This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft File: zZEXAvST1u3htuhyvKzcuFQoK60.mft (raw, json) Hash identifier: 9H60iKTiqTaHbNMqvjHWJsfbjnW+DeaW/iQdmpoxKlc= Subject key identifier: 1D:1E:87:14:F7:EC:63:CD:13:96:C2:F3:8A:DC:10:E7:00:F1:33:32 Authority key identifier: CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD Certificate issuer: /CN=cd911702f493d6ede1b6e872bcacdcb854282bad Certificate serial: 019B37215F384C037C4C0B18BF8011444968 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft Manifest number: 0DEA Signing time: Fri 19 Dec 2025 15:01:32 +0000 Manifest this update: Fri 19 Dec 2025 15:01:32 +0000 Manifest next update: Sat 20 Dec 2025 15:01:32 +0000 Files and hashes: 1: talgukTPD8oL2wxiXAXrxPFSwAY.roa (hash: 42F75IV5IsX3V6ll7VHZlZ+ABWMo+HJa6Q+yWz1dm0U=) 2: zZEXAvST1u3htuhyvKzcuFQoK60.crl (hash: FfvPKtI1PkXwDvRZhFHrpex/lMA2V7gNfRJiNkk4MDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:5f:38:4c:03:7c:4c:0b:18:bf:80:11:44:49:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd911702f493d6ede1b6e872bcacdcb854282bad Validity Not Before: Dec 19 15:01:32 2025 GMT Not After : Dec 20 15:01:32 2025 GMT Subject: CN=1d1e8714f7ec63cd1396c2f38adc10e700f13332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b7:56:a6:c7:45:23:c4:0b:84:ac:db:37:69: a2:91:bc:af:58:b2:db:06:55:40:1d:68:54:7b:3c: bf:c4:57:04:c3:01:4e:5b:d2:0a:ff:4f:7b:ce:21: f7:9b:46:61:8b:25:e7:12:07:73:ba:a5:7c:4e:c5: b1:99:f2:72:55:17:be:dd:46:3a:bd:a4:4f:b5:7c: 4c:34:0a:d3:b5:8b:d2:0f:4c:7e:fe:74:d2:65:d3: 5b:8b:e4:43:c9:32:a8:fe:c0:be:96:81:f4:64:78: 5d:e8:e1:9d:13:93:11:3f:e9:d9:4b:61:1f:18:85: 99:32:0f:30:a5:ab:60:67:e0:77:e6:5a:43:66:d7: a5:86:83:5b:06:e3:b8:80:6e:15:3f:16:19:9e:42: 9c:88:83:f9:85:5d:b9:30:a0:3e:ac:fe:af:f5:c7: c6:d4:d1:bb:09:34:e0:66:09:0a:7a:fe:a0:d5:2f: f2:98:23:a6:aa:c1:b0:11:b1:70:d8:65:29:3b:8d: 4b:3c:60:f9:72:75:63:72:9c:11:a3:f6:3f:8b:04: 30:64:3d:34:44:06:35:e8:e2:ab:b3:72:52:e1:f2: 22:ba:34:cf:f2:f2:35:ec:10:cf:e3:25:26:6c:a0: c7:df:d7:bc:ae:3e:30:e9:51:17:3e:56:47:07:c1: c2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1E:87:14:F7:EC:63:CD:13:96:C2:F3:8A:DC:10:E7:00:F1:33:32 X509v3 Authority Key Identifier: keyid:CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fa:98:39:bf:08:29:99:2f:95:d9:3f:53:41:04:9c:c7:42: 72:f1:e3:63:f7:cc:85:e8:56:52:9f:81:af:23:90:24:e3:51: 