This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft File: zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json) Hash identifier: 2XJ7v9eD+gMUHgqg+QZtDgMm4PZlCSiEXFu1g0N1fpc= Subject key identifier: 84:E6:99:DE:20:25:31:08:0D:03:3D:64:D5:E0:16:1C:01:68:A6:5B Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b Certificate serial: 019B503BF793C295CEAA726936FA929C0E76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 12:01:05 +0000 Manifest this update: Wed 24 Dec 2025 12:01:05 +0000 Manifest next update: Thu 25 Dec 2025 12:01:05 +0000 Files and hashes: 1: aAOgx1Ep0O9ts33PDFAvITsVd3A.roa (hash: ztOFWm+dTJZa1671YtrvwaHCfWHjo8X63L1Exz6NaMI=) 2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: gmhKVXcoXm9dTXoDxp9jCSUfxBtvTazIt5b0pdYRs6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3b:f7:93:c2:95:ce:aa:72:69:36:fa:92:9c:0e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b Validity Not Before: Dec 24 12:01:05 2025 GMT Not After : Dec 25 12:01:05 2025 GMT Subject: CN=84e699de202531080d033d64d5e0161c0168a65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:56:cc:5d:84:68:69:a0:e4:d8:2c:b7:e4: 1d:2f:e6:ae:13:a6:1c:7f:91:d2:b4:52:4b:d4:66: 68:67:f7:18:e7:79:c6:e4:41:fb:54:8d:da:70:88: 6d:8d:96:c5:a7:06:89:34:5d:5f:25:36:0d:a3:16: 6e:10:c7:7d:14:6f:19:f8:4e:1a:15:cc:a3:e0:3f: 2b:e3:ba:aa:7d:36:6c:f9:99:8e:69:57:07:d7:49: 44:2c:81:09:59:4c:12:b0:65:c4:9e:fe:c3:f9:b7: a0:36:c3:7a:7e:bc:9a:0d:b0:c6:f0:7d:56:66:d0: d2:6b:da:18:7e:7b:8c:f3:aa:60:e9:a9:6f:4c:d6: f8:41:ca:1f:fd:f3:39:d3:fc:b2:85:eb:f8:bc:86: 10:ca:9f:d9:bc:64:cb:a1:ad:fa:25:2f:63:74:c7: a5:2b:5f:37:58:e0:24:fd:c8:3c:77:86:3c:f9:9c: d9:f4:03:5a:91:b7:57:3f:dc:3e:dc:19:50:44:1e: ae:b8:0c:3d:a3:32:9a:00:97:8f:b9:67:8c:30:4f: f2:47:4e:f9:c7:70:54:98:10:09:ca:84:2e:cd:cb: e6:f7:7d:11:8e:ff:41:27:d0:da:f0:5e:27:a6:c0: 9f:fb:e2:5f:f1:2a:f0:be:e3:6e:af:7c:1d:69:35: d6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E6:99:DE:20:25:31:08:0D:03:3D:64:D5:E0:16:1C:01:68:A6:5B X509v3 Authority Key Identifier: keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:96:e3:9e:f6:7f:1d:12:6a:20:48:79:f5:55:06:e1:5e:b7: 60:a8:69:a1:85:b3:9a:54:e3:ea:d3:7c:22:18:ef:72:34:91: 6f:ed:f0:36:19:d8:49:d4:97:52:ae:94:63:98:4d:00:21:95: 3f:02:09:f1:2b:b2:c2:e4:d6:ea:b0:0b:46:6a:73:0b:bf:96: 68:56:72:66:19:48:36:21:a2:26:8e:fa:5e:ba:b8:d4:00:4e: 91:ca:b5:e5:26:b2:bb:15:36:3d:8b:7d:06:2f:1a:d7:1a:32: b0:2e:d8:6d:ab:0c:e5:34:2b:80:8e:61:80:ae:43:a2:47:0b: 63:03:fd:35:06:bd:fe:82:9d:0c:ff:d2:65:77:43:c6:e0:24: 97:75:70:06:5b:8e:40:ba:10:0b:b3:03:f9:3a:aa:8f:92:23: 7c:14:dc:80:19:00:11:bb:e6:84:65:5b:fc:b4:57:ef:94:40: 29:7b:86:e3:84:e7:c2:0d:35:5c:d4:ff:3e:b3:e2:78:29:83: 81:2c:8b:e9:ff:52:66:c8:6a:f8:1c:e8:6e:c1:45:4d:4b:b9: a9:18:da:ed:9e:f7:17:b8:b3:2b:dc:8d:2d:28:cc:17:cf:47: 95:a6:d5:6e:f4:68:0d:05:fd:05:d3:4b:04:0c:c9:e4:9c:47: fa:79:96:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQO/eTwpXOqnJpNvqSnA52MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNjU0NzFiOTRhMzI2MGMyZDlmNjU4ZGNlZDJmODdmNDBi NTQyNGIwHhcNMjUxMjI0MTIwMTA1WhcNMjUxMjI1MTIwMTA1WjAzMTEwLwYDVQQD Eyg4NGU2OTlkZTIwMjUzMTA4MGQwMzNkNjRkNWUwMTYxYzAxNjhhNjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMtWzF2EaGmg5Ngst+QdL+auE6Yc f5HStFJL1GZoZ/cY53nG5EH7VI3acIhtjZbFpwaJNF1fJTYNoxZuEMd9FG8Z+E4a Fcyj4D8r47qqfTZs+ZmOaVcH10lELIEJWUwSsGXEnv7D+begNsN6fryaDbDG8H1W ZtDSa9oYfnuM86pg6alvTNb4Qcof/fM50/yyhev4vIYQyp/ZvGTLoa36JS9jdMel K183WOAk/cg8d4Y8+ZzZ9ANakbdXP9w+3BlQRB6uuAw9ozKaAJePuWeMME/yR075 x3BUmBAJyoQuzcvm930Rjv9BJ9Da8F4npsCf++Jf8SrwvuNur3wdaTXWzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITmmd4gJTEIDQM9ZNXgFhwBaKZbMB8GA1UdIwQY MBaAFM5lRxuUoyYMLZ9ljc7S+H9AtUJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem1WSEc1U2pKZ3d0bjJXTnp0TDRmMEMxUWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iYTg3OTAtZWY0My00MGVhLWJlY2Yt YmIwZTBjYzI2YzQ5LzEvem1WSEc1U2pKZ3d0bjJXTnp0TDRmMEMxUWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9iYTg3OTAtZWY0My00MGVhLWJlY2YtYmIwZTBjYzI2YzQ5 LzEvem1WSEc1U2pKZ3d0bjJXTnp0TDRmMEMxUWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpbjnvZ/ HRJqIEh59VUG4V63YKhpoYWzmlTj6tN8IhjvcjSRb+3wNhnYSdSXUq6UY5hNACGV PwIJ8SuywuTW6rALRmpzC7+WaFZyZhlINiGiJo76Xrq41ABOkcq15SayuxU2PYt9 Bi8a1xoysC7YbasM5TQrgI5hgK5DokcLYwP9NQa9/oKdDP/SZXdDxuAkl3VwBluO QLoQC7MD+Tqqj5IjfBTcgBkAEbvmhGVb/LRX75RAKXuG44Tnwg01XNT/PrPieCmD gSyL6f9SZshq+BzobsFFTUu5qRja7Z73F7izK9yNLSjMF89HlabVbvRoDQX9BdNL BAzJ5JxH+nmWDw== -----END CERTIFICATE-----Generated at Wed Dec 24 15:11:09 2025 by rpki-client