This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json) Hash identifier: 8hygKqSaYoEr23gR0bLzf37asmLutBEv0Gur0Y9iUco= Subject key identifier: 41:2A:63:B9:CE:2B:C6:6E:37:16:CC:E7:DA:05:9F:01:E3:A7:94:1E Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 019B4ADE620E3EE9126FFCC79DD14C7E2F33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 11:00:46 +0000 Manifest this update: Tue 23 Dec 2025 11:00:46 +0000 Manifest next update: Wed 24 Dec 2025 11:00:46 +0000 Files and hashes: 1: 0xAeo2a2iLttbU-9qLwxhP3W5ss.roa (hash: KCgM9KWWYMbjy0SQJWIlI1gevbRgwTSQjmHIQMhZOFo=) 2: 1GGtyTPgPlDy6MPQ5o0gS_2Q9UM.roa (hash: gOi5uzaamNISRfWC/jzX0CQnB58FX9BTQozvqpu683k=) 3: 1VO0RuZDCw_d3nrvSLXPJBFpELM.roa (hash: RVMlSLh90fckV0ULVrxGXrllRUKBMW1qpE2aUDAMp18=) 4: MHaB6YDK7hMFt-_1LMKEcRnolXY.roa (hash: HMU04XiVIqiavwZxk6eCzMS/VCWuh3NjcyT+luDuzS0=) 5: XFEEccbEsmiETxVTXsuQHob0Ig8.roa (hash: gNVdhv6luqDbEY/yZdldKTkFqgtu7cFYTeubRvuYlMs=) 6: XYvBe2DkMF52qzkhOJvtRBiIQio.roa (hash: vc4GpSOFPSWnmLVNnXKMqCyW7C32uripWcLl8WvCvmE=) 7: cgoioMwhBMFnR_o18uz7lh61zXU.roa (hash: muq8Pq9FVp8y13ZY1OD1P/qR19HpxP198AkqSx2L6EM=) 8: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: qFrmRUrGcNI0VgIcv/HLbgpKiEjCGlKHSGyNHA2TLU8=) 9: s1oFGEPvL8IMjYASLXkMEl3bONc.roa (hash: ID8ZOvyObfK0KrvTgF7I419RUO3QA/UAdGzXegtjwU0=) 10: upooLs-mDkOyiBT2fNGHj5cQ7E4.roa (hash: cglav+FWNX7UNTqPwwJsYgYuI7r/rTbr7vfv4F0chKo=) 11: vVMu6Hcqt_WNniCkUUd49xRBXDg.roa (hash: PFqhmo3voRuIoBNZ1c/3YzTjWO4jWVlUC05kdiWQzXU=) 12: vzw_vkrK3T6hMf3CfVO_XMRDNQY.roa (hash: TyRzYsx0I5A5DgLqk0b56yUe558XEXu6adROBLfEbBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:62:0e:3e:e9:12:6f:fc:c7:9d:d1:4c:7e:2f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: Dec 23 11:00:46 2025 GMT Not After : Dec 24 11:00:46 2025 GMT Subject: CN=412a63b9ce2bc66e3716cce7da059f01e3a7941e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:03:7e:2a:fa:ec:72:a7:77:94:30:58:20: 7a:76:00:d5:6b:0c:ea:a1:37:54:f4:ee:43:8b:c1: 0b:9f:c5:8d:f0:f7:fe:46:36:63:a0:b0:9d:16:fd: 04:16:e0:e0:ec:ba:3b:62:10:0b:fc:c7:c5:21:5e: 0a:9e:61:e7:0d:6e:10:e1:84:41:11:b5:92:57:05: 77:8f:5f:8d:e6:7d:31:e4:a8:73:ec:9e:93:2f:c8: 3e:99:cc:85:cf:cf:32:a3:b2:b2:71:8c:ce:2b:7f: 5d:e7:ee:f7:56:cf:20:53:02:8e:03:46:b8:80:6f: c7:d5:7b:05:75:cc:10:14:bd:c0:76:e8:a5:ea:88: ff:43:44:1c:71:8b:e0:5a:36:9a:e1:f9:48:7a:ce: a8:c8:e7:69:0d:c2:d5:36:bc:25:8e:b7:ed:88:f5: 