This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft File: zWmPVbQJWbF4987Lwgw16cE3k0Q.mft (raw, json) Hash identifier: HK7EXaWFDY8LoHIB10unaLnB5SoFGPcpESASNz+hFYM= Subject key identifier: AC:26:B0:CC:1C:27:BC:77:1B:1A:F7:5B:48:35:A7:F1:11:54:73:46 Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44 Certificate issuer: /CN=cd698f55b40959b178f7cecbc20c35e9c1379344 Certificate serial: 019B1B3C459DE5B8BF592C8B3FBD36553051 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 05:01:33 +0000 Manifest this update: Sun 14 Dec 2025 05:01:33 +0000 Manifest next update: Mon 15 Dec 2025 05:01:33 +0000 Files and hashes: 1: 4IRJfTOXaKsLO79AGo1JoJbZxnI.roa (hash: z5NYfWatjYuL33vBwldK4hifLGzdry9JPmtM091yFpE=) 2: zWmPVbQJWbF4987Lwgw16cE3k0Q.crl (hash: weOKLb3YROziziLblzFcw6hXQnZmKeLcXzPY0ahZwLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3c:45:9d:e5:b8:bf:59:2c:8b:3f:bd:36:55:30:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344 Validity Not Before: Dec 14 05:01:33 2025 GMT Not After : Dec 15 05:01:33 2025 GMT Subject: CN=ac26b0cc1c27bc771b1af75b4835a7f111547346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:bb:38:69:b8:e5:fb:cf:9a:73:ae:49:eb: 36:5d:1c:39:62:c1:0e:a4:84:b5:bd:98:67:b2:b5: 4b:bf:2e:f0:0c:ff:69:59:a5:13:08:ba:63:4d:17: d6:5d:1f:c6:37:ca:52:46:b2:ac:35:26:b8:5f:7d: b1:42:60:76:99:aa:b1:19:aa:d2:34:d1:2f:14:53: ec:b0:f3:c3:05:85:55:74:6e:7e:82:a9:17:da:e4: b5:cb:d3:a3:fb:4b:e5:81:07:73:23:3d:96:c6:d4: a9:e9:1e:93:ee:06:c0:34:4a:10:f2:a2:8d:e8:1b: e8:de:19:60:07:b8:ef:f2:7f:6c:1e:d5:c7:2d:4f: f1:1c:0a:64:dc:4a:de:a3:3d:cf:71:7f:a1:51:c5: e9:6c:6f:d5:09:56:31:b6:00:30:9a:84:e6:2c:dc: fb:36:dd:9a:6b:fd:61:dc:f6:b4:57:c3:eb:a2:b0: 1c:c2:fb:5f:e3:a1:0b:16:31:09:1d:e4:53:7c:86: 8e:2b:1b:57:68:72:05:0a:2b:b4:9c:e0:ea:77:38: 93:30:bf:0d:27:ac:2e:2f:e2:d7:20:a6:96:20:1e: a8:3d:82:0d:16:7c:fc:94:62:89:ad:1e:e2:53:69: 3a:d9:23:82:ca:2e:2d:aa:71:dc:a9:19:9f:0e:ca: a1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:26:B0:CC:1C:27:BC:77:1B:1A:F7:5B:48:35:A7:F1:11:54:73:46 X509v3 Authority Key Identifier: keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:4e:75:53:02:1f:e8:64:34:fc:25:66:ad:ef:70:a8:5e:0a: 89:24:4c:10:77:0b:d6:6b:82:93:9a:6b:df:ea:e7:16:7b:a9: 1f:36:f9:f9:19:48:e2:cd:85:0b:18:44:b5:4e:9b:54:99:74: