This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json) Hash identifier: yoOxSt3E3fmOIlDG6YAen9rY5WbGU9sYgYJ3PoNrDbg= Subject key identifier: 89:24:D1:E2:51:04:67:80:39:F8:AD:9E:46:31:26:9E:97:29:A8:90 Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc Certificate serial: 019B2F676C702D94C38DEE09A1B1F88A0626 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 03:01:05 +0000 Manifest this update: Thu 18 Dec 2025 03:01:05 +0000 Manifest next update: Fri 19 Dec 2025 03:01:05 +0000 Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=) 2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=) 3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: j4cfnn7h40LKOANEroWkqxc+SMGQh0PCbxcHNs+57Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:6c:70:2d:94:c3:8d:ee:09:a1:b1:f8:8a:06:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc Validity Not Before: Dec 18 03:01:05 2025 GMT Not After : Dec 19 03:01:05 2025 GMT Subject: CN=8924d1e25104678039f8ad9e4631269e9729a890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:64:0a:30:9d:02:2f:1b:80:0e:d1:46:de:13: f4:d0:a0:20:a3:4b:cb:20:85:e6:f6:28:b6:b3:67: 4d:a9:57:88:96:9b:af:f5:3e:e2:33:ee:c9:0c:e4: 9c:85:34:db:b9:ae:02:92:db:f2:47:3c:98:10:b8: 66:cd:f5:a2:34:0a:c6:f6:79:7f:09:23:0c:ca:cf: e4:ec:3a:c3:1a:1c:a4:46:07:cd:02:aa:0e:40:4d: 50:7b:49:72:9c:d7:50:2a:52:48:72:94:2e:3f:1c: 4a:70:94:54:63:5e:e8:7e:1c:01:bd:38:e5:c3:b2: 24:cc:4e:15:2a:e3:ba:60:23:5b:8e:35:c7:4c:19: b2:2c:96:15:04:a9:e0:0b:f5:a2:a2:53:3a:a0:f2: 96:72:af:e7:30:27:44:55:5f:85:35:2a:d2:36:e8: e6:46:db:24:b6:63:f9:d5:88:8d:d7:7e:d6:9c:b9: f6:69:cb:f2:24:71:09:5a:a0:75:36:e8:5b:70:b2: 8d:e6:b7:6b:2d:6b:3d:b5:71:bc:88:4e:e3:49:d7: aa:07:05:08:95:2b:81:b8:ea:64:1e:c2:a5:3b:03: 8a:98:87:f0:44:42:85:52:8c:a3:4a:89:15:63:22: 3c:e2:5b:91:d1:1e:79:85:2a:e3:96:ba:d9:84:9b: 63:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:24:D1:E2:51:04:67:80:39:F8:AD:9E:46:31:26:9E:97:29:A8:90 X509v3 Authority Key Identifier: keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:55:e2:b3:e6:33:0b:6c:49:3c:ec:ec:6a:f0:d6:e2:4a:ef: f0:52:03:5f:ab:c5:46:a5:9d:d3:5f:0c:62:ec:3e:1d:e0:49: 5c:f9:c0:e4:f1:0e:cc:4e:4a:34:9c:dd:ae:ff:c8:00:00:a8: 8e:49:cf:53:5c:d9:e4:a5:dc:2f:21:ae:75:ea:9c:6f:4e:26: b5:8d:99:85:ce:91:b0:9e:51:2b:b6:3b:17:56:93:6f:0f:2c: 3c:e0:87:49:7e:e7:75:4f:a8:27:15:83:4e:28:ce:80:8e:06: cb:d7:90:33:9f:f5:96:1f:dd:db:68:f4:f5:fb:66:78:23:67: cc:e4:f4:63:d7:04:02:15:a0:e7:30:ff:45:11:09:20:e3:bb: f6:0d:f9:51:18:08:b3:46:2f:4f:49:ab:62:18:7b:f5:13:d4: b3:df:42:0c:dd:d8:01:5a:a1:af:cc:74:45:e6:48:2f:7c:26: 0c:96:65:5a:96:85:7b:59:0b:4b:91:03:fe:51:e5:45:e7:29: 7c:5d:69:51:d3:f1:b9:78:de:f9:86:f1:57:ac:ff:a7:db:1a: b7:81:9e:66:ae:10:38:82:a8:a2:8b:44:2b:a1:2b:f1:4c:ee: aa:bb:a0:80:2c:25:56:81:cb:04:25:41:4e:30:09:bf:5c:86: 11:69:43:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ2xwLZTDje4JobH4igYmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNzJlNjMzZGY1NjM1YTlmOThkMmY2OGE2ZDJhZGNiNDQx NTVjZGMwHhcNMjUxMjE4MDMwMTA1WhcNMjUxMjE5MDMwMTA1WjAzMTEwLwYDVQQD Eyg4OTI0ZDFlMjUxMDQ2NzgwMzlmOGFkOWU0NjMxMjY5ZTk3MjlhODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2QKMJ0CLxuADtFG3hP00KAgo0vL IIXm9ii2s2dNqVeIlpuv9T7iM+7JDOSchTTbua4CktvyRzyYELhmzfWiNArG9nl/ CSMMys/k7DrDGhykRgfNAqoOQE1Qe0lynNdQKlJIcpQuPxxKcJRUY17ofhwBvTjl w7IkzE4VKuO6YCNbjjXHTBmyLJYVBKngC/WiolM6oPKWcq/nMCdEVV+FNSrSNujm RtsktmP51YiN137WnLn2acvyJHEJWqB1NuhbcLKN5rdrLWs9tXG8iE7jSdeqBwUI lSuBuOpkHsKlOwOKmIfwREKFUoyjSokVYyI84luR0R55hSrjlrrZhJtjVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkk0eJRBGeAOfitnkYxJp6XKaiQMB8GA1UdIwQY MBaAFMxy5jPfVjWp+Y0vaKbSrctEFVzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQt ZDAxMmNhOWVjMTk3LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQtZDAxMmNhOWVjMTk3 LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1Xis+Yz C2xJPOzsavDW4krv8FIDX6vFRqWd018MYuw+HeBJXPnA5PEOzE5KNJzdrv/IAACo jknPU1zZ5KXcLyGudeqcb04mtY2Zhc6RsJ5RK7Y7F1aTbw8sPOCHSX7ndU+oJxWD TijOgI4Gy9eQM5/1lh/d22j09ftmeCNnzOT0Y9cEAhWg5zD/RREJIOO79g35URgI s0YvT0mrYhh79RPUs99CDN3YAVqhr8x0ReZIL3wmDJZlWpaFe1kLS5ED/lHlRecp fF1pUdPxuXje+YbxV6z/p9sat4GeZq4QOIKoootEK6Er8UzuqruggCwlVoHLBCVB TjAJv1yGEWlDfA== -----END CERTIFICATE-----Generated at Thu Dec 18 08:40:59 2025 by rpki-client