This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json) Hash identifier: ukkh4XRMuLwFhmG9Q/GTsP2abAxRWpm9zTsdfYY6X/w= Subject key identifier: DA:4F:58:0E:BF:49:01:15:43:64:5D:DD:3D:38:11:F0:C0:ED:4E:60 Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb Certificate serial: 019B19BBF80EA3C0ACEDA74CCC2EA54ACC21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 22:01:47 +0000 Manifest this update: Sat 13 Dec 2025 22:01:47 +0000 Manifest next update: Sun 14 Dec 2025 22:01:47 +0000 Files and hashes: 1: XmInGKZQVpi4yiOnRct1YYYqWiE.roa (hash: R86EgdaEJJTkg9AcxCYcJUrFnlotYJxO2Dz2JbHzD6o=) 2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: LaoctSLi0J/UbZxVpLr5Dd2SLb2l25f1Iku6Kn7hE98=) 3: quUKUBb4zZe6-7AC8l87cCVH0H0.roa (hash: GrPFGNPKw3mudZK+q8bDj+RCkl+C4u9ag/IOaEBEaJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:f8:0e:a3:c0:ac:ed:a7:4c:cc:2e:a5:4a:cc:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb Validity Not Before: Dec 13 22:01:47 2025 GMT Not After : Dec 14 22:01:47 2025 GMT Subject: CN=da4f580ebf49011543645ddd3d3811f0c0ed4e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ca:d2:af:2b:ac:1c:4b:58:b3:6f:4b:87:8b: 94:84:ff:50:46:c4:72:e1:9e:42:48:fc:1a:50:57: d1:b2:cc:56:35:6f:49:2b:42:aa:37:51:7e:5f:3b: 4b:8d:9d:cf:36:ab:8a:8e:b6:12:17:64:db:95:7a: 9c:b9:d7:0e:48:2c:40:99:9f:7c:4c:d1:69:e3:72: 53:86:14:b1:00:b5:05:c8:54:e4:31:2e:23:0c:79: 67:6f:9d:53:e1:aa:fc:b6:70:5b:68:b8:b8:f2:62: 4d:4e:18:70:24:98:dd:de:f5:60:c6:1e:7e:4e:48: 3b:63:c5:94:a3:50:76:7e:62:be:c9:34:79:c0:3d: 1a:0d:9e:74:23:da:0f:bb:81:0d:0d:a7:36:9f:1c: e9:4e:ff:2c:10:d2:3b:38:d7:4c:b2:74:8f:2d:b3: 89:a0:ef:fe:44:8d:05:16:68:03:27:c7:9c:b2:bc: da:1f:8a:aa:98:d7:1c:0c:03:b0:9e:75:32:0b:35: 42:1a:aa:28:c5:f6:68:60:4a:15:d9:d5:53:ad:c3: 1f:1a:07:a8:49:5a:0a:5c:57:40:95:9d:cf:34:35: 50:5a:43:c1:ac:4d:e5:09:27:ed:0e:f7:16:a8:a1: d6:b6:60:6d:8c:89:ed:a7:ae:c4:0e:1a:fc:a9:b6: 6e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4F:58:0E:BF:49:01:15:43:64:5D:DD:3D:38:11:F0:C0:ED:4E:60 X509v3 Authority Key Identifier: keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:3d:24:f3:59:48:7d:66:4d:7e:9b:2e:47:1f:d7:c1:8a:51: ed:92:03:7a:04:5b:f1:45:aa:e3:64:5f:f9:b5:1d:4a:64:10: 73:89:d1:2d:7c:f5:8f:3f:a3:e3:b0:79:61:f0:cb:ab:55:4a: 0f:f1:e7:29:26:0b:0b:41:1a:ef:7c:ec:12:47:de:cf:d5:e1: b1:0a:31:4f:8f:8a:3f:0c:c6:18:e5:04:1c:4e:a0:6f:cd:de: 05:45:bf:f0:99:46:62:81:0c:67:cb:d1:42:c0:53:56:6d:8e: 24:b6:61:8f:1b:1e:60:45:5d:ab:a4:f4:e2:c7:17:4f:4d:fc: 08:73:3c:93:a8:0e:17:6c:64:c8:b6:7d:a1:6e:ed:d0:fd:2c: 86:31:51:be:10:2d:5d:2b:a1:73:fa:27:4e:c8:34:e2:4d:6d: 05:b3:33:ca:dc:a8:78:1f:dc:f0:1a:91:21:db:2e:94:ee:73: ac:fa:38:16:63:0b:ce:df:77:65:c9:82:7b:07:0b:22:f0:9d: 42:48:49:d9:d8:b8:06:23:1b:ca:b7:cf:2f:10:3f:c0:6c:a9: c6:2f:f0:28:e9:15:e9:2a:9d:b1:7b:3f:20:ef:d6:08:73:e9: 56:2a:29:3b:ab:2b:97:2d:8c:98:48:e3:41:76:8e:68:d0:1d: 7b:96:d1:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu/gOo8Cs7adMzC6lSswhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWYzMWFkYWM2NjM4NTViM2RkZDE5MzFjNDRjZjgwNjRk NmE2ZWIwHhcNMjUxMjEzMjIwMTQ3WhcNMjUxMjE0MjIwMTQ3WjAzMTEwLwYDVQQD EyhkYTRmNTgwZWJmNDkwMTE1NDM2NDVkZGQzZDM4MTFmMGMwZWQ0ZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcrSryusHEtYs29Lh4uUhP9QRsRy 4Z5CSPwaUFfRssxWNW9JK0KqN1F+XztLjZ3PNquKjrYSF2TblXqcudcOSCxAmZ98 TNFp43JThhSxALUFyFTkMS4jDHlnb51T4ar8tnBbaLi48mJNThhwJJjd3vVgxh5+ Tkg7Y8WUo1B2fmK+yTR5wD0aDZ50I9oPu4ENDac2nxzpTv8sENI7ONdMsnSPLbOJ oO/+RI0FFmgDJ8ecsrzaH4qqmNccDAOwnnUyCzVCGqooxfZoYEoV2dVTrcMfGgeo SVoKXFdAlZ3PNDVQWkPBrE3lCSftDvcWqKHWtmBtjIntp67EDhr8qbZuTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpPWA6/SQEVQ2Rd3T04EfDA7U5gMB8GA1UdIwQY MBaAFGbvMa2sZjhVs93RkxxEz4Bk1qbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUt ZGIwZGNjMDhmNDUyLzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUtZGIwZGNjMDhmNDUy LzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdj0k81lI fWZNfpsuRx/XwYpR7ZIDegRb8UWq42Rf+bUdSmQQc4nRLXz1jz+j47B5YfDLq1VK D/HnKSYLC0Ea73zsEkfez9XhsQoxT4+KPwzGGOUEHE6gb83eBUW/8JlGYoEMZ8vR QsBTVm2OJLZhjxseYEVdq6T04scXT038CHM8k6gOF2xkyLZ9oW7t0P0shjFRvhAt XSuhc/onTsg04k1tBbMzytyoeB/c8BqRIdsulO5zrPo4FmMLzt93ZcmCewcLIvCd QkhJ2di4BiMbyrfPLxA/wGypxi/wKOkV6SqdsXs/IO/WCHPpViopO6srly2MmEjj QXaOaNAde5bRKA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:45:54 2025 by rpki-client