This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft File: zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json) Hash identifier: 8vhXzpFuUUhjN3wL+qY4N+FCJ9K5bkq9Jem3eH0GICg= Subject key identifier: 4D:37:A6:E6:1E:47:73:41:5D:01:2C:E9:38:01:27:32:1B:65:77:89 Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88 Certificate issuer: /CN=cef84e4749cccd583fefc7797c3d67b10898a188 Certificate serial: 019B25F695E38F82F40673ECDBF53EC0819D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft Manifest number: 11E5 Signing time: Tue 16 Dec 2025 07:01:15 +0000 Manifest this update: Tue 16 Dec 2025 07:01:15 +0000 Manifest next update: Wed 17 Dec 2025 07:01:15 +0000 Files and hashes: 1: jT9M2q3-JmfBGqlkvqfv7X_lK7k.roa (hash: 2EpzeWTEb3JVIFCKyCL/tj06ZaHz1YBQQFcfRdYnEzo=) 2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: Yx+J52ofZ93cB9GHMBrizPp4DgJ5RzbPkCXOpfDSooA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:95:e3:8f:82:f4:06:73:ec:db:f5:3e:c0:81:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188 Validity Not Before: Dec 16 07:01:15 2025 GMT Not After : Dec 17 07:01:15 2025 GMT Subject: CN=4d37a6e61e4773415d012ce9380127321b657789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:6a:61:1d:eb:e4:13:da:a4:be:3b:0f:6d: e3:5c:c6:54:cb:57:a0:41:cb:e0:5c:a9:2d:41:3a: 0a:9a:79:d0:31:8e:4b:65:4d:44:2a:e7:41:71:11: 0d:b5:50:c4:d3:fb:98:ef:f6:8d:0a:cd:30:e1:b2: 72:dc:7e:0e:3e:c6:26:13:f8:53:1a:85:b5:b1:55: 65:b6:77:84:ce:a3:5f:bc:3c:1f:f4:6a:36:f1:26: be:cb:5b:ad:36:07:36:59:a3:06:0f:f2:dc:02:5a: da:58:44:67:06:4a:6f:9b:f3:71:ee:d8:01:80:24: e2:74:5d:d8:fe:42:42:ae:92:b9:71:44:93:19:4c: d7:e3:ac:98:bd:83:e5:b2:26:02:88:47:10:91:98: 1e:00:2b:41:ca:ce:50:f6:69:06:14:90:38:f6:71: 06:a7:89:9c:e7:2d:f7:1c:58:32:d4:63:2f:f3:54: 9a:97:74:51:36:3b:3c:cd:10:b3:47:45:cb:23:b9: 2c:57:d5:38:1a:01:42:f4:a3:17:66:f6:90:16:cc: be:25:a5:d3:62:d6:25:dc:20:c6:66:cb:f4:5c:cc: 2d:5c:a7:8c:1c:47:53:47:52:92:14:96:42:d6:97: 56:2d:32:d2:79:86:55:8d:01:ae:28:8e:a0:ee:9f: e7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:37:A6:E6:1E:47:73:41:5D:01:2C:E9:38:01:27:32:1B:65:77:89 X509v3 Authority Key Identifier: keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3c:80:58:f7:8b:6e:78:85:aa:20:1e:f3:0e:c4:fe:b3:cb: 20:f8:c0:1e:4d:f4:04:2c:bd:54:3d:fb:40:06:dd:2e:2f:38: fe:2f:06:b0:77:c0:1d:da:11:fe:4f:a0:e1:41:99:67:f9:a7: f2:f0:d1:92:66:50:51:4e:66:2e:87:16:bc:2f:da:19:6c:7c: 0a:5d:30:02:b7:4b:1b:59:bf:d6:6e:e9:d1:d7:c4:df:24:ee: df:7a:f7:01:79:5c:64:39:d6:d6:f6:e6:a2:5f:6f:44:c5:98: af:f7:aa:ee:67:a3:a8:28:23:af:77:2b:0e:00:84:81:c9:9c: 2b:15:6e:f8:ad:11:ac:8e:d8:1f:1d:e4:0d:b6:52:2c:50:73: c9:0a:a1:a3:53:e6:09:a6:a8:68:71:67:5f:ed:6c:ed:95:a2: 07:c1:94:4b:0b:14:f0:ce:0b:4b:68:61:08:79:b2:c7:f5:d7: b1:07:9e:2e:33:05:6d:43:7e:81:71:4c:16:2f:c1:22:27:c0: b0:86:1a:2d:71:84:fe:8e:97:81:7d:e1:71:33:88:8d:03:8b: 36:f2:fd:31:f4:ee:45:bb:d1:2a:6d:65:4a:d5:25:93:9f:f1: db:59:40:20:a0:1c:81:3f:20:88:ac:9c:30:be:9b:9f:2e:2e: a0:f4:6b:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9pXjj4L0BnPs2/U+wIGdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZjg0ZTQ3NDljY2NkNTgzZmVmYzc3OTdjM2Q2N2IxMDg5 OGExODgwHhcNMjUxMjE2MDcwMTE1WhcNMjUxMjE3MDcwMTE1WjAzMTEwLwYDVQQD Eyg0ZDM3YTZlNjFlNDc3MzQxNWQwMTJjZTkzODAxMjczMjFiNjU3Nzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub1qYR3r5BPapL47D23jXMZUy1eg QcvgXKktQToKmnnQMY5LZU1EKudBcRENtVDE0/uY7/aNCs0w4bJy3H4OPsYmE/hT GoW1sVVltneEzqNfvDwf9Go28Sa+y1utNgc2WaMGD/LcAlraWERnBkpvm/Nx7tgB gCTidF3Y/kJCrpK5cUSTGUzX46yYvYPlsiYCiEcQkZgeACtBys5Q9mkGFJA49nEG p4mc5y33HFgy1GMv81Sal3RRNjs8zRCzR0XLI7ksV9U4GgFC9KMXZvaQFsy+JaXT YtYl3CDGZsv0XMwtXKeMHEdTR1KSFJZC1pdWLTLSeYZVjQGuKI6g7p/nXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE03puYeR3NBXQEs6TgBJzIbZXeJMB8GA1UdIwQY MBaAFM74TkdJzM1YP+/HeXw9Z7EImKGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xNmFmZTUtYTQ0My00MjM3LWFkN2Qt ZGFiNmUyYzVmZGQ5LzEvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8xNmFmZTUtYTQ0My00MjM3LWFkN2QtZGFiNmUyYzVmZGQ5 LzEvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjyAWPeL bniFqiAe8w7E/rPLIPjAHk30BCy9VD37QAbdLi84/i8GsHfAHdoR/k+g4UGZZ/mn 8vDRkmZQUU5mLocWvC/aGWx8Cl0wArdLG1m/1m7p0dfE3yTu33r3AXlcZDnW1vbm ol9vRMWYr/eq7mejqCgjr3crDgCEgcmcKxVu+K0RrI7YHx3kDbZSLFBzyQqho1Pm CaaoaHFnX+1s7ZWiB8GUSwsU8M4LS2hhCHmyx/XXsQeeLjMFbUN+gXFMFi/BIifA sIYaLXGE/o6XgX3hcTOIjQOLNvL9MfTuRbvRKm1lStUlk5/x21lAIKAcgT8giKyc ML6bny4uoPRrwA== -----END CERTIFICATE-----Generated at Tue Dec 16 11:48:01 2025 by rpki-client