This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json) Hash identifier: mXqJLwhw+Bj+cAFCIS7sc/VVlZ/uKBI1aqZKd2D1d80= Subject key identifier: 6D:FB:8D:91:B0:77:8B:C7:65:AA:DF:7F:9A:40:59:BA:5F:29:4C:7B Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Certificate serial: 019B27AE0287ED1539F014B6B02E87BCAAD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft Manifest number: 117F Signing time: Tue 16 Dec 2025 15:01:13 +0000 Manifest this update: Tue 16 Dec 2025 15:01:13 +0000 Manifest next update: Wed 17 Dec 2025 15:01:13 +0000 Files and hashes: 1: 2YkU-KlvlcIh_M7FIIm73x5dHfA.roa (hash: SdTWFWGh+2RmhNZYbN14E4xNqRJjMV5KacVktQgyXJs=) 2: KyqWoLebligEUftYhU_Bgu-0Lts.roa (hash: VENXedlneKxldlXl7e/RQWS7U/FplQnliLqOvQVsbvA=) 3: YhHxsxNH4RP_FfePdq8SlQdgZyg.roa (hash: K3fGfKE/dBh+cdQFHO8biNnAdH/Glpbr/rysigKy5PI=) 4: jFc_wlQoiHbPyXbisyroWRENeu0.roa (hash: ITqThjHQNWEDIzaupfeF4coOz5rZPmtce8EoNUCuRBY=) 5: lCJmZzkmjXSr7FEoBdA3ylq1U04.roa (hash: STzWF0AEDLQ8FI+DmmWhhzxn4hvpubeIokmYgyoJVoQ=) 6: ubyCwlbzRZL2KOZ8mPfUrz1r_jE.roa (hash: N6l9QQBfT9lRXE69A3z5oJoeQofQ/m4QO9akh+rSPFY=) 7: zVdth24X5nqjsfHBDas52yk14is.crl (hash: 9PZwJZAPqzYdlaa/hCdcoTbBAJV+zTRliAjbNTE1xVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:02:87:ed:15:39:f0:14:b6:b0:2e:87:bc:aa:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Validity Not Before: Dec 16 15:01:13 2025 GMT Not After : Dec 17 15:01:13 2025 GMT Subject: CN=6dfb8d91b0778bc765aadf7f9a4059ba5f294c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:fa:83:96:21:56:ae:34:54:7d:17:77:30: 20:f8:12:57:50:98:f6:f7:15:50:fc:73:83:44:a0: 4a:57:73:0c:b9:5f:68:84:cd:d8:97:22:38:e1:38: 51:6f:5a:5b:d0:56:f4:8f:1f:3f:b7:fd:25:f9:52: 83:07:70:9e:db:eb:ed:41:1e:d6:5e:5d:fc:72:e1: 1c:ed:b8:7d:2a:bc:e4:f6:ac:43:03:8f:62:cc:d0: b0:9d:14:0a:8e:31:39:db:35:a9:93:ee:03:3c:e4: 2b:e1:b6:db:2a:e6:63:e7:b7:50:e5:80:1b:e8:0e: 70:aa:53:8c:92:21:93:b6:ee:bc:ed:68:39:5e:01: 33:b1:89:44:05:39:b1:70:dd:93:01:5a:b0:5e:9b: 35:33:e2:02:34:3e:db:c4:45:cc:d3:db:46:40:fe: af:80:d6:c5:61:ab:59:a2:17:29:90:48:d0:ff:95: d6:07:34:1c:f9:35:2d:1e:67:f2:44:a1:3d:f0:a6: 57:c2:a5:36:62:3b:44:b9:26:a4:74:81:d0:7b:71: 43:2c:e0:87:ff:0b:bd:4d:8b:5d:b8:af:3e:0a:fb: f0:b9:15:cb:f2:6e:86:0c:38:2d:ae:d5:91:fe:fd: 30:86:fc:ec:cb:24:4b:4e:b5:4e:7a:39:21:82:e1: 41:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FB:8D:91:B0:77:8B:C7:65:AA:DF:7F:9A:40:59:BA:5F:29:4C:7B