This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft File: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft (raw, json) Hash identifier: 0PcO2rKJUI8P6Ro57nFZa6UOcAqsD6skzLdqPh6n3tg= Subject key identifier: 4D:21:C3:7B:CA:E4:1F:05:18:CC:67:F9:64:0A:3F:BF:00:E4:2A:7D Authority key identifier: 65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D Certificate issuer: /CN=65cd7803f41fe499e800664e0aacadee19b66d9d Certificate serial: 019B32D75A96E1E13E578B5B273838E7932E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 19:02:12 +0000 Manifest this update: Thu 18 Dec 2025 19:02:12 +0000 Manifest next update: Fri 19 Dec 2025 19:02:12 +0000 Files and hashes: 1: OYSQ0B4bWIaFBDGeUbIro8GjNIM.roa (hash: ArDmycoBPumVopAcq7qMWyEpeGKW74OE/HKNZi11EfI=) 2: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl (hash: 94gwox7RIx0051e9JJ1q4ATuZlcbT/zOmD4HcwODx/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:5a:96:e1:e1:3e:57:8b:5b:27:38:38:e7:93:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65cd7803f41fe499e800664e0aacadee19b66d9d Validity Not Before: Dec 18 19:02:12 2025 GMT Not After : Dec 19 19:02:12 2025 GMT Subject: CN=4d21c37bcae41f0518cc67f9640a3fbf00e42a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:a2:c7:b7:f4:d6:c0:f3:ec:2c:ba:20:15: c4:b1:1c:81:2d:35:0d:53:ce:1d:b0:d3:17:dc:f3: 49:e2:85:53:aa:ab:21:ff:2a:ca:1a:3c:84:34:44: cf:b2:6e:2e:db:9d:75:0c:0f:db:28:3c:58:80:2a: bc:ba:86:f4:08:a5:7f:70:82:b4:16:d2:63:75:fd: 90:fe:32:1c:c4:dc:a1:fb:ee:fd:f7:9f:ac:25:4e: df:3d:a7:f5:75:9f:58:65:a4:12:f5:10:16:f9:03: 4b:38:b4:73:ff:26:24:58:10:a4:74:b0:e5:4a:af: 49:73:0b:f5:f3:ba:f0:31:cb:76:56:5d:01:10:e2: 54:60:ee:18:00:1a:bf:44:b7:e3:77:ae:46:d0:8e: 8e:63:2e:d0:e1:b6:45:ca:00:cd:85:c5:d6:91:8e: 4d:4a:6a:7c:4b:dc:21:c0:ea:95:2c:88:00:91:78: 49:8a:c5:2f:6e:45:04:3c:1d:72:fc:aa:c7:51:b2: 4a:3d:79:a8:5a:3e:d7:55:5b:0e:67:e7:04:28:98: 29:3e:77:c6:91:7e:12:f6:28:ac:d2:b1:63:7b:58: 76:bd:a3:23:90:e8:2b:a4:c3:e3:3c:d6:17:c7:ba: 04:24:14:ed:6b:77:ca:65:7e:21:46:83:eb:cc:86: ae:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:21:C3:7B:CA:E4:1F:05:18:CC:67:F9:64:0A:3F:BF:00:E4:2A:7D X509v3 Authority Key Identifier: keyid:65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:e3:bc:5d:50:c6:9f:a4:02:02:8c:d4:ef:2f:d9:25:a1:4f: d4:34:88:0d:28:83:1a:47:2c:44:5c:b5:25:b2:3c:48:89:a0: 43:83:dd:be:ca:fb:78:c4:a1:77:d0:43:3f:c9:11:db:ed:56: dc:8d:f2:18:b1:7d:55:81:4a:55:58:80:ca:ac:09:08:49:5a: 98:c9:23:e0:70:e0:33:9f:32:b7:9b:33:c8:02:f9:2d:c7:ba: 3d:4e:46:17:45:02:16:bc:27:63:67:67:c2:cb:86:10:fd:36: b1:15:4d:0e:a8:57:c6:9b:c7:eb:34:0f:da:d7:f1:40:8b:51: b9:f3:2e:d8:ba:e5:53:3c:3f:a3:78:8b:c7:5d:dd:15:0c:bf: bc:58:a0:66:5e:e7:68:95:fc:7a:d8:f5:43:53:21:c5:34:40: 06:51:00:0a:9a:72:15:fc:ac:ac:74:ff:41:3d:7d:9c:a9:e8: e8:80:f4:41:30:51:9c:f0:ed:43:db:fd:19:4b:96:6e:f4:98: 43:8b:fc:c1:47:04:b9:02:70:08:1f:22:a7:28:27:b9:41:97: 19:c2:40:59:58:57:2b:36:eb:96:7e:00:6f:4e:3f:00:dc:f1: 98:8a:71:ea:57:a2:42:80:59:76:51:5e:22:73:0c:48:7e:d8: 0a:45:4f:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy11qW4eE+V4tbJzg455MuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1Y2Q3ODAzZjQxZmU0OTllODAwNjY0ZTBhYWNhZGVlMTli NjZkOWQwHhcNMjUxMjE4MTkwMjEyWhcNMjUxMjE5MTkwMjEyWjAzMTEwLwYDVQQD Eyg0ZDIxYzM3YmNhZTQxZjA1MThjYzY3Zjk2NDBhM2ZiZjAwZTQyYTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTaix7f01sDz7Cy6IBXEsRyBLTUN U84dsNMX3PNJ4oVTqqsh/yrKGjyENETPsm4u2511DA/bKDxYgCq8uob0CKV/cIK0 FtJjdf2Q/jIcxNyh++7995+sJU7fPaf1dZ9YZaQS9RAW+QNLOLRz/yYkWBCkdLDl Sq9Jcwv187rwMct2Vl0BEOJUYO4YABq/RLfjd65G0I6OYy7Q4bZFygDNhcXWkY5N Smp8S9whwOqVLIgAkXhJisUvbkUEPB1y/KrHUbJKPXmoWj7XVVsOZ+cEKJgpPnfG kX4S9iis0rFje1h2vaMjkOgrpMPjPNYXx7oEJBTta3fKZX4hRoPrzIauFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0hw3vK5B8FGMxn+WQKP78A5Cp9MB8GA1UdIwQY MBaAFGXNeAP0H+SZ6ABmTgqsre4Ztm2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lNjZmMDEtMWQ5ZC00NTEzLTk1NmEt Zjk2YmZiMDRlNjQ1LzEvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9lNjZmMDEtMWQ5ZC00NTEzLTk1NmEtZjk2YmZiMDRlNjQ1 LzEvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+O8XVDG n6QCAozU7y/ZJaFP1DSIDSiDGkcsRFy1JbI8SImgQ4Pdvsr7eMShd9BDP8kR2+1W 3I3yGLF9VYFKVViAyqwJCElamMkj4HDgM58yt5szyAL5Lce6PU5GF0UCFrwnY2dn wsuGEP02sRVNDqhXxpvH6zQP2tfxQItRufMu2LrlUzw/o3iLx13dFQy/vFigZl7n aJX8etj1Q1MhxTRABlEACppyFfysrHT/QT19nKno6ID0QTBRnPDtQ9v9GUuWbvSY Q4v8wUcEuQJwCB8ipygnuUGXGcJAWVhXKzbrln4Ab04/ANzxmIpx6leiQoBZdlFe InMMSH7YCkVPtg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:29:07 2025 by rpki-client