This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json) Hash identifier: En9DDD+3Y8PV22DpMfXYE6m95ooWnd7cNTYjvoG7za0= Subject key identifier: BF:5F:C3:12:00:3C:82:BE:F6:03:88:47:73:F5:23:5A:43:C2:6F:82 Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2 Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2 Certificate serial: 019B15DF4B3D5B59DDD90A8FEDC8AC75851B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft Manifest number: 1774 Signing time: Sat 13 Dec 2025 04:01:53 +0000 Manifest this update: Sat 13 Dec 2025 04:01:53 +0000 Manifest next update: Sun 14 Dec 2025 04:01:53 +0000 Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=) 2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=) 3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: Xs2fEusr8QoRIBcvMWlzjkOY/6yj37TGwkC7wN0JxIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 04:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:df:4b:3d:5b:59:dd:d9:0a:8f:ed:c8:ac:75:85:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2 Validity Not Before: Dec 13 04:01:53 2025 GMT Not After : Dec 14 04:01:53 2025 GMT Subject: CN=bf5fc312003c82bef603884773f5235a43c26f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d3:68:99:bf:37:8b:9c:36:23:52:42:c5:26: e8:ac:2a:c2:b1:3c:e7:7e:5d:e0:16:1b:53:1f:77: e7:19:f3:29:5d:81:28:41:4a:a7:3d:52:69:af:52: c8:4c:96:91:b9:71:3d:5f:b5:b6:3e:3f:0b:58:ca: 9a:ee:e0:7b:b3:4f:80:0f:1a:f6:e2:ae:70:13:e4: 02:8c:8a:da:90:0e:1e:27:9a:44:27:8b:45:c9:b8: 74:45:13:40:39:f9:11:a3:b9:5a:2f:cb:17:a1:6c: db:0c:ce:72:d5:a2:ff:69:72:8e:68:32:5d:9e:98: 85:90:b9:78:89:fe:19:5d:d3:db:bd:5a:41:69:94: fb:4f:f3:32:1a:8d:50:2c:24:fa:25:ee:e3:8e:39: 91:2e:40:88:ff:d5:c5:01:ed:7f:2b:94:be:ec:b3: 36:71:b9:65:84:51:8c:9c:4c:26:13:d0:8a:8f:c2: e7:fe:63:3b:7b:a7:ec:77:a4:74:19:00:2b:64:02: e0:af:86:60:de:7a:e3:77:98:46:75:2c:56:e7:c3: 2a:d2:51:aa:4a:02:51:ff:04:4c:33:c0:63:ad:0c: 2f:69:1f:6e:8f:90:17:ac:7a:d1:6a:3b:91:40:77: 2f:29:ff:9f:f6:e1:06:83:9e:4d:79:d2:0c:f0:4e: a5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5F:C3:12:00:3C:82:BE:F6:03:88:47:73:F5:23:5A:43:C2:6F:82 X509v3 Authority Key Identifier: keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:1e:0d:fc:79:20:b2:43:83:2a:33:a8:49:5e:d2:ab:b7:d7: 44:75:f1:0a:55:12:d3:ff:44:3d:23:5c:5b:c4:8f:ec:82:da: 3c:5e:4c:e2:fc:c9:15:67:55:9c:60:30:1e:b5:55:ed:67:46: 7f:33:50:cc:64:53:df:9b:c6:f7:45:31:f7:5d:e8:15:cc:88: b2:dd:bf:cb:45:4a:e8:43:98:59:b7:8c:ea:dc:6b:11:66:d3: 82:42:3d:43:12:f2:ce:a4:06:4f:dc:df:0f:af:79:09:aa:c4: 97:de:6d:02:05:69:91:4d:0b:fd:88:23:f7:0a:37:4b:08:fc: a6:e0:ca:4d:d4:4e:7a:2b:9f:03:f1:58:b7:00:29:1b:09:ad: 62:8b:2f:aa:47:ab:d0:33:1c:46:52:92:51:d6:89:18:b0:f2: 9c:9a:93:c3:f8:95:c3:57:b8:d1:38:d7:cb:5e:69:90:da:f6: 8b:00:94:ee:5d:cf:77:3f:da:83:54:2f:c3:33:dd:cb:46:af: c6:3a:30:72:ea:5c:43:7c:c5:22:ed:fa:7d:14:37:ff:18:32: a6:0a:df:66:cd:54:c3:99:16:58:fa:f3:43:ef:2b:20:ef:8b: 65:44:23:40:f4:3e:79:f9:ee:84:6f:fc:ec:13:fc:8a:8a:fd: 4f:12:55:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsV30s9W1nd2QqP7cisdYUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZjlhNmQyZjZjZDU4OGE3N2Y0MjM2MjJlNmI4ZDFjNjU0 YmNkZjIwHhcNMjUxMjEzMDQwMTUzWhcNMjUxMjE0MDQwMTUzWjAzMTEwLwYDVQQD EyhiZjVmYzMxMjAwM2M4MmJlZjYwMzg4NDc3M2Y1MjM1YTQzYzI2ZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49Nomb83i5w2I1JCxSborCrCsTzn fl3gFhtTH3fnGfMpXYEoQUqnPVJpr1LITJaRuXE9X7W2Pj8LWMqa7uB7s0+ADxr2 4q5wE+QCjIrakA4eJ5pEJ4tFybh0RRNAOfkRo7laL8sXoWzbDM5y1aL/aXKOaDJd npiFkLl4if4ZXdPbvVpBaZT7T/MyGo1QLCT6Je7jjjmRLkCI/9XFAe1/K5S+7LM2 cbllhFGMnEwmE9CKj8Ln/mM7e6fsd6R0GQArZALgr4Zg3nrjd5hGdSxW58Mq0lGq SgJR/wRMM8BjrQwvaR9uj5AXrHrRajuRQHcvKf+f9uEGg55NedIM8E6lRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9fwxIAPIK+9gOIR3P1I1pDwm+CMB8GA1UdIwQY MBaAFMz5ptL2zViKd/QjYi5rjRxlS83yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUt MWIwZjI1NGRlNjE5LzEvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUtMWIwZjI1NGRlNjE5 LzEvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkx4N/Hkg skODKjOoSV7Sq7fXRHXxClUS0/9EPSNcW8SP7ILaPF5M4vzJFWdVnGAwHrVV7WdG fzNQzGRT35vG90Ux913oFcyIst2/y0VK6EOYWbeM6txrEWbTgkI9QxLyzqQGT9zf D695CarEl95tAgVpkU0L/Ygj9wo3Swj8puDKTdROeiufA/FYtwApGwmtYosvqker 0DMcRlKSUdaJGLDynJqTw/iVw1e40TjXy15pkNr2iwCU7l3Pdz/ag1QvwzPdy0av xjowcupcQ3zFIu36fRQ3/xgypgrfZs1Uw5kWWPrzQ+8rIO+LZUQjQPQ+efnuhG/8 7BP8ior9TxJVww== -----END CERTIFICATE-----Generated at Sat Dec 13 12:44:46 2025 by rpki-client