This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json) Hash identifier: V4OGcjFlBBI1a/HGRpb9kfXxnSVFgy9PF+0dKS4U9Z4= Subject key identifier: 67:8F:9C:A6:7F:D7:70:48:20:44:C8:B3:D8:8A:77:45:F2:61:F9:1F Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44 Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044 Certificate serial: 019B0EC97D3F783C55E479D179EB39C1D953 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft Manifest number: 1774 Signing time: Thu 11 Dec 2025 19:00:44 +0000 Manifest this update: Thu 11 Dec 2025 19:00:44 +0000 Manifest next update: Fri 12 Dec 2025 19:00:44 +0000 Files and hashes: 1: CGIluw5b3rFNq3TYcrDu-mJjjcY.roa (hash: 7XYO0sh+h2BXkgYXdxURNA8WGt1oRVxjTX46cE0gy/o=) 2: RLQ2xMmRZoZiAtZFS_YRcySPvAc.roa (hash: P8RbzLYf4UK0GuClJazmarq7imv/ewysF1Ivpx0otS4=) 3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: nwrbq5Z5G3MPgyggFCLZBytPY9HFAy/DI34jdj1ti5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:7d:3f:78:3c:55:e4:79:d1:79:eb:39:c1:d9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044 Validity Not Before: Dec 11 19:00:44 2025 GMT Not After : Dec 12 19:00:44 2025 GMT Subject: CN=678f9ca67fd770482044c8b3d88a7745f261f91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:2b:24:6c:12:9a:ca:cd:66:2e:31:a7:9b: 9f:9d:29:e6:95:54:70:84:20:f0:f4:b6:55:a9:aa: 56:2c:fa:3c:90:4c:39:de:78:ef:10:7b:f6:87:e4: 01:27:ac:bd:26:ad:6b:5c:f9:61:93:cf:4f:85:1b: d3:fd:2d:53:bc:7a:81:56:85:59:24:67:53:35:02: 36:8d:00:eb:24:69:e8:54:9c:5c:12:d5:ac:d5:05: cf:40:49:61:24:a5:35:f8:73:f5:1d:4b:56:d9:e1: b2:7e:d9:fc:52:99:31:df:7b:02:b0:c2:52:2a:88: 02:89:a4:c5:59:5c:92:06:63:e9:7f:ba:fd:4d:f0: a3:70:18:d4:22:0e:1f:97:86:8a:e6:dc:e3:c4:b4: 3b:0e:91:b9:be:16:ca:c1:4a:12:0b:62:c0:63:06: c9:e3:be:33:71:8e:02:0a:f1:ec:d8:1d:e6:3a:47: bf:3e:53:8e:08:9f:13:8d:cf:39:cc:48:d9:ce:26: 5f:32:82:9f:18:12:6a:73:bd:97:51:84:20:f6:92: af:88:4d:85:f6:c4:0a:1d:83:89:66:4e:71:d7:bd: 84:35:ce:80:19:68:8b:60:c0:ed:46:45:83:1e:66: c2:c1:e0:f9:5d:c8:c9:ba:a9:2b:3f:06:cb:b8:b6: bf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8F:9C:A6:7F:D7:70:48:20:44:C8:B3:D8:8A:77:45:F2:61:F9:1F X509v3 Authority Key Identifier: keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:7b:0c:0e:57:34:2f:be:da:28:b4:7f:c2:50:39:f5:c7:65: 90:fa:dc:b4:25:fe:82:06:8e:90:3b:23:0d:d2:43:33:73:1d: d0:20:e3:e7:d6:18:fc:bc:d5:04:7a:40:65:68:04:b0:c1:dc: b3:00:d5:94:6b:d9:cc:d9:59:f1:49:cf:02:31:c7:3e:e7:0d: 1a:81:1d:a5:36:88:ae:5b:e9:67:dd:e7:52:c5:8b:d8:a7:7f: 4c:13:05:62:ab:2f:2f:95:5b:14:a1:b3:dc:da:bc:a4:6b:21: 07:f6:2b:5c:d4:f2:5d:86:be:d9:b9:e4:72:0a:5b:5a:86:39: 30:15:a0:7c:b0:1c:23:88:20:87:29:67:e7:d4:2d:08:6e:aa: 3c:58:9c:ab:8c:fc:1d:37:32:f7:05:c9:e7:44:71:00:6d:a0: 76:9b:28:da:cf:d5:96:ab:92:b2:4e:2b:c1:92:3b:0d:83:50: 0d:13:a9:7b:c2:b5:b8:10:9e:90:b0:15:f6:58:18:0d:67:d4: ff:4b:54:45:0f:f7:25:7c:27:8a:01:8a:60:c9:bb:42:d2:f2: 4a:8e:63:3e:41:66:b8:d8:26:db:45:c3:f5:57:a4:d6:03:bc: 34:87:03:70:e6:a9:93:e1:0f:a0:d5:68:2b:01:49:0c:50:f7: 6c:c5:cb:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyX0/eDxV5HnRees5wdlTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOTRmMDMwNGVlZGQzNjNjNjYyMmZkOTFjNTliMTA4NzFh YTMwNDQwHhcNMjUxMjExMTkwMDQ0WhcNMjUxMjEyMTkwMDQ0WjAzMTEwLwYDVQQD Eyg2NzhmOWNhNjdmZDc3MDQ4MjA0NGM4YjNkODhhNzc0NWYyNjFmOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSMrJGwSmsrNZi4xp5ufnSnmlVRw hCDw9LZVqapWLPo8kEw53njvEHv2h+QBJ6y9Jq1rXPlhk89PhRvT/S1TvHqBVoVZ JGdTNQI2jQDrJGnoVJxcEtWs1QXPQElhJKU1+HP1HUtW2eGyftn8Upkx33sCsMJS KogCiaTFWVySBmPpf7r9TfCjcBjUIg4fl4aK5tzjxLQ7DpG5vhbKwUoSC2LAYwbJ 474zcY4CCvHs2B3mOke/PlOOCJ8Tjc85zEjZziZfMoKfGBJqc72XUYQg9pKviE2F 9sQKHYOJZk5x172ENc6AGWiLYMDtRkWDHmbCweD5XcjJuqkrPwbLuLa/lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGePnKZ/13BIIETIs9iKd0XyYfkfMB8GA1UdIwQY MBaAFLGU8DBO7dNjxmIv2RxZsQhxqjBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUt YWZiZGJkYWQ1OGE1LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUtYWZiZGJkYWQ1OGE1 LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3sMDlc0 L77aKLR/wlA59cdlkPrctCX+ggaOkDsjDdJDM3Md0CDj59YY/LzVBHpAZWgEsMHc swDVlGvZzNlZ8UnPAjHHPucNGoEdpTaIrlvpZ93nUsWL2Kd/TBMFYqsvL5VbFKGz 3Nq8pGshB/YrXNTyXYa+2bnkcgpbWoY5MBWgfLAcI4gghyln59QtCG6qPFicq4z8 HTcy9wXJ50RxAG2gdpso2s/VlquSsk4rwZI7DYNQDROpe8K1uBCekLAV9lgYDWfU /0tURQ/3JXwnigGKYMm7QtLySo5jPkFmuNgm20XD9Vek1gO8NIcDcOapk+EPoNVo KwFJDFD3bMXLuA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:19:18 2025 by rpki-client