This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft File: zWXuI7_0LM9nnXN3_k2mldNBrvA.mft (raw, json) Hash identifier: dKf0KJU7RDsEnBl7/QLNfBPIacWLLl0iNn1ei65TBfI= Subject key identifier: 2A:65:B4:CD:BD:37:24:FC:52:61:44:7F:BD:F8:69:C2:11:02:68:EF Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0 Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0 Certificate serial: 019B0F37B76154FB00634CE5B0F530A964F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft Manifest number: 1778 Signing time: Thu 11 Dec 2025 21:01:08 +0000 Manifest this update: Thu 11 Dec 2025 21:01:08 +0000 Manifest next update: Fri 12 Dec 2025 21:01:08 +0000 Files and hashes: 1: 8oT7fOBgdsUIIWZBhypDTwG_INQ.roa (hash: WRDiXAITdWeeibEg69ylgGin7yKTe8ComkxuvcQwoIQ=) 2: BkPt0aJALr6XVU6twrxQRhczZl4.roa (hash: GquW1GHGVn0JJFYtKkWU3g1jrNnF5g+2QT4CBc2mNJo=) 3: CT-3l0p9gg6VPqpkvwK6-YeB6pE.roa (hash: RUIJZLk9xg0lGoyDdhD+bJMX1WkdWP7lO6yMUzIdGIw=) 4: QE0murogrnfrhBNI-lIB055tOnQ.roa (hash: Ksxv7cylSwkoYU8exidDycgsWvNKpl/+njghNlj/jds=) 5: XgCZLSw672Y4fHLKF3VdR-oVpqY.roa (hash: ZVPJim/tPagRJuy806SzJxw1pNpmAJ8WphC4x+fYVdY=) 6: dPQfoA35Gpb11fSOLi6nPVp7H2I.roa (hash: X2zxEmCkV2bmI4Ai/dqf9r0pDpMKOTmxsA77tOPqEAo=) 7: zWXuI7_0LM9nnXN3_k2mldNBrvA.crl (hash: sidQOQlaR4qkMMqfeISaIDsNA8zFvnmssMVQVdSy8z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:b7:61:54:fb:00:63:4c:e5:b0:f5:30:a9:64:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0 Validity Not Before: Dec 11 21:01:08 2025 GMT Not After : Dec 12 21:01:08 2025 GMT Subject: CN=2a65b4cdbd3724fc5261447fbdf869c2110268ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:c9:c6:ad:31:99:c3:8b:c1:48:86:0d:0d: 67:cd:b1:01:7c:1d:e0:88:b1:61:82:40:e9:4f:9c: 4c:0b:56:4d:eb:55:32:9a:b8:48:d0:e3:54:2a:a4: 8a:c6:f5:02:c1:9f:33:6d:54:3e:58:e4:5f:2c:1d: 64:e7:a8:39:dc:e2:31:8f:6a:0e:0c:dd:0b:ac:f0: c8:8a:85:74:a1:98:fe:05:57:ef:62:14:33:91:e9: 1f:2c:28:ae:c6:52:53:ee:18:d1:49:1d:2e:bb:de: 81:7b:7e:fa:87:83:ff:b7:25:ce:62:52:7d:5d:73: 13:8f:d5:e6:dd:0c:ff:4b:19:88:69:ca:13:82:d3: 02:ce:d4:1e:08:39:c5:64:47:56:b4:33:60:39:e5: b6:c3:8c:a5:0c:32:0c:5c:78:a0:ca:d7:8b:4d:58: 80:d7:9c:03:32:c4:c0:a7:c7:3e:e4:04:f5:b8:14: ac:fc:ab:1c:ff:ed:14:6a:99:8d:3d:bb:35:29:3b: 39:a9:15:86:a0:e5:c5:8d:73:06:3e:6b:62:73:7f: f9:0d:48:dd:71:fc:50:a2:b9:06:2c:92:38:7c:8c: c1:c6:76:c6:6c:37:03:1f:94:9b:ab:ca:0c:61:89: 9d:c0:c5:e6:58:e3:41:53:5a:cc:a1:ef:a2:49:aa: a5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:65:B4:CD:BD:37:24:FC:52:61:44:7F:BD:F8:69:C2:11:02:68:EF X509v3 Authority Key Identifier: keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:67:57:dc:ef:fe:89:99:68:5e:ba:c9:80:ac:7a:e9:c9:3a: 71:dc:36:4e:a2:b9:fc:be:ff:9b:8b:a7:03:49:ff:b8:a5:43: 35:0e:a8:89:6d:34:c6:d2:a4:42:31:db:96:26:74:da:62:4d: ee:85:6f:1e:97:f0:82:80:96:d5:62:3e:8c:ec:8e:85:12:7d: 3b:91:28:c7:77:c0:90:e6:8c:f4:07:e8:5c:a3:92:1e:22:b6: c7:28:96:ca:f9:86:b0:35:06:f9:9f:c0:84:aa:93:d3:e2:9d: c1:cf:d7:26:3b:ad:2e:50:ba:a6:a5:91:6a:87:b6:6b:64:b3: 0a:e4:d6:65:73:7a:05:ad:77:cc:02:34:f1:b5:bc:97:40:bc: 44:75:53:e9:a6:63:ae:89:e2:35:ad:12:64:6e:9a:3e:13:2f: 03:9e:b0:a0:27:07:cc:5d:ad:0c:af:24:4f:46:d4:1c:5c:76: 8f:b2:b6:62:eb:fa:70:3f:cf:82:60:f5:c7:c8:45:b0:26:fe: 6e:3c:36:77:94:69:41:e7:aa:31:1c:6f:ef:7c:a1:90:b6:72: 51:69:cd:e2:dd:1c:fd:e9:3a:19:f8:64:a1:78:b6:48:47:2d: 07:00:33:65:17:99:3d:1b:56:2b:ab:68:93:5e:11:9a:77:e1: 10:5f:aa:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN7dhVPsAY0zlsPUwqWTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjVlZTIzYmZmNDJjY2Y2NzlkNzM3N2ZlNGRhNjk1ZDM0 MWFlZjAwHhcNMjUxMjExMjEwMTA4WhcNMjUxMjEyMjEwMTA4WjAzMTEwLwYDVQQD EygyYTY1YjRjZGJkMzcyNGZjNTI2MTQ0N2ZiZGY4NjljMjExMDI2OGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthXJxq0xmcOLwUiGDQ1nzbEBfB3g iLFhgkDpT5xMC1ZN61UymrhI0ONUKqSKxvUCwZ8zbVQ+WORfLB1k56g53OIxj2oO DN0LrPDIioV0oZj+BVfvYhQzkekfLCiuxlJT7hjRSR0uu96Be376h4P/tyXOYlJ9 XXMTj9Xm3Qz/SxmIacoTgtMCztQeCDnFZEdWtDNgOeW2w4ylDDIMXHigyteLTViA 15wDMsTAp8c+5AT1uBSs/Ksc/+0UapmNPbs1KTs5qRWGoOXFjXMGPmtic3/5DUjd cfxQorkGLJI4fIzBxnbGbDcDH5Sbq8oMYYmdwMXmWONBU1rMoe+iSaqlWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpltM29NyT8UmFEf734acIRAmjvMB8GA1UdIwQY MBaAFM1l7iO/9CzPZ51zd/5NppXTQa7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQt NWRjMmZhNmEzNTAzLzEveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQtNWRjMmZhNmEzNTAz LzEveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2dX3O/+ iZloXrrJgKx66ck6cdw2TqK5/L7/m4unA0n/uKVDNQ6oiW00xtKkQjHbliZ02mJN 7oVvHpfwgoCW1WI+jOyOhRJ9O5Eox3fAkOaM9AfoXKOSHiK2xyiWyvmGsDUG+Z/A hKqT0+Kdwc/XJjutLlC6pqWRaoe2a2SzCuTWZXN6Ba13zAI08bW8l0C8RHVT6aZj roniNa0SZG6aPhMvA56woCcHzF2tDK8kT0bUHFx2j7K2Yuv6cD/PgmD1x8hFsCb+ bjw2d5RpQeeqMRxv73yhkLZyUWnN4t0c/ek6GfhkoXi2SEctBwAzZReZPRtWK6to k14RmnfhEF+qIg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:26:59 2025 by rpki-client