ad:6d:c2:89:8f:1a:97:a3:ab:17:6f:68:4e:83:5b:14:4c:ed: 50:20:4c:af:0c:af:16:e8:b7:83:61:d5:ed:69:e8:07:31:f4: f7:96:2d:48:5f:30:d3:b7:18:f0:2a:06:a8:29:e8:f4:b7:22: ad:10:3b:b4:b5:b8:cf:19:9c:f2:22:cf:59:73:08:a4:96:28: ab:90:51:eb:59:43:1f:86:1d:59:84:68:4a:c8:75:8c:82:8b: 4b:0a:1e:b6:b5:0c:2d:cd:5b:76:63:7b:cc:06:94:e0:c7:8b: 90:19:8f:0a:ae:84:fd:0a:ef:c0:71:bc:22:a5:6c:c5:f5:35: a8:f9:ec:2c:95:22:40:92:8b:6f:52:f9:45:93:67:79:29:da: e0:63:58:a4:2d:34:9f:91:df:50:25:31:29:17:44:4f:29:df: f1:d1:e0:8b:48:bc:35:71:dd:74:56:17:9f:9d:46:d9:e2:fa: 04:ae:69:00:77:80:fd:be:f4:d6:8b:cc:75:63:3e:ed:b9:16: d0:a4:88:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbPEWd5bi/WSyLP702VTBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjk4ZjU1YjQwOTU5YjE3OGY3Y2VjYmMyMGMzNWU5YzEz NzkzNDQwHhcNMjUxMjE0MDUwMTMzWhcNMjUxMjE1MDUwMTMzWjAzMTEwLwYDVQQD EyhhYzI2YjBjYzFjMjdiYzc3MWIxYWY3NWI0ODM1YTdmMTExNTQ3MzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzW7OGm45fvPmnOuSes2XRw5YsEO pIS1vZhnsrVLvy7wDP9pWaUTCLpjTRfWXR/GN8pSRrKsNSa4X32xQmB2maqxGarS NNEvFFPssPPDBYVVdG5+gqkX2uS1y9Oj+0vlgQdzIz2WxtSp6R6T7gbANEoQ8qKN 6Bvo3hlgB7jv8n9sHtXHLU/xHApk3Ereoz3PcX+hUcXpbG/VCVYxtgAwmoTmLNz7 Nt2aa/1h3Pa0V8ProrAcwvtf46ELFjEJHeRTfIaOKxtXaHIFCiu0nODqdziTML8N J6wuL+LXIKaWIB6oPYINFnz8lGKJrR7iU2k62SOCyi4tqnHcqRmfDsqhEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwmsMwcJ7x3Gxr3W0g1p/ERVHNGMB8GA1UdIwQY MBaAFM1pj1W0CVmxePfOy8IMNenBN5NEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldtUFZiUUpXYkY0OTg3THdndzE2Y0UzazBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hMTQ0OWUtMmFkYi00YjFhLWIyM2Mt YmQ2ZDhiYWRjZGMwLzEveldtUFZiUUpXYkY0OTg3THdndzE2Y0UzazBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9hMTQ0OWUtMmFkYi00YjFhLWIyM2MtYmQ2ZDhiYWRjZGMw LzEveldtUFZiUUpXYkY0OTg3THdndzE2Y0UzazBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqE51UwIf 6GQ0/CVmre9wqF4KiSRMEHcL1muCk5pr3+rnFnupHzb5+RlI4s2FCxhEtU6bVJl0 rW3CiY8al6OrF29oToNbFEztUCBMrwyvFui3g2HV7WnoBzH095YtSF8w07cY8CoG qCno9LcirRA7tLW4zxmc8iLPWXMIpJYoq5BR61lDH4YdWYRoSsh1jIKLSwoetrUM Lc1bdmN7zAaU4MeLkBmPCq6E/QrvwHG8IqVsxfU1qPnsLJUiQJKLb1L5RZNneSna 4GNYpC00n5HfUCUxKRdETynf8dHgi0i8NXHddFYXn51G2eL6BK5pAHeA/b701ovM dWM+7bkW0KSI8g== -----END CERTIFICATE-----Generated at Sun Dec 14 09:36:31 2025 by rpki-client