This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json) Hash identifier: W8dnND/ZLVyVzFbZaYBnzHpB7g3Td09GNi3zI0xffNE= Subject key identifier: 29:06:7A:CF:2C:BA:8B:DD:F1:11:18:54:DF:70:86:EA:85:24:59:CF Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36 Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36 Certificate serial: 019B0F6EC28CE968E2BB900EA7BBE59DD154 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft Manifest number: 106D Signing time: Thu 11 Dec 2025 22:01:15 +0000 Manifest this update: Thu 11 Dec 2025 22:01:15 +0000 Manifest next update: Fri 12 Dec 2025 22:01:15 +0000 Files and hashes: 1: iFAQtylr3ZRvM5JOhViQDahNSl8.roa (hash: ziaVf39GfMHlG6F56FK5ey4SYxeBfLmJtFc4nGwT8Lo=) 2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: z4xwQ9JwvmUdt7UHLcwUMeH1hfn87boIbdvKhnz8u3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:c2:8c:e9:68:e2:bb:90:0e:a7:bb:e5:9d:d1:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36 Validity Not Before: Dec 11 22:01:15 2025 GMT Not After : Dec 12 22:01:15 2025 GMT Subject: CN=29067acf2cba8bddf1111854df7086ea852459cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:01:8b:67:ac:90:82:69:74:ef:16:6b:f3: 27:d3:b0:61:68:9a:b5:12:ad:58:f6:05:2e:37:0c: 66:ad:99:45:bc:0d:33:94:86:16:52:51:dd:9d:fc: 86:39:b4:c9:79:df:88:3c:a8:15:31:7e:f0:c7:3b: cb:05:0f:d3:28:c9:69:7c:11:35:78:8e:35:b5:31: 3d:e7:2d:f6:93:83:74:4f:59:8c:81:2c:66:9c:3e: ea:a4:97:4e:2b:32:6d:a4:70:6e:32:f0:9a:48:15: d9:e2:38:c3:77:7d:8e:8c:5b:b4:89:76:68:17:63: 8d:aa:88:3c:6b:d1:06:c5:25:66:5a:af:60:bb:3f: d3:c9:33:ba:40:61:42:fd:6e:4f:f2:bb:4e:10:17: db:23:7a:89:4d:f7:29:2a:be:a1:56:ca:0f:2b:67: 1c:0b:7c:89:9c:d8:94:bb:38:e7:f2:94:e5:ca:08: bf:a2:64:07:f6:cd:e5:0a:42:d4:4a:d6:cb:8f:2c: 6d:8e:ea:12:cd:87:5e:a9:9d:60:ea:9b:34:cf:cd: b6:95:13:1e:3c:b5:e0:bb:8c:12:91:f0:0b:50:95: 4a:4b:93:23:52:7b:9d:90:29:73:51:c3:97:34:cd: 1e:ba:19:ef:21:43:9f:3a:f9:4e:09:65:92:b3:93: 99:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:06:7A:CF:2C:BA:8B:DD:F1:11:18:54:DF:70:86:EA:85:24:59:CF X509v3 Authority Key Identifier: keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:09:04:ca:6e:59:36:15:52:bd:d5:30:31:99:9e:39:ac:d5: 25:b2:fd:82:d8:e2:6c:3d:5d:06:f8:24:15:61:3f:d5:d0:7f: d1:08:69:e6:d9:c2:3b:c1:3d:0e:59:69:81:eb:4c:89:f4:58: 93:23:7f:ce:08:58:9d:d7:d9:8a:90:1a:64:22:af:79:8a:18: a0:c5:a8:f0:bf:b5:85:60:aa:83:01:7a:41:47:e4:ec:e3:f4: ce:d0:01:4d:b5:86:20:e0:a2:c6:86:8b:dd:9b:41:f9:ee:64: 1e:05:fd:13:b5:08:76:95:86:66:da:03:08:38:17:52:61:8b: fe:89:29:5b:93:e1:7b:bf:d7:da:aa:e9:a8:d2:74:9c:4d:d4: c5:c0:47:13:72:45:f4:fe:f9:1c:27:4e:38:6c:63:28:81:ea: 0a:b6:26:5e:65:33:1d:f5:71:0b:ff:c6:95:8f:d0:28:f5:6b: 4a:7b:96:71:f5:3a:d4:11:11:ec:af:68:9b:e0:c1:2d:23:83: 05:a2:b7:88:c2:d2:ae:00:2d:c3:5f:61:6d:b4:af:12:b2:12: a5:d2:79:a4:59:2b:34:38:68:32:e7:dc:9c:31:06:a8:45:b8: 86:c6:a7:95:0d:5f:f2:c4:12:cf:d5:fd:05:87:a4:07:6e:30: 14:54:b8:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbsKM6Wjiu5AOp7vlndFUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNmUxYTIyMDhmYTNmMWI5ZjNkMzhmZmYxZjhlMmMzNGQ5 MTFmMzYwHhcNMjUxMjExMjIwMTE1WhcNMjUxMjEyMjIwMTE1WjAzMTEwLwYDVQQD EygyOTA2N2FjZjJjYmE4YmRkZjExMTE4NTRkZjcwODZlYTg1MjQ1OWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7kBi2eskIJpdO8Wa/Mn07BhaJq1 Eq1Y9gUuNwxmrZlFvA0zlIYWUlHdnfyGObTJed+IPKgVMX7wxzvLBQ/TKMlpfBE1 eI41tTE95y32k4N0T1mMgSxmnD7qpJdOKzJtpHBuMvCaSBXZ4jjDd32OjFu0iXZo F2ONqog8a9EGxSVmWq9guz/TyTO6QGFC/W5P8rtOEBfbI3qJTfcpKr6hVsoPK2cc C3yJnNiUuzjn8pTlygi/omQH9s3lCkLUStbLjyxtjuoSzYdeqZ1g6ps0z822lRMe PLXgu4wSkfALUJVKS5MjUnudkClzUcOXNM0euhnvIUOfOvlOCWWSs5OZQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkGes8suovd8REYVN9whuqFJFnPMB8GA1UdIwQY MBaAFM5uGiII+j8bnz04//H44sNNkR82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2Mt OWZlZjAxMTRhMmU1LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2MtOWZlZjAxMTRhMmU1 LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQkEym5Z NhVSvdUwMZmeOazVJbL9gtjibD1dBvgkFWE/1dB/0Qhp5tnCO8E9DllpgetMifRY kyN/zghYndfZipAaZCKveYoYoMWo8L+1hWCqgwF6QUfk7OP0ztABTbWGIOCixoaL 3ZtB+e5kHgX9E7UIdpWGZtoDCDgXUmGL/okpW5Phe7/X2qrpqNJ0nE3UxcBHE3JF 9P75HCdOOGxjKIHqCrYmXmUzHfVxC//GlY/QKPVrSnuWcfU61BER7K9om+DBLSOD BaK3iMLSrgAtw19hbbSvErISpdJ5pFkrNDhoMufcnDEGqEW4hsanlQ1f8sQSz9X9 BYekB24wFFS4FA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:32:14 2025 by rpki-client