This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json) Hash identifier: jncXxX/oKePHzKdB7OS7hRToLeQEitMEb2DUCoGLhBk= Subject key identifier: 1B:8D:9B:7A:AB:94:3E:8A:26:EB:06:6D:93:22:2C:61:A3:2F:A1:3C Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2 Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2 Certificate serial: 019B25BFC21C659F05968EE0661B282401C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft Manifest number: 1443 Signing time: Tue 16 Dec 2025 06:01:22 +0000 Manifest this update: Tue 16 Dec 2025 06:01:22 +0000 Manifest next update: Wed 17 Dec 2025 06:01:22 +0000 Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=) 2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=) 3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: B3XcH5VziPapfCxSOqxyMwBWoA00cMpRdqHVTQTjJsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:c2:1c:65:9f:05:96:8e:e0:66:1b:28:24:01:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2 Validity Not Before: Dec 16 06:01:22 2025 GMT Not After : Dec 17 06:01:22 2025 GMT Subject: CN=1b8d9b7aab943e8a26eb066d93222c61a32fa13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:32:4e:64:1d:46:96:d8:cf:6a:79:c2:f1:6e: b6:ac:f8:9c:53:86:a6:5c:99:11:da:4e:8d:a6:f1: 8d:8e:cb:b5:1c:da:e4:af:bb:2d:28:80:e7:40:6d: 62:9c:7a:08:6a:1f:d1:52:67:a9:f9:33:b4:08:9e: a3:b8:c5:4e:1f:38:3b:ef:83:dc:53:63:32:6b:c5: 10:a8:79:cb:f3:c8:08:bf:e4:c0:a7:d3:c2:be:8d: 6e:d4:55:68:bd:7b:18:e6:0d:2f:36:58:db:14:74: 21:5a:e3:5c:2f:ca:8f:7f:5f:e8:78:29:7d:cb:d6: 5f:9e:0d:3f:c3:c0:28:a1:be:68:b3:1f:fc:2d:6d: 70:c6:53:c4:01:83:65:1b:93:62:13:84:ff:3c:a2: 5b:af:ae:3f:73:bb:7d:94:ad:dc:22:b7:cf:2d:0d: 41:90:bd:96:e1:fa:b7:93:9a:b3:88:61:75:07:ea: b0:29:17:98:77:a5:7f:ea:68:63:be:f4:64:f2:3b: d0:08:ef:a8:74:d8:38:dc:2c:28:4b:f0:30:54:43: 01:bd:91:44:5f:4f:78:4e:9a:01:ff:c0:76:42:8c: 1a:97:ff:7d:61:f4:1f:90:ac:4d:a8:9f:27:71:94: 46:99:a7:8f:23:f6:be:72:ea:43:8a:ab:c5:73:1c: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8D:9B:7A:AB:94:3E:8A:26:EB:06:6D:93:22:2C:61:A3:2F:A1:3C X509v3 Authority Key Identifier: keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7e:48:7f:df:7e:64:67:f5:c0:2f:ca:67:16:9d:ff:89:46: ee:bd:5f:45:6f:a0:80:ab:d4:2c:d4:fd:8c:02:7a:9f:3c:41: 47:2b:e0:49:53:0d:ba:7b:16:f0:a8:10:79:c3:b4:12:20:22: a4:56:e5:bd:08:1e:a8:4b:78:b6:c5:f5:ca:c0:97:76:47:d6: 7c:dd:9b:01:8e:f2:9c:27:07:6a:ff:b5:fa:5d:f5:78:84:fc: 84:b1:9a:16:da:3f:bf:0a:05:16:70:2a:0f:08:7d:f7:79:68: a9:fd:82:ee:aa:6c:53:a9:b1:ca:71:da:a6:c7:e9:0d:e3:39: 5a:60:c2:17:21:79:7d:23:fe:30:5f:c1:a8:7f:0b:2a:95:a8: 18:56:65:38:64:a0:de:a5:88:d0:50:20:62:c8:0a:d9:89:58: 0c:87:81:fc:39:4f:ad:a1:07:02:e1:42:f0:d5:5b:30:1d:cf: e9:45:6b:41:b1:47:46:3a:1e:f0:bb:4e:7f:96:47:5a:18:28: a3:85:4f:82:dc:a8:6b:d8:f5:d3:54:5d:72:bd:c9:1e:8a:4b: 74:69:de:26:4c:0c:4e:a2:2e:89:18:f4:aa:3e:bf:c5:49:4f: c5:e4:5f:b1:76:53:1c:dd:9e:a6:80:1c:ac:68:6e:44:a2:f5: 3d:55:70:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv8IcZZ8Flo7gZhsoJAHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMTU5YzhhMWU2NGZjNjRmZjY2NmJkOTIxOWRjZTE3NDM3 M2NhZjIwHhcNMjUxMjE2MDYwMTIyWhcNMjUxMjE3MDYwMTIyWjAzMTEwLwYDVQQD EygxYjhkOWI3YWFiOTQzZThhMjZlYjA2NmQ5MzIyMmM2MWEzMmZhMTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjJOZB1GltjPannC8W62rPicU4am XJkR2k6NpvGNjsu1HNrkr7stKIDnQG1inHoIah/RUmep+TO0CJ6juMVOHzg774Pc U2Mya8UQqHnL88gIv+TAp9PCvo1u1FVovXsY5g0vNljbFHQhWuNcL8qPf1/oeCl9 y9Zfng0/w8Aoob5osx/8LW1wxlPEAYNlG5NiE4T/PKJbr64/c7t9lK3cIrfPLQ1B kL2W4fq3k5qziGF1B+qwKReYd6V/6mhjvvRk8jvQCO+odNg43CwoS/AwVEMBvZFE X094TpoB/8B2Qowal/99YfQfkKxNqJ8ncZRGmaePI/a+cupDiqvFcxx2BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuNm3qrlD6KJusGbZMiLGGjL6E8MB8GA1UdIwQY MBaAFMwVnIoeZPxk/2Zr2SGdzhdDc8ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYt NjQ4MjA0MWE4MjQ2LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYtNjQ4MjA0MWE4MjQ2 LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVX5If99+ ZGf1wC/KZxad/4lG7r1fRW+ggKvULNT9jAJ6nzxBRyvgSVMNunsW8KgQecO0EiAi pFblvQgeqEt4tsX1ysCXdkfWfN2bAY7ynCcHav+1+l31eIT8hLGaFto/vwoFFnAq Dwh993loqf2C7qpsU6mxynHapsfpDeM5WmDCFyF5fSP+MF/BqH8LKpWoGFZlOGSg 3qWI0FAgYsgK2YlYDIeB/DlPraEHAuFC8NVbMB3P6UVrQbFHRjoe8LtOf5ZHWhgo o4VPgtyoa9j101Rdcr3JHopLdGneJkwMTqIuiRj0qj6/xUlPxeRfsXZTHN2epoAc rGhuRKL1PVVwaw== -----END CERTIFICATE-----Generated at Tue Dec 16 15:31:51 2025 by rpki-client