This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft File: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft (raw, json) Hash identifier: jPMZYEqlxpmOLfxcmUARQqvBLMjlbW9nQH4Nn0/8T3M= Subject key identifier: CF:CC:76:03:DE:0B:B6:D0:17:1A:7F:D7:5A:6E:58:6B:64:9D:22:2E Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72 Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72 Certificate serial: 019B3A9094A2A344DD2E6C3B34AEC35F9E76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft Manifest number: 08CE Signing time: Sat 20 Dec 2025 07:01:52 +0000 Manifest this update: Sat 20 Dec 2025 07:01:52 +0000 Manifest next update: Sun 21 Dec 2025 07:01:52 +0000 Files and hashes: 1: BlYqXPvciPfdyJ-GQUZOsP4jpLI.roa (hash: LmatIhZjxo/kiezrlbpjhiTczB9qo8t5QvMaWwqWJt0=) 2: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl (hash: 8anbI6rzlzi4Iy/F70lWHk2myD175s8px599b4ISUtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:94:a2:a3:44:dd:2e:6c:3b:34:ae:c3:5f:9e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72 Validity Not Before: Dec 20 07:01:52 2025 GMT Not After : Dec 21 07:01:52 2025 GMT Subject: CN=cfcc7603de0bb6d0171a7fd75a6e586b649d222e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:01:d2:b3:41:3f:00:a9:a6:7b:50:fa:7e:e1: 92:07:7a:27:11:5c:49:e4:34:92:ab:b4:45:a0:2b: 41:91:1d:bc:33:d5:a4:65:55:17:68:8a:c1:94:48: 4b:f5:5f:51:90:29:7d:b8:55:80:ce:d3:54:be:75: 6d:b4:2d:c5:fe:0c:00:65:2a:6d:10:3f:a4:6d:75: 35:2c:c8:c8:f7:68:e6:d5:2e:c3:b6:29:39:17:14: 1c:d2:3f:3a:57:98:be:23:ef:68:68:34:14:29:59: 78:6c:79:91:fa:46:ca:38:e3:67:73:5d:2d:03:58: d4:86:b3:73:31:b4:ad:fd:fc:77:fe:6f:76:7a:9f: 19:57:c0:d3:64:14:f2:25:5d:3f:b5:11:d9:33:a7: 24:61:1b:d6:88:da:fc:03:91:09:d0:73:d4:b2:5d: 69:78:8a:46:9d:76:29:c6:a0:98:4c:d4:d8:71:78: 92:8c:92:0d:c0:21:c4:87:e5:d9:09:e1:08:8b:34: de:4c:de:2c:64:19:10:2b:fb:ed:2a:5f:54:af:1c: 16:44:12:9d:1d:e2:53:95:7d:4f:66:8d:57:4a:58: 21:50:ed:c9:c2:00:91:c0:d3:1d:21:52:5d:b9:76: 96:06:9d:4c:bd:3a:3f:25:77:b3:b3:28:d9:a1:d3: 33:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CC:76:03:DE:0B:B6:D0:17:1A:7F:D7:5A:6E:58:6B:64:9D:22:2E X509v3 Authority Key Identifier: keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:35:f8:80:50:68:64:b8:bb:41:b5:77:ae:28:fa:27:f0:f5: 2f:04:73:9e:e5:75:92:6f:a2:5e:97:7f:f7:1d:77:7b:51:1a: b2:4d:69:eb:3f:7b:3a:8c:7b:c7:f0:96:18:c0:2e:a8:fc:d6: e1:50:2a:22:04:ce:e9:75:5e:79:e4:2e:33:ef:16:a4:3f:21: a2:15:a7:b9:c6:b7:88:9d:84:0f:e5:19:50:cb:a3:25:bc:38: ac:16:88:85:13:31:86:3a:94:3e:a8:16:b4:f0:8f:f7:e2:18: 80:d4:cf:2e:52:a2:ca:0d:ef:0a:c8:b5:3f:30:ff:92:d0:83: ce:cc:43:01:a3:c0:14:3d:65:9c:21:f1:12:af:6f:d2:29:cc: 34:9c:83:a8:c4:03:85:ba:3c:70:18:40:ef:e6:bf:af:ed:83: 1a:af:c5:6c:60:14:19:98:80:c9:23:aa:35:40:a7:b7:28:0a: 3c:54:26:bb:0c:f2:d4:41:69:d5:c5:69:eb:dc:db:1c:be:41: a5:5b:e1:ab:0f:7b:46:14:0f:73:08:13:7c:d7:8b:38:c8:13: 5e:f7:2c:95:84:89:31:1d:b8:e5:5f:2d:16:75:ac:fd:05:6b: ec:b6:64:2b:9c:2d:8a:82:76:7a:c7:c9:d3:93:47:f4:4f:38: de:d1:26:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kJSio0TdLmw7NK7DX552MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzY0MGRhN2YxYmMyM2VkNDU5OWY4NGEwODUzYzgzOTlm MzVkNzIwHhcNMjUxMjIwMDcwMTUyWhcNMjUxMjIxMDcwMTUyWjAzMTEwLwYDVQQD EyhjZmNjNzYwM2RlMGJiNmQwMTcxYTdmZDc1YTZlNTg2YjY0OWQyMjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgHSs0E/AKmme1D6fuGSB3onEVxJ 5DSSq7RFoCtBkR28M9WkZVUXaIrBlEhL9V9RkCl9uFWAztNUvnVttC3F/gwAZSpt ED+kbXU1LMjI92jm1S7Dtik5FxQc0j86V5i+I+9oaDQUKVl4bHmR+kbKOONnc10t A1jUhrNzMbSt/fx3/m92ep8ZV8DTZBTyJV0/tRHZM6ckYRvWiNr8A5EJ0HPUsl1p eIpGnXYpxqCYTNTYcXiSjJINwCHEh+XZCeEIizTeTN4sZBkQK/vtKl9UrxwWRBKd HeJTlX1PZo1XSlghUO3JwgCRwNMdIVJduXaWBp1MvTo/JXezsyjZodMzGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/MdgPeC7bQFxp/11puWGtknSIuMB8GA1UdIwQY MBaAFJ82QNp/G8I+1FmfhKCFPIOZ811yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjQ3YzItZjEwYi00YTc3LThiMDMt ZWRjMzM2NjUyZWQ3LzEvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjQ3YzItZjEwYi00YTc3LThiMDMtZWRjMzM2NjUyZWQ3 LzEvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDX4gFBo ZLi7QbV3rij6J/D1LwRznuV1km+iXpd/9x13e1Eask1p6z97Oox7x/CWGMAuqPzW 4VAqIgTO6XVeeeQuM+8WpD8hohWnuca3iJ2ED+UZUMujJbw4rBaIhRMxhjqUPqgW tPCP9+IYgNTPLlKiyg3vCsi1PzD/ktCDzsxDAaPAFD1lnCHxEq9v0inMNJyDqMQD hbo8cBhA7+a/r+2DGq/FbGAUGZiAySOqNUCntygKPFQmuwzy1EFp1cVp69zbHL5B pVvhqw97RhQPcwgTfNeLOMgTXvcslYSJMR245V8tFnWs/QVr7LZkK5wtioJ2esfJ 05NH9E843tEmTw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:49:09 2025 by rpki-client