14:c1:b2:d1:4b:4c:66:e7:1d:51:83:00:a2:86:41:c6:37:24: e2:75:06:2e:32:d5:8f:02:e3:6c:0e:c3:aa:a7:aa:3b:b0:98: a8:0c:12:0e:6c:6b:7d:33:7c:27:27:3f:09:7c:49:af:aa:82: 7a:87:57:3b:8b:b6:59:b5:f1:b8:1b:1e:66:13:0e:9d:ec:95: 71:72:66:1d:f8:50:d6:45:36:16:68:10:43:9c:76:46:cc:dc: b0:a7:41:d1:f0:a1:d2:66:39:f2:8b:4e:05:20:4e:7d:ea:b9: 60:80:13:63:ec:d0:e1:90:50:16:a6:96:bc:e8:b4:38:1c:7f: 23:a9:5d:44:9d:3d:5e:e4:cf:39:2b:ef:53:7c:29:4d:f9:ce: 9c:9a:c6:1c:3b:36:a8:20:83:e1:bc:d5:61:7e:ed:c4:c9:e9: a9:b2:19:b2:09:23:e0:bd:2c:87:e6:4e:7f:07:08:2b:b8:68: a0:8e:14:1e:46:ee:b4:37:63:ba:3f:a8:1e:02:1a:e6:39:7c: ba:61:0f:ee:fe:19:45:ea:cd:7f:12:21:48:2e:9b:d8:53:6b: 1f:97:cf:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IV84TAN8TAsYv4ARREloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTExNzAyZjQ5M2Q2ZWRlMWI2ZTg3MmJjYWNkY2I4NTQy ODJiYWQwHhcNMjUxMjE5MTUwMTMyWhcNMjUxMjIwMTUwMTMyWjAzMTEwLwYDVQQD EygxZDFlODcxNGY3ZWM2M2NkMTM5NmMyZjM4YWRjMTBlNzAwZjEzMzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirdWpsdFI8QLhKzbN2mikbyvWLLb BlVAHWhUezy/xFcEwwFOW9IK/097ziH3m0ZhiyXnEgdzuqV8TsWxmfJyVRe+3UY6 vaRPtXxMNArTtYvSD0x+/nTSZdNbi+RDyTKo/sC+loH0ZHhd6OGdE5MRP+nZS2Ef GIWZMg8wpatgZ+B35lpDZtelhoNbBuO4gG4VPxYZnkKciIP5hV25MKA+rP6v9cfG 1NG7CTTgZgkKev6g1S/ymCOmqsGwEbFw2GUpO41LPGD5cnVjcpwRo/Y/iwQwZD00 RAY16OKrs3JS4fIiujTP8vI17BDP4yUmbKDH39e8rj4w6VEXPlZHB8HCNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0ehxT37GPNE5bC84rcEOcA8TMyMB8GA1UdIwQY MBaAFM2RFwL0k9bt4bbocrys3LhUKCutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpFWEF2U1QxdTNodHVoeXZLemN1RlFvSzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iNzQyMDctMzg1My00MzVkLWFiZGUt MjJiNzc4MjE2MmNhLzEvelpFWEF2U1QxdTNodHVoeXZLemN1RlFvSzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iNzQyMDctMzg1My00MzVkLWFiZGUtMjJiNzc4MjE2MmNh LzEvelpFWEF2U1QxdTNodHVoeXZLemN1RlFvSzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/qYOb8I KZkvldk/U0EEnMdCcvHjY/fMhehWUp+BryOQJONRFMGy0UtMZucdUYMAooZBxjck 4nUGLjLVjwLjbA7DqqeqO7CYqAwSDmxrfTN8Jyc/CXxJr6qCeodXO4u2WbXxuBse ZhMOneyVcXJmHfhQ1kU2FmgQQ5x2RszcsKdB0fCh0mY58otOBSBOfeq5YIATY+zQ 4ZBQFqaWvOi0OBx/I6ldRJ09XuTPOSvvU3wpTfnOnJrGHDs2qCCD4bzVYX7txMnp qbIZsgkj4L0sh+ZOfwcIK7hooI4UHkbutDdjuj+oHgIa5jl8umEP7v4ZRerNfxIh SC6b2FNrH5fPww== -----END CERTIFICATE-----Generated at Fri Dec 19 22:10:24 2025 by rpki-client