This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json) Hash identifier: lDdlk9C3wBe/FU2OzXzLXDVUUW3tx72s9rw37Qu6rRM= Subject key identifier: 56:32:D5:60:FC:A3:0B:E6:09:59:C5:92:00:AB:D0:09:86:8B:06:2B Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c Certificate serial: 019B08C812D3B6C7F353EB502980E68D9C30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft Manifest number: 1414 Signing time: Wed 10 Dec 2025 15:01:28 +0000 Manifest this update: Wed 10 Dec 2025 15:01:28 +0000 Manifest next update: Thu 11 Dec 2025 15:01:28 +0000 Files and hashes: 1: GeqUCcFpQ21Ke1I_WIJvk2jePiQ.roa (hash: 26yR+VCk/Hf4BfoJU9xGk7UFdbLVpFDxyv4u/gu5wGA=) 2: wbMPRaPeBCBjr_X1gpDO7WwYRg0.roa (hash: GEEk7uH2XTiN16zpAji2ekHgUSjOP6/rQg31rkY0wKE=) 3: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (hash: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=) 4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: Wd8vVNLiCb2lFVbO2Xy90bQAw450YL+vlJ5hh8Hdt+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c8:12:d3:b6:c7:f3:53:eb:50:29:80:e6:8d:9c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c Validity Not Before: Dec 10 15:01:28 2025 GMT Not After : Dec 11 15:01:28 2025 GMT Subject: CN=5632d560fca30be60959c59200abd009868b062b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:78:90:a2:35:4a:ef:de:70:8f:20:b0:44: ca:cb:86:c1:39:51:56:15:7b:56:82:1c:8c:a2:64: 48:f5:6e:22:b8:17:8d:a2:fb:68:70:5d:0b:d6:9f: f6:95:92:f6:9c:3d:df:dc:8d:5e:fe:e2:0f:d8:a0: fe:5d:8b:2c:f7:6d:f1:5c:83:be:4c:4a:b1:9d:59: 04:16:00:d3:24:85:76:15:a1:c8:57:fc:95:7d:d3: 55:a8:5e:33:02:c1:27:b9:29:72:24:07:3d:94:99: a9:d6:61:2d:55:f3:82:42:4c:46:f0:8e:08:90:ae: e5:f5:ff:4b:3a:fe:50:19:5a:42:a8:a1:13:3e:0a: 26:09:9f:24:d8:3a:a0:d9:16:02:b8:ce:0d:1f:34: 0e:40:10:58:05:48:9c:c8:41:9f:a0:29:c6:d8:bb: 41:53:db:f1:c3:b9:96:af:e7:29:4e:5d:4d:c2:18: 1a:e0:bb:4e:be:02:59:2b:1c:f9:4b:13:dc:4f:7d: e0:68:b3:c3:fb:44:93:7a:44:4a:be:bf:0a:db:51: 00:80:60:2f:54:6b:f2:4a:d9:4b:88:24:5f:77:81: aa:f3:3e:06:f9:07:e6:b2:d5:a6:2c:42:14:96:83: 8c:3f:9c:af:31:9b:19:2a:ff:a3:e2:22:58:cc:db: a6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:32:D5:60:FC:A3:0B:E6:09:59:C5:92:00:AB:D0:09:86:8B:06:2B X509v3 Authority Key Identifier: keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:fd:6e:01:31:e9:25:35:14:da:ad:63:9e:e6:1e:6f:5e:83: 1f:aa:2f:64:ee:c0:5a:09:cb:a3:ac:23:9a:2d:6e:5c:2f:86: 0e:29:a3:bc:69:0d:74:45:06:51:82:28:34:34:7c:1a:38:a0: 00:62:39:77:02:bf:36:b7:35:d2:69:9c:48:77:22:41:21:0a: 55:4d:5e:f7:cf:36:49:9f:59:8d:8f:e2:26:43:c2:06:1e:cd: 06:43:e9:c2:b0:d1:5e:24:2e:d9:c8:c3:1f:53:52:40:91:cc: bc:d9:82:b7:96:45:21:1d:10:cc:3d:5f:b9:01:6c:e1:87:e6: df:7d:2b:6d:32:af:2e:73:39:1d:8a:2e:e4:1b:a4:6e:32:9e: 3d:5a:eb:09:80:ee:48:12:a8:be:6d:bf:0e:96:1f:06:b1:47: 13:74:78:b8:3c:b5:1f:44:73:f1:12:db:6f:89:25:6c:fa:71: d2:95:fb:86:e6:97:51:67:03:ba:27:e1:e0:4c:de:da:11:ad: 74:9d:67:f4:e4:53:85:30:57:76:8c:bc:9e:65:f9:0f:90:14: fd:0f:29:d6:96:67:82:7c:83:49:41:a4:e0:d9:85:77:b4:5e: ef:81:00:3f:ae:c1:da:54:1c:d5:65:7c:88:c5:2d:69:f1:79: 3a:de:10:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIyBLTtsfzU+tQKYDmjZwwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNzE4MGM0YmFkM2NmNDI1YTUwNjcyZTFjYjdhOWQyYWM3 OGUyMGMwHhcNMjUxMjEwMTUwMTI4WhcNMjUxMjExMTUwMTI4WjAzMTEwLwYDVQQD Eyg1NjMyZDU2MGZjYTMwYmU2MDk1OWM1OTIwMGFiZDAwOTg2OGIwNjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvh4kKI1Su/ecI8gsETKy4bBOVFW FXtWghyMomRI9W4iuBeNovtocF0L1p/2lZL2nD3f3I1e/uIP2KD+XYss923xXIO+ TEqxnVkEFgDTJIV2FaHIV/yVfdNVqF4zAsEnuSlyJAc9lJmp1mEtVfOCQkxG8I4I kK7l9f9LOv5QGVpCqKETPgomCZ8k2Dqg2RYCuM4NHzQOQBBYBUicyEGfoCnG2LtB U9vxw7mWr+cpTl1Nwhga4LtOvgJZKxz5SxPcT33gaLPD+0STekRKvr8K21EAgGAv VGvyStlLiCRfd4Gq8z4G+QfmstWmLEIUloOMP5yvMZsZKv+j4iJYzNumTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYy1WD8owvmCVnFkgCr0AmGiwYrMB8GA1UdIwQY MBaAFM5xgMS6089CWlBnLhy3qdKseOIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQt MDQ2ZDJlMmFkY2Q1LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQtMDQ2ZDJlMmFkY2Q1 LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/1uATHp JTUU2q1jnuYeb16DH6ovZO7AWgnLo6wjmi1uXC+GDimjvGkNdEUGUYIoNDR8Gjig AGI5dwK/Nrc10mmcSHciQSEKVU1e9882SZ9ZjY/iJkPCBh7NBkPpwrDRXiQu2cjD H1NSQJHMvNmCt5ZFIR0QzD1fuQFs4Yfm330rbTKvLnM5HYou5BukbjKePVrrCYDu SBKovm2/DpYfBrFHE3R4uDy1H0Rz8RLbb4klbPpx0pX7huaXUWcDuifh4Eze2hGt dJ1n9ORThTBXdoy8nmX5D5AU/Q8p1pZngnyDSUGk4NmFd7Re74EAP67B2lQc1WV8 iMUtafF5Ot4Qhg== -----END CERTIFICATE-----Generated at Wed Dec 10 18:08:11 2025 by rpki-client