This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft File: ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json) Hash identifier: MtA8dy7DwufrMT7a4IyF8NqA3bgfmhfEORQhlYIV2fQ= Subject key identifier: 6C:01:4C:97:0B:FA:A4:C8:36:EA:37:87:20:50:AA:3C:90:B2:CC:A8 Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c Certificate serial: 019B1B3BDDAE6749CA19C3772F4764C96B88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft Manifest number: 1785 Signing time: Sun 14 Dec 2025 05:01:06 +0000 Manifest this update: Sun 14 Dec 2025 05:01:06 +0000 Manifest next update: Mon 15 Dec 2025 05:01:06 +0000 Files and hashes: 1: 1-aRCdRBpKSBpGR4v9msgat9V61M.roa (hash: BYs6ku3Xn4FdJ9wa1nH/1VswjYO1JqNKzo75omWp/nM=) 2: BKrQXqfrcTeiKgHXj86E48D-w8g.roa (hash: L26jc+T0fl1hv7R2zWx4ljKg9N/dLOL1UCp15HLrhrY=) 3: Pl-xLYhjY5YlhNM49xs9QKMtfBU.roa (hash: UmyMwMyNw8j81M3/HKdHg6H50eTkm3sFnC7O9PysISQ=) 4: Smd34xeFUEeunOCrNaNvyPItMW4.roa (hash: tLjLkBtCoEO7JoIBI3BKAYDHLRl3QBXXfkRn3x13Z0I=) 5: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: 41miiRbGAr4n2l85kkeZbn+xC/l/LMQfBk29XIrmmXQ=) 6: iI9-w7tHXxNtTl_I4COghj0uNew.roa (hash: b/PEDW5ud97u67vxZ3rzQUfyJtK+SNRKCKr9PKh3cqQ=) 7: q_SHJ5IyXsykFgek4t_KsFaEQ5U.roa (hash: A4mKYpa62e2fZARPUeUv3pe7BMEESkmU9sbUJFjOPCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:dd:ae:67:49:ca:19:c3:77:2f:47:64:c9:6b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c Validity Not Before: Dec 14 05:01:06 2025 GMT Not After : Dec 15 05:01:06 2025 GMT Subject: CN=6c014c970bfaa4c836ea37872050aa3c90b2cca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:48:98:41:eb:81:23:61:ac:6f:02:00:cf:5d: c2:ae:db:32:6c:a2:b5:54:86:84:41:b5:78:dd:72: 1c:72:62:ad:78:1c:f4:57:f2:7b:4d:3c:64:1b:9f: 39:5c:81:cf:8d:c2:19:a0:22:f0:db:76:26:d5:72: ee:19:32:fa:f4:ce:ad:80:fa:fa:57:f9:b0:23:54: f6:cc:b3:cc:a4:6d:ea:9d:a4:17:af:2c:de:0a:98: 90:c8:13:a0:e6:ce:14:bf:36:10:96:6c:f0:eb:ff: 9b:16:dc:bc:d6:e9:2f:21:7a:77:79:4c:49:7c:c5: c2:5b:82:da:ae:b6:2d:a8:64:a0:8d:1f:09:a5:f3: 55:8b:0c:ff:eb:3c:8c:46:2e:6f:d2:d9:b6:2e:e4: b0:a3:44:63:52:3c:d0:f7:bf:50:cf:23:e6:de:29: 38:3b:ed:6a:8d:00:22:3a:fe:85:72:84:93:1b:07: cf:7f:4b:5b:6f:d8:e1:7c:6f:e4:3a:80:3f:c6:78: 22:04:88:a1:32:bf:32:d8:41:01:5a:8c:46:3f:ee: a5:1d:4e:2c:56:f3:b6:f2:0c:d3:75:79:fd:cc:12: 95:ae:50:77:36:58:d7:fc:75:c1:0e:1f:9f:9f:fa: 52:7d:dd:d4:72:8d:c4:ea:25:3a:4e:41:22:9d:8a: