This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json) Hash identifier: eJcGdYWBCUe/JcHlnamCz/NqLJFQ7A4zpi7r3gr/G3w= Subject key identifier: 9E:21:41:12:3B:E5:F3:05:24:F3:9B:8A:2F:BD:A7:5E:BD:18:86:E7 Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b Certificate serial: 019B1F88061EDDE005F26FCF464A6FC1633F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft Manifest number: 1174 Signing time: Mon 15 Dec 2025 01:02:46 +0000 Manifest this update: Mon 15 Dec 2025 01:02:46 +0000 Manifest next update: Tue 16 Dec 2025 01:02:46 +0000 Files and hashes: 1: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: Eok2KbYrQK+k/IspSuMsNuOZFSJUsl935rMWiunLQhw=) 2: zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa (hash: EgP68fSUBBXlJuUGr4bTlwk3uiBoJBQFQ6/v7VJHcgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:88:06:1e:dd:e0:05:f2:6f:cf:46:4a:6f:c1:63:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b Validity Not Before: Dec 15 01:02:46 2025 GMT Not After : Dec 16 01:02:46 2025 GMT Subject: CN=9e2141123be5f30524f39b8a2fbda75ebd1886e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:27:54:d1:21:ab:39:fa:89:2a:c6:87:b6: 21:0f:60:7c:db:0d:f1:94:17:d0:df:28:ea:84:b4: 62:51:b8:fa:b0:50:a8:05:fe:e7:1e:9c:dd:7b:44: 8b:67:57:ba:b1:a5:30:91:98:31:95:e6:a2:16:9e: ad:7d:28:75:c9:93:ec:ba:99:d2:d4:ce:bc:e9:ea: 1f:4e:9c:4a:50:3a:e7:0d:33:02:d1:a0:d8:a7:24: 22:8d:be:26:00:dd:f7:ff:b8:95:17:4f:83:f9:54: c8:b5:f4:88:45:e2:7b:dc:d8:e2:d7:ef:83:76:94: 0f:70:f3:17:cf:a4:a4:27:ec:f6:15:1b:d3:47:2f: 9d:bb:de:3c:cc:de:88:a0:a5:d1:ae:9b:52:02:7e: 08:b9:af:4d:18:03:b1:d1:09:52:a4:0e:b9:5c:a4: b9:5d:59:ce:97:fb:b4:c5:0b:fc:d6:94:83:57:c3: e1:70:ca:88:ce:4d:84:93:86:47:34:68:1f:85:e0: 96:c3:75:52:17:5b:76:78:7c:7e:3a:31:fa:ec:80: 84:5e:50:c4:5e:6c:15:5b:d0:87:97:d6:69:a0:75: fa:43:d4:79:7a:8d:2d:58:ef:f3:a4:f2:00:87:6f: 4d:f1:bf:5d:d1:13:cf:73:3a:4b:64:bc:a4:28:5a: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:21:41:12:3B:E5:F3:05:24:F3:9B:8A:2F:BD:A7:5E:BD:18:86:E7 X509v3 Authority Key Identifier: keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:61:7b:d8:90:4a:82:36:72:78:eb:41:99:32:59:56:30:96: e7:21:92:1f:bf:10:48:62:ba:2d:44:e8:e3:29:62:08:f4:5e: fc:d4:51:08:1b:73:28:41:52:5c:69:44:ff:f0:bc:a5:4c:d6: 33:e9:3e:10:36:91:f8:df:51:d8:3b:8e:f4:02:a9:c2:6f:74: ea:e7:12:37:3c:81:7f:c0:64:c5:12:4c:f9:65:c1:02:9c:df: 3f:67:a8:bd:cd:35:89:9d:16:b7:f6:6d:b7:a1:f4:c0:64:35: 36:37:a8:e9:fb:75:8a:60:9c:e8:69:ad:4b:dd:cf:e7:55:33: ac:7e:2d:0f:42:7f:a0:c6:10:83:76:dd:af:08:19:43:ff:a7: 6e:ae:39:b4:4e:31:d4:29:5b:bf:91:46:eb:a0:23:b3:db:0f: 83:ff:85:a4:b7:24:84:f2:2a:e2:8c:87:b2:6b:c0:4f:a1:a5: d3:be:01:3f:f3:16:99:df:08:8c:28:91:31:c7:25:d3:58:04: 66:80:60:96:76:45:9c:32:e2:38:b9:64:6a:3d:3f:49:d0:69: de:b2:29:3d:25:65:fa:82:6a:a3:ae:b2:2f:8f:73:f0:f6:e5: ce:7f:45:ab:ad:e6:b6:3b:db:8a:ca:c1:b1:b6:27:c9:6d:50: 4d:29:30:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfiAYe3eAF8m/PRkpvwWM/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjODFkNTRkYzBmZDE2YWM5MjUzNGI5YTc4MGUyNjc2NGIy ZjhmN2IwHhcNMjUxMjE1MDEwMjQ2WhcNMjUxMjE2MDEwMjQ2WjAzMTEwLwYDVQQD Eyg5ZTIxNDExMjNiZTVmMzA1MjRmMzliOGEyZmJkYTc1ZWJkMTg4NmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqgnVNEhqzn6iSrGh7YhD2B82w3x lBfQ3yjqhLRiUbj6sFCoBf7nHpzde0SLZ1e6saUwkZgxleaiFp6tfSh1yZPsupnS 1M686eofTpxKUDrnDTMC0aDYpyQijb4mAN33/7iVF0+D+VTItfSIReJ73Nji1++D dpQPcPMXz6SkJ+z2FRvTRy+du948zN6IoKXRrptSAn4Iua9NGAOx0QlSpA65XKS5 XVnOl/u0xQv81pSDV8PhcMqIzk2Ek4ZHNGgfheCWw3VSF1t2eHx+OjH67ICEXlDE XmwVW9CHl9ZpoHX6Q9R5eo0tWO/zpPIAh29N8b9d0RPPczpLZLykKFq0wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4hQRI75fMFJPObii+9p169GIbnMB8GA1UdIwQY MBaAFMyB1U3A/RasklNLmngOJnZLL497MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMt ZjNmN2JkMzFhMGZlLzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMtZjNmN2JkMzFhMGZl LzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWF72JBK gjZyeOtBmTJZVjCW5yGSH78QSGK6LUTo4yliCPRe/NRRCBtzKEFSXGlE//C8pUzW M+k+EDaR+N9R2DuO9AKpwm906ucSNzyBf8BkxRJM+WXBApzfP2eovc01iZ0Wt/Zt t6H0wGQ1Njeo6ft1imCc6GmtS93P51UzrH4tD0J/oMYQg3bdrwgZQ/+nbq45tE4x 1Clbv5FG66Ajs9sPg/+FpLckhPIq4oyHsmvAT6Gl074BP/MWmd8IjCiRMccl01gE ZoBglnZFnDLiOLlkaj0/SdBp3rIpPSVl+oJqo66yL49z8Pblzn9Fq63mtjvbisrB sbYnyW1QTSkw7g== -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:00 2025 by rpki-client