This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: 9017NlR2OHfrEWiI5omdBAnVJRkp4NwysgPqjcReqY0= Subject key identifier: F2:F4:13:5F:D8:40:D3:FC:45:2F:91:62:CE:B1:05:F8:A1:84:11:84 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019AF5776FFD8329042B557BB9ACC426BC6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 1777 Signing time: Sat 06 Dec 2025 21:00:36 +0000 Manifest this update: Sat 06 Dec 2025 21:00:36 +0000 Manifest next update: Sun 07 Dec 2025 21:00:36 +0000 Files and hashes: 1: 1-mklDANMVJEiPmpBlxf2QE7U4xQ.roa (hash: nYcrxIcojCmllQ6KA3duBQeqM8wo1N5ldpzqFh4IADM=) 2: 1eb_RUUKl1wArkM4nQrNO8o6zA4.roa (hash: DnRX9ewfVK8qHRMwGypJDg5WY6eKWtJUTgSgVVUpaxk=) 3: 6jIK36Mhaa4Xbj7P1Zh2U_58p-M.roa (hash: U9tg2SAso4TZBWfhZ8a+7jSfIjc4dzku6E3DThi6OYI=) 4: GFllu8yCEzYxH4Ih5x02DmBd6d8.roa (hash: MMmyezgzI9GjhXg9IrhVD+9c+IgYTInaNbVAzHZN2q0=) 5: MrukXcFUqEow256KAYyeIYLRZog.roa (hash: XtBjKt0dD05c3nHn8KPQ936/hM8bld6aPmDpQ0/ANLw=) 6: QbMBVnYbFFojOFc196F2jGwUv80.roa (hash: PfefSPZEQEk15+9V5/IwtgSWUTKXs+bmANRjvJwpNgo=) 7: WpJJ_ikBuc-Y0bGUJcEnqRT8GwE.roa (hash: F2+S7SjwnB98jayV0ovfpTJ0OhWt8ofMSB+zMRafvPU=) 8: X-Wp2GdoJeyJqzlvdHdTYBcZFbQ.roa (hash: a4lrtqUDOD2jEGfmKJYDLSW6SifymwRthtLHwdcAY4w=) 9: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: ASkXM240sx4hMWJbLIsfKZBnwSUg1yNujMdeXw8jvFA=) 10: i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa (hash: b9PLNQP5kOz4vbwmAcKMWxEW3G7VlFSo/at2gpQ0dIE=) 11: pghJNCWH2c3hSWAmOWfyoPTaVCo.roa (hash: 3MgIR2t5YYsTlUp3+6FJ07pdXvIG9/iFEZ56WzoCufA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:6f:fd:83:29:04:2b:55:7b:b9:ac:c4:26:bc:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Dec 6 21:00:36 2025 GMT Not After : Dec 7 21:00:36 2025 GMT Subject: CN=f2f4135fd840d3fc452f9162ceb105f8a1841184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f6:4d:8a:37:6c:8c:64:e9:bf:6c:7f:91:0c: 90:a3:77:06:b4:29:d4:af:ee:da:37:ce:9c:52:72: a7:ad:87:0d:74:64:33:cb:47:ed:2c:7a:d2:66:86: 3d:99:58:7e:3a:0e:fc:fc:5e:47:15:24:da:c0:e1: ce:15:4e:12:3d:6c:fc:db:d1:0d:e6:23:00:02:dd: 02:fd:38:db:2f:7a:1f:63:b5:df:63:a7:a1:10:f4: 59:43:b6:c1:1a:1f:8f:5e:36:ea:65:f4:70:b2:7c: e1:f2:fd:eb:e6:a5:55:ee:16:3b:ec:21:cc:96:77: 8d:d3:b9:0a:37:8c:1d:94:ed:07:a4:2d:b5:f0:20: bd:f2:fe:39:36:43:af:a2:c4:01:e3:20:de:b2:8a: 32:c1:e7:f4:aa:ee:cb:08:03:45:d2:1e:91:3e:f0: 72:e9:03:8a:20:7a:51:1b:e6:aa:f9:3d:04:e9:b1: 