This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft File: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft (raw, json) Hash identifier: Z5gPPN9yzKH2tnPd+aNu+ynNxlQcb6j2e7Ig5n7o2AU= Subject key identifier: 3F:FC:7C:05:74:92:30:E4:F7:7A:D8:F4:61:DF:13:59:46:0D:49:7C Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0 Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0 Certificate serial: 019B397D24EF2821F588C9DB89110FD2DB25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft Manifest number: 1566 Signing time: Sat 20 Dec 2025 02:01:01 +0000 Manifest this update: Sat 20 Dec 2025 02:01:01 +0000 Manifest next update: Sun 21 Dec 2025 02:01:01 +0000 Files and hashes: 1: CvkJme1LUR6Yylremh6T0ANylCI.roa (hash: 5zy6xol1m9FQbb/9TEgVPc4ZpyQ53XwKiYadQ98VX1U=) 2: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl (hash: hoEQxceJEuq63I+g9DDDLe3mNwSnuxj2dwolJ+W+ElY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:24:ef:28:21:f5:88:c9:db:89:11:0f:d2:db:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0 Validity Not Before: Dec 20 02:01:01 2025 GMT Not After : Dec 21 02:01:01 2025 GMT Subject: CN=3ffc7c05749230e4f77ad8f461df1359460d497c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:12:2a:9e:b3:43:c7:5c:28:db:57:47:f8:8c: 35:62:4e:86:76:d5:3d:23:87:dc:d2:ef:ef:ef:81: 32:48:fe:60:20:d1:c4:40:63:a6:ff:bf:3d:56:1e: 81:3a:a3:ff:8a:d6:d4:9c:37:cf:8a:3a:2d:4a:7c: 5e:d1:ae:52:f7:96:b0:95:ee:ed:59:26:b4:3d:2b: 96:6e:03:a4:3b:da:66:5a:01:0f:85:60:73:e6:39: 6c:6f:72:a1:9c:a6:00:1f:f1:1c:ae:ad:8a:b8:f4: cd:22:00:49:d0:47:27:d4:fb:1a:39:0d:16:d7:d2: 26:cb:03:7e:62:3d:47:9a:01:f0:12:63:9b:f4:45: 9d:2a:26:61:fc:e2:e2:d7:09:8d:d0:80:e9:96:02: 6e:25:d1:dd:5a:49:02:59:db:b0:39:c0:c3:13:ff: 8d:b1:f4:ea:3d:c1:f2:74:11:1a:a5:5c:b7:9f:97: 1e:64:f3:ea:ba:61:84:85:8a:19:12:40:5b:74:9d: 3f:b5:39:af:43:5f:5a:aa:55:42:b4:f7:45:70:fa: d5:92:92:16:52:fc:c6:7b:cb:46:cd:c8:71:53:03: 75:19:f1:37:53:ea:c2:e7:42:6e:c4:bf:e9:86:7e: 35:d9:b5:68:6c:c7:a9:73:55:d8:fa:de:b9:88:21: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FC:7C:05:74:92:30:E4:F7:7A:D8:F4:61:DF:13:59:46:0D:49:7C X509v3 Authority Key Identifier: keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:3e:21:4b:0a:a7:9d:e5:06:b8:52:ec:60:1a:6d:41:0a:b6: 4a:ea:94:fc:42:9a:ed:3b:8a:14:23:ee:9f:ef:8c:51:1b:d2: 12:ff:e8:37:7a:9d:cb:a9:68:80:40:78:b9:fd:ee:b6:80:eb: d7:68:b8:20:c6:7f:ae:a8:74:4c:a2:06:4f:df:0a:33:bf:f3: 30:c9:56:9b:80:a5:7b:60:c6:2a:74:a4:21:d6:d0:13:31:a9: 78:3f:cd:13:4d:c7:1d:24:b1:4a:3a:f0:33:5e:54:6b:09:f4: 4a:02:9b:38:bf:a7:72:f6:f5:62:29:77:f1:65:a3:7e:92:f6: e6:b7:f2:82:02:5f:23:2a:d6:b2:93:32:23:cb:73:b2:1a:d1: 4b:2d:6b:28:7c:03:da:47:05:d2:20:a4:56:1f:f2:b4:29:98: 21:de:c6:b4:6b:90:1c:35:de:91:ca:15:46:63:82:5a:bc:85: 7a:c8:bb:e9:4a:88:63:4d:f4:1e:15:13:50:76:44:6b:4d:d4: e5:ae:8b:41:31:b2:27:e3:2e:b0:5d:05:10:b0:70:c2:9c:67: d1:4b:01:b5:dd:23:40:2b:ea:28:f1:01:fd:8b:51:ab:dd:d6: 28:0e:a8:fe:27:a3:90:8a:92:23:21:29:aa:be:a7:bb:99:00: 98:c5:45:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fSTvKCH1iMnbiREP0tslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjI2NjIzMDg0ZTZjZjExNjY3NGEzZmQwYTk5NTFjYWMw ZGVkYzAwHhcNMjUxMjIwMDIwMTAxWhcNMjUxMjIxMDIwMTAxWjAzMTEwLwYDVQQD EygzZmZjN2MwNTc0OTIzMGU0Zjc3YWQ4ZjQ2MWRmMTM1OTQ2MGQ0OTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBIqnrNDx1wo21dH+Iw1Yk6GdtU9 I4fc0u/v74EySP5gINHEQGOm/789Vh6BOqP/itbUnDfPijotSnxe0a5S95awle7t WSa0PSuWbgOkO9pmWgEPhWBz5jlsb3KhnKYAH/Ecrq2KuPTNIgBJ0Ecn1PsaOQ0W 19ImywN+Yj1HmgHwEmOb9EWdKiZh/OLi1wmN0IDplgJuJdHdWkkCWduwOcDDE/+N sfTqPcHydBEapVy3n5ceZPPqumGEhYoZEkBbdJ0/tTmvQ19aqlVCtPdFcPrVkpIW UvzGe8tGzchxUwN1GfE3U+rC50JuxL/phn412bVobMepc1XY+t65iCF9EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/8fAV0kjDk93rY9GHfE1lGDUl8MB8GA1UdIwQY MBaAFGZiZiMITmzxFmdKP9CplRysDe3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1KbUl3aE9iUEVXWjBvXzBLbVZIS3dON2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83NjM5MjEtM2NkNy00NjZiLTg2NGIt MTg4YzRhNzhjZDYyLzEvWm1KbUl3aE9iUEVXWjBvXzBLbVZIS3dON2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83NjM5MjEtM2NkNy00NjZiLTg2NGItMTg4YzRhNzhjZDYy LzEvWm1KbUl3aE9iUEVXWjBvXzBLbVZIS3dON2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApT4hSwqn neUGuFLsYBptQQq2SuqU/EKa7TuKFCPun++MURvSEv/oN3qdy6logEB4uf3utoDr 12i4IMZ/rqh0TKIGT98KM7/zMMlWm4Cle2DGKnSkIdbQEzGpeD/NE03HHSSxSjrw M15Uawn0SgKbOL+ncvb1Yil38WWjfpL25rfyggJfIyrWspMyI8tzshrRSy1rKHwD 2kcF0iCkVh/ytCmYId7GtGuQHDXekcoVRmOCWryFesi76UqIY030HhUTUHZEa03U 5a6LQTGyJ+MusF0FELBwwpxn0UsBtd0jQCvqKPEB/YtRq93WKA6o/iejkIqSIyEp qr6nu5kAmMVFKA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:39:13 2025 by rpki-client