This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json) Hash identifier: cl11HglpKHPK9F/MEPXfFcNPRcdkx/ExVoL03lQg4kk= Subject key identifier: 7F:EE:17:BB:AE:83:ED:26:A8:EF:93:B2:8D:3D:2A:A5:1D:70:D7:AC Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d Certificate serial: 019B18DF300ACB78985788519266059566C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 18:00:38 +0000 Manifest this update: Sat 13 Dec 2025 18:00:38 +0000 Manifest next update: Sun 14 Dec 2025 18:00:38 +0000 Files and hashes: 1: E-7nk5OKQny9W_bEEmUe46EIcfs.roa (hash: cEU0S6nlC1/hdoqfbgIZpy0a5hGCyF6U3fW531GaMKQ=) 2: Jb_gFPV2he7uZ_D9dGgBvUqstrY.roa (hash: 76/q3p10jkYhjXz60HYg6xHRHGQY02emHt13PPRY/0Y=) 3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: M+XsbaROtw439nehm59qVGGYjRy1cF/lC9Jo2y3DTHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:30:0a:cb:78:98:57:88:51:92:66:05:95:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d Validity Not Before: Dec 13 18:00:38 2025 GMT Not After : Dec 14 18:00:38 2025 GMT Subject: CN=7fee17bbae83ed26a8ef93b28d3d2aa51d70d7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:27:3d:e0:b0:ce:08:6c:20:28:5d:70:7a: 4e:07:b0:7f:52:b1:74:64:ab:9b:a5:2b:f0:69:a4: 35:4b:2a:1f:1b:07:4e:80:f1:b6:cd:e3:7c:05:c7: d9:f4:e2:75:4b:f8:d0:da:b2:cc:0f:af:6d:fa:28: 8c:aa:c2:b3:58:d1:c8:67:64:23:32:be:2a:10:19: eb:bd:c1:8f:bb:94:6d:43:10:d6:aa:63:56:82:42: ce:be:3a:1b:b1:f9:b3:f4:44:ff:34:4f:56:1a:09: a2:38:ee:69:eb:96:64:00:17:4f:2c:46:67:fd:bd: d1:b0:95:c2:c1:a6:8e:92:9f:0b:ba:27:9e:23:3c: 98:27:1a:e9:5e:ac:5e:94:99:a4:ca:2f:88:8e:f6: d8:3e:11:cf:3a:02:20:d1:80:1b:5c:e5:1d:50:ae: 5c:6a:97:61:0c:84:bc:b4:7a:1d:d1:35:ac:32:6d: 2f:61:4f:11:fb:14:1c:94:56:3e:86:03:45:6c:c9: 9b:1b:1e:36:7b:f6:e9:1b:31:8c:52:80:63:00:f9: ad:b9:a0:06:24:df:27:6c:3b:7c:06:bf:63:51:16: d1:1b:75:93:ab:68:20:64:3a:7b:03:20:64:16:33: f9:eb:1a:b5:78:e3:39:6d:fc:8e:f0:11:c8:2f:53: 84:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EE:17:BB:AE:83:ED:26:A8:EF:93:B2:8D:3D:2A:A5:1D:70:D7:AC X509v3 Authority Key Identifier: keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d2:a2:12:25:1b:0f:51:46:a3:02:ad:85:6a:22:a9:1d:d2: c0:48:d8:20:fa:02:17:cd:3b:05:fc:9d:a4:e6:fe:10:0e:29: 2b:1c:99:fb:7c:9f:0e:5e:88:9d:de:0a:19:2f:5b:55:78:e3: d5:fa:fb:9a:73:cc:fd:ce:3a:a0:26:95:f7:cb:38:3a:6a:f3: b5:77:ea:3d:5c:9a:54:71:d8:e8:57:5f:93:42:00:24:07:42: 70:f0:2f:64:d3:45:b1:8e:9c:75:6b:18:68:81:64:81:4d:fb: 12:55:30:0b:1a:51:86:d7:02:ab:9a:8a:97:03:c4:4c:d1:5b: 26:97:a4:ca:59:80:4d:d5:36:42:79:37:b6:00:33:26:4f:aa: 58:27:a7:74:b1:76:57:c1:3f:dc:b6:fe:f4:65:0a:34:8b:84: e4:86:16:31:2e:2f:aa:02:74:d0:aa:9f:88:08:ee:60:c1:96: ab:fc:40:39:88:07:50:11:9e:8e:35:66:b5:2a:75:aa:af:0f: 21:50:29:19:ba:a0:db:82:df:81:79:b3:c9:f9:7e:6a:fa:9b: b0:14:d6:c5:3b:fe:b4:a9:d9:64:9b:34:74:04:22:da:74:d7: eb:69:2a:1b:56:74:8d:73:30:a5:0f:ff:e0:91:cc:4d:00:a1: 03:bc:ae:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY3zAKy3iYV4hRkmYFlWbAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDBkOTYyNDJiMDgyZWZlNWI0ZjIyNTg4MjBiMzA1OTM5 NjE5OGQwHhcNMjUxMjEzMTgwMDM4WhcNMjUxMjE0MTgwMDM4WjAzMTEwLwYDVQQD Eyg3ZmVlMTdiYmFlODNlZDI2YThlZjkzYjI4ZDNkMmFhNTFkNzBkN2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1AnPeCwzghsIChdcHpOB7B/UrF0 ZKubpSvwaaQ1SyofGwdOgPG2zeN8BcfZ9OJ1S/jQ2rLMD69t+iiMqsKzWNHIZ2Qj Mr4qEBnrvcGPu5RtQxDWqmNWgkLOvjobsfmz9ET/NE9WGgmiOO5p65ZkABdPLEZn /b3RsJXCwaaOkp8LuieeIzyYJxrpXqxelJmkyi+IjvbYPhHPOgIg0YAbXOUdUK5c apdhDIS8tHod0TWsMm0vYU8R+xQclFY+hgNFbMmbGx42e/bpGzGMUoBjAPmtuaAG JN8nbDt8Br9jURbRG3WTq2ggZDp7AyBkFjP56xq1eOM5bfyO8BHIL1OEtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/uF7uug+0mqO+Tso09KqUdcNesMB8GA1UdIwQY MBaAFMxA2WJCsILv5bTyJYggswWTlhmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYWE2OWYtZGI1NS00ZmJhLWJjZTkt YzFlYmU2MTU0OWNjLzEvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xYWE2OWYtZGI1NS00ZmJhLWJjZTktYzFlYmU2MTU0OWNj LzEvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdKiEiUb D1FGowKthWoiqR3SwEjYIPoCF807BfydpOb+EA4pKxyZ+3yfDl6Ind4KGS9bVXjj 1fr7mnPM/c46oCaV98s4OmrztXfqPVyaVHHY6Fdfk0IAJAdCcPAvZNNFsY6cdWsY aIFkgU37ElUwCxpRhtcCq5qKlwPETNFbJpekylmATdU2Qnk3tgAzJk+qWCendLF2 V8E/3Lb+9GUKNIuE5IYWMS4vqgJ00KqfiAjuYMGWq/xAOYgHUBGejjVmtSp1qq8P IVApGbqg24LfgXmzyfl+avqbsBTWxTv+tKnZZJs0dAQi2nTX62kqG1Z0jXMwpQ// 4JHMTQChA7yu0g== -----END CERTIFICATE-----Generated at Sun Dec 14 03:27:55 2025 by rpki-client