90:e4:fd:3d:70:48:05:85:9e:73:11:cc:d0:a0:5d: 13:f3:d8:ba:a2:25:b9:66:86:04:c3:c6:49:be:c0: db:f0:a8:0d:9e:3d:88:76:12:c4:8f:2a:ec:b7:1b: 4a:b9:bb:2c:cd:02:91:69:c0:55:a8:96:e0:e6:e4: 40:2d:70:b8:2d:cd:90:b4:79:95:b8:fe:9d:10:64: 71:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F4:13:5F:D8:40:D3:FC:45:2F:91:62:CE:B1:05:F8:A1:84:11:84 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:63:e7:ef:e8:bd:db:ce:6c:ac:f0:8c:9c:11:6e:f1:7a:9b: a0:e6:1c:86:38:53:d3:8a:b8:8a:37:32:5f:2b:44:ba:1c:be: a8:37:ee:09:74:e9:06:24:cb:f0:c8:69:3f:1e:c9:5b:d1:c0: 40:9a:7d:d7:b4:7e:ee:0f:96:3a:d6:46:c1:f3:8e:e4:ef:b9: 1b:6c:ae:51:7d:f8:ad:60:b0:33:2d:46:45:76:a4:6f:72:d5: 00:6f:3f:89:7f:43:bb:dd:dc:5d:a2:24:0c:df:d4:01:f0:2d: d2:1c:78:6c:59:b4:81:83:dc:66:91:0e:1a:8e:4d:bb:7a:c1: c4:7f:68:56:00:79:d5:79:33:8a:d5:b9:a2:13:87:df:54:fc: ad:59:e9:6e:40:c9:8c:a4:11:b0:2f:5b:53:e8:9f:96:0f:b9: 35:43:99:fc:31:d2:26:31:32:3c:66:98:67:7c:28:73:af:a8: f6:e8:54:88:e6:ac:cf:78:56:a3:a4:09:e4:9f:e1:c5:55:06: 62:f6:c1:5c:7e:f1:33:31:44:42:88:a3:42:1c:d9:59:bc:a6: c7:87:7a:9a:75:70:b3:0c:e2:11:92:43:19:bd:61:23:e8:32: 26:06:2d:ad:18:52:32:e1:4b:0f:5a:4c:e3:cd:ee:b4:8d:82: 4f:e3:89:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d2/9gykEK1V7uazEJrxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjUxMjA2MjEwMDM2WhcNMjUxMjA3MjEwMDM2WjAzMTEwLwYDVQQD EyhmMmY0MTM1ZmQ4NDBkM2ZjNDUyZjkxNjJjZWIxMDVmOGExODQxMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofZNijdsjGTpv2x/kQyQo3cGtCnU r+7aN86cUnKnrYcNdGQzy0ftLHrSZoY9mVh+Og78/F5HFSTawOHOFU4SPWz829EN 5iMAAt0C/TjbL3ofY7XfY6ehEPRZQ7bBGh+PXjbqZfRwsnzh8v3r5qVV7hY77CHM lneN07kKN4wdlO0HpC218CC98v45NkOvosQB4yDesooywef0qu7LCANF0h6RPvBy 6QOKIHpRG+aq+T0E6bGQ5P09cEgFhZ5zEczQoF0T89i6oiW5ZoYEw8ZJvsDb8KgN nj2IdhLEjyrstxtKubsszQKRacBVqJbg5uRALXC4Lc2QtHmVuP6dEGRx/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPL0E1/YQNP8RS+RYs6xBfihhBGEMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWPn7+i9 285srPCMnBFu8XqboOYchjhT04q4ijcyXytEuhy+qDfuCXTpBiTL8MhpPx7JW9HA QJp917R+7g+WOtZGwfOO5O+5G2yuUX34rWCwMy1GRXakb3LVAG8/iX9Du93cXaIk DN/UAfAt0hx4bFm0gYPcZpEOGo5Nu3rBxH9oVgB51XkzitW5ohOH31T8rVnpbkDJ jKQRsC9bU+iflg+5NUOZ/DHSJjEyPGaYZ3woc6+o9uhUiOasz3hWo6QJ5J/hxVUG YvbBXH7xMzFEQoijQhzZWbymx4d6mnVwswziEZJDGb1hI+gyJgYtrRhSMuFLD1pM 483utI2CT+OJrg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:00:10 2025 by rpki-client