This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json) Hash identifier: ooTt9sz4qAEEfZeqXRXGt05ZfEVKAfmKE9LmmevpGck= Subject key identifier: F0:72:24:9A:F4:FE:F2:11:0D:BC:C2:97:0F:EF:D5:B4:48:4A:90:42 Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8 Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8 Certificate serial: 019B5B657266E5FB08FAB9E7F98D588516B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft Manifest number: 17A3 Signing time: Fri 26 Dec 2025 16:02:13 +0000 Manifest this update: Fri 26 Dec 2025 16:02:13 +0000 Manifest next update: Sat 27 Dec 2025 16:02:13 +0000 Files and hashes: 1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=) 2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=) 3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=) 4: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=) 5: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: VKDKAGK1wVUmJlwgtCsY0m69Iec03jNx+I2QENp4ZGk=) 6: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=) 7: jHuaR39fBtfoSm7eKI-uPlXtnO0.roa (hash: tlJbuPplC7TVW63LZE8L9VXaV6yFo7hmKI0nyQHS7tc=) 8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:72:66:e5:fb:08:fa:b9:e7:f9:8d:58:85:16:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8 Validity Not Before: Dec 26 16:02:13 2025 GMT Not After : Dec 27 16:02:13 2025 GMT Subject: CN=f072249af4fef2110dbcc2970fefd5b4484a9042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a2:11:05:b4:c4:88:f7:0a:1a:a5:ef:b9:52: da:35:a3:8a:35:79:54:6b:40:5c:a0:8c:e7:f6:16: f8:f7:c8:c6:8d:fd:c7:ed:5e:63:d4:13:71:2f:bf: 61:1f:18:dc:33:c7:66:c4:f6:ee:42:8d:96:05:4d: 74:5a:68:4d:c8:e2:d3:e4:7d:19:c8:98:fe:0a:2b: 81:fc:0b:c4:6f:3d:f9:79:2b:d1:7a:24:61:69:64: bb:3a:af:33:c1:f8:71:f7:4f:fc:43:bc:12:de:21: bf:be:3e:ee:a4:9e:43:39:ff:77:5a:10:9a:43:8c: ca:24:a3:7e:90:69:eb:35:4e:e3:8c:79:1b:c0:fd: d4:59:0d:ac:14:e2:32:73:37:5b:24:94:0b:9f:3c: af:f1:d4:59:91:a8:4a:b0:dc:57:0c:65:d6:05:02: 52:8c:86:b0:c7:e5:76:3e:de:ad:92:08:80:0f:68: 11:f8:e8:01:6e:d3:ce:37:a5:d5:6d:d3:da:74:be: c1:84:84:3a:8b:ca:4a:fd:f3:4c:9d:93:40:f0:34: 78:fc:1e:73:87:b2:42:82:a3:f9:19:7b:b2:44:e2: db:b2:8d:6b:46:06:d4:52:fa:95:63:c0:7f:ec:70: c8:c8:ab:bb:73:3a:37:76:8f:77:2d:56:3a:18:f7: 64:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:72:24:9A:F4:FE:F2:11:0D:BC:C2:97:0F:EF:D5:B4:48:4A:90:42 X509v3 Authority Key Identifier: keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:79:02:53:97:41:df:bb:9c:6e:9c:59:14:3b:e3:8a:93:15: 93:0f:4b:74:3f:66:13:40:89:3a:b9:f6:aa:dc:a8:14:94:44: c8:72:e9:63:ba:b0:e1:fe:9c:be:18:28:65:0f:a5:82:ab:9d: 6f:ae:6c:a3:b8:93:e9:e7:91:32:5e:f1:cc:5a:a9:56:09:2e: b8:68:29:c7:22:d7:77:ad:64:9d:80:d9:e9:1b:4c:d6:e3:66: ef:d1:ac:61:08:43:1b:7d:84:cd:49:69:a2:b2:33:4d:95:c6: 9b:27:ad:80:3f:de:71:e7:e2:c7:e1:42:d7:bc:d7:ef:0d:b4: 0e:b9:91:40:6d:f9:b8:7f:fa:fe:4c:c3:77:96:b7:ab:1c:b9: f3:c1:83:32:09:e2:52:37:11:db:d5:6b:e8:5d:52:f6:a7:d8: 90:ea:07:4b:01:66:35:8b:60:e4:2e:26:64:35:28:65:68:87: 62:e2:eb:bf:43:41:71:83:8f:6e:ed:6f:a3:1b:35:e5:7e:de: d7:ec:ca:81:a1:79:a4:72:d9:46:96:04:9f:ab:e6:9f:0e:d1: bc:b0:21:06:81:a0:44:f4:8f:aa:48:80:31:66:a9:ae:48:73: 2e:28:cf:d8:36:3b:e1:c9:53:26:14:d3:47:41:b1:06:80:1b: 30:fb:10:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZXJm5fsI+rnn+Y1YhRayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1M2Y1NTYyOTEyMWI2MGZiMTljOTdmOTljNzVkZDZmMDE1 ZGQ2ZTgwHhcNMjUxMjI2MTYwMjEzWhcNMjUxMjI3MTYwMjEzWjAzMTEwLwYDVQQD EyhmMDcyMjQ5YWY0ZmVmMjExMGRiY2MyOTcwZmVmZDViNDQ4NGE5MDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6IRBbTEiPcKGqXvuVLaNaOKNXlU a0BcoIzn9hb498jGjf3H7V5j1BNxL79hHxjcM8dmxPbuQo2WBU10WmhNyOLT5H0Z yJj+CiuB/AvEbz35eSvReiRhaWS7Oq8zwfhx90/8Q7wS3iG/vj7upJ5DOf93WhCa Q4zKJKN+kGnrNU7jjHkbwP3UWQ2sFOIyczdbJJQLnzyv8dRZkahKsNxXDGXWBQJS jIawx+V2Pt6tkgiAD2gR+OgBbtPON6XVbdPadL7BhIQ6i8pK/fNMnZNA8DR4/B5z h7JCgqP5GXuyROLbso1rRgbUUvqVY8B/7HDIyKu7czo3do93LVY6GPdkaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPByJJr0/vIRDbzClw/v1bRISpBCMB8GA1UdIwQY MBaAFGU/VWKRIbYPsZyX+Zx13W8BXdboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQt MjkyNmQyODFiNTE0LzEvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQtMjkyNmQyODFiNTE0 LzEvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHkCU5dB 37ucbpxZFDvjipMVkw9LdD9mE0CJOrn2qtyoFJREyHLpY7qw4f6cvhgoZQ+lgqud b65so7iT6eeRMl7xzFqpVgkuuGgpxyLXd61knYDZ6RtM1uNm79GsYQhDG32EzUlp orIzTZXGmyetgD/ecefix+FC17zX7w20DrmRQG35uH/6/kzDd5a3qxy588GDMgni UjcR29Vr6F1S9qfYkOoHSwFmNYtg5C4mZDUoZWiHYuLrv0NBcYOPbu1voxs15X7e 1+zKgaF5pHLZRpYEn6vmnw7RvLAhBoGgRPSPqkiAMWaprkhzLijP2DY74clTJhTT R0GxBoAbMPsQZg== -----END CERTIFICATE-----Generated at Fri Dec 26 23:00:14 2025 by rpki-client