This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft File: zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json) Hash identifier: k6+HXAnQ6T9NabnWzosMTMiuwuyaBzszLm8uNnObMOk= Subject key identifier: 48:F4:7F:EB:94:13:5E:4E:34:BE:AF:67:78:96:BA:11:01:43:B6:8F Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94 Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194 Certificate serial: 019B356930226980FAF8908B0DAC953C3685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 07:00:44 +0000 Manifest this update: Fri 19 Dec 2025 07:00:44 +0000 Manifest next update: Sat 20 Dec 2025 07:00:44 +0000 Files and hashes: 1: 2Ny-ueNvAFjL9IDe1yMO8HfDBJE.roa (hash: SriKAtzLJClJ8RYlJnsDDGPLefd9t0TyrlM6Ndh0w6s=) 2: HSDe33dztyDbbAh5edeiMrBstpw.roa (hash: hMHbKz19ucgy7N1gbQNpI/GP1wKSKMSFktFakjiCIw4=) 3: QRtKZhH9f2q5Qs4y3jok3HnjFK0.roa (hash: kTYNUIGwJLwA+YttUf3vVXejkVq8FL+41G3GFzyW8/w=) 4: jjYT0ual1nIv5rmaeDjlNg2jdtU.roa (hash: OjHVmf3z6fImr8f0+RF/L2hzt0WZmr2JT7HoyHilItc=) 5: vGoHfriPki42R6sM4AGNaZ6Sim4.roa (hash: QcwTT5U/Z4Mw3Ga8Qis4P0Rl1OjYiRfOAUfd5c277Jw=) 6: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: XE4BqgrlIRkPcOD2E978ts8E1ftNyMkvsiEdDpEhwBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:30:22:69:80:fa:f8:90:8b:0d:ac:95:3c:36:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194 Validity Not Before: Dec 19 07:00:44 2025 GMT Not After : Dec 20 07:00:44 2025 GMT Subject: CN=48f47feb94135e4e34beaf677896ba110143b68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:f0:52:71:96:6d:f3:b8:59:c5:3b:73:51: c3:5f:90:cb:4d:17:01:48:8f:b8:49:1b:6c:31:d0: c3:6d:13:0c:a0:63:5e:5f:44:b5:10:e3:ed:8b:4e: 60:92:64:4a:56:5c:73:b3:49:1c:8f:a2:19:da:c8: ef:55:60:21:01:9b:bb:9f:0f:93:49:47:11:6c:43: ad:d2:33:39:78:e1:da:c4:22:eb:ac:a4:ae:0d:45: d4:df:d2:8b:ea:69:8f:fb:59:43:c6:d6:50:33:65: 8b:b6:73:12:32:01:f8:0d:a5:0e:6c:7d:32:57:1f: c0:4a:36:4d:7e:33:c6:7b:e1:10:e7:6e:0f:16:84: 81:fd:0d:f4:78:a8:25:fa:e8:d7:02:b6:52:34:74: 89:a1:7a:d7:fc:d3:a9:be:ff:b4:c4:aa:04:bd:70: ea:a7:30:2c:a3:32:02:3f:19:9e:26:c1:a1:87:a2: 8f:e7:87:0c:3a:78:c1:69:fe:36:ba:3c:02:80:8d: ca:30:1f:3f:fb:d4:9e:30:f9:28:c6:3a:e3:fc:90: 10:3f:02:28:5e:cf:92:00:e8:fd:97:e2:0c:72:02: c1:7e:15:fb:cd:87:4f:96:64:0b:1b:17:b1:14:1e: ba:46:b2:a0:4d:b3:7c:99:8e:52:39:49:ae:a9:23: 6d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F4:7F:EB:94:13:5E:4E:34:BE:AF:67:78:96:BA:11:01:43:B6:8F