This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json) Hash identifier: uV09R3TFz0BIq4CDHdCjc6ocLHW1/zCJW6aVmjKk/+0= Subject key identifier: 13:00:78:A7:A7:5F:BD:8F:3C:09:8E:7B:94:CA:B7:8D:F3:9D:D1:E8 Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60 Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360 Certificate serial: 019B397CE1E34582DCF01382431A401E84EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 02:00:44 +0000 Manifest this update: Sat 20 Dec 2025 02:00:44 +0000 Manifest next update: Sun 21 Dec 2025 02:00:44 +0000 Files and hashes: 1: 3XfxhYPaNkk8RYgtHf2GQ9-31bw.roa (hash: IyuGzJvfjXAVgnfQEKPJlaaX+BmI0xIhxqPUz3ur7Ug=) 2: K-1wTW4J6sLpv-6DuCiwUF12vdI.roa (hash: n2u+VQEAXcWUcGFe9BbTAMBCmji0TY4jRMY2BGuQA34=) 3: Npx18kARbKwhPsVOQp9AGtW-IRk.roa (hash: vuiB+5rGT82oxQbwKjm+/1tHrIOrr/bLoXItiD0HcWA=) 4: NsYwUgzVMnXieGE8ET2TEjto6eg.roa (hash: oLZXFnzZzj9unXv5slzpUpxTvQH/LdOTTYWq8r8y++4=) 5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: zBnq3lhVJ9ruKOP4lpJSzZI39jPib8kdv6CJZwOogfs=) 6: zeoM8BTDMIvmahMcB90qnpwzClY.roa (hash: kC/8T/vBTQ+SF6IsbbebB8UCkgdezLGje3ANXS8WqT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7c:e1:e3:45:82:dc:f0:13:82:43:1a:40:1e:84:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360 Validity Not Before: Dec 20 02:00:44 2025 GMT Not After : Dec 21 02:00:44 2025 GMT Subject: CN=130078a7a75fbd8f3c098e7b94cab78df39dd1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:96:39:45:55:da:77:da:6a:6e:99:3d:6a:31: 50:ab:84:fa:92:6d:05:62:89:3d:25:3c:b9:59:78: 5e:b6:0a:50:b8:a3:4c:fc:dd:3a:c1:94:55:4e:cc: 4b:ca:51:66:e4:66:f1:d1:87:3f:f0:84:ca:c6:2f: 25:28:fa:10:4e:5f:3c:bf:72:72:ae:21:1f:46:73: 37:dd:96:86:6e:39:dd:9f:dc:40:95:75:79:6e:b0: 95:25:f2:a9:5c:26:90:27:5c:c9:f7:35:aa:ab:70: 98:56:89:83:93:b8:38:38:d8:72:23:97:92:a9:c0: 51:10:c5:37:75:82:8b:59:b8:33:e3:dd:89:42:a9: 25:31:58:8f:9b:36:ba:c7:c5:83:62:1f:e4:96:69: ce:b5:76:2f:4f:8d:7d:cb:81:2f:01:ee:3a:75:dc: 76:b9:1a:41:9b:cd:0d:e4:8f:24:f6:56:e6:e0:18: b9:06:b6:3b:ab:9c:e6:3e:fa:73:63:6a:3a:5f:66: 7a:9e:81:37:7e:28:fe:e1:e6:2a:8e:9f:99:63:85: bb:ab:ba:06:64:57:dc:fc:8e:14:76:af:39:f4:27: 9d:17:c1:78:21:58:5c:d1:80:c2:9a:67:cc:a8:32: 23:2e:fc:15:3e:8c:f3:aa:f0:a8:e5:73:36:86:b3: 72:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:00:78:A7:A7:5F:BD:8F:3C:09:8E:7B:94:CA:B7:8D:F3:9D:D1:E8 