This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json) Hash identifier: pwN2Ho8u6bJ7dO2urT8BtZNMv+QW7ZAylPB1tsz6K/I= Subject key identifier: 66:8B:F3:5D:97:3F:A0:86:C6:89:6B:C4:A2:6C:78:A0:50:08:D1:99 Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89 Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289 Certificate serial: 019B35A0DE18D83A354F0224E58AD8A49312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft Manifest number: 0DDA Signing time: Fri 19 Dec 2025 08:01:33 +0000 Manifest this update: Fri 19 Dec 2025 08:01:33 +0000 Manifest next update: Sat 20 Dec 2025 08:01:33 +0000 Files and hashes: 1: O_Eyba2hWiJ1G1yko5jMVf-Hi74.roa (hash: 6Ep9rh8riGcgqLK1eN8d8mtWbuCz5+WFjzg4sxJvKMw=) 2: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: 2dLl3CYo5qWWpFdUAPFw5yk1TuciGzI9dUMo9QhTVYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:de:18:d8:3a:35:4f:02:24:e5:8a:d8:a4:93:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289 Validity Not Before: Dec 19 08:01:33 2025 GMT Not After : Dec 20 08:01:33 2025 GMT Subject: CN=668bf35d973fa086c6896bc4a26c78a05008d199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:4d:82:93:14:c1:96:d6:3a:9c:92:e6:0d: 1a:89:50:dc:64:fb:8b:2e:57:c2:dc:b3:b5:c7:4a: ad:2a:4a:67:b0:54:6f:61:d4:91:ab:fd:2d:05:ee: b4:05:a2:84:da:d8:ff:5e:79:16:98:e3:a1:17:9e: c4:b5:56:c5:97:ee:30:e3:bf:6b:e3:a7:8a:a3:48: 66:cd:93:ff:7b:fb:6b:70:a2:b8:d7:9c:ce:4d:4c: d7:a6:ae:5d:81:ae:1e:f3:ab:ad:0a:c0:18:eb:d9: 24:97:56:13:32:c6:46:6e:76:e7:76:3e:0a:24:25: 3b:ae:b6:a9:1e:0f:52:55:ef:55:b7:b1:bd:6a:32: ab:21:63:84:2a:71:03:01:5b:03:50:fe:c9:0b:4c: 29:3e:99:1e:a9:2f:69:6e:e6:3f:33:f3:99:a0:40: 1f:3d:d3:4e:bd:ae:ec:e1:6f:96:d3:66:71:2f:ba: 81:be:36:3b:50:64:09:4b:2b:e3:16:7b:94:43:53: 1c:e6:57:d5:e0:de:35:c4:c4:18:f5:1e:bb:28:5d: 8a:82:32:33:39:13:96:a4:ed:e7:d3:1c:8d:af:36: eb:26:9f:71:56:bc:bf:84:75:80:b3:e9:6f:1e:38: 2b:e0:63:9d:62:11:0d:97:d8:35:f6:90:e3:bd:34: f2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8B:F3:5D:97:3F:A0:86:C6:89:6B:C4:A2:6C:78:A0:50:08:D1:99 X509v3 Authority Key Identifier: keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b4:42:51:9e:95:38:d0:99:05:67:ce:a9:63:72:28:59:12: f3:e8:14:6c:5a:c4:ec:ea:9b:c2:68:10:78:35:bd:69:2e:a4: ab:8a:7c:3a:16:2b:04:04:e4:14:6d:b2:21:3a:e3:2d:13:6f: 3b:d7:e9:b0:98:49:e1:12:18:90:d8:cc:f2:4d:01:61:c3:6c: ce:84:1f:96:12:9f:66:2c:a0:d7:31:75:f5:c0:d6:dd:4f:b3: 2f:ab:49:c1:41:f8:dc:ee:7f:fa:1a:4d:de:42:8f:9c:f7:86: 80:c7:a6:cb:fb:21:f0:2c:3c:ae:fa:3e:60:6a:de:66:97:22: b4:4d:bd:ad:0e:ac:82:fc:cc:0d:e2:4f:91:c4:4c:1c:15:c8: ab:71:64:98:49:29:af:08:3e:12:65:8d:64:f3:4d:8b:c1:36: 0a:73:ad:dc:77:93:66:e5:58:d7:8d:77:53:2f:c8:bb:04:91: eb:61:6f:63:96:74:d6:58:d3:2c:78:0c:63:60:d7:23:4d:b5: a4:78:ce:e6:c6:70:4d:4c:d5:0d:54:a4:ad:f8:81:c2:40:a6: 85:95:3f:77:ac:99:63:43:11:fb:85:b6:c1:db:02:c2:35:0a: de:f0:fe:9e:21:a5:4e:a9:c2:02:28:c6:b9:2f:15:66:c9:8a: cd:8d:35:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oN4Y2Do1TwIk5YrYpJMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNDA2NTk2N2RlYzA5MmI1ZmM5MDE1MmU0YTk1MzM5YmEx ZDIyODkwHhcNMjUxMjE5MDgwMTMzWhcNMjUxMjIwMDgwMTMzWjAzMTEwLwYDVQQD Eyg2NjhiZjM1ZDk3M2ZhMDg2YzY4OTZiYzRhMjZjNzhhMDUwMDhkMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofBNgpMUwZbWOpyS5g0aiVDcZPuL LlfC3LO1x0qtKkpnsFRvYdSRq/0tBe60BaKE2tj/XnkWmOOhF57EtVbFl+4w479r 46eKo0hmzZP/e/trcKK415zOTUzXpq5dga4e86utCsAY69kkl1YTMsZGbnbndj4K JCU7rrapHg9SVe9Vt7G9ajKrIWOEKnEDAVsDUP7JC0wpPpkeqS9pbuY/M/OZoEAf PdNOva7s4W+W02ZxL7qBvjY7UGQJSyvjFnuUQ1Mc5lfV4N41xMQY9R67KF2KgjIz OROWpO3n0xyNrzbrJp9xVry/hHWAs+lvHjgr4GOdYhENl9g19pDjvTTycwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaL812XP6CGxolrxKJseKBQCNGZMB8GA1UdIwQY MBaAFM1AZZZ97AkrX8kBUuSpUzm6HSKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NDRmMmEtZjY3My00MmJmLTllM2Qt ZWRjZWY3NDUxZWY0LzEvelVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85NDRmMmEtZjY3My00MmJmLTllM2QtZWRjZWY3NDUxZWY0 LzEvelVCbGxuM3NDU3RmeVFGUzVLbFRPYm9kSW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7RCUZ6V ONCZBWfOqWNyKFkS8+gUbFrE7OqbwmgQeDW9aS6kq4p8OhYrBATkFG2yITrjLRNv O9fpsJhJ4RIYkNjM8k0BYcNszoQflhKfZiyg1zF19cDW3U+zL6tJwUH43O5/+hpN 3kKPnPeGgMemy/sh8Cw8rvo+YGreZpcitE29rQ6sgvzMDeJPkcRMHBXIq3FkmEkp rwg+EmWNZPNNi8E2CnOt3HeTZuVY1413Uy/IuwSR62FvY5Z01ljTLHgMY2DXI021 pHjO5sZwTUzVDVSkrfiBwkCmhZU/d6yZY0MR+4W2wdsCwjUK3vD+niGlTqnCAijG uS8VZsmKzY014A== -----END CERTIFICATE-----Generated at Fri Dec 19 10:54:15 2025 by rpki-client