X509v3 Authority Key Identifier: keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6d:32:1e:75:4b:e4:12:7d:94:5e:15:02:3e:7b:de:f0:65: 1e:12:61:23:d5:b0:b2:81:0a:47:71:5f:53:5c:06:87:29:5a: 28:bb:ce:cc:1d:7d:90:cb:25:13:ff:54:a8:e3:b5:ea:aa:90: 7c:fe:6c:be:27:96:90:f1:c7:f5:2c:0f:be:07:39:83:9f:86: 42:ab:e8:2a:a2:0b:a7:cd:97:2c:23:7f:8b:09:28:9d:49:7c: 4a:e4:d8:f9:0f:91:13:13:37:0e:4c:24:fb:b9:48:ae:cb:45: 29:fe:05:7b:62:a7:36:f5:ce:f7:77:52:34:d9:74:64:34:0e: 13:73:82:3a:78:7a:51:4a:91:01:5f:8b:9a:58:a6:1f:0a:41: 91:40:2e:75:e9:39:39:d4:0b:a4:95:ce:f5:4a:e1:4b:ab:50: 62:db:a9:c2:d8:9c:ec:3e:ea:e2:20:0a:b4:ae:69:7a:66:98: 51:16:18:61:2c:10:c2:a4:db:1f:2f:2f:d1:b1:1b:c0:f1:96: d4:df:ab:ae:06:26:a6:32:0f:f9:b8:43:1f:ad:b7:96:e8:79: 40:8e:57:ec:80:db:02:30:e1:2f:4b:ee:bb:4c:0d:0e:d4:29: 9a:49:36:9c:7b:08:9a:68:a9:ea:81:bb:d5:04:9a:4d:3a:86: 6a:80:dd:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aTAiaYD6+JCLDayVPDaFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMjE1ZjU4MTU5ZWM1NzZhMjAyMjc3NmVhNjRmNjFjNWJi MDAxOTQwHhcNMjUxMjE5MDcwMDQ0WhcNMjUxMjIwMDcwMDQ0WjAzMTEwLwYDVQQD Eyg0OGY0N2ZlYjk0MTM1ZTRlMzRiZWFmNjc3ODk2YmExMTAxNDNiNjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss7wUnGWbfO4WcU7c1HDX5DLTRcB SI+4SRtsMdDDbRMMoGNeX0S1EOPti05gkmRKVlxzs0kcj6IZ2sjvVWAhAZu7nw+T SUcRbEOt0jM5eOHaxCLrrKSuDUXU39KL6mmP+1lDxtZQM2WLtnMSMgH4DaUObH0y Vx/ASjZNfjPGe+EQ524PFoSB/Q30eKgl+ujXArZSNHSJoXrX/NOpvv+0xKoEvXDq pzAsozICPxmeJsGhh6KP54cMOnjBaf42ujwCgI3KMB8/+9SeMPkoxjrj/JAQPwIo Xs+SAOj9l+IMcgLBfhX7zYdPlmQLGxexFB66RrKgTbN8mY5SOUmuqSNtwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEj0f+uUE15ONL6vZ3iWuhEBQ7aPMB8GA1UdIwQY MBaAFMwhX1gVnsV2ogIndupk9hxbsAGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAt ODQzZWVlZTBhMjYwLzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAtODQzZWVlZTBhMjYw LzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP20yHnVL 5BJ9lF4VAj573vBlHhJhI9WwsoEKR3FfU1wGhylaKLvOzB19kMslE/9UqOO16qqQ fP5svieWkPHH9SwPvgc5g5+GQqvoKqILp82XLCN/iwkonUl8SuTY+Q+RExM3Dkwk +7lIrstFKf4Fe2KnNvXO93dSNNl0ZDQOE3OCOnh6UUqRAV+LmlimHwpBkUAudek5 OdQLpJXO9UrhS6tQYtupwtic7D7q4iAKtK5pemaYURYYYSwQwqTbHy8v0bEbwPGW 1N+rrgYmpjIP+bhDH623luh5QI5X7IDbAjDhL0vuu0wNDtQpmkk2nHsImmip6oG7 1QSaTTqGaoDdzQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:29:35 2025 by rpki-client