X509v3 Authority Key Identifier: keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:46:e4:71:34:05:af:f2:fc:7d:ff:9b:f2:0c:1f:e6:b6:ca: cf:5e:c8:f3:69:ae:47:fa:64:9b:f8:85:ef:35:32:cd:8b:b6: 5d:b5:6a:6c:d3:34:6b:70:66:de:7b:a1:fc:ae:bd:93:56:ac: 36:25:cc:e1:2e:14:1c:1d:2b:0a:cd:06:b3:ad:13:97:23:21: de:5c:0e:16:52:48:0d:76:76:17:ef:bc:5d:33:f0:6e:4f:fd: 6f:be:0e:79:10:40:09:36:ef:b4:fe:3d:bb:5d:01:7b:b4:1a: 5e:db:d1:82:34:80:24:87:c7:70:ad:05:54:0b:8b:89:e3:a3: 40:20:a9:1f:db:86:4c:f8:08:f7:ca:b9:c1:5d:63:19:3a:e5: ac:41:34:08:69:2d:ad:55:ac:c2:fb:08:47:4f:7f:a6:dc:7d: c0:5d:f0:9f:49:bb:f5:cb:d7:16:b1:95:f8:3f:16:5c:f7:d7: fb:3d:74:26:5f:6f:4e:9c:a1:86:d1:84:3c:45:ed:4e:63:ae: 02:a8:d6:ef:83:b8:f3:eb:9f:4c:f0:6d:e8:23:9f:4c:c8:a5: 4d:bd:f8:45:98:ae:b3:1f:32:22:92:5b:3e:83:6b:07:16:e7: 27:14:85:5c:03:ab:b2:ce:9d:b6:a4:74:ba:0e:e7:58:eb:35: a9:c7:84:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fOHjRYLc8BOCQxpAHoTrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOWYwNzY2OWU1OGVjMzJiOWQ5MTMyZTJjYTZkMTljMmU5 NDkzNjAwHhcNMjUxMjIwMDIwMDQ0WhcNMjUxMjIxMDIwMDQ0WjAzMTEwLwYDVQQD EygxMzAwNzhhN2E3NWZiZDhmM2MwOThlN2I5NGNhYjc4ZGYzOWRkMWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJY5RVXad9pqbpk9ajFQq4T6km0F Yok9JTy5WXhetgpQuKNM/N06wZRVTsxLylFm5Gbx0Yc/8ITKxi8lKPoQTl88v3Jy riEfRnM33ZaGbjndn9xAlXV5brCVJfKpXCaQJ1zJ9zWqq3CYVomDk7g4ONhyI5eS qcBREMU3dYKLWbgz492JQqklMViPmza6x8WDYh/klmnOtXYvT419y4EvAe46ddx2 uRpBm80N5I8k9lbm4Bi5BrY7q5zmPvpzY2o6X2Z6noE3fij+4eYqjp+ZY4W7q7oG ZFfc/I4Udq859CedF8F4IVhc0YDCmmfMqDIjLvwVPozzqvCo5XM2hrNymwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMAeKenX72PPAmOe5TKt43zndHoMB8GA1UdIwQY MBaAFLGfB2aeWOwyudkTLiym0ZwulJNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMt NjQxZGQ0Mjg4YzQwLzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMtNjQxZGQ0Mjg4YzQw LzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0bkcTQF r/L8ff+b8gwf5rbKz17I82muR/pkm/iF7zUyzYu2XbVqbNM0a3Bm3nuh/K69k1as NiXM4S4UHB0rCs0Gs60TlyMh3lwOFlJIDXZ2F++8XTPwbk/9b74OeRBACTbvtP49 u10Be7QaXtvRgjSAJIfHcK0FVAuLieOjQCCpH9uGTPgI98q5wV1jGTrlrEE0CGkt rVWswvsIR09/ptx9wF3wn0m79cvXFrGV+D8WXPfX+z10Jl9vTpyhhtGEPEXtTmOu AqjW74O48+ufTPBt6COfTMilTb34RZiusx8yIpJbPoNrBxbnJxSFXAOrss6dtqR0 ug7nWOs1qceEjA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:31:03 2025 by rpki-client