This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft File: zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json) Hash identifier: yatl2DTA6D/CdHp3Ouix7UZ7Mu1n9+/XzYDkSJz3G4c= Subject key identifier: 38:24:6E:26:30:CE:F0:71:67:0D:7B:E3:F9:1D:26:A3:58:47:E1:35 Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16 Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516 Certificate serial: 019B3569D4A66EC266D1AC6CD6C1B367F29C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft Manifest number: 1792 Signing time: Fri 19 Dec 2025 07:01:26 +0000 Manifest this update: Fri 19 Dec 2025 07:01:26 +0000 Manifest next update: Sat 20 Dec 2025 07:01:26 +0000 Files and hashes: 1: 51l0ZaazViO-9DNCdW3GnWR4GwI.roa (hash: UwPqa23rEDmYBVT49o12uDR12sWWmyh1Kinzo0LGRpA=) 2: 6MwiHlH7brP7gkYxWGSzNKL3O8w.roa (hash: uucPBDwTY0D+/18evXxrCTaPjIOWXa7urOwmQvZx8kM=) 3: Mm7HYiP_1vnYW3J82fX3wCESTvw.roa (hash: xaFYkDwgR40Vgrh0kc+VfgTZztWDJTezEXCbvse9oig=) 4: Vf3KOZmAgXwsv3aJ9v6n81tZxJk.roa (hash: VIja1t2wHpssk2GDc0sbNbLZHRB1tapmUzbQerIfxjw=) 5: jEDoIOuzE2brdF7d7iq9hFOFlPY.asa (hash: kX7sndI49J41h5949MxSdq1CeT/ptM/wjBq7+tQD3mw=) 6: nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa (hash: XhxPnrvDqx0alyntNHd6QEfUT7v4BfXJpEnK8r6nu/w=) 7: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: eYdTgd8v826j6OD6ybUi33Hv65TaSj0QhNd5AS7VtJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:d4:a6:6e:c2:66:d1:ac:6c:d6:c1:b3:67:f2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516 Validity Not Before: Dec 19 07:01:26 2025 GMT Not After : Dec 20 07:01:26 2025 GMT Subject: CN=38246e2630cef071670d7be3f91d26a35847e135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:16:86:8b:92:ad:f2:b2:e6:7d:7f:88:fc: 36:28:d6:91:33:54:45:d4:f0:9e:e3:19:76:3f:26: da:74:02:32:0b:04:b2:12:52:e6:16:b5:59:60:37: 2e:4f:81:74:4c:1a:35:96:4d:cd:ae:f0:f6:4a:56: 97:cb:7a:d5:7c:4c:49:50:87:d0:d7:1e:36:12:94: 5e:08:cb:6d:f3:6c:7e:ad:a5:24:16:d0:1b:4e:a9: d7:82:70:30:24:92:b3:26:01:3f:fa:a7:24:1b:97: 95:9d:a1:9a:39:b3:c6:d6:78:61:9d:58:81:41:37: 51:a4:b3:66:0a:83:33:df:f3:40:e8:fd:ff:d0:b2: b5:78:c2:2c:17:2b:0a:f4:b7:5c:59:05:f0:1b:4e: ba:73:0a:5b:fb:05:8a:6c:7b:14:6d:54:05:0b:5f: ef:ff:23:53:ae:cd:bc:42:68:71:a8:8a:7b:c3:2d: b8:b8:c6:a2:4e:57:e8:91:61:bd:ca:9c:d5:ce:d2: 2b:85:4e:15:9e:a1:8d:43:ea:00:d6:6a:f2:19:c7: f0:ca:8f:88:f5:8d:c6:0c:bc:e7:70:b4:eb:bf:ed: 71:37:cc:4d:4f:87:62:d7:80:c8:10:4a:2a:b3:31: 91:11:e4:e7:9e:57:c6:6b:1f:25:3b:ef:bd:16:d5: 