This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json) Hash identifier: ztDjLOC0CBMcow8qKhkT6jq1m8d9F27gl8ucr6FO3kI= Subject key identifier: 8F:EA:6B:4D:BD:17:D9:08:E2:0A:1F:04:A2:4E:2D:E4:B4:4E:8C:C7 Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89 Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489 Certificate serial: 019B1BAA94C732D4F88BC297C8A552BB35B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft Manifest number: 036D Signing time: Sun 14 Dec 2025 07:02:02 +0000 Manifest this update: Sun 14 Dec 2025 07:02:02 +0000 Manifest next update: Mon 15 Dec 2025 07:02:02 +0000 Files and hashes: 1: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (hash: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=) 2: VzQqyrs-uqIcVAV9Qkei6a34wwc.roa (hash: fyOWws5YA8x0adXdJbC1gsHmLihm5Um5wk56YNm2GDk=) 3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: Sffi4cXCDK2UFjwrwQH0iiNNRdNOxA+hfeTw4mAMZ1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:94:c7:32:d4:f8:8b:c2:97:c8:a5:52:bb:35:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64c0bc594af811753dfc116af459b1b874471489 Validity Not Before: Dec 14 07:02:02 2025 GMT Not After : Dec 15 07:02:02 2025 GMT Subject: CN=8fea6b4dbd17d908e20a1f04a24e2de4b44e8cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:24:14:87:59:a4:3c:b9:2a:61:57:81:66: a5:c3:f0:b9:10:c0:e9:b3:1d:6b:1a:c4:6d:06:53: 68:52:ba:ca:b8:0f:bd:11:44:fc:09:ea:13:0d:ce: 19:ea:96:26:6c:70:7d:9b:b0:d6:42:63:c9:7f:cd: f6:bd:74:f0:01:b4:06:cc:13:e8:b6:e3:ca:de:72: d1:30:90:09:39:23:e2:13:c2:74:8e:ce:ce:7c:d9: 5f:ef:17:03:42:27:4f:45:80:d7:25:92:d9:9a:ca: af:ae:1b:f2:33:cb:77:ca:9e:01:ac:5a:2d:72:88: 31:44:61:69:f4:aa:e4:b6:d4:1a:72:d6:57:e8:4d: 19:c0:6d:61:d0:21:a4:a1:93:0d:93:18:95:b2:cd: 51:ea:ec:91:19:08:66:cc:37:d4:c7:4c:93:7f:7c: 5d:64:ba:de:a6:52:af:7b:60:e9:73:be:09:3d:9b: 14:aa:38:1d:c3:44:34:0d:ed:bc:e0:e9:60:9c:62: aa:b2:25:18:13:73:0d:3e:02:84:3d:ec:36:5d:4b: 87:d4:b4:d4:b9:56:13:56:80:8d:cb:09:bb:72:2d: d4:c0:73:f0:6c:74:2b:82:92:83:a4:9d:05:04:8c: f6:e9:e7:2b:22:76:a1:98:b9:0c:03:8d:de:49:fa: 13:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EA:6B:4D:BD:17:D9:08:E2:0A:1F:04:A2:4E:2D:E4:B4:4E:8C:C7 X509v3 Authority Key Identifier: keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f9:94:96:28:9d:83:f2:a1:97:fc:bc:9c:37:f8:19:cb:fa: 5a:21:06:d3:17:62:eb:46:1c:f0:56:05:cf:33:08:c1:1f:ad: 84:d9:78:b9:01:6c:bb:34:2c:4b:82:3b:41:9e:fc:f4:f3:5b: 44:de:18:9e:8e:f2:cf:dd:5b:8b:f8:29:06:c7:e8:72:cd:60: 8e:8c:15:46:aa:56:ed:6e:fa:40:c5:32:17:6b:47:e9:b2:fe: 02:7e:91:d2:05:48:65:38:2b:7d:e4:2e:76:d6:47:a2:fd:a1: 98:00:8f:5b:c1:7c:95:aa:15:aa:18:6c:38:03:83:f6:b8:23: 6a:d5:54:df:32:81:40:32:df:0f:b7:1c:b0:e1:37:fa:bf:cf: 4f:a5:94:2b:cc:7f:ed:57:4d:26:a5:38:9c:a5:45:55:cd:05: 33:0a:bd:23:4c:ea:a7:3b:94:56:1c:20:33:5d:fa:7c:b6:a1: a3:9a:6c:48:25:1e:00:aa:86:e7:9a:9e:2f:29:08:8a:74:77: c7:23:8c:b6:36:a1:1a:49:a6:9a:71:05:bb:7b:74:1a:7b:b0: 4f:ba:16:fb:52:06:e8:54:cc:8b:58:7a:cd:bd:75:d0:ae:99: 07:d0:77:b4:fa:85:5d:f0:b6:31:cc:65:9a:89:e5:90:a8:50: 0f:1f:3e:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqpTHMtT4i8KXyKVSuzWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YzBiYzU5NGFmODExNzUzZGZjMTE2YWY0NTliMWI4NzQ0 NzE0ODkwHhcNMjUxMjE0MDcwMjAyWhcNMjUxMjE1MDcwMjAyWjAzMTEwLwYDVQQD Eyg4ZmVhNmI0ZGJkMTdkOTA4ZTIwYTFmMDRhMjRlMmRlNGI0NGU4Y2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveskFIdZpDy5KmFXgWalw/C5EMDp sx1rGsRtBlNoUrrKuA+9EUT8CeoTDc4Z6pYmbHB9m7DWQmPJf832vXTwAbQGzBPo tuPK3nLRMJAJOSPiE8J0js7OfNlf7xcDQidPRYDXJZLZmsqvrhvyM8t3yp4BrFot cogxRGFp9KrkttQactZX6E0ZwG1h0CGkoZMNkxiVss1R6uyRGQhmzDfUx0yTf3xd ZLreplKve2Dpc74JPZsUqjgdw0Q0De284OlgnGKqsiUYE3MNPgKEPew2XUuH1LTU uVYTVoCNywm7ci3UwHPwbHQrgpKDpJ0FBIz26ecrInahmLkMA43eSfoT4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/qa029F9kI4gofBKJOLeS0TozHMB8GA1UdIwQY MBaAFGTAvFlK+BF1PfwRavRZsbh0RxSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjIt NDQzMTNiNDNlNTk0LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjItNDQzMTNiNDNlNTk0 LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPmUliid g/Khl/y8nDf4Gcv6WiEG0xdi60Yc8FYFzzMIwR+thNl4uQFsuzQsS4I7QZ789PNb RN4Yno7yz91bi/gpBsfocs1gjowVRqpW7W76QMUyF2tH6bL+An6R0gVIZTgrfeQu dtZHov2hmACPW8F8laoVqhhsOAOD9rgjatVU3zKBQDLfD7ccsOE3+r/PT6WUK8x/ 7VdNJqU4nKVFVc0FMwq9I0zqpzuUVhwgM136fLaho5psSCUeAKqG55qeLykIinR3 xyOMtjahGkmmmnEFu3t0GnuwT7oW+1IG6FTMi1h6zb110K6ZB9B3tPqFXfC2Mcxl monlkKhQDx8+6g== -----END CERTIFICATE-----Generated at Sun Dec 14 08:42:43 2025 by rpki-client