This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: 4wQ9RmULmMd+ZPlc4xYazkGNzrDZyUCJHxOPA8SicXo= Subject key identifier: C2:40:D8:58:21:E8:A2:6E:54:83:B7:40:B1:D5:EB:82:43:B0:C5:A7 Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019B5A1A6E65773EAB9B8028EB4132566840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 028B Signing time: Fri 26 Dec 2025 10:00:40 +0000 Manifest this update: Fri 26 Dec 2025 10:00:40 +0000 Manifest next update: Sat 27 Dec 2025 10:00:40 +0000 Files and hashes: 1: 2d84iaAy9peqMc8uPtiQJUVpqhA.roa (hash: XonhU7MQtuyMxgxQYBP6Y8GxbPwqjebSF5A8W+e+9Dk=) 2: 7dhCE4YFHCUjlqkpkZY7lO72jeU.roa (hash: U8fxbXZIOaigGsLrKkx21Oe8R/4CGL6VvmyMHjpBRGE=) 3: EzmgW5SIzKZhd3gcqi5vbAQspRs.roa (hash: 9GSjRSh1NRSv4vNrPQJMwH5N/rEwdp6boN/thonioHA=) 4: OWURZZQfXBLCjrMIo9lI7C6_8rU.roa (hash: mhkt0q1UgZZPM01b3Aszei1MJkXP1Fj7gDNO1ZQ7Zg0=) 5: Oi5y3oR-zAeDQVQqnqlub4mxZBY.roa (hash: wiW5g0XVDHNy1QPGb/8FJ3EhNGUt4wPgRz1ROLxdqCE=) 6: SWb9dWC7dX_rwlK0omJMc3wlDks.roa (hash: LsnTgIHVTvCHjZWRXF28FLY3Qh1KmfRKmu1wsQo8XRo=) 7: Vkn5Fjc1blCjW36pRVzcI2dLeRM.roa (hash: b4zxuu0+PWf6Y2gL35zDWaLiEcfMZ+LL8pUvtmTR45E=) 8: VtA0sYtoBS8bGZyWtELDxZdV15w.roa (hash: qr5xc7yY1HYHlnNGTTUy5XqyOe3bNLkhXLhBpl8oti4=) 9: XqFMryLIw1x1QzwoXKE2TA0QsD8.roa (hash: 4jdqgSKXalwNBkWrPQkzkWpgRaMNA4FVpS3FsC5tqMU=) 10: YzR4bVvYuilSAsgyIIG5IHRToDw.roa (hash: aeoTN5jE2adPRR+yahq8zhU6/6Zb1ls1gStL9w3wSCY=) 11: lcQi5Bm9eFSfTGrvmV8ciQpCrmk.roa (hash: RYrQUk3+RUhAVWqgU4UejdbJ0Pp8G4DFGkckRr+4ALw=) 12: nK63OUw5HovdmnJOU8TA3IOqFXc.roa (hash: At6fl1NEh3tU3v5PbKWMv3k4BjWoFVeGE3Mdg5kqGAA=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: Q9EupgGczLb+vUriOCrTNOa5/9tfvxceKF7cWlsOhto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:6e:65:77:3e:ab:9b:80:28:eb:41:32:56:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Dec 26 10:00:40 2025 GMT Not After : Dec 27 10:00:40 2025 GMT Subject: CN=c240d85821e8a26e5483b740b1d5eb8243b0c5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3a:0a:0e:69:9d:d6:27:ad:91:e1:98:e0:32: 89:98:4c:aa:2e:70:b0:26:93:76:f6:98:cd:a8:4c: 88:d4:7c:bd:ab:ea:2a:08:69:b6:73:3a:a9:08:80: ee:19:5a:07:49:e2:3b:7b:a4:54:07:12:b4:e4:9a: 95:a0:5a:26:6a:6c:b0:05:37:31:94:fe:89:f7:5a: bb:66:83:7a:8f:4b:a8:41:d5:23:19:92:5a:6b:1a: e9:90:af:24:a0:cc:90:f0:35:37:06:3d:de:bf:e6: 03:49:75:20:b1:61:c0:9d:5e:ac:41:4c:e3:b2:44: 04:86:5d:56:86:4e:f2:94:e1:f9:51:cb:32:6f:7f: e9:ba:1b:04:a1:3e:47:67:17:71:92:ab:3c:32:74: 