56:c1:29:ae:7f:e6:28:a5:59:97:a3:b9:3e:70:95: 9b:af:03:72:1e:3a:b4:09:bd:a0:bb:ca:0b:ed:6c: 14:83:36:fe:ac:ef:14:d7:bc:5e:e0:9f:ae:07:75: 4a:18:09:29:6e:97:a4:42:11:b8:97:48:7a:1a:f2: 6d:58:18:6d:ef:78:2c:67:94:22:e1:1b:27:44:d4: 8d:82:57:0d:64:9d:3e:e9:f6:d6:71:98:a7:ff:e6: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2A:63:B9:CE:2B:C6:6E:37:16:CC:E7:DA:05:9F:01:E3:A7:94:1E X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f6:2b:aa:a1:4f:a9:9f:be:58:88:ac:9d:1f:34:44:df:33: 93:5f:06:0b:cd:5e:47:fc:ef:31:29:c3:33:5e:8b:90:e5:6e: 3e:f4:0d:8a:c4:cc:76:fe:63:28:23:d9:78:8e:83:1e:50:5d: a1:2c:6c:9c:45:aa:be:b3:0a:1c:63:10:41:a3:30:b6:57:80: 39:70:23:c7:78:f0:48:9f:e8:15:05:5c:51:d5:ae:1a:47:57: d3:a4:d9:58:fe:b1:b4:2b:14:1d:ed:75:a9:5c:26:2e:d4:ea: dd:7a:89:85:8f:61:f4:b6:68:55:7d:b7:a8:12:ef:bd:46:f8: ac:87:e3:c2:96:d7:28:30:18:2b:6d:9c:1e:64:72:17:01:0e: 27:a9:ce:51:05:79:95:8b:5f:3f:98:55:fa:80:67:25:f1:35: 5a:38:ef:de:d4:8f:2c:15:89:75:5a:b3:04:a5:c9:fd:62:d3: e4:21:38:41:ce:fc:fb:2d:b8:67:ec:57:6a:e3:8c:45:18:fc: 09:76:f9:75:37:4f:5a:34:71:f1:5c:6c:fc:db:21:00:5d:13: 61:4b:61:59:ac:09:f2:c5:11:f2:83:7b:46:8b:7c:25:ec:f7: a6:ca:16:ae:57:9e:89:b0:c9:a5:e1:94:f8:bc:5e:74:59:40: 25:29:c5:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3mIOPukSb/zHndFMfi8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjUxMjIzMTEwMDQ2WhcNMjUxMjI0MTEwMDQ2WjAzMTEwLwYDVQQD Eyg0MTJhNjNiOWNlMmJjNjZlMzcxNmNjZTdkYTA1OWYwMWUzYTc5NDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoMDfir67HKnd5QwWCB6dgDVawzq oTdU9O5Di8ELn8WN8Pf+RjZjoLCdFv0EFuDg7Lo7YhAL/MfFIV4KnmHnDW4Q4YRB EbWSVwV3j1+N5n0x5Khz7J6TL8g+mcyFz88yo7KycYzOK39d5+73Vs8gUwKOA0a4 gG/H1XsFdcwQFL3Aduil6oj/Q0QccYvgWjaa4flIes6oyOdpDcLVNrwljrftiPVW wSmuf+YopVmXo7k+cJWbrwNyHjq0Cb2gu8oL7WwUgzb+rO8U17xe4J+uB3VKGAkp bpekQhG4l0h6GvJtWBht73gsZ5Qi4RsnRNSNglcNZJ0+6fbWcZin/+b51QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEqY7nOK8ZuNxbM59oFnwHjp5QeMB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPYrqqFP qZ++WIisnR80RN8zk18GC81eR/zvMSnDM16LkOVuPvQNisTMdv5jKCPZeI6DHlBd oSxsnEWqvrMKHGMQQaMwtleAOXAjx3jwSJ/oFQVcUdWuGkdX06TZWP6xtCsUHe11 qVwmLtTq3XqJhY9h9LZoVX23qBLvvUb4rIfjwpbXKDAYK22cHmRyFwEOJ6nOUQV5 lYtfP5hV+oBnJfE1Wjjv3tSPLBWJdVqzBKXJ/WLT5CE4Qc78+y24Z+xXauOMRRj8 CXb5dTdPWjRx8Vxs/NshAF0TYUthWawJ8sUR8oN7Rot8Jez3psoWrleeibDJpeGU +LxedFlAJSnF0Q== -----END CERTIFICATE-----Generated at Tue Dec 23 14:34:29 2025 by rpki-client