This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft File: ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json) Hash identifier: wVF5aRyxw00i6BJQal8fHyTKg7T88ejmWTA/Ap7qMvk= Subject key identifier: C1:FD:8C:E0:B1:06:99:95:80:68:34:1B:BD:5C:A2:37:98:14:4B:B2 Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93 Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93 Certificate serial: 019B5975B50DDEB3CB9C43050873B846DBE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft Manifest number: 88 Signing time: Fri 26 Dec 2025 07:00:44 +0000 Manifest this update: Fri 26 Dec 2025 07:00:44 +0000 Manifest next update: Sat 27 Dec 2025 07:00:44 +0000 Files and hashes: 1: YI526rDjmCm4ZHVI5LkZmsJxBYA.roa (hash: mnwhg/AU2eU/IE/2TNO5wxiOwcdktq7wIdfPQ68gGbo=) 2: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: smjpPaHxOqWQfFY+UfUaZ+xbsSV1IG/EvsP11Ieilc0=) 3: yW7cdRDGRGnl2p9hOjN1yRdkgZU.roa (hash: ZivRWx3B/fZFpGzZX+9m5QTKA6BgqDFkXZVcPhKEPac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:b5:0d:de:b3:cb:9c:43:05:08:73:b8:46:db:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93 Validity Not Before: Dec 26 07:00:44 2025 GMT Not After : Dec 27 07:00:44 2025 GMT Subject: CN=c1fd8ce0b10699958068341bbd5ca23798144bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:da:e0:c6:26:08:e0:23:38:0b:c5:f6:ea:5b: 8f:83:51:6d:2a:54:39:8d:49:ed:8e:8b:77:82:60: 7b:c8:38:b3:f3:40:92:55:d3:89:f9:1f:e4:46:6f: c4:4b:0f:93:1e:41:5b:58:d6:64:ad:42:53:d3:e2: c7:5a:f1:dd:d5:89:dd:80:18:0c:b9:b2:46:b2:92: c6:9a:bb:81:64:7f:cf:12:72:7a:6e:29:27:b0:a8: 0b:43:56:a0:d8:4a:91:fa:20:03:ae:49:ca:1a:50: a4:4e:e4:3b:c7:fd:d1:0c:8d:e7:4e:34:b9:d6:2f: df:8a:76:34:e6:ce:16:80:83:80:19:77:5c:f4:db: 48:55:66:1e:ac:f0:ca:99:e2:b3:6d:33:67:f9:85: 27:9d:30:59:29:ff:c9:38:cf:46:ee:b3:a3:ca:42: d2:93:e0:3b:04:ae:3c:03:1c:54:b6:d6:e4:26:85: 16:ca:a6:df:ea:f9:e2:10:50:3f:04:f5:a2:a3:3e: 92:72:4f:cf:fc:46:8c:cb:cb:d3:4d:83:b7:32:5a: 6e:d5:02:29:88:05:3c:35:81:64:5d:24:27:e4:03: 4e:0b:37:79:6f:ba:9c:39:58:5a:a2:75:7b:ed:c3: 79:2b:73:6f:2f:96:6f:bb:d7:16:0b:8a:92:18:20: 20:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FD:8C:E0:B1:06:99:95:80:68:34:1B:BD:5C:A2:37:98:14:4B:B2 X509v3 Authority Key Identifier: keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:15:73:bc:55:f4:bf:e9:8b:26:ae:b0:df:a4:50:ec:a7:1b: 6b:97:3b:2e:09:fb:6f:28:1e:00:9d:31:f5:d7:14:d0:f4:fe: fa:d9:c9:68:5b:5b:a8:d5:2a:23:61:e4:c4:c3:e4:fd:0e:da: 4c:86:c3:9b:e1:16:95:e8:ae:3d:f6:12:e1:d4:ab:30:15:ed: 06:1b:42:7a:3c:2c:59:4a:e4:68:27:98:c0:7e:f8:a7:43:9e: 9c:fd:b8:8b:2f:36:f4:96:3a:5c:26:5c:d1:1a:0f:92:7a:fa: f1:87:aa:8d:a5:58:65:92:dc:d7:87:ec:c2:f7:1e:09:f9:a2: 9d:07:17:14:a6:2e:cc:23:10:cb:e1:cd:2c:7c:fc:84:d3:35: 5d:5b:14:ac:07:66:99:91:0e:55:c2:c9:12:39:bc:9b:af:35: ea:d8:95:97:09:a6:2d:37:04:d1:bc:7c:27:f2:cd:19:5a:f0: 98:3a:4c:8c:ad:93:0b:fc:eb:25:97:b1:ea:b8:05:eb:34:a7: 91:9f:89:9f:f2:d8:b3:75:a2:a2:54:af:e7:1b:49:b1:c0:ba: cc:90:05:ef:45:15:f8:03:1e:e6:f2:f8:5c:0e:7f:35:d4:11: f2:fc:83:0a:39:3c:46:3c:8d:5d:9d:15:81:2e:22:bc:cf:6b: a9:3d:a6:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdbUN3rPLnEMFCHO4RtviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MzA2ZTNhY2YzZWI5MDNjYzczOTczZmI2Mjg2MGI2NjM1 MTZjOTMwHhcNMjUxMjI2MDcwMDQ0WhcNMjUxMjI3MDcwMDQ0WjAzMTEwLwYDVQQD EyhjMWZkOGNlMGIxMDY5OTk1ODA2ODM0MWJiZDVjYTIzNzk4MTQ0YmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8drgxiYI4CM4C8X26luPg1FtKlQ5 jUntjot3gmB7yDiz80CSVdOJ+R/kRm/ESw+THkFbWNZkrUJT0+LHWvHd1YndgBgM ubJGspLGmruBZH/PEnJ6biknsKgLQ1ag2EqR+iADrknKGlCkTuQ7x/3RDI3nTjS5 1i/finY05s4WgIOAGXdc9NtIVWYerPDKmeKzbTNn+YUnnTBZKf/JOM9G7rOjykLS k+A7BK48AxxUttbkJoUWyqbf6vniEFA/BPWioz6Sck/P/EaMy8vTTYO3Mlpu1QIp iAU8NYFkXSQn5ANOCzd5b7qcOVhaonV77cN5K3NvL5Zvu9cWC4qSGCAg9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMH9jOCxBpmVgGg0G71cojeYFEuyMB8GA1UdIwQY MBaAFGYwbjrPPrkDzHOXP7YoYLZjUWyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODct ZWUyN2NiY2E3NDdlLzEvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODctZWUyN2NiY2E3NDdl LzEvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhVzvFX0 v+mLJq6w36RQ7Kcba5c7Lgn7bygeAJ0x9dcU0PT++tnJaFtbqNUqI2HkxMPk/Q7a TIbDm+EWleiuPfYS4dSrMBXtBhtCejwsWUrkaCeYwH74p0OenP24iy829JY6XCZc 0RoPknr68YeqjaVYZZLc14fswvceCfminQcXFKYuzCMQy+HNLHz8hNM1XVsUrAdm mZEOVcLJEjm8m6816tiVlwmmLTcE0bx8J/LNGVrwmDpMjK2TC/zrJZex6rgF6zSn kZ+Jn/LYs3WiolSv5xtJscC6zJAF70UV+AMe5vL4XA5/NdQR8vyDCjk8RjyNXZ0V gS4ivM9rqT2m4w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:37 2025 by rpki-client