This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json) Hash identifier: Wrn9kE0U6TtTKePgQkKUw81I+KefEPrUkJT6z462NNk= Subject key identifier: 0B:2F:4A:17:81:96:96:21:F8:90:30:A1:76:BE:AB:E6:10:56:BB:76 Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f Certificate serial: 019B5A51BA25CB8589D974ED96ACFB98EAA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft Manifest number: 120F Signing time: Fri 26 Dec 2025 11:01:04 +0000 Manifest this update: Fri 26 Dec 2025 11:01:04 +0000 Manifest next update: Sat 27 Dec 2025 11:01:04 +0000 Files and hashes: 1: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (hash: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=) 2: ifcwYHfmty9P7YlJSIwto5Z8mhc.roa (hash: j3Q6hvt9y1dRnxH4mfVL1HI6Z3oaft4npRVPXBxnB5Y=) 3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: y7gZE9btjqVJ1/U3mlF7svRv0tuHDmrecZDlOxLxK30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:ba:25:cb:85:89:d9:74:ed:96:ac:fb:98:ea:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f Validity Not Before: Dec 26 11:01:04 2025 GMT Not After : Dec 27 11:01:04 2025 GMT Subject: CN=0b2f4a1781969621f89030a176beabe61056bb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:20:79:09:c9:47:f8:f1:68:7c:bc:b0:7f:62: d7:98:33:bc:8b:08:9f:91:aa:7c:d3:33:08:48:a5: 89:6a:90:b5:a0:2e:76:21:d7:e3:dc:a9:0b:ba:60: b9:8c:f5:6c:1f:e3:37:b8:41:9c:7f:38:4c:c0:84: e6:32:6e:95:25:ee:18:29:09:0f:06:0f:bd:0a:10: ca:c2:80:c1:76:f6:dc:14:05:88:38:3e:f5:08:55: 8f:5f:28:96:ce:fb:14:75:b5:cf:c9:38:b2:36:4a: 47:ce:fb:b1:17:3e:50:13:1a:e0:b3:c0:5e:83:24: 91:6f:65:73:9f:2f:7e:a1:28:f2:ef:4f:e5:8e:a2: 3a:6e:59:c8:51:4a:a0:d7:a6:63:78:5e:66:6a:7b: 13:31:68:1b:db:d1:5b:11:96:20:db:1c:ce:58:2b: 15:33:d9:30:df:b1:e1:3c:b9:f3:28:02:1f:48:e3: 08:29:6a:3b:a5:b7:62:ad:17:9d:04:11:a7:bc:a5: f4:13:5a:f7:bf:b5:21:ee:43:0c:49:8c:f2:59:a1: cb:0c:27:f0:b6:dd:a8:6a:89:5b:4b:a3:9d:be:0f: 23:c2:22:7c:5d:f0:12:23:93:96:7e:c2:3d:90:3b: 60:e2:e3:80:4b:cd:05:19:65:63:09:aa:b0:78:10: 78:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2F:4A:17:81:96:96:21:F8:90:30:A1:76:BE:AB:E6:10:56:BB:76 X509v3 Authority Key Identifier: keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:16:15:cc:30:91:c7:fa:ff:aa:d5:ed:1c:cc:ec:bf:20:09: e5:49:8f:32:eb:7e:6e:f8:95:bb:e4:cf:e6:a0:c5:89:2b:87: 7b:4c:9a:93:b3:92:de:a7:12:43:81:1d:7b:30:e7:5a:de:48: 0c:6b:d1:fb:4a:89:1a:e8:a7:09:e6:ca:a6:20:3f:b7:75:a7: d6:3f:b7:ab:2c:42:b3:c0:2c:ed:c8:62:f0:6a:f4:14:1e:35: 26:8d:22:5c:c3:85:72:21:6a:41:d4:b5:c5:79:cb:89:72:62: 94:0a:af:75:da:5d:a2:46:6c:d3:b2:0e:cc:0f:d0:e0:9f:69: 9b:4e:fd:55:70:16:10:de:eb:5a:54:b1:9c:47:c4:f1:89:87: 11:5c:ad:0a:b6:ca:1a:11:7b:fc:a1:45:e2:65:6c:a2:9f:d4: 46:3b:c4:a2:b5:ca:8e:32:43:32:e6:0d:ca:d5:94:ff:d4:e9: 26:0b:30:ef:17:20:f7:3b:56:ed:d2:65:f1:1b:fe:cd:cd:31: a2:74:0c:5f:5e:14:6b:b4:9b:5a:2b:29:81:fd:fd:4c:88:97: 2b:e8:2e:2e:86:55:5c:33:bf:b4:c3:af:25:a3:d2:80:d1:5b: aa:22:6f:d0:f3:58:7c:0f:fe:59:80:d4:11:6c:d4:d0:be:38: c1:92:de:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUboly4WJ2XTtlqz7mOqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDM1NzkwODMwY2U3NDY5YTk0YzU5YjJlMmNjYmJmNWUz NmQxM2YwHhcNMjUxMjI2MTEwMTA0WhcNMjUxMjI3MTEwMTA0WjAzMTEwLwYDVQQD EygwYjJmNGExNzgxOTY5NjIxZjg5MDMwYTE3NmJlYWJlNjEwNTZiYjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SB5CclH+PFofLywf2LXmDO8iwif kap80zMISKWJapC1oC52Idfj3KkLumC5jPVsH+M3uEGcfzhMwITmMm6VJe4YKQkP Bg+9ChDKwoDBdvbcFAWIOD71CFWPXyiWzvsUdbXPyTiyNkpHzvuxFz5QExrgs8Be gySRb2Vzny9+oSjy70/ljqI6blnIUUqg16ZjeF5mansTMWgb29FbEZYg2xzOWCsV M9kw37HhPLnzKAIfSOMIKWo7pbdirRedBBGnvKX0E1r3v7Uh7kMMSYzyWaHLDCfw tt2oaolbS6Odvg8jwiJ8XfASI5OWfsI9kDtg4uOAS80FGWVjCaqweBB4LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsvSheBlpYh+JAwoXa+q+YQVrt2MB8GA1UdIwQY MBaAFMzTV5CDDOdGmpTFmy4sy79eNtE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAt YzVkMTNlODhlNGRlLzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAtYzVkMTNlODhlNGRl LzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhYVzDCR x/r/qtXtHMzsvyAJ5UmPMut+bviVu+TP5qDFiSuHe0yak7OS3qcSQ4EdezDnWt5I DGvR+0qJGuinCebKpiA/t3Wn1j+3qyxCs8As7chi8Gr0FB41Jo0iXMOFciFqQdS1 xXnLiXJilAqvddpdokZs07IOzA/Q4J9pm079VXAWEN7rWlSxnEfE8YmHEVytCrbK GhF7/KFF4mVsop/URjvEorXKjjJDMuYNytWU/9TpJgsw7xcg9ztW7dJl8Rv+zc0x onQMX14Ua7SbWispgf39TIiXK+guLoZVXDO/tMOvJaPSgNFbqiJv0PNYfA/+WYDU EWzU0L44wZLeGQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:33 2025 by rpki-client