 4a:18:57:34:42:e9:55:18:73:d1:92:db:f3:e2:1a:42:89:e1: 61:64:b1:69:a3:12:cb:4f:85:b8:f6:30:1f:56:33:fe:51:7b: 7a:dd:16:ff:ab:79:7c:a7:6c:f3:ce:98:05:21:91:65:8c:3d: f8:6b:d5:54:48:f2:af:fa:6c:75:6f:10:72:e7:6e:82:0f:94: a0:b3:7f:56:ef:29:53:2c:88:1f:b5:1f:21:42:ca:92:eb:80: 1a:dc:a2:e1:cb:d5:ac:92:61:f1:72:20:fc:6a:e7:e3:4a:b5: 04:5c:fe:df:b6:03:3c:b2:a2:8d:ae:64:ab:9d:91:df:e4:eb: 40:03:9f:e2:82:a7:e1:0c:65:fe:16:c9:6c:46:3c:47:6d:c7: b1:98:6e:27:03:9f:5d:e7:45:6a:3e:87:8f:62:56:17:35:56: 5e:d4:3d:68:69:c9:c3:04:9c:b2:38:cb:f5:f9:6d:43:0e:22: ae:f5:3b:44:fc:e2:c8:f9:f9:bf:85:86:97:7a:ec:26:12:ce: 2c:35:53:c4:a6:fb:36:28:e9:5c:6b:63:5a:82:d0:ac:8f:bf: dc:d0:73:13:ad:16:69:60:9f:7c:74:ef:4c:5b:8f:de:44:cc: c7:b0:cd:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/gEqIq+vdz6OZfjEDVwVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZDllOTI2NmVlY2FiYzBmZDRhNjA3N2ViMGJhOGZhOWYz YmRlMjcwHhcNMjUxMjIwMDkwMTIzWhcNMjUxMjIxMDkwMTIzWjAzMTEwLwYDVQQD EyhmZTM2MzE1YWJlMjI1MzZjNmZiM2Y5ZWZhNTFiNmY1ZDA3N2M1MGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpZHNjd8ZnDvcCDYOH6dbsap8drv 3Fxmnmym40coKby5o68ilmncVDz4EWKWKWk6RVCS/KF86C4aAYNHwWrzkvwzcNSO A90mmXcIslMcnfMi/xdlMB6O9kxkb+7G+qU79Fdw35uEIl2Q/JMsmxtnPXB4gfAx S1SIGo1JTlueGZpVigBuO9tqHtgQshJ+quEOvdAsrrexiICWJWYhvMSdajru5WYG YWyebpYeTVH7Ju2yuGR2zt+GNG9GbKfvEsMaY88CT9yoLOSSPI8rIejjveyl4vjj NEUpcRUX0vbizVr+QHBvQwa/pziWq4UyEr1UHZBzpCOHpOZnwmz3mywwywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP42MVq+IlNsb7P576Ubb10HfFCgMB8GA1UdIwQY MBaAFGXZ6SZu7KvA/Upgd+sLqPqfO94nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmRucEptN3NxOEQ5U21CMzZ3dW8tcDg3M2ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iYTQwMmMtYjAwZS00YTI2LWJmNTMt OGU3NDdlMzRlMTYyLzEvWmRucEptN3NxOEQ5U21CMzZ3dW8tcDg3M2ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iYTQwMmMtYjAwZS00YTI2LWJmNTMtOGU3NDdlMzRlMTYy LzEvWmRucEptN3NxOEQ5U21CMzZ3dW8tcDg3M2ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUr0kta4D Dv4M6IrX7mbfy47AShhXNELpVRhz0ZLb8+IaQonhYWSxaaMSy0+FuPYwH1Yz/lF7 et0W/6t5fKds886YBSGRZYw9+GvVVEjyr/psdW8Qcudugg+UoLN/Vu8pUyyIH7Uf IULKkuuAGtyi4cvVrJJh8XIg/Grn40q1BFz+37YDPLKija5kq52R3+TrQAOf4oKn 4Qxl/hbJbEY8R23HsZhuJwOfXedFaj6Hj2JWFzVWXtQ9aGnJwwScsjjL9fltQw4i rvU7RPziyPn5v4WGl3rsJhLOLDVTxKb7NijpXGtjWoLQrI+/3NBzE60WaWCffHTv TFuP3kTMx7DNFA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:46:10 2025 by rpki-client