This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json) Hash identifier: KdQVU5aEdEt9n1/AZXsjPylgzvedle7xzMsFLTpxsWk= Subject key identifier: F5:50:45:B5:CA:22:18:8F:D1:A2:FA:D6:34:CA:87:FB:00:6D:4C:B9 Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40 Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40 Certificate serial: 019B424AAA09C9EABC682A9361E0E3DC9582 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft Manifest number: 0DE9 Signing time: Sun 21 Dec 2025 19:02:27 +0000 Manifest this update: Sun 21 Dec 2025 19:02:27 +0000 Manifest next update: Mon 22 Dec 2025 19:02:27 +0000 Files and hashes: 1: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (hash: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=) 2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: j/LiqiQx+QGs53YeSSI9LSeXQgX7mn4xGtwxotpRNyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:aa:09:c9:ea:bc:68:2a:93:61:e0:e3:dc:95:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40 Validity Not Before: Dec 21 19:02:27 2025 GMT Not After : Dec 22 19:02:27 2025 GMT Subject: CN=f55045b5ca22188fd1a2fad634ca87fb006d4cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9d:26:4e:38:e9:78:36:26:76:07:6e:30:8b: ad:01:f2:89:ff:29:05:62:66:01:d6:2b:d9:54:69: b7:39:a6:db:92:38:ad:58:a7:25:77:73:d8:79:ac: ce:1e:c2:a9:2e:3b:5c:08:bd:fb:ca:b9:12:4b:b6: 5f:82:46:ef:dc:bf:f3:3c:bf:bd:5f:ce:79:af:46: 44:f7:60:fc:f3:1e:79:df:7f:7e:47:77:6a:ce:7e: 82:2f:1e:47:5e:5e:d9:36:24:70:27:45:44:12:86: 40:90:72:d4:17:4a:7c:5e:ab:7b:d6:cf:ca:f5:30: 44:08:c6:bd:43:b7:4d:7e:3d:3b:2c:b1:b8:05:e1: f3:4f:06:66:1c:3c:33:31:21:b7:bf:db:4d:44:ae: 1c:c2:63:7e:ac:ed:06:79:8c:11:60:2c:fd:b2:f1: c9:00:ec:42:a7:26:00:24:69:26:f9:ef:df:0c:48: fd:1d:db:c0:85:24:b8:5d:1a:26:52:28:31:a0:f3: 24:df:6b:6f:b6:b1:98:c4:ce:88:0d:a8:31:ed:5c: c2:f2:db:5d:7b:09:90:0a:a9:54:be:fa:34:99:14: 5f:ed:ac:29:c3:6a:04:11:f1:69:23:10:da:06:77: cf:c1:86:ca:d9:a5:a9:cc:98:0e:29:34:1c:44:61: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:50:45:B5:CA:22:18:8F:D1:A2:FA:D6:34:CA:87:FB:00:6D:4C:B9 X509v3 Authority Key Identifier: keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a6:1f:84:8c:26:4f:dd:78:e9:13:f0:21:c0:70:11:36:d7: 00:89:0f:f9:0f:4a:03:9e:50:60:d4:51:28:c7:5a:66:b7:56: 79:60:b8:e5:8d:cd:4c:77:e7:2b:3a:3b:c9:99:59:67:7a:ef: 5e:58:c7:3d:f9:92:8e:73:8a:f9:40:92:88:0d:04:6a:1c:ef: 03:c3:13:b0:6e:86:31:b9:10:32:8f:85:1c:4e:f9:39:85:86: 69:28:e5:3b:68:f9:1e:1c:f7:3a:8f:e5:47:aa:1c:db:85:88: 9c:f3:8c:e4:72:3e:6e:6e:4f:f7:23:55:f2:8c:3a:89:ff:a1: 61:77:f0:c4:0a:65:82:ff:0e:c2:8a:d6:64:0b:1f:d7:b8:31: fe:e6:2d:cd:ba:a3:03:b5:c1:bb:f7:2a:59:83:dc:80:a8:5b: 7c:f1:dd:a0:41:c6:ba:06:3b:c5:8f:03:7c:27:eb:b8:1f:41: 40:51:66:e3:13:21:c7:45:08:84:16:de:49:e4:7b:ae:db:33: 52:24:fa:36:72:d6:0d:88:8d:60:a0:94:97:3c:fa:e1:6e:01: 9e:40:e8:68:ff:93:a8:3a:ac:63:3c:6e:1f:7e:85:54:60:df: 01:03:d5:69:1d:0c:f2:ea:54:62:e8:44:fb:74:3b:f3:47:9c: 14:df:23:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSqoJyeq8aCqTYeDj3JWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMDA3MmRhOTgxMTQxOTNjMTA0Y2UxYTYwOWQ5MmE2OTc2 ZjljNDAwHhcNMjUxMjIxMTkwMjI3WhcNMjUxMjIyMTkwMjI3WjAzMTEwLwYDVQQD EyhmNTUwNDViNWNhMjIxODhmZDFhMmZhZDYzNGNhODdmYjAwNmQ0Y2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ0mTjjpeDYmdgduMIutAfKJ/ykF YmYB1ivZVGm3OabbkjitWKcld3PYeazOHsKpLjtcCL37yrkSS7Zfgkbv3L/zPL+9 X855r0ZE92D88x55339+R3dqzn6CLx5HXl7ZNiRwJ0VEEoZAkHLUF0p8Xqt71s/K 9TBECMa9Q7dNfj07LLG4BeHzTwZmHDwzMSG3v9tNRK4cwmN+rO0GeYwRYCz9svHJ AOxCpyYAJGkm+e/fDEj9HdvAhSS4XRomUigxoPMk32tvtrGYxM6IDagx7VzC8ttd ewmQCqlUvvo0mRRf7awpw2oEEfFpIxDaBnfPwYbK2aWpzJgOKTQcRGGvpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVQRbXKIhiP0aL61jTKh/sAbUy5MB8GA1UdIwQY MBaAFMwActqYEUGTwQTOGmCdkqaXb5xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQt YzBlYzhiOTVhYjc3LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQtYzBlYzhiOTVhYjc3 LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqYfhIwm T9146RPwIcBwETbXAIkP+Q9KA55QYNRRKMdaZrdWeWC45Y3NTHfnKzo7yZlZZ3rv XljHPfmSjnOK+UCSiA0EahzvA8MTsG6GMbkQMo+FHE75OYWGaSjlO2j5Hhz3Oo/l R6oc24WInPOM5HI+bm5P9yNV8ow6if+hYXfwxAplgv8OworWZAsf17gx/uYtzbqj A7XBu/cqWYPcgKhbfPHdoEHGugY7xY8DfCfruB9BQFFm4xMhx0UIhBbeSeR7rtsz UiT6NnLWDYiNYKCUlzz64W4BnkDoaP+TqDqsYzxuH36FVGDfAQPVaR0M8upUYuhE +3Q780ecFN8j8A== -----END CERTIFICATE-----Generated at Mon Dec 22 02:17:43 2025 by rpki-client