This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft File: znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json) Hash identifier: bl+vNQDqE4RL54tg3kDTizRnrKfLcvy6ZcJATdEOYLg= Subject key identifier: CB:B9:63:7D:91:23:9D:32:A8:15:BD:86:29:30:AB:D6:A3:FB:64:08 Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65 Certificate issuer: /CN=ce704858b643266f7c7107721c98f2ba93dd5265 Certificate serial: 019B48F01882F4659D706BB53CE6BD71EF0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft Manifest number: 1792 Signing time: Tue 23 Dec 2025 02:00:52 +0000 Manifest this update: Tue 23 Dec 2025 02:00:52 +0000 Manifest next update: Wed 24 Dec 2025 02:00:52 +0000 Files and hashes: 1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=) 2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=) 3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=) 4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: Tb8fohDGWZ1bd1xtVYuYzZj9W+ggjpV5P011t5mldcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:18:82:f4:65:9d:70:6b:b5:3c:e6:bd:71:ef:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265 Validity Not Before: Dec 23 02:00:52 2025 GMT Not After : Dec 24 02:00:52 2025 GMT Subject: CN=cbb9637d91239d32a815bd862930abd6a3fb6408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:65:f6:c4:3d:fa:34:ec:33:5a:60:7a:9f: 32:c7:3f:a8:f5:c9:02:8e:6c:c7:d2:30:09:7b:1f: 2a:89:05:f9:0a:4a:e5:a0:c1:dd:4d:98:95:80:2f: 24:94:60:cb:cf:6f:40:d2:2d:2b:9d:e4:67:36:ad: ab:8a:38:a1:91:9c:a5:61:da:4f:97:b4:df:32:c0: bd:70:34:b2:eb:4f:6a:fa:ac:1a:f3:84:52:86:40: 00:49:1e:08:31:2f:99:dc:54:a6:85:ff:2e:62:11: d7:98:22:e8:6e:ca:8d:79:6a:0c:a9:74:7e:4f:ac: 70:e9:16:01:59:9f:f8:e5:fe:1c:a7:6c:44:e9:81: a3:6f:35:e6:57:3f:d4:51:84:27:2f:f0:4f:f5:3e: c1:15:cc:dd:c1:15:65:64:dc:38:1a:3d:95:d9:e7: 75:30:af:f4:21:1f:27:5b:5e:c1:eb:de:69:05:4f: f0:cc:69:5f:e6:f0:7c:09:e0:5c:85:4d:d9:b1:b6: 80:56:ae:67:7a:1b:a7:6b:c7:ae:91:49:6c:ab:fd: 3e:f9:af:8d:a1:5d:ed:9a:66:75:d9:1b:55:47:dd: 39:a4:17:07:41:b6:16:07:08:de:13:83:a9:64:1e: 10:38:1a:25:f0:26:7f:ab:5e:9e:b1:74:9a:bc:1a: 34:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B9:63:7D:91:23:9D:32:A8:15:BD:86:29:30:AB:D6:A3:FB:64:08 X509v3 Authority Key Identifier: keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b1:05:d7:1a:03:d8:1b:0e:b1:d5:94:22:2f:92:7a:9c:a7: 56:b7:8f:49:e9:eb:78:17:45:e4:16:d2:a6:00:60:b5:9e:cd: 2b:39:9a:ef:de:fa:96:16:42:b4:61:c0:c5:d7:1f:e1:1e:8f: 4c:fa:82:c0:d1:08:78:2a:a2:5f:c8:84:67:30:2c:19:da:56: 0f:64:e1:01:39:6e:28:d9:08:05:8e:ed:49:c8:dc:ce:37:4c: 7c:54:7e:09:5d:c7:5f:3f:31:78:18:87:a4:3b:d8:a0:6b:05: d3:48:79:6e:b6:c7:8d:ac:65:0e:14:87:46:c6:6d:3a:5a:45: 38:4c:da:cd:7b:10:3c:75:e4:11:62:09:15:22:8c:72:c0:57: f9:b3:ad:d9:63:24:8a:ef:0a:17:d9:af:b0:8c:f5:11:f2:0d: 83:93:bf:97:d4:cc:b9:28:d9:1d:4b:1b:ad:bc:d0:90:5b:7f: 0a:c0:32:78:27:f4:e7:ec:31:cd:85:f8:1b:b1:d8:ee:c5:e8: 52:12:fd:5f:0d:37:15:e1:26:15:0c:15:56:d5:8d:7b:da:f0: 13:86:e0:61:ee:f7:51:1b:41:03:e5:5f:f3:ad:64:ef:1f:d6: 59:f6:0c:da:45:7f:79:a0:b6:46:ee:b5:4f:d8:fc:d2:36:ea: 62:d0:ce:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8BiC9GWdcGu1POa9ce8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNzA0ODU4YjY0MzI2NmY3YzcxMDc3MjFjOThmMmJhOTNk ZDUyNjUwHhcNMjUxMjIzMDIwMDUyWhcNMjUxMjI0MDIwMDUyWjAzMTEwLwYDVQQD EyhjYmI5NjM3ZDkxMjM5ZDMyYTgxNWJkODYyOTMwYWJkNmEzZmI2NDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnxl9sQ9+jTsM1pgep8yxz+o9ckC jmzH0jAJex8qiQX5CkrloMHdTZiVgC8klGDLz29A0i0rneRnNq2rijihkZylYdpP l7TfMsC9cDSy609q+qwa84RShkAASR4IMS+Z3FSmhf8uYhHXmCLobsqNeWoMqXR+ T6xw6RYBWZ/45f4cp2xE6YGjbzXmVz/UUYQnL/BP9T7BFczdwRVlZNw4Gj2V2ed1 MK/0IR8nW17B695pBU/wzGlf5vB8CeBchU3ZsbaAVq5nehuna8eukUlsq/0++a+N oV3tmmZ12RtVR905pBcHQbYWBwjeE4OpZB4QOBol8CZ/q16esXSavBo07wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMu5Y32RI50yqBW9hikwq9aj+2QIMB8GA1UdIwQY MBaAFM5wSFi2QyZvfHEHchyY8rqT3VJlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5CSVdMWkRKbTk4Y1FkeUhKanl1cFBkVW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wMjdhYWUtNDkyMi00MmE5LWE0Yzkt MzhmODBkNjk2MWVjLzEvem5CSVdMWkRKbTk4Y1FkeUhKanl1cFBkVW1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wMjdhYWUtNDkyMi00MmE5LWE0YzktMzhmODBkNjk2MWVj LzEvem5CSVdMWkRKbTk4Y1FkeUhKanl1cFBkVW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrEF1xoD 2BsOsdWUIi+SepynVrePSenreBdF5BbSpgBgtZ7NKzma7976lhZCtGHAxdcf4R6P TPqCwNEIeCqiX8iEZzAsGdpWD2ThATluKNkIBY7tScjczjdMfFR+CV3HXz8xeBiH pDvYoGsF00h5brbHjaxlDhSHRsZtOlpFOEzazXsQPHXkEWIJFSKMcsBX+bOt2WMk iu8KF9mvsIz1EfINg5O/l9TMuSjZHUsbrbzQkFt/CsAyeCf05+wxzYX4G7HY7sXo UhL9Xw03FeEmFQwVVtWNe9rwE4bgYe73URtBA+Vf861k7x/WWfYM2kV/eaC2Ru61 T9j80jbqYtDOXg== -----END CERTIFICATE-----Generated at Tue Dec 23 06:49:23 2025 by rpki-client