This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json) Hash identifier: s3cmcchKvvgXXiptcCd4w/d/tb9LlAI8SwVcq6+Yt0o= Subject key identifier: A1:FB:C8:2D:88:9B:FB:C0:86:88:58:5C:2F:EA:99:AF:F8:58:A0:F1 Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1 Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1 Certificate serial: 019B59E39A9216194148760AF67D4859CB49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 09:00:46 +0000 Manifest this update: Fri 26 Dec 2025 09:00:46 +0000 Manifest next update: Sat 27 Dec 2025 09:00:46 +0000 Files and hashes: 1: 3TjgfHBQ3TSR3m9y0lvASlg8xJE.roa (hash: xhRBJVrNxo2QfSSHQs80HTy1SPE+Tw63EIyLJNfW+98=) 2: O9iKTZs-NSCx-2a4wz3hixLMrQo.roa (hash: 9kWdgObviNsf7fH09ytaVex94ijVjQzdPVkcYWojJN8=) 3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: 1/q0V4ySXBQKhCzNc9M3f8XCtf5nE2gqycyfsu4aLFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:9a:92:16:19:41:48:76:0a:f6:7d:48:59:cb:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1 Validity Not Before: Dec 26 09:00:46 2025 GMT Not After : Dec 27 09:00:46 2025 GMT Subject: CN=a1fbc82d889bfbc08688585c2fea99aff858a0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:ff:18:ae:86:ed:ec:bd:6c:f2:00:27:b5: e6:ed:6c:e6:60:fe:c5:88:01:9e:68:f1:fb:06:05: 07:85:99:bd:7a:e7:dd:b7:7c:74:0f:a4:50:47:e3: bf:1b:43:bb:15:b7:b7:55:1b:ad:b6:29:52:57:94: 86:8e:8d:8b:5a:88:31:33:fa:11:1c:4a:53:2c:fd: cc:29:12:e5:7d:c3:24:f2:f2:50:95:cc:f6:50:9f: 71:8a:9a:b0:19:79:a7:50:48:db:59:25:89:3a:e6: e8:9f:97:6b:51:35:26:52:ae:60:c0:d3:dd:5b:c6: 24:c4:64:78:ac:88:b5:81:26:a7:e8:d3:a0:2f:6c: 0b:e0:19:10:77:e0:be:32:b5:46:d9:64:40:de:79: 40:e9:be:68:2f:d9:d6:4b:22:3c:e9:65:82:c6:a5: 5b:88:db:59:ed:c5:6f:80:c5:5a:e2:3c:fe:08:e8: c1:18:0b:8a:1e:ba:d6:15:b0:2f:6b:59:cd:9f:06: 5d:22:bf:0b:c9:06:b8:fa:e2:95:a3:2b:44:c6:1b: 4b:a9:2d:05:28:7f:7a:6a:06:1a:c3:1f:8d:f5:12: f8:10:23:8a:d0:63:81:26:65:5b:83:b2:7b:60:12: a9:d4:8e:ee:58:af:b0:dd:0f:38:45:78:78:23:34: af:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FB:C8:2D:88:9B:FB:C0:86:88:58:5C:2F:EA:99:AF:F8:58:A0:F1 X509v3 Authority Key Identifier: keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:57:20:2c:90:66:18:d0:85:63:21:6c:7f:31:5c:8b:85:d2: 54:2e:2f:5e:10:4b:31:2e:e1:e0:96:d1:df:c0:94:a1:b2:dd: e2:e0:e1:59:a1:0c:47:d5:60:90:97:9e:33:57:f8:1f:2f:c1: 16:a8:e6:f6:7e:92:27:0e:8f:96:36:ed:48:d2:f4:f5:63:2b: 6e:c2:3d:c1:43:b7:1d:e8:5e:14:17:d7:45:d7:2e:09:29:95: be:51:db:f8:a5:68:6a:a4:1a:3e:7a:03:15:c3:64:7b:23:d1: 69:ef:b1:b3:85:9c:cf:c4:30:80:05:b8:66:1f:93:b1:1e:74: 07:4e:9d:3a:1e:dd:74:d7:e8:ec:30:c4:13:77:b2:27:ad:6c: 07:36:a9:48:61:1b:38:c9:43:1f:f3:d5:78:5b:d7:70:f5:04: 1f:89:16:5c:61:b2:d4:e2:c2:7f:cd:10:45:7d:91:5a:1a:10: f9:54:88:6d:0c:17:57:d9:17:51:9c:22:34:4d:8c:5a:81:23: 94:00:ce:12:20:c1:35:08:d2:20:61:22:45:8d:04:f4:9f:35: 5a:53:9e:58:a1:a0:c1:61:d6:90:2d:21:73:d6:cd:b1:fd:6d: 97:2c:e7:fc:02:26:9c:33:67:9d:98:8d:86:0b:bc:ba:66:90: e7:f8:57:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ45qSFhlBSHYK9n1IWctJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYjBjYTIyOTEyNzZkN2QyYTJmOGE3MDUwZjRiYTgyN2Zl OTEwYTEwHhcNMjUxMjI2MDkwMDQ2WhcNMjUxMjI3MDkwMDQ2WjAzMTEwLwYDVQQD EyhhMWZiYzgyZDg4OWJmYmMwODY4ODU4NWMyZmVhOTlhZmY4NThhMGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorf/GK6G7ey9bPIAJ7Xm7WzmYP7F iAGeaPH7BgUHhZm9eufdt3x0D6RQR+O/G0O7Fbe3VRuttilSV5SGjo2LWogxM/oR HEpTLP3MKRLlfcMk8vJQlcz2UJ9xipqwGXmnUEjbWSWJOubon5drUTUmUq5gwNPd W8YkxGR4rIi1gSan6NOgL2wL4BkQd+C+MrVG2WRA3nlA6b5oL9nWSyI86WWCxqVb iNtZ7cVvgMVa4jz+COjBGAuKHrrWFbAva1nNnwZdIr8LyQa4+uKVoytExhtLqS0F KH96agYawx+N9RL4ECOK0GOBJmVbg7J7YBKp1I7uWK+w3Q84RXh4IzSv4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKH7yC2Im/vAhohYXC/qma/4WKDxMB8GA1UdIwQY MBaAFMywyiKRJ219Ki+KcFD0uoJ/6RChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kMzgzNjAtNGQxZi00MjJlLTkwYWUt MDhiOWUxMTAxYWE3LzEvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9kMzgzNjAtNGQxZi00MjJlLTkwYWUtMDhiOWUxMTAxYWE3 LzEvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlcgLJBm GNCFYyFsfzFci4XSVC4vXhBLMS7h4JbR38CUobLd4uDhWaEMR9VgkJeeM1f4Hy/B Fqjm9n6SJw6PljbtSNL09WMrbsI9wUO3HeheFBfXRdcuCSmVvlHb+KVoaqQaPnoD FcNkeyPRae+xs4Wcz8QwgAW4Zh+TsR50B06dOh7ddNfo7DDEE3eyJ61sBzapSGEb OMlDH/PVeFvXcPUEH4kWXGGy1OLCf80QRX2RWhoQ+VSIbQwXV9kXUZwiNE2MWoEj lADOEiDBNQjSIGEiRY0E9J81WlOeWKGgwWHWkC0hc9bNsf1tlyzn/AImnDNnnZiN hgu8umaQ5/hXmA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:07 2025 by rpki-client