This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft File: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft (raw, json) Hash identifier: 2XfM/Si21bsHuJROsBrTQLzGAPEl3bvRWH5gULBjOtE= Subject key identifier: CC:88:C2:BF:2B:CB:BE:52:70:F0:2A:41:4F:8E:79:FA:8F:6E:13:69 Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F Certificate issuer: /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f Certificate serial: 019B3BA25134D25F1764C70DDC36D2D55B8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft Manifest number: 1790 Signing time: Sat 20 Dec 2025 12:00:51 +0000 Manifest this update: Sat 20 Dec 2025 12:00:51 +0000 Manifest next update: Sun 21 Dec 2025 12:00:51 +0000 Files and hashes: 1: 35bIez4DE4f8IctL5QEgdASB-4Y.roa (hash: TCPS2vFGt9j3BHs+mf2M0eQppw/ELA+Rm7h4Oyv00F8=) 2: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl (hash: y1EJzoEVVn7K0nGzHZAVX6IoqK/zgkK8JvdY0j73Htc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:51:34:d2:5f:17:64:c7:0d:dc:36:d2:d5:5b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f Validity Not Before: Dec 20 12:00:51 2025 GMT Not After : Dec 21 12:00:51 2025 GMT Subject: CN=cc88c2bf2bcbbe5270f02a414f8e79fa8f6e1369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:13:77:f6:b3:94:17:ea:52:27:f2:ea:01: db:29:2a:6a:30:15:a4:89:bb:e9:e9:78:34:5d:9d: 2e:fb:6a:51:89:52:4a:2f:f7:ac:c2:5d:0f:e8:c0: 25:e1:78:a4:d7:d1:b8:23:12:03:b8:bc:34:73:ce: 1c:e6:e7:61:c0:8a:65:1f:1f:f6:6e:26:97:a2:02: 02:ab:36:0e:39:67:0b:19:c1:85:c6:f9:01:cf:6d: 8c:16:0a:de:7a:8b:5c:4b:c7:44:33:56:94:64:97: 70:b3:4b:a2:5c:87:d6:cf:6b:e6:36:8e:73:36:44: c9:96:01:40:13:d6:b7:58:4f:57:77:bb:6c:f2:11: 16:d9:88:ad:aa:90:6f:42:9c:b7:fc:35:fa:de:f8: 5a:96:14:a0:b1:fb:57:ed:7b:a4:57:32:27:c3:c4: f9:1a:65:ec:0c:24:ba:16:f1:8d:fb:36:98:eb:e5: 16:3e:d8:08:7e:c0:a8:8b:7c:26:01:0d:57:17:45: ba:a3:c3:ae:7b:72:26:4b:6e:99:57:72:e7:04:07: 3b:38:bb:ae:cd:f9:d7:5b:03:da:0c:bb:7e:7f:b5: 17:c4:4a:1a:cd:a5:dd:37:3b:cc:95:8b:ca:11:5c: 15:e3:a4:0f:67:2f:08:bb:f4:d0:8c:82:f2:e8:f8: e8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:88:C2:BF:2B:CB:BE:52:70:F0:2A:41:4F:8E:79:FA:8F:6E:13:69 X509v3 Authority Key Identifier: keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a1:39:83:20:5c:8a:31:c5:9d:42:5b:42:7f:f8:55:0f:72: e2:d4:2e:50:aa:13:2a:9c:22:32:34:5d:70:19:73:bc:ed:c6: ee:64:92:8b:86:0f:55:3f:1d:63:db:02:f5:dc:ba:99:81:99: c2:8f:2e:69:1e:d8:88:c2:5f:3d:80:11:ea:a2:2c:a0:87:d3: ba:68:30:67:be:37:bb:89:53:d2:56:72:1b:c5:0a:93:18:c4: 55:85:78:b6:f0:d8:3f:6e:a4:78:9a:2b:5e:6e:91:6a:d9:15: 15:db:0e:fe:28:6f:1a:28:2d:75:07:93:c1:08:de:8c:73:8c: 68:e5:11:4c:0b:21:ea:eb:85:ae:29:8a:b4:70:8d:a2:3d:5e: d7:9a:9d:22:31:55:31:fe:0c:1f:92:76:3d:52:fd:5b:7b:25: 0e:c3:d4:82:41:cc:db:9d:d7:3b:86:37:32:f2:0d:c2:db:64: 14:f6:54:ce:7f:b0:79:1f:eb:32:db:bc:89:2c:4b:aa:eb:a2: 3f:43:58:41:4d:1e:51:66:e8:d9:e8:6f:82:4b:8c:6c:25:7e: 38:da:ff:33:a1:86:da:c0:30:15:ad:06:b8:95:02:f8:c9:a6: 85:42:d7:92:41:83:06:0f:b7:41:a0:80:3d:87:33:24:1b:51: 07:e4:34:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7olE00l8XZMcN3DbS1VuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYmY5NWI0N2FiMmI5OWMyMjJiZmU1NDUyMWVmZDFhYjY3 ZDI2N2YwHhcNMjUxMjIwMTIwMDUxWhcNMjUxMjIxMTIwMDUxWjAzMTEwLwYDVQQD EyhjYzg4YzJiZjJiY2JiZTUyNzBmMDJhNDE0ZjhlNzlmYThmNmUxMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvsTd/azlBfqUify6gHbKSpqMBWk ibvp6Xg0XZ0u+2pRiVJKL/eswl0P6MAl4Xik19G4IxIDuLw0c84c5udhwIplHx/2 biaXogICqzYOOWcLGcGFxvkBz22MFgreeotcS8dEM1aUZJdws0uiXIfWz2vmNo5z NkTJlgFAE9a3WE9Xd7ts8hEW2YitqpBvQpy3/DX63vhalhSgsftX7XukVzInw8T5 GmXsDCS6FvGN+zaY6+UWPtgIfsCoi3wmAQ1XF0W6o8Oue3ImS26ZV3LnBAc7OLuu zfnXWwPaDLt+f7UXxEoazaXdNzvMlYvKEVwV46QPZy8Iu/TQjILy6PjoswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyIwr8ry75ScPAqQU+OefqPbhNpMB8GA1UdIwQY MBaAFMy/lbR6srmcIiv+VFIe/Rq2fSZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekwtVnRIcXl1WndpS181VVVoNzlHclo5Sm44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMjliOTUtY2NiMy00NjdiLWFiN2Et YWM1YjYxNDkzZTAxLzEvekwtVnRIcXl1WndpS181VVVoNzlHclo5Sm44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hMjliOTUtY2NiMy00NjdiLWFiN2EtYWM1YjYxNDkzZTAx LzEvekwtVnRIcXl1WndpS181VVVoNzlHclo5Sm44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaE5gyBc ijHFnUJbQn/4VQ9y4tQuUKoTKpwiMjRdcBlzvO3G7mSSi4YPVT8dY9sC9dy6mYGZ wo8uaR7YiMJfPYAR6qIsoIfTumgwZ743u4lT0lZyG8UKkxjEVYV4tvDYP26keJor Xm6RatkVFdsO/ihvGigtdQeTwQjejHOMaOURTAsh6uuFrimKtHCNoj1e15qdIjFV Mf4MH5J2PVL9W3slDsPUgkHM253XO4Y3MvINwttkFPZUzn+weR/rMtu8iSxLquui P0NYQU0eUWbo2ehvgkuMbCV+ONr/M6GG2sAwFa0GuJUC+MmmhULXkkGDBg+3QaCA PYczJBtRB+Q02Q== -----END CERTIFICATE-----Generated at Sat Dec 20 20:13:14 2025 by rpki-client