This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft File: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json) Hash identifier: nPZBYS8yBfjapBXO9jNI+lA6qwwLO0tSPlUl3lgRx4o= Subject key identifier: AD:25:2F:39:32:82:38:00:9F:0B:5F:34:D2:4C:D4:68:49:4D:D2:EB Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00 Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300 Certificate serial: 019B35322BA6806E168B0B3F70EBD83E6316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft Manifest number: 0820 Signing time: Fri 19 Dec 2025 06:00:38 +0000 Manifest this update: Fri 19 Dec 2025 06:00:38 +0000 Manifest next update: Sat 20 Dec 2025 06:00:38 +0000 Files and hashes: 1: CaWXYpKvbSJzF_mYByH9muE8M1Y.roa (hash: EeYUCquk5ABf/u1PAGxiO+fxjOU9b4kobfLQPidgSUo=) 2: FF0ktv0OPoF7jCtMQNOnbF5wwXU.roa (hash: HLhVlsk2Unfze1/M/TFW88bBXMX8DWQaGu5Q6NyMGnM=) 3: kZ7eyrCVE9sgtqrKRokEj4qTgAo.roa (hash: +7Bcl0ExuY0MXzkJn8UI65AlETMnOzrxtQ5UBzKR/Pk=) 4: nhH0f8YrsZbPIXW8xTSorKAhQWg.roa (hash: UkA3IcBbEJENHBzSBQlkD9Qpnz5ghpEJH4gNaI8ZrkE=) 5: vgmzsk5mJlVpOvg90oBMOrzEyD8.roa (hash: mlh/51JI3/xnvn2/YPy/vMvMSrdR3vTjEtNddu6PauM=) 6: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: iBlRzM9q7fVPXjMxjsAMuwwwZNWaf/osQi0Xm/M60TU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:2b:a6:80:6e:16:8b:0b:3f:70:eb:d8:3e:63:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300 Validity Not Before: Dec 19 06:00:38 2025 GMT Not After : Dec 20 06:00:38 2025 GMT Subject: CN=ad252f39328238009f0b5f34d24cd468494dd2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fa:c3:f1:83:52:5c:8d:24:fa:44:57:28:0e: 54:55:67:e2:14:6e:3d:ce:14:e1:42:2a:6a:e1:22: f4:79:05:fe:20:42:82:9b:fc:dc:a3:53:4e:82:96: a7:9e:4c:68:c8:2f:4d:6b:15:6c:fb:29:80:15:c3: bb:fc:58:ec:d9:b9:99:b7:36:d6:e6:ca:55:88:81: f7:e6:d9:05:a9:08:38:6b:da:ae:4c:9f:de:19:92: 03:96:e6:4a:c9:3c:9c:b9:f9:95:14:bf:cb:f0:0f: 75:bb:25:f1:91:92:00:20:41:82:87:89:24:67:ff: 85:b6:5c:aa:0e:1d:41:9b:19:dc:7d:f1:82:14:3e: 3e:e6:c3:e3:2a:b4:80:e3:22:c2:b0:d3:67:66:32: ac:11:86:33:76:76:e0:83:57:ae:f0:07:4a:55:cd: 30:99:33:f5:df:1d:f6:7e:a9:5d:e2:9b:39:dd:f2: b5:0e:42:c7:db:ba:4d:73:88:91:7a:a0:86:7f:b9: fd:98:0d:c0:22:4e:25:66:65:78:3d:31:91:21:97: b5:a8:19:b3:00:15:6a:1f:30:b2:97:9d:9a:6d:18: 60:5e:05:a0:a4:0f:e8:c3:40:e5:5a:26:2a:1e:16: 39:89:67:21:7b:a5:9d:5b:48:7e:e6:e4:be:ef:e1: c2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:25:2F:39:32:82:38:00:9F:0B:5F:34:D2:4C:D4:68:49:4D:D2:EB