This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft File: Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft (raw, json) Hash identifier: 4SkasCD1BXw/hYWLx/bhsKv8UQZjW8vON0V0YLJEqa8= Subject key identifier: F4:FD:55:F8:1A:9B:71:67:BB:57:36:28:D6:FD:2C:E3:40:3C:A0:14 Authority key identifier: 66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF Certificate issuer: /CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef Certificate serial: 019B3AC6CF722C4AB5C8B4CCA5D68F4A6F68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft Manifest number: 16FB Signing time: Sat 20 Dec 2025 08:01:06 +0000 Manifest this update: Sat 20 Dec 2025 08:01:06 +0000 Manifest next update: Sun 21 Dec 2025 08:01:06 +0000 Files and hashes: 1: Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl (hash: zUrkEwy2cr6Tx2zX5KMaL2+5xjjCSEyCp+EUbQ/JS88=) 2: ozTEzJ9CezdFTub-OtUArZTGCUk.roa (hash: hY/JTd/yJ1qrW6X45LIcw6pONHk7vyqJi7EpOCN1u7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:cf:72:2c:4a:b5:c8:b4:cc:a5:d6:8f:4a:6f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef Validity Not Before: Dec 20 08:01:06 2025 GMT Not After : Dec 21 08:01:06 2025 GMT Subject: CN=f4fd55f81a9b7167bb573628d6fd2ce3403ca014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:30:f5:01:47:24:39:3d:be:f3:fc:2a:7f: 72:bf:e8:1f:36:71:4c:02:22:52:ae:2f:d6:e0:2f: ba:d1:09:79:4d:05:c4:6b:1b:20:7b:d2:df:19:f7: eb:c9:9f:a0:f7:b2:22:19:25:1b:b8:d4:7a:92:83: 20:ff:ce:b6:8b:f3:75:f6:6e:64:fa:c2:02:29:d8: f6:cb:0d:77:82:20:9e:37:a5:ef:24:18:07:c4:5d: 39:43:60:b9:b1:1a:e5:6f:45:f0:93:d9:15:2a:b1: 31:a6:c2:43:e6:82:c4:2d:23:87:54:11:d4:40:43: 34:f4:23:6a:27:57:e4:8c:b5:51:d1:34:4d:ec:d5: 8b:ef:93:7b:83:58:a9:e3:73:e3:e5:df:f0:0f:7a: 88:e6:9e:52:c3:35:5b:f9:39:e9:9b:57:30:4b:62: 6a:2d:be:39:88:ac:43:1c:f5:e7:37:ec:e7:4e:d7: f7:60:78:2f:c4:21:48:b3:3c:e7:b7:63:1c:c3:6a: 9a:11:e5:4c:ca:ed:bc:21:9f:2e:42:73:ef:26:6e: 58:b1:19:71:82:54:88:88:e6:d3:32:8a:c4:9b:2c: 79:3a:96:69:ce:c2:c7:ca:e8:a7:dc:36:43:bc:60: 57:24:db:d0:0f:c9:04:a0:74:00:59:8b:65:11:d3: 1d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FD:55:F8:1A:9B:71:67:BB:57:36:28:D6:FD:2C:E3:40:3C:A0:14 X509v3 Authority Key Identifier: keyid:66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c5:45:fd:4f:d9:13:eb:7c:ea:7d:6a:fd:af:0b:98:eb:7d: 7e:bc:79:6c:53:cc:1f:91:85:7f:ce:f4:d8:0a:25:bc:85:76: fa:1a:13:ef:4f:64:28:88:b4:83:b8:7a:00:cc:6a:e1:22:68: bf:d0:ce:72:f6:ed:85:49:d8:e3:a3:f1:de:c6:27:d9:b3:b5: 9e:5b:79:7b:54:0d:8d:05:60:17:9f:a1:c8:55:2c:54:05:4c: 6d:e2:ff:69:dd:9e:ec:bb:ff:12:01:6e:4e:93:eb:55:c1:98: dc:dc:58:77:77:0c:ff:a4:9f:58:0a:6a:9b:8e:41:cb:a9:d5: 09:91:6d:30:93:3e:aa:6e:c4:09:5c:70:71:36:57:e6:09:4e: 09:65:58:05:93:bc:d0:ec:ce:e4:56:fa:f5:1b:6b:e0:13:23: 8c:81:ae:12:cd:05:e2:a8:58:43:e8:52:e8:14:35:4d:18:78: 4c:13:7d:fa:4b:c7:e8:e1:6c:fa:0b:c1:16:79:1f:3a:f3:54: 48:5b:91:51:a8:98:72:8d:fc:81:5b:3a:68:03:aa:30:90:96: 5e:3a:72:75:3b:da:66:4e:eb:f4:b9:f0:8c:f9:e3:eb:5e:52: 2c:ea:e9:85:ad:f1:d5:b2:ce:4c:69:ec:91:3f:9d:e6:d4:6e: 98:0d:57:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xs9yLEq1yLTMpdaPSm9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NmQ5N2NlYjg0ZTljNjE2YmZlNmQ5MzU3NmNjMzNiYmY0 YjYzZWYwHhcNMjUxMjIwMDgwMTA2WhcNMjUxMjIxMDgwMTA2WjAzMTEwLwYDVQQD EyhmNGZkNTVmODFhOWI3MTY3YmI1NzM2MjhkNmZkMmNlMzQwM2NhMDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVgw9QFHJDk9vvP8Kn9yv+gfNnFM AiJSri/W4C+60Ql5TQXEaxsge9LfGffryZ+g97IiGSUbuNR6koMg/862i/N19m5k +sICKdj2yw13giCeN6XvJBgHxF05Q2C5sRrlb0Xwk9kVKrExpsJD5oLELSOHVBHU QEM09CNqJ1fkjLVR0TRN7NWL75N7g1ip43Pj5d/wD3qI5p5SwzVb+Tnpm1cwS2Jq Lb45iKxDHPXnN+znTtf3YHgvxCFIszznt2Mcw2qaEeVMyu28IZ8uQnPvJm5YsRlx glSIiObTMorEmyx5OpZpzsLHyuin3DZDvGBXJNvQD8kEoHQAWYtlEdMdDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT9Vfgam3Fnu1c2KNb9LONAPKAUMB8GA1UdIwQY MBaAFGZtl864Tpxha/5tk1dswzu/S2PvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm0yWHpyaE9uR0ZyX20yVFYyekRPNzlMWS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84MTIzNWItMmUwNC00NzFmLTg2ODkt NjliYWFmZGQ5YTZlLzEvWm0yWHpyaE9uR0ZyX20yVFYyekRPNzlMWS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84MTIzNWItMmUwNC00NzFmLTg2ODktNjliYWFmZGQ5YTZl LzEvWm0yWHpyaE9uR0ZyX20yVFYyekRPNzlMWS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMVF/U/Z E+t86n1q/a8LmOt9frx5bFPMH5GFf8702AolvIV2+hoT709kKIi0g7h6AMxq4SJo v9DOcvbthUnY46Px3sYn2bO1nlt5e1QNjQVgF5+hyFUsVAVMbeL/ad2e7Lv/EgFu TpPrVcGY3NxYd3cM/6SfWApqm45By6nVCZFtMJM+qm7ECVxwcTZX5glOCWVYBZO8 0OzO5Fb69Rtr4BMjjIGuEs0F4qhYQ+hS6BQ1TRh4TBN9+kvH6OFs+gvBFnkfOvNU SFuRUaiYco38gVs6aAOqMJCWXjpydTvaZk7r9LnwjPnj615SLOrpha3x1bLOTGns kT+d5tRumA1XOQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:00:47 2025 by rpki-client