This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft File: z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json) Hash identifier: D+rnCnXlBy8kdXpavNrqiRZ8NitMRS2L+moJSPtQL3U= Subject key identifier: 03:17:CC:B9:F1:1A:1A:04:95:22:95:B7:7E:8F:44:2A:5A:34:88:2A Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5 Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5 Certificate serial: 019B4249C4FDC289CD3E5EA42F0FEE40D83F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft Manifest number: 12EA Signing time: Sun 21 Dec 2025 19:01:29 +0000 Manifest this update: Sun 21 Dec 2025 19:01:29 +0000 Manifest next update: Mon 22 Dec 2025 19:01:29 +0000 Files and hashes: 1: 3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa (hash: TnQIP8m/z9TeUL6T1o3LFStwx3OkwZWYEkGyH7pKVzQ=) 2: C6G26s2_9rDhMVp1kQhNB3w99vU.roa (hash: /Sx9ARb2KrLY9zv7k7Qpt7h2hX4KWumGuc1xaBNSC/E=) 3: IeIheuUZIrSao3cwITZ9a7Vr14M.roa (hash: D6ff1htYAOrTrHoE1npjdhSz9xEaYGaeMk7OAb0vWUY=) 4: OToS6J8sZcb-NOk0SLebRPhhIy8.roa (hash: hJi47h64zp0y7tuydNdIF9Tsj0N17DTgxMy6IbUz6LM=) 5: TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa (hash: olUxSsNWWfOkaH/tshrZT1VhUO7Fs87MPQLfSyoOypI=) 6: g25IGTKfPYjST4HNSDfCkGR8U-U.roa (hash: shszXMRp8pWU+jn/kDMsa59h70gxIvBt7/Q+QM/PucQ=) 7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: 1JznlpNrC1E/tqoJ8rYD6lprnP5KYnZvj80Qq+SqGfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:c4:fd:c2:89:cd:3e:5e:a4:2f:0f:ee:40:d8:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5 Validity Not Before: Dec 21 19:01:29 2025 GMT Not After : Dec 22 19:01:29 2025 GMT Subject: CN=0317ccb9f11a1a04952295b77e8f442a5a34882a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:e4:c5:47:04:79:d0:1b:88:6e:eb:b9:a0: 92:a5:b7:d9:04:d2:25:2d:86:b7:48:77:8d:e3:ba: 57:33:19:19:d5:ba:98:6b:1b:06:34:a8:a3:d0:b5: 73:75:4f:c1:6d:de:ac:97:3b:f8:d3:43:ef:37:2f: 43:18:c9:76:5a:df:a7:12:1e:aa:f1:d7:a6:84:bf: ad:a8:39:58:ff:25:d6:cd:4d:b5:78:1f:7e:b3:4f: 8c:7d:24:2c:f9:23:e3:b9:ac:ad:ff:53:fe:65:1e: ca:72:1e:22:32:0a:d6:f0:5f:7f:a6:19:a1:a9:dd: 7e:f1:8c:be:e8:e4:0b:df:fa:e2:2f:15:45:52:a2: 3e:f6:c8:72:b1:8b:f1:8e:b4:e5:7b:40:6e:55:e4: f5:0d:5a:5f:53:f7:31:61:60:2d:5d:e9:1b:5c:43: b0:72:4a:65:12:d7:82:7e:a4:a0:15:72:73:d6:4d: 4e:e6:e7:aa:e1:35:f0:c3:35:17:56:6c:fc:e7:7e: 50:a4:2d:ea:c7:a3:a0:22:50:28:34:32:f3:46:35: 59:16:f0:c9:b4:f1:0f:4a:30:ae:15:d3:c3:02:fa: f2:b8:d1:f8:97:c0:7a:1b:11:d4:5c:b2:27:6e:df: 