X509v3 Authority Key Identifier: keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:72:f9:c4:6b:c4:9e:8f:4e:d2:7b:0a:2c:11:1e:61:89:3d: 42:6c:d9:12:4c:9e:c5:c8:4f:2b:47:4c:ce:9a:f8:d5:75:63: fd:46:fd:c7:49:4b:69:0a:4f:2b:e7:84:8e:80:5d:7e:32:53: 59:ed:6e:d5:9a:93:aa:45:0a:dd:ae:4a:33:0d:69:7d:c0:bc: 16:5c:69:d5:81:12:7b:da:4a:3f:e5:52:ef:d9:f2:f9:d8:e7: cd:1a:b2:e4:30:5e:c0:5d:c7:1c:ec:20:a5:86:ae:9b:95:05: b7:0e:a0:b0:a2:d1:0b:30:51:ec:b6:d5:42:04:b2:2c:bc:ee: 3a:e8:c8:c0:1d:2e:87:8b:23:ee:d7:65:7e:dc:27:60:bd:b0: 3f:db:29:f5:89:85:0d:9b:a2:0f:5d:40:a1:8d:b2:43:9b:c8: 82:73:06:a9:b7:4f:0e:78:f6:e4:37:39:b3:40:5a:ea:da:af: 64:43:77:f6:a0:33:43:e4:7f:0e:9b:44:67:ae:96:79:ce:a7: eb:c4:c4:3c:9d:cf:7e:d7:83:36:72:d2:26:4e:59:56:e1:20: db:e0:2f:a3:16:2d:2c:ee:9f:37:d6:ff:28:54:3c:34:30:77: 75:09:e3:ba:35:81:bf:16:9b:9a:0e:cb:3c:6b:4f:ac:cc:e9: 67:17:10:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MiumgG4Wiws/cOvYPmMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTYzNjA2MjRjYzFiNGM0OWRhNzJiYzMyNWY1YmI2YWI0 ZDgzMDAwHhcNMjUxMjE5MDYwMDM4WhcNMjUxMjIwMDYwMDM4WjAzMTEwLwYDVQQD EyhhZDI1MmYzOTMyODIzODAwOWYwYjVmMzRkMjRjZDQ2ODQ5NGRkMmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvrD8YNSXI0k+kRXKA5UVWfiFG49 zhThQipq4SL0eQX+IEKCm/zco1NOgpannkxoyC9NaxVs+ymAFcO7/Fjs2bmZtzbW 5spViIH35tkFqQg4a9quTJ/eGZIDluZKyTycufmVFL/L8A91uyXxkZIAIEGCh4kk Z/+FtlyqDh1BmxncffGCFD4+5sPjKrSA4yLCsNNnZjKsEYYzdnbgg1eu8AdKVc0w mTP13x32fqld4ps53fK1DkLH27pNc4iReqCGf7n9mA3AIk4lZmV4PTGRIZe1qBmz ABVqHzCyl52abRhgXgWgpA/ow0DlWiYqHhY5iWche6WdW0h+5uS+7+HCzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0lLzkygjgAnwtfNNJM1GhJTdLrMB8GA1UdIwQY MBaAFM5WNgYkzBtMSdpyvDJfW7arTYMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUt YTk4ZWYzMDA4NTgwLzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85NTc3ZjgtYjhiOC00OTk0LWI4NTUtYTk4ZWYzMDA4NTgw LzEvemxZMkJpVE1HMHhKMm5LOE1sOWJ0cXROZ3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXL5xGvE no9O0nsKLBEeYYk9QmzZEkyexchPK0dMzpr41XVj/Ub9x0lLaQpPK+eEjoBdfjJT We1u1ZqTqkUK3a5KMw1pfcC8Flxp1YESe9pKP+VS79ny+djnzRqy5DBewF3HHOwg pYaum5UFtw6gsKLRCzBR7LbVQgSyLLzuOujIwB0uh4sj7tdlftwnYL2wP9sp9YmF DZuiD11AoY2yQ5vIgnMGqbdPDnj25Dc5s0Ba6tqvZEN39qAzQ+R/DptEZ66Wec6n 68TEPJ3PfteDNnLSJk5ZVuEg2+AvoxYtLO6fN9b/KFQ8NDB3dQnjujWBvxabmg7L PGtPrMzpZxcQ3g== -----END CERTIFICATE-----Generated at Fri Dec 19 12:23:06 2025 by rpki-client