This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft File: zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json) Hash identifier: Cq2zSTNr4I8pk7BH30QrNcTd5wN+eWsJvoiatG0Ppk4= Subject key identifier: 2E:D6:34:25:09:9D:0B:04:15:E2:2C:A7:91:FE:B1:E0:48:9F:4D:F6 Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44 Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44 Certificate serial: 019B593ECCA93DC33BC8F339CA988552782E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 06:00:46 +0000 Manifest this update: Fri 26 Dec 2025 06:00:46 +0000 Manifest next update: Sat 27 Dec 2025 06:00:46 +0000 Files and hashes: 1: 15l6GcmtBitHJjc-TIx2jp_ftA0.roa (hash: WUSHAd/2f1J5gqrAUBHY0LWX82YSkJayrODt6gkvkGA=) 2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: 7+M0/nL/cBrCIDsktg5xCcMDMaz628z8G12/0WNgjlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:cc:a9:3d:c3:3b:c8:f3:39:ca:98:85:52:78:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44 Validity Not Before: Dec 26 06:00:46 2025 GMT Not After : Dec 27 06:00:46 2025 GMT Subject: CN=2ed63425099d0b0415e22ca791feb1e0489f4df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2d:f7:37:24:6f:af:ee:56:e8:13:41:e5:f7: 97:e8:3a:12:c9:8d:13:46:6d:8f:59:d8:7e:b8:7d: 75:b7:0a:60:c3:9e:27:3c:a1:f4:23:d3:e8:f7:5d: f9:98:9a:33:31:a9:32:b3:19:7a:71:6a:c4:a6:23: 61:53:b2:a0:9c:ad:1e:66:1f:b7:b4:10:c3:d7:53: f3:cc:2c:ca:f6:39:f1:76:fe:9d:2b:9c:13:8f:5f: 22:59:ca:e1:0a:ee:8e:62:91:c2:e9:85:65:8a:8a: bc:94:3a:26:d4:c0:5e:c2:f3:5a:77:08:20:ba:bf: a1:f1:bc:76:aa:d1:3d:bd:3d:ce:68:40:d2:ab:d2: 4d:37:cb:5d:ba:3e:72:c6:f2:fd:5e:51:6b:47:ae: 99:18:ac:65:db:be:ba:02:01:bf:b3:3b:04:9f:ab: a8:25:d5:ef:1d:81:e0:23:0e:b3:86:ff:40:98:7a: 4d:94:5e:6c:93:3e:a1:b1:68:3a:12:0d:ea:da:90: 94:82:2d:6d:ea:93:a9:0d:4f:82:98:e4:36:b1:c1: 31:bb:fa:0b:29:26:d9:c7:f5:40:9f:bb:95:c9:5b: a2:40:1c:4c:66:f2:c8:57:e9:59:51:3a:18:ca:21: 65:25:f7:04:05:14:01:41:af:f3:9f:a3:15:0b:6f: d9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D6:34:25:09:9D:0B:04:15:E2:2C:A7:91:FE:B1:E0:48:9F:4D:F6 X509v3 Authority Key Identifier: keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:14:73:0a:9e:b3:5b:27:41:f1:c2:05:35:95:d1:cd:fd:23: 5f:3b:07:0d:d7:84:fb:99:6f:95:12:3e:e3:4e:85:b6:49:72: 7d:50:ab:34:5a:3c:ba:a1:c0:c5:ca:f8:80:07:80:3f:d3:35: f9:a9:fb:ee:fc:76:73:00:ef:69:c6:ef:02:ab:64:d7:dc:69: 41:bb:a1:b3:a7:b8:a6:49:3c:40:71:8f:7b:69:f3:74:5c:cc: 89:d2:96:ad:6c:be:ff:80:54:20:c5:d3:a5:2e:d3:a7:10:a3: be:6c:71:b6:4b:6d:ed:31:48:79:57:2e:0d:d5:ff:6a:bf:f4: f1:fd:ca:9c:b3:f0:83:d1:a5:a8:0b:8c:f5:9d:41:01:0a:fd: 6a:ff:77:c6:aa:2a:bf:4b:6a:6b:bf:1e:94:58:60:18:88:f3: eb:d4:68:e4:74:ba:71:d1:0d:8f:3e:99:0f:42:6c:05:6b:fb: 6f:35:8b:c0:d7:5a:99:e2:8e:be:df:d1:af:40:33:c2:64:d5: 58:36:4a:05:e6:29:3d:55:a5:6d:62:84:82:38:c4:53:3a:b5: ff:6d:f8:56:d9:8d:6c:24:94:2f:1c:02:57:fe:0a:2c:1d:f1: e4:b4:3b:e6:40:15:d1:f4:97:fc:4a:01:1f:9e:17:a3:09:96: 0d:22:e2:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPsypPcM7yPM5ypiFUnguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDc5NDdlYzgzMTM2ZWY5NDQ2MzE2MjM1Njg2YTkxMDI1 NjJjNDQwHhcNMjUxMjI2MDYwMDQ2WhcNMjUxMjI3MDYwMDQ2WjAzMTEwLwYDVQQD EygyZWQ2MzQyNTA5OWQwYjA0MTVlMjJjYTc5MWZlYjFlMDQ4OWY0ZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy33NyRvr+5W6BNB5feX6DoSyY0T Rm2PWdh+uH11twpgw54nPKH0I9Po9135mJozMakysxl6cWrEpiNhU7KgnK0eZh+3 tBDD11PzzCzK9jnxdv6dK5wTj18iWcrhCu6OYpHC6YVlioq8lDom1MBewvNadwgg ur+h8bx2qtE9vT3OaEDSq9JNN8tduj5yxvL9XlFrR66ZGKxl2766AgG/szsEn6uo JdXvHYHgIw6zhv9AmHpNlF5skz6hsWg6Eg3q2pCUgi1t6pOpDU+CmOQ2scExu/oL KSbZx/VAn7uVyVuiQBxMZvLIV+lZUToYyiFlJfcEBRQBQa/zn6MVC2/ZmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7WNCUJnQsEFeIsp5H+seBIn032MB8GA1UdIwQY MBaAFMzXlH7IMTbvlEYxYjVoapECVixEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUt Mjg4NzY2MDYxZDk4LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUtMjg4NzY2MDYxZDk4 LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBRzCp6z WydB8cIFNZXRzf0jXzsHDdeE+5lvlRI+406FtklyfVCrNFo8uqHAxcr4gAeAP9M1 +an77vx2cwDvacbvAqtk19xpQbuhs6e4pkk8QHGPe2nzdFzMidKWrWy+/4BUIMXT pS7TpxCjvmxxtktt7TFIeVcuDdX/ar/08f3KnLPwg9GlqAuM9Z1BAQr9av93xqoq v0tqa78elFhgGIjz69Ro5HS6cdENjz6ZD0JsBWv7bzWLwNdameKOvt/Rr0AzwmTV WDZKBeYpPVWlbWKEgjjEUzq1/234VtmNbCSULxwCV/4KLB3x5LQ75kAV0fSX/EoB H54XowmWDSLioA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:44 2025 by rpki-client