This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: F2oPVZxCw6+QWw4BhWeRm7H1YYDKfPBdiSndkQJ24Nk= Subject key identifier: C2:35:03:35:E0:2D:3A:A4:18:95:32:18:29:7E:CD:56:A3:C2:B1:A5 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019B19BBA744ACA06FC0B9BFB6579E126D64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1784 Signing time: Sat 13 Dec 2025 22:01:26 +0000 Manifest this update: Sat 13 Dec 2025 22:01:26 +0000 Manifest next update: Sun 14 Dec 2025 22:01:26 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 4: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 5: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 6: SsXP67G5VXfNXRkOT8g60pbIt_E.roa (hash: AcS0tD1MMlzOq3CnSuSLecyLwb7WNgT+D5qJ5MY2JsE=) 7: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 8: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: 6MDxqaj/JHzUglrNPZt8o8/FkeXB0zWxjAsuFZbhwkk=) 9: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 10: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 11: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 12: ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa (hash: EumygL53WWGsQCEg1Lem1grWf0oIkvDK9ERz5W1pGI8=) 13: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 14: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:a7:44:ac:a0:6f:c0:b9:bf:b6:57:9e:12:6d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Dec 13 22:01:26 2025 GMT Not After : Dec 14 22:01:26 2025 GMT Subject: CN=c2350335e02d3aa418953218297ecd56a3c2b1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:22:81:d3:08:f7:9a:e3:97:72:48:6a:18:00: d5:e0:eb:54:f6:6f:cb:1f:0a:b5:97:30:df:ac:07: cc:e1:fd:51:f2:d1:d8:e3:f6:2d:92:cd:01:a3:be: 4a:bb:0f:e7:c3:3e:0c:63:e2:12:11:6a:da:f2:9b: 48:30:37:67:2f:2a:16:23:3d:77:cb:46:27:0b:be: 37:90:df:a8:e6:ed:f2:b8:40:2a:4e:4a:4b:85:02: ec:7f:e9:eb:8d:0d:b2:9f:e5:2b:26:66:2f:1a:04: 96:32:ee:70:76:61:03:03:a5:35:e7:8b:97:1d:49: fd:c5:a0:fb:ea:8a:54:dd:7d:f3:17:ec:9f:8b:15: 2f:a2:71:6d:f3:f9:7e:ab:5b:ed:43:e9:b7:09:3f: 84:05:b2:0f:1f:c8:28:3d:ea:6f:40:b1:39:85:82: da:57:f8:3d:02:07:25:d7:e8:c7:49:df:53:97:a2: f4:e5:d0:25:58:f3:73:4b:c9:18:11:1c:6a:67:2b: f9:ae:4f:4d:5e:1a:98:66:20:2e:93:32:2b:f6:f5: 82:19:43:6f:37:a9:87:cb:6d:b3:82:49:a4:09:03: 7c:e7:82:c6:40:3b:1c:5a:63:7a:65:9d:02:6f:e1: 72:2a:db:8a:da:d0:f1:e8:9d:4b:78:14:df:e3:2f: 58:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:35:03:35:E0:2D:3A:A4:18:95:32:18:29:7E:CD:56:A3:C2:B1:A5 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:83:19:9c:b4:4a:3e:92:57:f0:e0:ae:2b:e2:37:6c:9b:55: 7c:3e:93:5c:3c:4d:c5:8a:b8:09:93:3b:cd:7e:f2:52:16:9a: 76:06:14:d1:6e:74:db:a4:47:73:cf:6e:7f:c9:0c:46:c3:ed: 99:72:37:e3:0c:ce:32:81:74:67:de:17:a5:f5:9d:79:1b:a0: 45:70:16:85:18:25:3e:d4:43:81:3d:cf:35:18:00:da:cd:2c: d5:34:31:35:bc:c6:9c:6c:c3:ea:c5:0a:c7:1e:61:96:20:de: a8:1b:12:cb:e6:32:51:42:2a:75:d5:b4:f2:90:f9:61:f7:ee: e1:6e:eb:19:37:82:48:d9:08:79:7d:32:4a:79:0a:5f:66:02: a5:3b:5b:96:0e:7f:f5:2c:a3:a1:06:0b:59:e0:3a:d2:90:ef: b9:8f:22:47:66:8b:22:ab:c5:b0:b2:9c:ea:96:fd:fc:91:1c: 64:7b:63:1a:20:f4:ce:3a:3b:b7:68:19:dd:17:d6:87:75:16: a5:c3:06:f6:1e:90:62:d0:b2:9e:12:25:c3:49:12:69:12:e9: 85:85:24:b9:e3:67:eb:3c:ce:7f:ab:cd:ea:c1:58:24:53:c2: 2d:70:4b:e9:60:19:0f:2f:d8:aa:96:35:cf:79:f3:f1:a4:9b: 24:36:bd:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu6dErKBvwLm/tleeEm1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUxMjEzMjIwMTI2WhcNMjUxMjE0MjIwMTI2WjAzMTEwLwYDVQQD EyhjMjM1MDMzNWUwMmQzYWE0MTg5NTMyMTgyOTdlY2Q1NmEzYzJiMWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SKB0wj3muOXckhqGADV4OtU9m/L Hwq1lzDfrAfM4f1R8tHY4/Ytks0Bo75Kuw/nwz4MY+ISEWra8ptIMDdnLyoWIz13 y0YnC743kN+o5u3yuEAqTkpLhQLsf+nrjQ2yn+UrJmYvGgSWMu5wdmEDA6U154uX HUn9xaD76opU3X3zF+yfixUvonFt8/l+q1vtQ+m3CT+EBbIPH8goPepvQLE5hYLa V/g9Agcl1+jHSd9Tl6L05dAlWPNzS8kYERxqZyv5rk9NXhqYZiAukzIr9vWCGUNv N6mHy22zgkmkCQN854LGQDscWmN6ZZ0Cb+FyKtuK2tDx6J1LeBTf4y9YSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMI1AzXgLTqkGJUyGCl+zVajwrGlMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYMZnLRK PpJX8OCuK+I3bJtVfD6TXDxNxYq4CZM7zX7yUhaadgYU0W5026RHc89uf8kMRsPt mXI34wzOMoF0Z94XpfWdeRugRXAWhRglPtRDgT3PNRgA2s0s1TQxNbzGnGzD6sUK xx5hliDeqBsSy+YyUUIqddW08pD5Yffu4W7rGTeCSNkIeX0ySnkKX2YCpTtblg5/ 9SyjoQYLWeA60pDvuY8iR2aLIqvFsLKc6pb9/JEcZHtjGiD0zjo7t2gZ3RfWh3UW pcMG9h6QYtCynhIlw0kSaRLphYUkueNn6zzOf6vN6sFYJFPCLXBL6WAZDy/YqpY1 z3nz8aSbJDa9Wg== -----END CERTIFICATE-----Generated at Sun Dec 14 06:26:32 2025 by rpki-client