This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft File: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json) Hash identifier: mM7V2vPpCozdPLzHBYKIS8avcfXzHko+uZdMnybKrcc= Subject key identifier: 57:1C:FD:3E:5A:46:47:63:E2:C5:8C:47:90:D5:51:C7:EE:3A:84:E1 Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f Certificate serial: 019B0F37D75890CED68FA1B52FA6E9A48F78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft Manifest number: 1775 Signing time: Thu 11 Dec 2025 21:01:16 +0000 Manifest this update: Thu 11 Dec 2025 21:01:16 +0000 Manifest next update: Fri 12 Dec 2025 21:01:16 +0000 Files and hashes: 1: 1v8i4fKHGgVFWMzHMhW8J-xxCqk.roa (hash: 3nrn/SO1kBcjpxN/GEFTE06I2/Ei7ozh8XwfvRrFcmg=) 2: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: qPG7f182K94oXLD8CaXYpHG4TzRByS7XKFnR0aqP2eY=) 3: clYhAW8kFlSaTpdGL_6AqwLYC_c.roa (hash: XEbICpC7LdXsG9DjCaajLcED5VcPq/8r93ZX2PiFgnw=) 4: nXVN6v3CzmLleKeTxS_kRgT2CK8.roa (hash: oJxgRFyz2Xezz+l0iWGdoRK6g6HPkdzeG09BGt4Hpn8=) 5: yAPFTHuBSG8S3cBogTgaLXQHsIA.roa (hash: Dghvk7oUxYxn4x3kqmECJ3G0zYv5Ok/s1CWEsFSe7A0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:d7:58:90:ce:d6:8f:a1:b5:2f:a6:e9:a4:8f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f Validity Not Before: Dec 11 21:01:16 2025 GMT Not After : Dec 12 21:01:16 2025 GMT Subject: CN=571cfd3e5a464763e2c58c4790d551c7ee3a84e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:6f:ba:3f:8e:fb:70:0a:0e:46:11:57:36: 86:4c:ae:92:91:9f:cf:c6:70:7d:68:75:7b:93:41: 7d:88:6f:ea:b5:da:b3:30:6d:8b:f5:c2:bc:6b:af: 3d:3d:06:45:32:75:3a:af:30:ad:4a:53:4e:15:2e: 28:3c:3f:27:3b:38:54:9b:e4:e2:8f:f4:79:37:35: 56:d8:91:49:cd:76:67:2f:95:72:0f:18:3f:57:7f: 87:fc:64:70:81:4d:cb:d7:44:33:54:0d:1a:7a:a7: b4:c9:f0:f2:64:c3:e4:09:12:f1:95:22:49:cf:0e: 36:31:fa:c6:24:4b:cf:9b:40:2c:db:b5:73:ce:dd: 63:d5:16:ce:fd:63:35:cf:da:15:ea:0a:d1:23:34: 78:4f:b6:a0:47:ba:80:b5:0a:5f:20:a1:99:83:fd: bf:6d:fc:e1:76:63:2e:80:a1:c4:48:5c:30:4a:97: 8f:e3:a2:73:6f:bc:9a:6b:9c:fb:24:2c:7f:58:a3: a5:de:0f:7e:24:09:e4:70:fa:09:5a:f3:98:19:0a: 74:4c:66:49:31:af:97:2d:d1:91:6c:27:d6:84:bf: 50:dd:da:89:e4:30:c4:75:7c:7d:4d:89:b1:04:fe: 9e:d3:e7:d0:56:e7:3a:16:db:51:f7:9b:fe:94:ee: 56:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1C:FD:3E:5A:46:47:63:E2:C5:8C:47:90:D5:51:C7:EE:3A:84:E1 