6e:f8:4c:18:b2:64:a0:a3:61:01:09:74:9c:0e:cb: da:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:17:CC:B9:F1:1A:1A:04:95:22:95:B7:7E:8F:44:2A:5A:34:88:2A X509v3 Authority Key Identifier: keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ce:67:0a:a9:2c:33:e9:24:f6:fd:17:26:e8:b8:97:52:13: e8:f1:f7:2a:1c:06:77:2a:fb:b6:e5:c5:37:cd:5e:b1:33:7f: 0f:f9:9b:cc:ac:53:96:64:7f:ee:f9:02:09:2d:b9:2a:9e:f9: 96:20:89:40:ad:c6:bd:eb:8e:e1:b9:b4:2e:12:f3:45:09:48: 0a:f1:fc:82:7b:25:88:6d:78:f0:e2:e3:0e:88:bc:a7:21:06: fd:dc:77:11:5e:c3:84:28:d7:f8:02:0e:08:33:e6:ba:71:0d: ec:f1:fc:ec:fb:70:5b:76:4d:c6:0b:ca:eb:ac:d3:ea:78:47: 37:25:bc:d6:89:18:4d:15:e0:8f:14:c2:91:5b:f1:df:6b:e9: fc:f4:38:86:7d:92:ab:06:95:d4:d7:a5:65:09:5a:7c:52:3c: b3:97:b3:19:e3:4d:8e:f8:31:a5:7f:72:fb:f3:e1:aa:5c:ca: 82:c6:07:ec:df:d7:44:d5:36:e7:f4:24:6d:22:35:f9:cb:8b: 60:d8:78:4a:e7:cc:a3:37:2c:fa:0d:ff:1c:0a:9a:df:90:49: 58:b3:a5:46:e5:bb:8f:61:e5:37:63:35:7e:43:1f:97:10:4b: 93:cb:8b:21:6e:00:b9:c0:52:e7:d5:1e:a0:f4:17:48:ce:e9: 3d:57:1a:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCScT9wonNPl6kLw/uQNg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZWFjZTcxNGMyOTU2OGVmMTk3MDA3YjE0MWQxMjc1OGNj NDE1ZDUwHhcNMjUxMjIxMTkwMTI5WhcNMjUxMjIyMTkwMTI5WjAzMTEwLwYDVQQD EygwMzE3Y2NiOWYxMWExYTA0OTUyMjk1Yjc3ZThmNDQyYTVhMzQ4ODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTTkxUcEedAbiG7ruaCSpbfZBNIl LYa3SHeN47pXMxkZ1bqYaxsGNKij0LVzdU/Bbd6slzv400PvNy9DGMl2Wt+nEh6q 8demhL+tqDlY/yXWzU21eB9+s0+MfSQs+SPjuayt/1P+ZR7Kch4iMgrW8F9/phmh qd1+8Yy+6OQL3/riLxVFUqI+9shysYvxjrTle0BuVeT1DVpfU/cxYWAtXekbXEOw ckplEteCfqSgFXJz1k1O5ueq4TXwwzUXVmz8535QpC3qx6OgIlAoNDLzRjVZFvDJ tPEPSjCuFdPDAvryuNH4l8B6GxHUXLInbt9u+EwYsmSgo2EBCXScDsvaywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMXzLnxGhoElSKVt36PRCpaNIgqMB8GA1UdIwQY MBaAFM/qznFMKVaO8ZcAexQdEnWMxBXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMt OGZkMzk0YjUzNTdjLzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMtOGZkMzk0YjUzNTdj LzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJM5nCqks M+kk9v0XJui4l1IT6PH3KhwGdyr7tuXFN81esTN/D/mbzKxTlmR/7vkCCS25Kp75 liCJQK3GveuO4bm0LhLzRQlICvH8gnsliG148OLjDoi8pyEG/dx3EV7DhCjX+AIO CDPmunEN7PH87PtwW3ZNxgvK66zT6nhHNyW81okYTRXgjxTCkVvx32vp/PQ4hn2S qwaV1NelZQlafFI8s5ezGeNNjvgxpX9y+/PhqlzKgsYH7N/XRNU25/QkbSI1+cuL YNh4SufMozcs+g3/HAqa35BJWLOlRuW7j2HlN2M1fkMflxBLk8uLIW4AucBS59Ue oPQXSM7pPVcapg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:20:58 2025 by rpki-client