This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json) Hash identifier: XHH1qdi31ZMsmJVcX7VOb/LT3qEZZuXbIxRG/SXlvVQ= Subject key identifier: 1A:B9:65:E8:84:83:CE:5C:5D:E2:15:B3:BA:C5:D0:40:3F:F0:4C:76 Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12 Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12 Certificate serial: 019B1E73BA752BAEAEE331DF09D2F6196668 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft Manifest number: 10E4 Signing time: Sun 14 Dec 2025 20:00:59 +0000 Manifest this update: Sun 14 Dec 2025 20:00:59 +0000 Manifest next update: Mon 15 Dec 2025 20:00:59 +0000 Files and hashes: 1: pDhGAUUYTY1UyjFCug_VA9YXDfc.roa (hash: 6QASzR15fgb6kzzjuyGG0IHeby7n6I+Zv7YlWcP1xhM=) 2: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: pT5op0D69IWZ4ZXVJbJMkXWAxAd1Hy5Ok3YPPVH8Mq4=) 3: zX5SsCvbtwgH75QXuBUCbtdy6Ww.roa (hash: wvJG3iztzAVZHUfCx2K+W5TdCzTlwS3eoby1xR0ldnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:ba:75:2b:ae:ae:e3:31:df:09:d2:f6:19:66:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12 Validity Not Before: Dec 14 20:00:59 2025 GMT Not After : Dec 15 20:00:59 2025 GMT Subject: CN=1ab965e88483ce5c5de215b3bac5d0403ff04c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:d2:12:b2:71:5c:26:e9:95:c5:db:a9:12: da:35:41:2e:87:ba:44:45:a1:45:21:5a:ad:69:34: 7a:c6:ef:36:4b:34:82:82:0a:39:ac:5a:f1:8d:da: 57:96:df:49:3c:64:1e:21:c4:1f:2c:5e:98:37:a1: 9c:b0:22:89:7d:96:d8:04:33:78:f2:a0:96:1c:bd: 37:50:6b:32:76:23:36:30:e9:a8:50:72:7f:84:bc: 0e:c9:59:12:80:34:00:aa:33:05:09:f7:05:c9:c8: fe:5f:a8:94:be:ce:0f:1f:30:8d:95:d0:0a:d1:e7: c6:13:46:8b:b8:1c:1a:5d:ae:29:e5:d6:21:8e:54: 1b:d5:b4:d3:e2:85:8c:87:11:87:05:01:ba:10:b4: 93:3f:60:86:20:48:54:90:11:74:3a:d9:55:22:76: b3:e9:b2:7d:e4:a2:e3:12:bc:f6:8f:ba:e1:9e:5c: 59:84:5e:df:b7:e9:44:be:76:b6:63:f9:1e:aa:77: d7:ef:66:4d:72:cb:1d:c8:17:29:b6:a3:9e:7e:3c: cf:88:9d:42:b8:c0:38:78:a7:3c:b1:b1:39:49:cb: 19:6a:15:c0:75:10:63:4c:c8:57:09:e4:ee:16:ec: 20:d2:29:c3:97:a2:cd:83:66:d4:6a:11:25:79:f3: dc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B9:65:E8:84:83:CE:5C:5D:E2:15:B3:BA:C5:D0:40:3F:F0:4C:76 X509v3 Authority Key Identifier: keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:40:e9:19:4f:8c:d3:d3:09:bb:b9:ce:c7:a3:94:c8:fe:14: 24:48:4b:89:f3:9a:40:87:30:c9:a6:a1:ce:a5:fa:01:53:89: 2c:6f:6b:ee:e9:fe:ae:ed:ac:58:f2:f6:0b:ab:fb:4a:73:da: c5:2b:7f:a1:14:bb:9b:db:7d:96:be:ff:0d:75:6d:e1:3f:56: 89:e2:5b:db:59:10:35:21:16:f6:7b:b8:39:98:c3:df:d0:f0: cd:e1:91:f7:41:b9:7a:f2:9e:07:f7:79:79:33:7f:26:3f:c4: d5:04:37:84:92:c9:a7:2d:15:7a:34:ea:11:03:7f:a6:da:b2: 0e:1c:56:07:8d:e0:c3:e0:e4:43:80:f8:72:da:53:86:48:3e: af:32:d1:5d:a1:1d:02:f8:ec:c0:20:e2:bc:40:5b:96:86:8f: 47:ef:5a:b9:eb:59:ac:d0:2b:d2:48:64:ac:52:b2:9d:53:fc: 89:70:f8:8c:e8:b2:1b:56:1d:ee:2d:b1:03:01:00:da:e7:6e: 51:37:42:c9:0f:56:6d:7b:40:17:62:5f:4f:17:36:50:1c:84: bb:d8:fc:1d:00:6b:77:34:fd:d0:22:75:b3:8a:cc:40:00:d9: 95:0c:c0:21:06:8e:b9:e7:01:7c:06:29:d4:5d:9a:fb:df:8c: 75:b0:db:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec7p1K66u4zHfCdL2GWZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjY2RmNjUxNjIzN2Q0MjVlOWFlMzgxN2VjYjE0MWY0ODE3 NzNjMTIwHhcNMjUxMjE0MjAwMDU5WhcNMjUxMjE1MjAwMDU5WjAzMTEwLwYDVQQD EygxYWI5NjVlODg0ODNjZTVjNWRlMjE1YjNiYWM1ZDA0MDNmZjA0Yzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFLSErJxXCbplcXbqRLaNUEuh7pE RaFFIVqtaTR6xu82SzSCggo5rFrxjdpXlt9JPGQeIcQfLF6YN6GcsCKJfZbYBDN4 8qCWHL03UGsydiM2MOmoUHJ/hLwOyVkSgDQAqjMFCfcFycj+X6iUvs4PHzCNldAK 0efGE0aLuBwaXa4p5dYhjlQb1bTT4oWMhxGHBQG6ELSTP2CGIEhUkBF0OtlVInaz 6bJ95KLjErz2j7rhnlxZhF7ft+lEvna2Y/keqnfX72ZNcssdyBcptqOefjzPiJ1C uMA4eKc8sbE5ScsZahXAdRBjTMhXCeTuFuwg0inDl6LNg2bUahElefPcfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBq5ZeiEg85cXeIVs7rF0EA/8Ex2MB8GA1UdIwQY MBaAFMzN9lFiN9Ql6a44F+yxQfSBdzwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYjc0ODUtOGI3NC00ZDUwLTk3NGEt MWI1MDE1MjA1MzJiLzEvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zYjc0ODUtOGI3NC00ZDUwLTk3NGEtMWI1MDE1MjA1MzJi LzEvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUDpGU+M 09MJu7nOx6OUyP4UJEhLifOaQIcwyaahzqX6AVOJLG9r7un+ru2sWPL2C6v7SnPa xSt/oRS7m9t9lr7/DXVt4T9WieJb21kQNSEW9nu4OZjD39DwzeGR90G5evKeB/d5 eTN/Jj/E1QQ3hJLJpy0VejTqEQN/ptqyDhxWB43gw+DkQ4D4ctpThkg+rzLRXaEd AvjswCDivEBbloaPR+9auetZrNAr0khkrFKynVP8iXD4jOiyG1Yd7i2xAwEA2udu UTdCyQ9WbXtAF2JfTxc2UByEu9j8HQBrdzT90CJ1s4rMQADZlQzAIQaOuecBfAYp 1F2a+9+MdbDb3g== -----END CERTIFICATE-----Generated at Mon Dec 15 04:53:08 2025 by rpki-client