fb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:01:4C:97:0B:FA:A4:C8:36:EA:37:87:20:50:AA:3C:90:B2:CC:A8 X509v3 Authority Key Identifier: keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:69:ba:b5:91:49:6f:25:bc:42:95:cd:d3:61:4b:09:e9:b6: f9:1b:70:f2:26:ba:81:44:79:1c:7b:4f:25:17:ed:a2:b6:6a: 88:d9:ca:a9:d4:02:02:b9:69:9c:2d:ca:0e:42:e5:06:f4:0a: 9a:dc:e9:b5:55:6c:6d:18:d0:46:9e:0b:b1:1c:95:df:5d:1d: 16:10:56:f6:50:2b:94:b6:77:f5:a2:20:4d:85:90:27:42:71: 9b:ee:e6:c4:44:04:00:c6:62:d0:c2:eb:dc:a0:7a:5f:ba:e3: d3:fd:53:63:b7:39:0b:86:15:2f:3e:c0:bc:9e:6f:7e:30:71: 12:4f:25:ac:c4:d1:98:c8:5f:95:ca:39:ae:41:1b:45:10:a5: 32:39:a1:a4:70:95:e5:10:64:88:6f:32:90:ce:55:48:c1:51: 9b:6f:47:b1:fb:1b:6c:c4:91:99:26:6c:62:d5:fe:3d:62:c7: 14:be:57:5a:2d:07:b6:6f:f3:2f:ef:f2:fe:62:42:6a:06:9b: 1c:38:49:60:42:87:79:21:14:1a:52:8d:ea:58:5f:ce:ea:97: 93:f5:78:69:95:30:26:2e:bc:6f:81:01:4c:0b:45:70:99:41: e4:e5:39:b6:ef:3c:e8:d8:98:58:60:97:d5:f2:65:b1:a5:c0: 91:58:df:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO92uZ0nKGcN3L0dkyWuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjgyMDZlMzMxMWRmMzk0ZjQ4Mzg5YjgxMjJiOTRhYTFm MGIwNWMwHhcNMjUxMjE0MDUwMTA2WhcNMjUxMjE1MDUwMTA2WjAzMTEwLwYDVQQD Eyg2YzAxNGM5NzBiZmFhNGM4MzZlYTM3ODcyMDUwYWEzYzkwYjJjY2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEiYQeuBI2GsbwIAz13CrtsybKK1 VIaEQbV43XIccmKteBz0V/J7TTxkG585XIHPjcIZoCLw23Ym1XLuGTL69M6tgPr6 V/mwI1T2zLPMpG3qnaQXryzeCpiQyBOg5s4UvzYQlmzw6/+bFty81ukvIXp3eUxJ fMXCW4LarrYtqGSgjR8JpfNViwz/6zyMRi5v0tm2LuSwo0RjUjzQ979QzyPm3ik4 O+1qjQAiOv6FcoSTGwfPf0tbb9jhfG/kOoA/xngiBIihMr8y2EEBWoxGP+6lHU4s VvO28gzTdXn9zBKVrlB3NljX/HXBDh+fn/pSfd3Uco3E6iU6TkEinYr7ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwBTJcL+qTINuo3hyBQqjyQssyoMB8GA1UdIwQY MBaAFGb4IG4zEd85T0g4m4EiuUqh8LBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt YmJmZDQ1Yzg0YmVhLzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh LzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGm6tZFJ byW8QpXN02FLCem2+Rtw8ia6gUR5HHtPJRftorZqiNnKqdQCArlpnC3KDkLlBvQK mtzptVVsbRjQRp4LsRyV310dFhBW9lArlLZ39aIgTYWQJ0Jxm+7mxEQEAMZi0MLr 3KB6X7rj0/1TY7c5C4YVLz7AvJ5vfjBxEk8lrMTRmMhflco5rkEbRRClMjmhpHCV 5RBkiG8ykM5VSMFRm29HsfsbbMSRmSZsYtX+PWLHFL5XWi0Htm/zL+/y/mJCagab HDhJYEKHeSEUGlKN6lhfzuqXk/V4aZUwJi68b4EBTAtFcJlB5OU5tu886NiYWGCX 1fJlsaXAkVjfrw== -----END CERTIFICATE-----Generated at Sun Dec 14 13:56:42 2025 by rpki-client