This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft File: ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json) Hash identifier: MHsmU8GzkfVRHJMqG8G+ny23YvqflrsXxhh5g58jEKs= Subject key identifier: F7:E3:6B:54:AA:75:1D:17:35:27:EC:4C:59:BE:E7:EE:97:5E:2A:E4 Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b Certificate serial: 019B5B6446FC6B54A7C661E4ABB974D16423 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft Manifest number: 15E8 Signing time: Fri 26 Dec 2025 16:00:56 +0000 Manifest this update: Fri 26 Dec 2025 16:00:56 +0000 Manifest next update: Sat 27 Dec 2025 16:00:56 +0000 Files and hashes: 1: 64PcT-ttV59tp4M6SLzIc1B2y1U.roa (hash: DimP9lf8Wwvo3/homuogbrevUAd8aPNUrD6/T7BCGD0=) 2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: vBZL6yuLXUWvE2PEVP6b0TQyNCMifcrFpXNrh27RAXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:46:fc:6b:54:a7:c6:61:e4:ab:b9:74:d1:64:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b Validity Not Before: Dec 26 16:00:56 2025 GMT Not After : Dec 27 16:00:56 2025 GMT Subject: CN=f7e36b54aa751d173527ec4c59bee7ee975e2ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:2a:a9:f6:26:c6:f7:9b:83:43:71:3c:97: 88:fd:ff:d5:ab:60:ee:9a:ab:a1:d3:6f:15:c2:6f: 12:71:52:56:55:8a:a0:bc:3e:9e:e3:ba:47:b6:7f: 31:c0:17:6f:7e:3b:a5:d4:f5:b9:cc:52:a0:1e:d1: e6:b7:a0:ac:fe:ce:92:4d:30:84:e0:7f:9a:cb:0b: a0:69:15:14:23:0b:21:d3:15:2b:90:a6:b7:42:fb: 4a:0f:5c:b6:10:d4:7d:57:de:34:78:fb:8e:75:82: 86:2a:97:e7:8e:1d:c2:8c:b1:6b:91:87:39:99:21: 83:14:ac:76:44:29:dc:28:3d:fa:b1:c5:80:d8:a1: b8:98:56:cd:55:1e:94:ad:3e:fc:e1:fa:84:76:9f: d0:a5:ba:02:96:6a:94:4b:56:75:09:78:c8:7f:f8: 15:e6:92:b7:95:16:f7:a0:f6:95:c0:d3:70:1a:a3: 40:64:da:e4:e7:2b:58:f5:4a:33:bf:07:0e:5c:9a: f4:5b:6c:08:f3:9b:c2:f9:e4:32:65:b2:63:b6:54: 73:e0:3e:25:5b:ed:94:61:46:8d:fd:13:5d:9a:e5: db:c3:8f:c7:3f:89:8e:1a:1b:ea:b1:d2:9c:3e:ae: fe:28:4b:f9:06:af:e3:51:3a:c3:3e:ea:2b:f6:c1: b9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E3:6B:54:AA:75:1D:17:35:27:EC:4C:59:BE:E7:EE:97:5E:2A:E4 X509v3 Authority Key Identifier: keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b9:c9:62:35:94:f4:4c:12:c8:88:17:65:7f:98:f1:e7:31: c9:f9:c6:3e:bf:41:50:9b:a8:9f:88:93:51:30:8a:3c:24:39: 86:5b:d1:8c:7e:da:0f:02:28:a6:ed:cb:a8:d1:dc:05:cf:36: fd:44:cd:73:6a:5a:11:e9:1f:cf:38:64:44:02:cf:3b:d8:2c: e1:f7:2a:20:31:82:ff:f5:09:fa:27:3d:0f:f4:b5:23:ee:23: 26:0c:fc:fe:b1:98:96:cf:51:bb:d7:32:3e:de:45:67:21:e8: bf:0f:10:1e:03:d6:e3:d1:e7:c1:2b:d2:9b:cf:cd:8e:68:ce: 1c:80:9a:0c:86:b5:61:72:2c:18:b5:86:e1:07:d7:9d:b5:c9: 0d:67:f5:2f:8b:28:04:32:3e:da:e7:39:20:d3:63:37:71:32: da:19:2f:18:b2:3e:c6:7f:1e:dc:13:16:6c:42:70:3f:e3:a1: 58:e3:be:90:22:ee:1c:9b:bc:7d:ba:fe:fc:ae:05:3c:9b:8d: 9c:c8:74:76:2f:b4:89:bd:1f:52:33:de:da:ca:31:d9:44:e5: d0:be:38:23:96:31:b2:ec:3b:1d:24:5e:48:61:71:46:74:84: 16:11:70:50:74:38:d8:09:1b:7a:02:ba:00:b9:8a:15:af:e5: 4c:f8:4c:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZEb8a1SnxmHkq7l00WQjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MjU5ZGVhM2U5Y2FlNmU4MTk1ODhjNWM5MTNmMDJkNDQx MDM5OGIwHhcNMjUxMjI2MTYwMDU2WhcNMjUxMjI3MTYwMDU2WjAzMTEwLwYDVQQD EyhmN2UzNmI1NGFhNzUxZDE3MzUyN2VjNGM1OWJlZTdlZTk3NWUyYWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uMqqfYmxvebg0NxPJeI/f/Vq2Du mquh028Vwm8ScVJWVYqgvD6e47pHtn8xwBdvfjul1PW5zFKgHtHmt6Cs/s6STTCE 4H+aywugaRUUIwsh0xUrkKa3QvtKD1y2ENR9V940ePuOdYKGKpfnjh3CjLFrkYc5 mSGDFKx2RCncKD36scWA2KG4mFbNVR6UrT784fqEdp/QpboClmqUS1Z1CXjIf/gV 5pK3lRb3oPaVwNNwGqNAZNrk5ytY9UozvwcOXJr0W2wI85vC+eQyZbJjtlRz4D4l W+2UYUaN/RNdmuXbw4/HP4mOGhvqsdKcPq7+KEv5Bq/jUTrDPuor9sG5NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfja1SqdR0XNSfsTFm+5+6XXirkMB8GA1UdIwQY MBaAFGYlneo+nK5ugZWIxckT8C1EEDmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmlXZDZqNmNybTZCbFlqRnlSUHdMVVFRT1lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wYjMyNDktZmQ0OS00NTY3LWIzNmQt Y2JiZTMyNDJjMmJkLzEvWmlXZDZqNmNybTZCbFlqRnlSUHdMVVFRT1lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8wYjMyNDktZmQ0OS00NTY3LWIzNmQtY2JiZTMyNDJjMmJk LzEvWmlXZDZqNmNybTZCbFlqRnlSUHdMVVFRT1lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILnJYjWU 9EwSyIgXZX+Y8ecxyfnGPr9BUJuon4iTUTCKPCQ5hlvRjH7aDwIopu3LqNHcBc82 /UTNc2paEekfzzhkRALPO9gs4fcqIDGC//UJ+ic9D/S1I+4jJgz8/rGYls9Ru9cy Pt5FZyHovw8QHgPW49HnwSvSm8/NjmjOHICaDIa1YXIsGLWG4QfXnbXJDWf1L4so BDI+2uc5INNjN3Ey2hkvGLI+xn8e3BMWbEJwP+OhWOO+kCLuHJu8fbr+/K4FPJuN nMh0di+0ib0fUjPe2sox2UTl0L44I5Yxsuw7HSReSGFxRnSEFhFwUHQ42AkbegK6 ALmKFa/lTPhMqQ== -----END CERTIFICATE-----Generated at Fri Dec 26 22:59:49 2025 by rpki-client