This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: Ttnfq18UW9Ej4W7PGp2vCdptO0xfU3YbA8R4kF/bb0g= Subject key identifier: 79:7F:1C:BA:F9:08:0A:54:A6:BC:4A:E7:8F:0E:E9:BB:D6:29:D8:EC Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019B0E5C2564861D4F2788F1D23F477E675A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0FCB Signing time: Thu 11 Dec 2025 17:01:18 +0000 Manifest this update: Thu 11 Dec 2025 17:01:18 +0000 Manifest next update: Fri 12 Dec 2025 17:01:18 +0000 Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=) 2: FDfmsu_IgoQfV2wt46Usr4SYc3g.roa (hash: F5BDEBTgZRkZKg47n0IHrA45+01eu4MWtwsHqaOf0SA=) 3: G2YMUT8WZMSTQ7MK3_Sp1FETDAk.roa (hash: hIMlTU+DT4A6A7uZvfD/8ICFCxVi5QCIz8WhtkNI7dw=) 4: JiN8PiBQMRbhwwfYP31TY4I7csw.roa (hash: h0TWFXGwNIH5C18gFdaIzCuKZqZvskN5p9wyN3nfeO8=) 5: LHRhRb7BbKRJgX65EILPXtPyA9g.roa (hash: JYxrBZ5k+jIHAeW+R9UtHHezy3w3r2SNVSn9g/11gwU=) 6: _Hg3RiRRbCVFdEVQSVANmXe1AZM.roa (hash: craDG3qBGDlj43lq+QC1MGx/jTT9DqlZJhNew+U6jZ8=) 7: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=) 8: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=) 9: m5uzTjKBj1YNxt9lmpL_W70mOs4.roa (hash: XT7e+1v3eFE6ptU9W+MrlhCJgipVPDN9P/6NNIsbxmg=) 10: trGLVLEbETkdoQfzTAxgA4VvfLQ.roa (hash: 2FPq9I43dwPLTtZTvTVrXSwvRWgm6ojSYSnF0bcYf2o=) 11: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=) 12: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=) 13: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: Do5mh8XEU9MxaP8snp+WE7Bk9h5w9eRQYfYsCp34KfA=) 14: zyelqOglgtBz_gr9QNv1lTVwAkM.roa (hash: yfFHop5WpzuJkOeUSy2+RjJbXW/uKtaXVgTVEPu3WAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:25:64:86:1d:4f:27:88:f1:d2:3f:47:7e:67:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Dec 11 17:01:18 2025 GMT Not After : Dec 12 17:01:18 2025 GMT Subject: CN=797f1cbaf9080a54a6bc4ae78f0ee9bbd629d8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:bb:61:06:cc:44:95:99:cc:b2:68:02:ad: 06:d3:75:d5:78:dc:18:73:13:b2:58:5b:67:69:6d: 83:f0:a4:38:c1:29:7c:c0:cf:3c:8c:73:a4:94:7a: bb:a7:ad:5d:29:c1:1b:7a:0f:8a:77:ee:a3:90:e8: b4:d9:70:de:31:5d:f5:cb:93:ae:12:ab:56:f1:1c: af:60:5f:04:c0:53:04:67:ab:38:e8:c4:8c:64:d8: b2:c2:fd:0e:73:ee:cd:cc:02:dc:22:2d:43:1d:e3: 8b:36:5d:ea:9e:62:39:80:e0:fc:a7:3b:88:d7:6b: bf:1e:1f:4b:b6:f1:63:9d:d8:bb:56:f4:9f:98:38: 5c:0a:9d:c3:88:1b:26:49:98:3e:2c:7d:b6:d2:42: 94:df:99:7b:24:3a:9b:23:3a:ed:e6:f8:7d:8e:aa: bd:e5:61:93:d7:41:91:4f:47:12:63:28:26:d8:94: 73:6b:52:0f:6e:70:0f:59:93:68:0b:2a:dc:1e:b4: 22:8e:29:18:bc:52:63:6e:81:cc:b4:9e:86:f1:9c: 12:e5:14:d5:15:83:91:59:fc:2a:d1:da:ea:61:0e: 9f:92:5b:1c:e5:13:dd:17:42:85:87:55:d2:8e:5f: b2:d7:97:4b:94:a6:06:4e:21:ac:0d:b6:2a:b9:0c: 49:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7F:1C:BA:F9:08:0A:54:A6:BC:4A:E7:8F:0E:E9:BB:D6:29:D8:EC X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b7:d9:cd:71:a9:0a:94:ef:86:4c:0f:57:f8:95:6d:ba:a0: 53:4e:05:88:3f:5c:ba:1f:b2:1a:c2:45:27:51:96:fe:f2:9e: b6:86:2a:fd:71:38:87:80:2b:b2:95:ac:14:4a:7c:54:ab:cc: 9d:9b:82:60:1b:8e:12:0d:f4:55:e4:29:13:5e:6d:2b:21:ef: 16:c5:51:0f:f0:c8:f3:26:87:3f:6f:53:e4:53:30:02:3d:5c: f8:0e:c6:ef:d8:5c:c0:f8:65:72:d7:ca:44:06:7f:84:10:f6: c3:1d:2b:4b:b7:83:d3:42:39:98:a8:af:05:ad:c6:fb:8a:50: 26:16:23:8d:2e:38:b8:fc:60:c6:ed:91:19:8a:af:1f:dd:d1: c0:95:80:3e:a7:e2:4f:f0:f4:dc:be:87:73:e1:4e:b4:c7:53: 99:3f:a1:ff:87:cf:07:27:ae:e1:65:67:b0:fe:c1:e7:80:22: ac:8a:a5:9d:61:f3:1d:0f:6a:f9:54:a9:58:56:9b:1d:b9:21: f6:86:1e:0f:aa:8c:20:fa:8a:b8:71:69:1a:83:74:72:5b:c6: eb:3d:13:be:fa:2f:64:4b:39:9e:07:e0:af:56:32:3d:08:62: e4:f8:bd:73:ec:27:47:07:4d:5b:16:a5:1a:19:cd:03:d9:3f: bb:54:96:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXCVkhh1PJ4jx0j9HfmdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUxMjExMTcwMTE4WhcNMjUxMjEyMTcwMTE4WjAzMTEwLwYDVQQD Eyg3OTdmMWNiYWY5MDgwYTU0YTZiYzRhZTc4ZjBlZTliYmQ2MjlkOGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk+7YQbMRJWZzLJoAq0G03XVeNwY cxOyWFtnaW2D8KQ4wSl8wM88jHOklHq7p61dKcEbeg+Kd+6jkOi02XDeMV31y5Ou EqtW8RyvYF8EwFMEZ6s46MSMZNiywv0Oc+7NzALcIi1DHeOLNl3qnmI5gOD8pzuI 12u/Hh9LtvFjndi7VvSfmDhcCp3DiBsmSZg+LH220kKU35l7JDqbIzrt5vh9jqq9 5WGT10GRT0cSYygm2JRza1IPbnAPWZNoCyrcHrQijikYvFJjboHMtJ6G8ZwS5RTV FYORWfwq0drqYQ6fklsc5RPdF0KFh1XSjl+y15dLlKYGTiGsDbYquQxJwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHl/HLr5CApUprxK548O6bvWKdjsMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7fZzXGp CpTvhkwPV/iVbbqgU04FiD9cuh+yGsJFJ1GW/vKetoYq/XE4h4ArspWsFEp8VKvM nZuCYBuOEg30VeQpE15tKyHvFsVRD/DI8yaHP29T5FMwAj1c+A7G79hcwPhlctfK RAZ/hBD2wx0rS7eD00I5mKivBa3G+4pQJhYjjS44uPxgxu2RGYqvH93RwJWAPqfi T/D03L6Hc+FOtMdTmT+h/4fPByeu4WVnsP7B54AirIqlnWHzHQ9q+VSpWFabHbkh 9oYeD6qMIPqKuHFpGoN0clvG6z0TvvovZEs5ngfgr1YyPQhi5Pi9c+wnRwdNWxal GhnNA9k/u1SW8g== -----END CERTIFICATE-----Generated at Fri Dec 12 02:36:57 2025 by rpki-client