X509v3 Authority Key Identifier: keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ae:3a:a3:1c:00:61:a6:35:d3:7d:12:46:52:f5:57:e6:0f: 73:1d:92:c2:d3:a3:a5:89:82:96:ed:b4:31:48:cb:a9:95:22: f6:f4:3b:08:47:98:17:fd:bf:1d:ca:13:23:a7:1a:3f:62:a7: 08:63:9e:ae:b3:5c:97:fb:17:a2:ef:84:d6:43:e7:c9:c9:86: ca:20:83:da:15:0c:e7:7b:27:fc:95:69:41:74:24:48:03:71: 48:3f:94:96:b7:b5:19:97:da:29:ba:71:31:7f:d7:55:a5:b7: cd:e6:6b:eb:07:6e:53:1f:b1:0d:42:1e:5e:33:13:e6:08:ef: ec:3e:63:54:c7:8f:76:1d:52:7a:f5:b2:13:60:7b:ba:65:78: 13:58:d9:a0:2e:4d:a8:cc:a7:11:b5:a1:2a:16:56:01:89:bd: 08:3f:6c:a3:02:38:82:c4:e2:5b:d6:e5:04:a6:f5:48:65:08: dd:14:d7:42:3d:c9:a0:7e:2c:66:d3:7b:ef:ea:3f:61:0b:01: e9:d0:67:65:47:68:98:40:0a:c2:30:3c:61:e8:bf:1b:a6:cf: 07:7c:65:45:f0:c5:e9:4c:63:20:bc:f2:3c:04:09:3a:3d:75: 5d:9c:5d:15:d6:c9:97:b4:1f:7c:f6:35:25:a1:6b:b4:40:2d: d3:19:4e:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrgKH7RU58BS2sC6HvKrUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNTc2ZDg3NmUxN2U2N2FhM2IxZjFjMTBkYWIzOWRiMjkz NWUyMmIwHhcNMjUxMjE2MTUwMTEzWhcNMjUxMjE3MTUwMTEzWjAzMTEwLwYDVQQD Eyg2ZGZiOGQ5MWIwNzc4YmM3NjVhYWRmN2Y5YTQwNTliYTVmMjk0YzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0T6g5YhVq40VH0XdzAg+BJXUJj2 9xVQ/HODRKBKV3MMuV9ohM3YlyI44ThRb1pb0Fb0jx8/t/0l+VKDB3Ce2+vtQR7W Xl38cuEc7bh9Krzk9qxDA49izNCwnRQKjjE52zWpk+4DPOQr4bbbKuZj57dQ5YAb 6A5wqlOMkiGTtu687Wg5XgEzsYlEBTmxcN2TAVqwXps1M+ICND7bxEXM09tGQP6v gNbFYatZohcpkEjQ/5XWBzQc+TUtHmfyRKE98KZXwqU2YjtEuSakdIHQe3FDLOCH /wu9TYtduK8+CvvwuRXL8m6GDDgtrtWR/v0whvzsyyRLTrVOejkhguFB+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG37jZGwd4vHZarff5pAWbpfKUx7MB8GA1UdIwQY MBaAFM1XbYduF+Z6o7HxwQ2rOdspNeIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMt MWE4MGEyZjdkN2VhLzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMtMWE4MGEyZjdkN2Vh LzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL646oxwA YaY1030SRlL1V+YPcx2SwtOjpYmClu20MUjLqZUi9vQ7CEeYF/2/HcoTI6caP2Kn CGOerrNcl/sXou+E1kPnycmGyiCD2hUM53sn/JVpQXQkSANxSD+Ulre1GZfaKbpx MX/XVaW3zeZr6wduUx+xDUIeXjMT5gjv7D5jVMePdh1SevWyE2B7umV4E1jZoC5N qMynEbWhKhZWAYm9CD9sowI4gsTiW9blBKb1SGUI3RTXQj3JoH4sZtN77+o/YQsB 6dBnZUdomEAKwjA8Yei/G6bPB3xlRfDF6UxjILzyPAQJOj11XZxdFdbJl7QffPY1 JaFrtEAt0xlO3Q== -----END CERTIFICATE-----Generated at Tue Dec 16 20:03:58 2025 by rpki-client