7c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:24:6E:26:30:CE:F0:71:67:0D:7B:E3:F9:1D:26:A3:58:47:E1:35 X509v3 Authority Key Identifier: keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:90:22:1a:b6:4e:6b:91:39:b5:bf:8a:31:ff:05:7b:23:4b: fd:bf:d0:9b:d6:40:5b:4d:8f:2c:bb:77:82:b1:65:cf:7f:f8: bf:3d:b3:4f:24:87:27:de:58:ad:c3:7f:53:8e:92:1f:08:96: 8f:fa:57:99:7d:ae:d8:35:01:24:be:6e:c7:f0:ca:ca:c8:76: ba:d7:fe:21:46:4b:50:fd:f8:5c:ba:1e:78:9a:23:f3:19:67: 49:ca:1a:3a:ed:f2:4d:03:c0:a7:df:9d:82:b0:97:f8:79:67: 1d:fb:a8:23:6f:c7:a5:0e:e2:82:b2:cc:16:8f:fe:5b:07:f1: ac:ad:40:4c:f4:b0:31:9d:99:c3:57:39:07:87:1d:12:a1:4c: fa:f2:3f:20:8c:f2:f5:05:72:4a:09:7d:6c:20:f1:c5:f5:e2: ab:28:f8:19:2a:6b:d7:58:92:33:17:7b:54:fb:b8:64:b7:0e: 20:19:07:7b:ba:23:e5:a3:1a:7b:8c:59:c2:38:c7:81:b4:05: 50:0a:e5:e6:3a:d5:09:11:ca:02:2f:77:fa:5f:d2:8a:e6:6f: dc:0e:6f:53:0f:7e:41:7c:38:b3:27:6f:8b:cf:18:2b:90:93: 4a:78:6d:f5:0c:0f:df:0d:eb:8b:c5:f6:c2:d4:ad:3e:8f:6a: dc:79:cb:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1adSmbsJm0axs1sGzZ/KcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMmViNWIzOGJiNjJlZGU1Yzk4Y2JmYmNmZjk1MzI4NTIx ODA1MTYwHhcNMjUxMjE5MDcwMTI2WhcNMjUxMjIwMDcwMTI2WjAzMTEwLwYDVQQD EygzODI0NmUyNjMwY2VmMDcxNjcwZDdiZTNmOTFkMjZhMzU4NDdlMTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHMWhouSrfKy5n1/iPw2KNaRM1RF 1PCe4xl2PybadAIyCwSyElLmFrVZYDcuT4F0TBo1lk3NrvD2SlaXy3rVfExJUIfQ 1x42EpReCMtt82x+raUkFtAbTqnXgnAwJJKzJgE/+qckG5eVnaGaObPG1nhhnViB QTdRpLNmCoMz3/NA6P3/0LK1eMIsFysK9LdcWQXwG066cwpb+wWKbHsUbVQFC1/v /yNTrs28QmhxqIp7wy24uMaiTlfokWG9ypzVztIrhU4VnqGNQ+oA1mryGcfwyo+I 9Y3GDLzncLTrv+1xN8xNT4di14DIEEoqszGREeTnnlfGax8lO++9FtV82QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgkbiYwzvBxZw174/kdJqNYR+E1MB8GA1UdIwQY MBaAFMwutbOLti7eXJjL+8/5UyhSGAUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEt ZjFmODAyZTY2MTNiLzEvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82ZjAyNjktODM0ZS00N2M1LTk4ZTEtZjFmODAyZTY2MTNi LzEvekM2MXM0dTJMdDVjbU12N3pfbFRLRklZQlJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5AiGrZO a5E5tb+KMf8FeyNL/b/Qm9ZAW02PLLt3grFlz3/4vz2zTySHJ95YrcN/U46SHwiW j/pXmX2u2DUBJL5ux/DKysh2utf+IUZLUP34XLoeeJoj8xlnScoaOu3yTQPAp9+d grCX+HlnHfuoI2/HpQ7igrLMFo/+WwfxrK1ATPSwMZ2Zw1c5B4cdEqFM+vI/IIzy 9QVySgl9bCDxxfXiqyj4GSpr11iSMxd7VPu4ZLcOIBkHe7oj5aMae4xZwjjHgbQF UArl5jrVCRHKAi93+l/SiuZv3A5vUw9+QXw4sydvi88YK5CTSnht9QwP3w3ri8X2 wtStPo9q3HnL9Q== -----END CERTIFICATE-----Generated at Fri Dec 19 15:27:59 2025 by rpki-client