This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json) Hash identifier: k15VbI6EUgov6tVaaw4CWh/nSnfJIe3KTaH4pREJ2OA= Subject key identifier: F0:DB:10:B3:30:8D:B0:5D:7D:F1:9F:DF:09:F6:54:4D:8C:E0:12:BC Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26 Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026 Certificate serial: 019B5907F23ABE82AD238B5D037372AE8267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft Manifest number: 11B5 Signing time: Fri 26 Dec 2025 05:00:51 +0000 Manifest this update: Fri 26 Dec 2025 05:00:51 +0000 Manifest next update: Sat 27 Dec 2025 05:00:51 +0000 Files and hashes: 1: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (hash: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=) 2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: RUo7KoblW7VTY3VxP7FLcnjmkh2wLS1Bh9qtJ9x6PdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:f2:3a:be:82:ad:23:8b:5d:03:73:72:ae:82:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026 Validity Not Before: Dec 26 05:00:51 2025 GMT Not After : Dec 27 05:00:51 2025 GMT Subject: CN=f0db10b3308db05d7df19fdf09f6544d8ce012bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e8:80:89:53:5e:dc:f1:14:61:16:0e:67:a3: 55:2b:53:9e:8e:78:72:01:35:3f:a2:58:19:e0:29: 18:19:77:ca:a2:8b:6b:e9:5e:9e:aa:1b:37:52:09: f8:8d:b5:90:d5:96:c0:60:0a:fc:79:10:55:22:ec: 15:4b:ab:3c:28:f1:9c:ac:02:96:21:aa:a6:00:1f: 96:e0:a0:65:3b:be:cd:d2:12:3c:48:2c:57:8a:4c: d2:d4:fa:23:9b:ff:37:65:92:05:17:b3:7b:ff:32: ef:a0:7a:b1:1c:11:a2:28:cd:6d:32:05:21:ca:3b: a5:1e:cf:77:54:d1:e3:d9:c1:55:69:15:7b:9d:e2: 70:ca:37:03:3e:5a:52:ac:ed:ae:b4:a6:2b:ea:4c: ab:36:3f:2f:bb:ff:ab:92:eb:44:dc:8b:fd:fc:c5: ec:ed:66:cd:dd:58:81:05:06:39:3e:fa:e6:ce:6d: 7c:54:47:3a:63:40:e8:1c:bd:e0:41:5e:62:69:f7: 8c:7a:1a:76:2d:02:1c:c0:cd:99:f9:a2:8b:9e:a2: fd:16:f3:48:dd:78:b5:47:af:0b:53:25:ee:f9:ed: f1:67:7b:7d:e3:39:93:08:01:7f:ff:34:82:f0:aa: 1c:a8:ca:9f:ba:3d:b9:14:56:cd:16:3e:e6:4d:b0: 7d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DB:10:B3:30:8D:B0:5D:7D:F1:9F:DF:09:F6:54:4D:8C:E0:12:BC X509v3 Authority Key Identifier: keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0c:91:a8:07:e0:d3:23:81:7e:93:ed:76:a5:93:5f:a8:2f: ac:8c:3f:98:b2:67:8d:69:3b:6c:30:cc:6d:31:6c:95:51:d9: 62:89:45:66:3c:32:44:76:5a:66:9d:1c:2d:45:87:4a:6d:10: 63:3b:66:42:db:65:5d:92:8a:d9:de:4b:04:8a:d1:1f:8a:07: e4:dc:66:66:82:da:f7:2f:1d:10:73:5f:c9:24:77:2b:27:27: 9d:a4:4b:68:66:bd:10:e7:64:8f:e6:33:b9:35:15:18:a6:98: 6a:79:fd:95:59:f7:3a:96:ff:b3:22:a6:ce:e0:4a:d1:6c:fe: 30:ce:2e:4f:a4:e5:ec:6e:78:ed:f1:20:9e:1b:43:05:76:c4: 59:96:3a:e1:77:54:0f:99:2d:68:92:31:d6:a7:95:52:35:c6: 9e:ce:17:c6:2e:29:2c:e2:89:9d:20:ac:c6:f6:3d:7b:8f:63: 14:b6:09:7b:8e:ee:88:87:ea:0e:54:ce:5d:bc:83:a9:78:09: 76:45:e0:a8:e8:ac:97:85:68:f1:b8:3a:86:a8:05:be:28:14: 11:5e:ba:be:55:7c:fa:3d:d9:0b:a2:ab:de:3b:df:bc:a4:39: fe:06:79:67:e4:7b:2f:b9:fe:09:bd:08:b7:87:7e:4e:38:df: ff:45:90:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB/I6voKtI4tdA3NyroJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZjI0NzRkZTg0MTE2NzUyYjkwODBhN2EwZGIzMjI1MzVj NTYwMjYwHhcNMjUxMjI2MDUwMDUxWhcNMjUxMjI3MDUwMDUxWjAzMTEwLwYDVQQD EyhmMGRiMTBiMzMwOGRiMDVkN2RmMTlmZGYwOWY2NTQ0ZDhjZTAxMmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+iAiVNe3PEUYRYOZ6NVK1Oejnhy ATU/olgZ4CkYGXfKootr6V6eqhs3Ugn4jbWQ1ZbAYAr8eRBVIuwVS6s8KPGcrAKW IaqmAB+W4KBlO77N0hI8SCxXikzS1Pojm/83ZZIFF7N7/zLvoHqxHBGiKM1tMgUh yjulHs93VNHj2cFVaRV7neJwyjcDPlpSrO2utKYr6kyrNj8vu/+rkutE3Iv9/MXs 7WbN3ViBBQY5Pvrmzm18VEc6Y0DoHL3gQV5iafeMehp2LQIcwM2Z+aKLnqL9FvNI 3Xi1R68LUyXu+e3xZ3t94zmTCAF//zSC8KocqMqfuj25FFbNFj7mTbB9fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDbELMwjbBdffGf3wn2VE2M4BK8MB8GA1UdIwQY MBaAFMzyR03oQRZ1K5CAp6DbMiU1xWAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYt Y2M5MDYyMGU5OWNmLzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYtY2M5MDYyMGU5OWNm LzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgyRqAfg 0yOBfpPtdqWTX6gvrIw/mLJnjWk7bDDMbTFslVHZYolFZjwyRHZaZp0cLUWHSm0Q YztmQttlXZKK2d5LBIrRH4oH5NxmZoLa9y8dEHNfySR3KycnnaRLaGa9EOdkj+Yz uTUVGKaYann9lVn3Opb/syKmzuBK0Wz+MM4uT6Tl7G547fEgnhtDBXbEWZY64XdU D5ktaJIx1qeVUjXGns4Xxi4pLOKJnSCsxvY9e49jFLYJe47uiIfqDlTOXbyDqXgJ dkXgqOisl4Vo8bg6hqgFvigUEV66vlV8+j3ZC6Kr3jvfvKQ5/gZ5Z+R7L7n+Cb0I t4d+Tjjf/0WQvQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:18 2025 by rpki-client