X509v3 Authority Key Identifier: keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:00:f3:0a:28:34:12:6d:5c:40:00:b4:a0:e3:46:3d:10:3b: f5:7e:04:cc:d5:36:86:2b:db:d5:17:44:bd:f9:2d:60:af:4c: 59:68:fe:91:16:ea:34:22:69:95:14:8e:77:b1:bb:e1:23:ee: e4:b4:4c:c8:4e:b7:8e:63:29:51:40:f4:48:ec:17:b3:98:51: 2f:4b:40:d7:71:1b:8b:7f:b0:ff:fe:f5:fa:92:92:c3:bd:c6: 8f:6a:f3:aa:e4:a6:47:ec:5e:44:c1:ce:b5:71:33:24:77:08: 8c:27:d4:59:57:34:3a:86:c6:01:db:e8:72:17:96:b1:7c:1d: d4:25:6d:40:e3:7d:3f:0a:59:71:6f:da:e0:94:7a:ad:b1:ba: 13:ca:89:fb:99:3d:5b:7a:36:62:cc:91:26:d3:74:ae:e5:4a: 0d:05:d9:6b:43:f3:ae:2e:5a:36:bb:f4:56:11:32:d0:d0:ad: 63:dc:b2:31:d7:18:a7:89:2d:51:3d:ce:1f:25:db:ad:a2:04: 1c:f4:5e:22:10:c8:5b:03:4e:cf:6f:c1:7f:3d:34:b5:1e:f9: de:c4:ae:dc:83:1d:65:51:7b:0a:45:93:16:e7:46:00:cb:93: c4:2f:76:08:74:34:cb:9f:a1:3c:55:6a:e3:17:1c:d9:1a:58: 4e:d0:2e:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN9dYkM7Wj6G1L6bppI94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjVkZDk3NjY1YTIzYjFiMTgzZTIyMzgyMmI2NmI1YWU1 MzZhMmYwHhcNMjUxMjExMjEwMTE2WhcNMjUxMjEyMjEwMTE2WjAzMTEwLwYDVQQD Eyg1NzFjZmQzZTVhNDY0NzYzZTJjNThjNDc5MGQ1NTFjN2VlM2E4NGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIVvuj+O+3AKDkYRVzaGTK6SkZ/P xnB9aHV7k0F9iG/qtdqzMG2L9cK8a689PQZFMnU6rzCtSlNOFS4oPD8nOzhUm+Ti j/R5NzVW2JFJzXZnL5VyDxg/V3+H/GRwgU3L10QzVA0aeqe0yfDyZMPkCRLxlSJJ zw42MfrGJEvPm0As27Vzzt1j1RbO/WM1z9oV6grRIzR4T7agR7qAtQpfIKGZg/2/ bfzhdmMugKHESFwwSpeP46Jzb7yaa5z7JCx/WKOl3g9+JAnkcPoJWvOYGQp0TGZJ Ma+XLdGRbCfWhL9Q3dqJ5DDEdXx9TYmxBP6e0+fQVuc6FttR95v+lO5WywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcc/T5aRkdj4sWMR5DVUcfuOoThMB8GA1UdIwQY MBaAFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt ZThkNzA3MTdmZjhhLzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh LzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQDzCig0 Em1cQAC0oONGPRA79X4EzNU2hivb1RdEvfktYK9MWWj+kRbqNCJplRSOd7G74SPu 5LRMyE63jmMpUUD0SOwXs5hRL0tA13Ebi3+w//71+pKSw73Gj2rzquSmR+xeRMHO tXEzJHcIjCfUWVc0OobGAdvocheWsXwd1CVtQON9PwpZcW/a4JR6rbG6E8qJ+5k9 W3o2YsyRJtN0ruVKDQXZa0Pzri5aNrv0VhEy0NCtY9yyMdcYp4ktUT3OHyXbraIE HPReIhDIWwNOz2/Bfz00tR753sSu3IMdZVF7CkWTFudGAMuTxC92CHQ0y5+hPFVq 4xcc2RpYTtAuyQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:06 2025 by rpki-client