This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft File: Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft (raw, json) Hash identifier: fUQVfJe+vaEayc93ttMr9z4sxXBictoMOgsyzbJnhYw= Subject key identifier: B4:59:56:0C:F7:91:85:03:1B:CB:74:E2:4C:7A:6C:1B:07:D3:04:AA Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C Certificate issuer: /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c Certificate serial: 019B42EEC1FFA51FC30FFB0DDA89154406AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 22:01:41 +0000 Manifest this update: Sun 21 Dec 2025 22:01:41 +0000 Manifest next update: Mon 22 Dec 2025 22:01:41 +0000 Files and hashes: 1: VTMTtjqH-zixo9hQexyKWnuO0p4.roa (hash: QpOOm2VlJ9G/CZEjnwWuM3L+t5sPw22wtkcRl/OMgAk=) 2: Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl (hash: rS3mR9qtTEthRqiFxwp3FmjhuwMRoMH0Ec1Sn0KmLbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:c1:ff:a5:1f:c3:0f:fb:0d:da:89:15:44:06:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c Validity Not Before: Dec 21 22:01:41 2025 GMT Not After : Dec 22 22:01:41 2025 GMT Subject: CN=b459560cf79185031bcb74e24c7a6c1b07d304aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c6:27:1a:b2:ad:30:b8:b1:e1:11:b7:42:b0: 8d:e4:74:af:11:69:4a:43:f3:66:26:d5:ae:48:08: ad:33:32:65:69:04:23:d7:bc:6e:bb:c3:3b:0c:50: 6d:97:55:1a:06:80:3c:3c:91:04:f6:d6:7f:15:8b: 64:77:4f:f2:82:96:73:fd:22:e6:51:8e:89:b5:ca: ff:05:a3:7d:6f:3d:8d:fb:5f:e4:a2:e7:a0:ef:c4: 49:1b:ac:29:3f:b3:b3:80:4f:d1:35:7b:87:30:23: cd:bb:83:e4:e0:72:ea:41:4c:db:c5:7e:ba:2c:64: 50:08:64:8e:60:8b:6f:94:ba:a0:bf:bb:5c:f3:d7: 56:b4:a6:cf:de:c7:56:b1:29:1e:27:53:83:5c:7a: 1e:8f:b8:90:6c:23:62:bf:16:09:41:ea:8c:f4:ef: 8a:96:44:ec:a7:56:e4:82:80:c9:11:9d:02:2e:0d: 54:ee:99:63:22:15:09:ae:44:eb:b6:c2:80:88:a5: 53:df:c9:64:16:e4:f6:2a:d7:a0:79:43:87:9d:a5: 62:d1:82:9c:d2:68:c6:59:9e:79:69:c5:42:b8:99: f1:7a:9c:9a:e7:bb:c3:d2:cd:32:38:52:60:78:27: 56:54:08:1f:0c:80:1f:7c:68:be:72:b7:9e:d1:1e: af:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:59:56:0C:F7:91:85:03:1B:CB:74:E2:4C:7A:6C:1B:07:D3:04:AA X509v3 Authority Key Identifier: keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f1:52:f4:3e:a4:73:94:d8:37:5d:3b:73:bf:22:86:58:ad: 0c:92:43:4a:d0:1b:b8:74:de:ae:56:d1:24:64:13:42:ed:c4: 2c:c6:40:81:fb:cc:08:76:c1:6d:b4:4c:9e:1a:43:36:e7:53: 51:87:7e:1a:56:2e:ff:76:d8:aa:7b:c8:db:0f:3f:45:d8:3f: e3:95:68:5a:16:c0:c5:de:78:c0:55:52:b7:60:a1:57:cc:58: ac:5d:7d:6a:99:9a:c3:2f:3e:af:83:e2:f2:7e:58:fb:95:7b: f8:ac:bf:46:2e:6e:be:b0:1d:8a:04:f1:05:5e:be:f6:fc:1d: 5a:c8:9e:1e:ef:0d:29:de:76:53:4c:34:ef:01:7d:27:3f:c5: b1:83:f2:a5:1b:bb:62:16:b7:9d:1a:67:27:1c:b2:50:60:3a: 36:f0:cc:75:d0:83:49:9e:7f:a2:85:36:fc:39:83:23:eb:be: 6b:ff:f4:ed:3d:36:4e:4f:b4:aa:89:e1:ce:93:3c:47:3e:85: 4f:ce:6b:a3:49:47:e0:a4:83:9c:b0:a9:5c:04:03:0f:5d:77: 1f:bb:74:b0:19:90:ca:7d:4c:ce:90:9b:76:b6:a5:ad:2c:b8: 13:2f:6f:31:e1:b3:8e:cb:c5:76:7c:f0:54:92:ee:64:a0:4d: e3:eb:a7:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7sH/pR/DD/sN2okVRAatMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZmYxZTZhNWNjM2MwNjk3NjI5ZjRhZmJiMGIwN2FlNzkx MzNjNWMwHhcNMjUxMjIxMjIwMTQxWhcNMjUxMjIyMjIwMTQxWjAzMTEwLwYDVQQD EyhiNDU5NTYwY2Y3OTE4NTAzMWJjYjc0ZTI0YzdhNmMxYjA3ZDMwNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8YnGrKtMLix4RG3QrCN5HSvEWlK Q/NmJtWuSAitMzJlaQQj17xuu8M7DFBtl1UaBoA8PJEE9tZ/FYtkd0/ygpZz/SLm UY6Jtcr/BaN9bz2N+1/koueg78RJG6wpP7OzgE/RNXuHMCPNu4Pk4HLqQUzbxX66 LGRQCGSOYItvlLqgv7tc89dWtKbP3sdWsSkeJ1ODXHoej7iQbCNivxYJQeqM9O+K lkTsp1bkgoDJEZ0CLg1U7pljIhUJrkTrtsKAiKVT38lkFuT2KtegeUOHnaVi0YKc 0mjGWZ55acVCuJnxepya57vD0s0yOFJgeCdWVAgfDIAffGi+cree0R6vEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRZVgz3kYUDG8t04kx6bBsH0wSqMB8GA1UdIwQY MBaAFGb/Hmpcw8Bpdin0r7sLB655EzxcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnY4ZWFsekR3R2wyS2ZTdnV3c0hybmtUUEZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wN2Q1ZWItNjIxMS00ZDdhLWE5NmQt ZWU0Mjc0NWQ4ZmQxLzEvWnY4ZWFsekR3R2wyS2ZTdnV3c0hybmtUUEZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wN2Q1ZWItNjIxMS00ZDdhLWE5NmQtZWU0Mjc0NWQ4ZmQx LzEvWnY4ZWFsekR3R2wyS2ZTdnV3c0hybmtUUEZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfFS9D6k c5TYN107c78ihlitDJJDStAbuHTerlbRJGQTQu3ELMZAgfvMCHbBbbRMnhpDNudT UYd+GlYu/3bYqnvI2w8/Rdg/45VoWhbAxd54wFVSt2ChV8xYrF19apmawy8+r4Pi 8n5Y+5V7+Ky/Ri5uvrAdigTxBV6+9vwdWsieHu8NKd52U0w07wF9Jz/FsYPypRu7 Yha3nRpnJxyyUGA6NvDMddCDSZ5/ooU2/DmDI+u+a//07T02Tk+0qonhzpM8Rz6F T85ro0lH4KSDnLCpXAQDD113H7t0sBmQyn1MzpCbdralrSy4Ey9vMeGzjsvFdnzw VJLuZKBN4+uncQ== -----END CERTIFICATE-----Generated at Mon Dec 22 03:57:55 2025 by rpki-client