This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json) Hash identifier: XYqoOZw5IrOEeyE0XrNJD7asmB4umwKHpUtY22TGTD4= Subject key identifier: 58:CA:CF:BA:17:02:45:12:27:6E:8F:D9:E7:D1:1E:47:C6:2E:21:02 Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e Certificate serial: 019B187179BA92A46D39E7169ADEECEEC3FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft Manifest number: 0D69 Signing time: Sat 13 Dec 2025 16:00:48 +0000 Manifest this update: Sat 13 Dec 2025 16:00:48 +0000 Manifest next update: Sun 14 Dec 2025 16:00:48 +0000 Files and hashes: 1: ZIl-tGPYsmILe8aUvhHfFRisBTg.roa (hash: ELX+nfW5VdhOFYsiqhpPo4rEHXv1DoXfvUrKNYNv+iU=) 2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: Y1zMAA0/QibtmzTS425eTmwe6eh3DgNn5vV8OJzqdiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:79:ba:92:a4:6d:39:e7:16:9a:de:ec:ee:c3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e Validity Not Before: Dec 13 16:00:48 2025 GMT Not After : Dec 14 16:00:48 2025 GMT Subject: CN=58cacfba17024512276e8fd9e7d11e47c62e2102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1a:87:eb:a2:ac:1b:af:21:7d:d2:56:bc:47: 54:6a:8b:e1:a1:ab:fd:e5:4a:93:97:a5:03:f7:a9: 98:5d:8a:c2:1a:10:cc:9f:1f:15:fa:a8:52:22:d4: a2:a6:b9:51:70:26:db:95:cd:93:35:2e:ae:ca:23: c7:37:73:19:3d:6a:cb:68:cc:cf:44:ef:06:50:3a: 0f:48:a6:7c:60:63:c0:a5:bb:61:b6:62:c8:d6:46: 6a:3b:bc:e0:e7:cd:22:22:ed:b9:99:40:88:c6:02: 4f:4b:a3:5d:e4:26:6a:63:2d:41:b7:5b:6e:a9:41: 86:ff:e1:51:39:3e:ad:f0:db:2d:7f:65:1c:e0:4d: 04:48:da:4a:ad:9d:63:14:a2:4c:8a:5d:3c:e6:3a: 2c:15:3e:ab:74:5d:53:61:27:2c:3c:83:be:75:af: b0:fb:d0:6a:03:da:60:4a:e7:36:4b:92:05:51:76: 37:77:b3:a8:60:6b:c9:c2:49:cc:0c:58:a4:70:33: be:74:35:fe:7b:3d:74:90:66:b0:ac:3d:f5:72:45: 47:cf:c9:d6:2d:69:d4:80:8e:21:44:6e:3c:0e:f2: 25:85:03:14:8d:63:c1:b7:33:c1:47:3d:ea:19:c9: 89:97:16:9e:ba:cb:13:06:26:44:d5:3a:f8:97:54: 8f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CA:CF:BA:17:02:45:12:27:6E:8F:D9:E7:D1:1E:47:C6:2E:21:02 X509v3 Authority Key Identifier: keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d5:c0:4f:86:98:0f:52:ee:6f:c1:18:a6:94:02:6a:fa:6a: 87:cb:fc:ad:10:ec:9f:6c:60:59:87:42:73:e2:e5:5b:f7:c9: 09:d4:9e:9e:f5:5d:3c:4f:d1:0c:7f:aa:5a:d1:63:aa:2a:f9: b3:cd:8b:2d:56:57:05:ab:a8:1a:d4:ac:4c:3a:e8:3f:13:67: a4:49:e5:83:b1:0b:c7:af:70:fa:47:54:78:be:e0:cd:b4:71: ff:da:09:7f:5a:92:73:f6:49:9e:66:48:5f:58:23:55:16:92: b5:1f:82:9e:69:22:54:25:d0:04:4c:aa:27:0a:0e:8e:ac:12: b1:53:72:d8:e6:7f:40:da:e0:f1:0c:b6:d1:63:35:2d:70:53: df:15:e0:f5:cd:ed:d9:dc:2d:42:6e:3c:7e:4c:ac:48:ca:8b: 74:c8:d4:96:07:24:be:90:da:16:a7:c9:2f:10:1d:f2:41:da: bc:7c:df:eb:7e:0c:fd:30:b7:c1:df:a6:e0:06:67:2e:28:a7: 18:2d:3e:35:25:9c:3d:39:ed:56:ad:c6:a9:85:7d:7e:c3:a3: 6c:0e:5b:b1:90:0e:bf:8a:34:89:d4:b6:e7:28:f2:0c:4f:67: 9e:fc:fb:e3:f2:67:5a:b0:33:07:5d:79:e4:c9:5d:ab:2e:d0: 27:24:f9:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcXm6kqRtOecWmt7s7sP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNzQxZTdkZTY1N2U0YTEwZjkzY2E5MmM1MTdhODFiMmMw YjI1MWUwHhcNMjUxMjEzMTYwMDQ4WhcNMjUxMjE0MTYwMDQ4WjAzMTEwLwYDVQQD Eyg1OGNhY2ZiYTE3MDI0NTEyMjc2ZThmZDllN2QxMWU0N2M2MmUyMTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBqH66KsG68hfdJWvEdUaovhoav9 5UqTl6UD96mYXYrCGhDMnx8V+qhSItSiprlRcCbblc2TNS6uyiPHN3MZPWrLaMzP RO8GUDoPSKZ8YGPApbthtmLI1kZqO7zg580iIu25mUCIxgJPS6Nd5CZqYy1Bt1tu qUGG/+FROT6t8Nstf2Uc4E0ESNpKrZ1jFKJMil085josFT6rdF1TYScsPIO+da+w +9BqA9pgSuc2S5IFUXY3d7OoYGvJwknMDFikcDO+dDX+ez10kGawrD31ckVHz8nW LWnUgI4hRG48DvIlhQMUjWPBtzPBRz3qGcmJlxaeussTBiZE1Tr4l1SPDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjKz7oXAkUSJ26P2efRHkfGLiECMB8GA1UdIwQY MBaAFM50Hn3mV+ShD5PKksUXqBssCyUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jOWE5ZDEtYjEzYy00MDNkLWJkMWMt ZDEyYTM3MmY1MTczLzEvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9jOWE5ZDEtYjEzYy00MDNkLWJkMWMtZDEyYTM3MmY1MTcz LzEvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdXAT4aY D1Lub8EYppQCavpqh8v8rRDsn2xgWYdCc+LlW/fJCdSenvVdPE/RDH+qWtFjqir5 s82LLVZXBauoGtSsTDroPxNnpEnlg7ELx69w+kdUeL7gzbRx/9oJf1qSc/ZJnmZI X1gjVRaStR+CnmkiVCXQBEyqJwoOjqwSsVNy2OZ/QNrg8Qy20WM1LXBT3xXg9c3t 2dwtQm48fkysSMqLdMjUlgckvpDaFqfJLxAd8kHavHzf634M/TC3wd+m4AZnLiin GC0+NSWcPTntVq3GqYV9fsOjbA5bsZAOv4o0idS25yjyDE9nnvz74/JnWrAzB115 5Mldqy7QJyT5rg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:09 2025 by rpki-client