This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json) Hash identifier: ypLycm2CKIdsso98TS6c1sj7i2t5IgUnmtUs8vuMPDI= Subject key identifier: 77:B6:2A:EF:21:58:7F:EC:B8:B1:55:E1:9C:39:A6:1D:D5:EA:15:9D Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b Certificate serial: 019B32D694E0102AFC05D52D49ED83E9FEDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft Manifest number: 0980 Signing time: Thu 18 Dec 2025 19:01:22 +0000 Manifest this update: Thu 18 Dec 2025 19:01:22 +0000 Manifest next update: Fri 19 Dec 2025 19:01:22 +0000 Files and hashes: 1: cGaM1pqwI_iREeyFYU4bDaF6huI.roa (hash: ZX5FkbfvKLABufYmP9T9sbDn4rTGZcGZ9RNRwuV4C4s=) 2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: p37S8Jaw4sd7Lc1wdmqxXKW8QDdYgI/UL0ORSPkonlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:94:e0:10:2a:fc:05:d5:2d:49:ed:83:e9:fe:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b Validity Not Before: Dec 18 19:01:22 2025 GMT Not After : Dec 19 19:01:22 2025 GMT Subject: CN=77b62aef21587fecb8b155e19c39a61dd5ea159d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:dc:45:55:ad:6d:8f:7a:84:29:f3:dd:e7: 0d:b9:f9:72:9e:3d:d4:dd:83:35:72:b4:1c:31:57: 66:4d:f5:f2:fb:c2:60:f7:77:2a:7b:85:13:f0:59: d4:db:c5:b4:ef:23:7d:a0:92:49:dd:dd:80:2d:3d: 58:d7:18:c6:d4:ee:24:21:30:16:34:a1:26:07:d2: 5c:97:27:c5:16:61:f9:4b:a8:ca:17:41:5f:af:68: 06:0b:38:34:17:fd:d6:99:08:84:f7:a2:74:33:02: 45:fe:de:aa:5b:8a:d1:24:d8:e6:ab:a0:ca:fb:2f: 34:93:73:6c:06:2b:54:39:e1:c2:42:c7:7f:3a:77: c4:ba:2f:7f:d9:43:1b:ce:4b:13:e9:77:aa:66:83: 5b:9a:db:72:8e:90:c0:6a:0f:30:bd:51:73:49:dc: 47:7c:31:c7:10:b6:6f:e7:00:f1:2a:08:71:73:50: 4b:28:cb:94:27:e4:d5:b4:09:02:4d:44:80:bb:4c: 40:16:9d:c1:44:67:90:57:73:64:6e:5f:7d:f2:a0: 7c:9b:26:69:d7:99:ba:37:36:d6:0b:88:28:b0:17: 84:58:c5:8c:b9:d3:99:58:9f:d1:a5:29:af:3d:53: e1:d9:a7:f6:55:fb:1f:41:53:01:aa:08:74:18:96: 0b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B6:2A:EF:21:58:7F:EC:B8:B1:55:E1:9C:39:A6:1D:D5:EA:15:9D X509v3 Authority Key Identifier: keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:64:16:6b:e8:18:08:69:03:11:dc:ec:b0:49:2f:49:a7:3d: 6b:d3:56:6c:72:6b:3d:6f:bf:7b:ae:82:2c:05:9b:5f:39:4b: 7a:7e:36:b4:26:47:37:53:37:76:85:75:7d:ce:6a:74:9e:d5: d6:86:10:cc:52:49:36:b6:ca:3e:92:d0:f3:0a:b0:79:1e:e3: ee:8e:ef:8c:07:a1:83:35:fb:47:a9:3c:25:82:9b:84:21:59: ff:9a:c7:89:0f:d8:76:c2:ce:96:9f:4d:7e:79:b3:ce:46:0a: a9:32:66:8a:b6:ca:b2:74:ba:c8:e0:6b:67:78:f0:c8:a3:fd: 39:9b:fc:b7:b3:3f:48:de:35:d6:c5:b6:c6:1a:fd:d4:4d:99: 02:8a:ac:71:81:12:71:53:7d:3c:d4:1a:96:07:ad:60:dd:65: 00:1a:2f:7a:ce:c1:8f:33:3f:7a:d9:ca:d2:ea:62:76:d1:b2: 7c:8e:ae:4c:1b:5d:f9:82:aa:39:1a:ab:b4:ba:29:f0:5d:e3: ec:31:57:c6:e7:d3:38:fb:a3:ac:ac:60:2f:de:43:c9:c4:2c: 2b:5a:a5:8f:eb:ed:1a:82:e2:38:84:05:1e:f3:b4:fa:5d:e1: 77:41:bc:1d:d9:63:de:3d:8d:45:57:8b:19:bf:8a:35:37:1c: 6c:84:b5:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1pTgECr8BdUtSe2D6f7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTRjMzFlMTVkZjRiN2E2MGU1ZDQwZGYzYWFjMTg1MmU4 ZGE3NGIwHhcNMjUxMjE4MTkwMTIyWhcNMjUxMjE5MTkwMTIyWjAzMTEwLwYDVQQD Eyg3N2I2MmFlZjIxNTg3ZmVjYjhiMTU1ZTE5YzM5YTYxZGQ1ZWExNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtvcRVWtbY96hCnz3ecNuflynj3U 3YM1crQcMVdmTfXy+8Jg93cqe4UT8FnU28W07yN9oJJJ3d2ALT1Y1xjG1O4kITAW NKEmB9JclyfFFmH5S6jKF0Ffr2gGCzg0F/3WmQiE96J0MwJF/t6qW4rRJNjmq6DK +y80k3NsBitUOeHCQsd/OnfEui9/2UMbzksT6XeqZoNbmttyjpDAag8wvVFzSdxH fDHHELZv5wDxKghxc1BLKMuUJ+TVtAkCTUSAu0xAFp3BRGeQV3Nkbl998qB8myZp 15m6NzbWC4gosBeEWMWMudOZWJ/RpSmvPVPh2af2VfsfQVMBqgh0GJYLvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHe2Ku8hWH/suLFV4Zw5ph3V6hWdMB8GA1UdIwQY MBaAFM6Uwx4V30t6YOXUDfOqwYUujadLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lZDdjYjItZTM4Ny00N2JmLWJlNGEt MDhmMjI2M2E0MTNjLzEvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lZDdjYjItZTM4Ny00N2JmLWJlNGEtMDhmMjI2M2E0MTNj LzEvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGQWa+gY CGkDEdzssEkvSac9a9NWbHJrPW+/e66CLAWbXzlLen42tCZHN1M3doV1fc5qdJ7V 1oYQzFJJNrbKPpLQ8wqweR7j7o7vjAehgzX7R6k8JYKbhCFZ/5rHiQ/YdsLOlp9N fnmzzkYKqTJmirbKsnS6yOBrZ3jwyKP9OZv8t7M/SN411sW2xhr91E2ZAoqscYES cVN9PNQalgetYN1lABoves7BjzM/etnK0upidtGyfI6uTBtd+YKqORqrtLop8F3j 7DFXxufTOPujrKxgL95DycQsK1qlj+vtGoLiOIQFHvO0+l3hd0G8Hdlj3j2NRVeL Gb+KNTccbIS1Qw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:28:46 2025 by rpki-client