This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json) Hash identifier: CXEjNc02rTTq5/f5sCJdk35pbhsDNet0ZbrGiGRZLPg= Subject key identifier: C7:05:DB:16:FC:14:4B:71:11:7C:EA:35:70:FB:C8:6F:7D:C0:2F:A3 Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d Certificate serial: 019B5B6457FDED86C1D05DF40C82686DED91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 16:01:01 +0000 Manifest this update: Fri 26 Dec 2025 16:01:01 +0000 Manifest next update: Sat 27 Dec 2025 16:01:01 +0000 Files and hashes: 1: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (hash: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=) 2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: Mofs8tw8xOGzFLEdvc9cPLBHLUzac6RjMj/7ShR+CN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:57:fd:ed:86:c1:d0:5d:f4:0c:82:68:6d:ed:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d Validity Not Before: Dec 26 16:01:01 2025 GMT Not After : Dec 27 16:01:01 2025 GMT Subject: CN=c705db16fc144b71117cea3570fbc86f7dc02fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:8c:b2:05:f8:9d:f6:09:86:dd:cf:a4:7c: 2f:ee:7c:57:03:b8:6d:0d:f1:6c:79:29:1c:dc:46: d8:29:af:37:78:7f:e1:c2:24:aa:c2:6e:96:4a:aa: e6:a7:12:36:93:75:e7:bf:f9:1e:cc:72:d7:97:25: 50:c1:96:2c:80:63:0d:e7:29:6c:f5:ca:f7:fb:9a: 1b:da:05:b4:5c:d5:f8:cc:b5:10:77:1d:8e:d5:92: 11:87:51:ad:a1:f6:1c:8f:70:6a:c4:8c:f8:e1:c3: ab:30:05:e1:c2:63:b9:0a:92:94:b9:6d:5a:93:16: 7c:f4:3f:49:84:4e:0c:ce:3d:16:dd:95:64:76:5c: bf:d1:d6:9f:08:0d:dc:cf:6e:cd:99:61:68:52:2c: 6e:03:02:06:d3:4e:bc:29:6a:80:f2:70:42:ab:15: d1:29:5b:e4:d1:94:33:4a:e6:54:dc:ad:ba:d5:a9: c9:7e:ce:c3:11:09:19:d5:70:31:63:57:6d:23:10: 0a:b5:1f:c6:03:59:ef:20:23:17:09:cc:4f:7c:2a: df:b9:b7:77:b1:2c:5a:10:b8:6a:b9:9f:9b:07:44: 3f:c7:24:03:4c:e3:fd:1e:f5:51:11:47:33:e1:8a: 04:63:3c:9a:bf:88:49:d4:60:7e:2e:93:6a:88:a5: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:05:DB:16:FC:14:4B:71:11:7C:EA:35:70:FB:C8:6F:7D:C0:2F:A3 X509v3 Authority Key Identifier: keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:df:7b:27:e8:ba:a3:a5:b9:f5:3d:ce:7d:07:f1:a9:4c:31: 70:05:ae:b6:9d:5b:6e:8f:7e:0b:a0:0f:b9:64:d7:56:dd:e2: a7:dd:4d:6a:11:4c:8c:36:44:06:53:c1:5c:64:7f:1f:f0:d1: a7:76:c2:f7:32:6a:3b:66:5c:3f:ee:2d:49:c6:20:14:09:03: f5:5e:58:07:83:75:a7:61:de:fa:0d:cb:76:89:a4:d4:96:50: 18:2c:68:8e:fa:a7:96:db:20:be:aa:69:b9:90:3c:91:c9:d5: 6c:8c:6d:5d:3b:38:c2:68:1c:a5:95:ab:74:0a:96:f4:50:59: 6a:d8:d3:cd:93:33:7c:90:f3:aa:85:84:5f:ea:de:e5:78:d5: 4b:c4:53:51:6f:1e:e7:17:37:70:86:19:07:b0:91:dd:f0:34: 22:ca:20:cd:91:13:73:cb:2b:70:b8:1b:d8:fd:eb:8c:c3:63: 0a:ab:cf:a2:ec:eb:2b:60:a3:40:73:46:33:b6:c8:a3:dd:e6: 0f:fa:41:60:47:28:52:a0:9b:87:56:1f:8f:91:77:ee:a0:2a: 28:17:8f:a9:6c:42:4e:6f:3e:4f:b7:f7:71:41:06:2d:83:d6: 3c:99:81:08:2f:51:a6:21:c2:7d:e3:98:ce:2e:2b:ee:b2:46: f4:bf:79:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZFf97YbB0F30DIJobe2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjY2E3NjNmM2RiMjk2NWExZTRlYjBiZjc2YzFjYjg2OGJh YWU0NmQwHhcNMjUxMjI2MTYwMTAxWhcNMjUxMjI3MTYwMTAxWjAzMTEwLwYDVQQD EyhjNzA1ZGIxNmZjMTQ0YjcxMTE3Y2VhMzU3MGZiYzg2ZjdkYzAyZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnuMsgX4nfYJht3PpHwv7nxXA7ht DfFseSkc3EbYKa83eH/hwiSqwm6WSqrmpxI2k3Xnv/kezHLXlyVQwZYsgGMN5yls 9cr3+5ob2gW0XNX4zLUQdx2O1ZIRh1GtofYcj3BqxIz44cOrMAXhwmO5CpKUuW1a kxZ89D9JhE4Mzj0W3ZVkdly/0dafCA3cz27NmWFoUixuAwIG0068KWqA8nBCqxXR KVvk0ZQzSuZU3K261anJfs7DEQkZ1XAxY1dtIxAKtR/GA1nvICMXCcxPfCrfubd3 sSxaELhquZ+bB0Q/xyQDTOP9HvVREUcz4YoEYzyav4hJ1GB+LpNqiKUZuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcF2xb8FEtxEXzqNXD7yG99wC+jMB8GA1UdIwQY MBaAFMzKdj89spZaHk6wv3bBy4aLquRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2Zjct ZmFjNjNjMDNjMjVhLzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2ZjctZmFjNjNjMDNjMjVh LzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFd97J+i6 o6W59T3OfQfxqUwxcAWutp1bbo9+C6APuWTXVt3ip91NahFMjDZEBlPBXGR/H/DR p3bC9zJqO2ZcP+4tScYgFAkD9V5YB4N1p2He+g3Ldomk1JZQGCxojvqnltsgvqpp uZA8kcnVbIxtXTs4wmgcpZWrdAqW9FBZatjTzZMzfJDzqoWEX+re5XjVS8RTUW8e 5xc3cIYZB7CR3fA0IsogzZETc8srcLgb2P3rjMNjCqvPouzrK2CjQHNGM7bIo93m D/pBYEcoUqCbh1Yfj5F37qAqKBePqWxCTm8+T7f3cUEGLYPWPJmBCC9RpiHCfeOY zi4r7rJG9L95WQ== -----END CERTIFICATE-----Generated at Fri Dec 26 22:54:42 2025 by rpki-client