This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json) Hash identifier: 3hIRavYOIbuU3ply0xsIHWhm2GPjs4ntVvpJcwGdElo= Subject key identifier: 95:64:BB:BF:25:56:9E:AC:0B:BF:B2:86:B0:FE:EE:2C:91:FC:B1:B2 Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b Certificate serial: 019B38D7E5AF3AF98A957225EA6DDE7E2FE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft Manifest number: 17D1 Signing time: Fri 19 Dec 2025 23:00:31 +0000 Manifest this update: Fri 19 Dec 2025 23:00:31 +0000 Manifest next update: Sat 20 Dec 2025 23:00:31 +0000 Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=) 2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=) 3: utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (hash: GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=) 4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: ZL20kUpYsy0dmqATas8ezvkt1+KG60pzF/9PgMGlyc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d7:e5:af:3a:f9:8a:95:72:25:ea:6d:de:7e:2f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b Validity Not Before: Dec 19 23:00:31 2025 GMT Not After : Dec 20 23:00:31 2025 GMT Subject: CN=9564bbbf25569eac0bbfb286b0feee2c91fcb1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:48:84:b7:65:b8:99:b8:29:d1:e7:26:cb:9e: 53:94:a2:bf:00:4f:4c:a7:13:31:5a:c3:cf:ce:de: f3:1b:19:61:53:32:e7:e1:0a:20:74:41:48:d4:d2: cd:d9:6b:1b:52:b7:54:0b:30:43:c6:58:10:8d:21: 00:3a:81:15:b2:a1:f3:ad:45:99:96:05:cd:cd:1c: dc:0b:2a:db:37:ca:32:42:09:ff:e0:a9:d9:da:35: f3:3f:8a:04:7f:22:27:e0:fd:6a:d8:d7:0d:67:66: 0f:e8:b0:c6:ca:65:82:66:83:7d:9b:88:0e:64:27: da:b6:82:8b:26:a1:ee:b3:9d:88:21:40:fa:5a:1f: 48:2d:c2:09:e5:c5:87:98:15:d6:25:d1:a8:d3:8d: e0:2b:e0:06:e9:f0:d9:1f:fb:1e:97:da:f4:40:3d: f0:35:29:4f:ad:3b:df:59:ef:c1:6f:82:6e:57:ac: 12:c4:80:86:cf:2b:6d:9b:9e:49:81:8d:93:60:9a: f9:63:19:2a:09:8f:55:e7:b8:78:98:f7:a3:0b:9b: 0b:cf:72:96:fd:8d:35:9f:78:ef:85:e0:97:d0:05: c8:a4:7d:6d:51:91:c2:bb:0b:40:1a:cf:09:f6:e5: 61:30:3a:cd:40:40:f9:81:6d:d8:67:84:d0:dc:f9: 21:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:64:BB:BF:25:56:9E:AC:0B:BF:B2:86:B0:FE:EE:2C:91:FC:B1:B2 X509v3 Authority Key Identifier: keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:3b:00:89:1f:f2:6d:6b:fa:aa:4b:eb:44:9f:1c:dd:d4:a8: cd:b8:0a:1d:7f:4e:85:94:2e:d6:f6:ab:4b:e8:c3:78:36:09: 34:97:bb:71:b2:ba:44:4b:ba:17:c7:e2:25:ec:22:09:f7:7c: 69:d2:12:c7:6e:2e:7a:29:cd:10:2d:64:66:fd:f0:e2:12:d6: 9a:cc:ac:3b:24:26:39:7b:d4:c0:9d:1a:e0:87:6a:29:cf:9a: 9d:93:8f:c0:67:9a:4d:ed:82:1c:0c:87:33:96:9a:77:91:cb: f2:aa:8d:08:88:92:c2:93:45:27:33:2b:c5:6d:4e:7a:94:54: bf:a8:32:63:cc:5e:82:5e:11:c4:2c:f1:19:09:0f:b9:03:12: e0:73:37:d0:90:a5:4d:5f:d6:5a:88:95:6e:61:49:f0:fc:ce: 1a:d6:48:43:b1:3b:d9:7f:d3:f1:69:94:75:87:ac:90:e2:5a: 12:d3:9e:61:4e:2c:65:13:e8:ae:d2:13:f7:d0:5d:e7:88:37: 99:ca:50:8a:2f:68:17:9c:dd:d8:0f:96:ac:63:21:ff:c6:f0: 75:c3:b0:07:e4:0a:40:ec:a3:51:dc:bd:05:fe:07:7f:84:0c: 37:f6:9e:d9:d8:2f:9e:23:34:58:b1:bd:a3:5f:e6:15:18:b3: 24:cc:50:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs41+WvOvmKlXIl6m3efi/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNTU2NzEyMmE4OGNhOTg4OWExNzk4YjZjOTQyZGNjMGNi Yzc1M2IwHhcNMjUxMjE5MjMwMDMxWhcNMjUxMjIwMjMwMDMxWjAzMTEwLwYDVQQD Eyg5NTY0YmJiZjI1NTY5ZWFjMGJiZmIyODZiMGZlZWUyYzkxZmNiMWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkiEt2W4mbgp0ecmy55TlKK/AE9M pxMxWsPPzt7zGxlhUzLn4QogdEFI1NLN2WsbUrdUCzBDxlgQjSEAOoEVsqHzrUWZ lgXNzRzcCyrbN8oyQgn/4KnZ2jXzP4oEfyIn4P1q2NcNZ2YP6LDGymWCZoN9m4gO ZCfatoKLJqHus52IIUD6Wh9ILcIJ5cWHmBXWJdGo043gK+AG6fDZH/sel9r0QD3w NSlPrTvfWe/Bb4JuV6wSxICGzyttm55JgY2TYJr5YxkqCY9V57h4mPejC5sLz3KW /Y01n3jvheCX0AXIpH1tUZHCuwtAGs8J9uVhMDrNQED5gW3YZ4TQ3PkhfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVku78lVp6sC7+yhrD+7iyR/LGyMB8GA1UdIwQY MBaAFM9VZxIqiMqYiaF5i2yULcwMvHU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAt OGQ3MTVhYzIxN2UyLzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAtOGQ3MTVhYzIxN2Uy LzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjsAiR/y bWv6qkvrRJ8c3dSozbgKHX9OhZQu1varS+jDeDYJNJe7cbK6REu6F8fiJewiCfd8 adISx24ueinNEC1kZv3w4hLWmsysOyQmOXvUwJ0a4IdqKc+anZOPwGeaTe2CHAyH M5aad5HL8qqNCIiSwpNFJzMrxW1OepRUv6gyY8xegl4RxCzxGQkPuQMS4HM30JCl TV/WWoiVbmFJ8PzOGtZIQ7E72X/T8WmUdYeskOJaEtOeYU4sZRPortIT99Bd54g3 mcpQii9oF5zd2A+WrGMh/8bwdcOwB+QKQOyjUdy9Bf4Hf4QMN/ae2dgvniM0WLG9 o1/mFRizJMxQTQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:31:39 2025 by rpki-client