5c:ca:31:ad:85:aa:6a:71:ce:7a:76:45:f2:94:2c: 49:7e:1d:9c:35:7f:a6:14:51:6f:be:bf:cd:e2:67: 06:cd:5e:ab:1e:1d:57:6e:ec:3f:55:73:b4:4f:6b: 2e:c3:ee:15:c9:c7:10:c4:ca:d1:d7:9d:24:db:d5: a7:0b:2d:15:95:b1:e6:99:e2:85:a2:94:f0:9e:77: 80:a0:60:2c:fe:ad:a0:5d:96:22:0a:c5:e5:32:01: 25:9e:3b:a1:d4:15:e7:db:45:e9:53:9b:c0:d9:29: 0c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:40:D8:58:21:E8:A2:6E:54:83:B7:40:B1:D5:EB:82:43:B0:C5:A7 X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:5e:1c:22:92:c5:ed:2f:d0:79:17:1f:a5:b7:fb:3e:b0:f6: 57:b1:d4:05:c1:53:41:a1:50:3a:8f:06:2c:37:03:ee:93:c2: 23:2e:b2:7b:81:a9:91:f7:59:a9:85:6d:48:77:36:0f:67:c0: 9f:0d:41:0c:86:5e:5c:31:f1:55:d6:f6:fb:48:c3:34:21:34: 74:a7:a3:f5:bb:7d:f1:0f:3a:38:27:38:9a:91:ef:55:23:7f: 1d:93:0d:5e:38:32:32:62:d5:98:3c:5a:00:05:b8:cb:c9:04: d8:db:58:13:4a:1d:69:72:8c:bd:58:e0:3c:e0:7a:5e:8b:62: c0:b8:4a:57:24:d8:4c:c7:eb:7f:d5:c7:1f:8b:f8:0f:dd:64: 09:e0:17:a1:ae:78:b8:16:af:42:f8:f1:db:7e:f3:cc:dc:13: 42:57:b7:8a:18:33:ce:30:fe:32:57:e5:58:12:76:d4:ac:e1: c0:40:8b:8a:fb:38:e6:08:07:df:b7:f0:8a:67:ad:88:08:88: 66:7b:86:bf:07:d0:05:c8:0e:32:e6:d1:af:11:b5:7e:3c:71: 53:b6:6c:9e:e0:bb:91:78:3c:40:32:4f:63:7e:d5:ff:ba:ac: ca:ff:64:66:20:6f:a9:d7:aa:6d:91:20:b2:f5:02:37:78:d3: b2:8b:be:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGm5ldz6rm4Ao60EyVmhAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjUxMjI2MTAwMDQwWhcNMjUxMjI3MTAwMDQwWjAzMTEwLwYDVQQD EyhjMjQwZDg1ODIxZThhMjZlNTQ4M2I3NDBiMWQ1ZWI4MjQzYjBjNWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zoKDmmd1ietkeGY4DKJmEyqLnCw JpN29pjNqEyI1Hy9q+oqCGm2czqpCIDuGVoHSeI7e6RUBxK05JqVoFomamywBTcx lP6J91q7ZoN6j0uoQdUjGZJaaxrpkK8koMyQ8DU3Bj3ev+YDSXUgsWHAnV6sQUzj skQEhl1Whk7ylOH5Ucsyb3/puhsEoT5HZxdxkqs8MnRcyjGthapqcc56dkXylCxJ fh2cNX+mFFFvvr/N4mcGzV6rHh1Xbuw/VXO0T2suw+4VyccQxMrR150k29WnCy0V lbHmmeKFopTwnneAoGAs/q2gXZYiCsXlMgElnjuh1BXn20XpU5vA2SkMZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJA2Fgh6KJuVIO3QLHV64JDsMWnMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE14cIpLF 7S/QeRcfpbf7PrD2V7HUBcFTQaFQOo8GLDcD7pPCIy6ye4GpkfdZqYVtSHc2D2fA nw1BDIZeXDHxVdb2+0jDNCE0dKej9bt98Q86OCc4mpHvVSN/HZMNXjgyMmLVmDxa AAW4y8kE2NtYE0odaXKMvVjgPOB6XotiwLhKVyTYTMfrf9XHH4v4D91kCeAXoa54 uBavQvjx237zzNwTQle3ihgzzjD+MlflWBJ21KzhwECLivs45ggH37fwimetiAiI ZnuGvwfQBcgOMubRrxG1fjxxU7ZsnuC7kXg8QDJPY37V/7qsyv9kZiBvqdeqbZEg svUCN3jTsou+tw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:07 2025 by rpki-client