This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: XfONv5tgLqK/60hpHUTagkKSutgUwjakBhXcwU/0yRg= Subject key identifier: 7A:67:EC:9D:E0:F5:77:D3:FF:70:73:C2:E0:9E:7C:4F:17:99:C8:4D Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019B6E0F1D547AF6792F6A02487CDC315E61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0FFD Signing time: Tue 30 Dec 2025 07:00:42 +0000 Manifest this update: Tue 30 Dec 2025 07:00:42 +0000 Manifest next update: Wed 31 Dec 2025 07:00:42 +0000 Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=) 2: FDfmsu_IgoQfV2wt46Usr4SYc3g.roa (hash: F5BDEBTgZRkZKg47n0IHrA45+01eu4MWtwsHqaOf0SA=) 3: G2YMUT8WZMSTQ7MK3_Sp1FETDAk.roa (hash: hIMlTU+DT4A6A7uZvfD/8ICFCxVi5QCIz8WhtkNI7dw=) 4: HT3O9TO5wY9dXYSp34UlqcR2gXc.roa (hash: YCv7eiQWABbzqrb+yNGoCYk252WBY990atLC71YK5os=) 5: JiN8PiBQMRbhwwfYP31TY4I7csw.roa (hash: h0TWFXGwNIH5C18gFdaIzCuKZqZvskN5p9wyN3nfeO8=) 6: _Hg3RiRRbCVFdEVQSVANmXe1AZM.roa (hash: craDG3qBGDlj43lq+QC1MGx/jTT9DqlZJhNew+U6jZ8=) 7: abIRkvXA16AAHlSO5p3TE1C1LfI.roa (hash: 9T0j6cRj8ZHW0aV1qQZZ4DGrOKKfeVBHbA9jG/FKtAY=) 8: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=) 9: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=) 10: m5uzTjKBj1YNxt9lmpL_W70mOs4.roa (hash: XT7e+1v3eFE6ptU9W+MrlhCJgipVPDN9P/6NNIsbxmg=) 11: trGLVLEbETkdoQfzTAxgA4VvfLQ.roa (hash: 2FPq9I43dwPLTtZTvTVrXSwvRWgm6ojSYSnF0bcYf2o=) 12: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=) 13: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=) 14: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: Y9K3XHSJjGG5Sn0sc/YUA7yoxcRuQy5pOvisN2ERgEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0f:1d:54:7a:f6:79:2f:6a:02:48:7c:dc:31:5e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Dec 30 07:00:42 2025 GMT Not After : Dec 31 07:00:42 2025 GMT Subject: CN=7a67ec9de0f577d3ff7073c2e09e7c4f1799c84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:8b:ff:07:29:b4:b7:f0:15:3d:3e:99:d3: d2:09:bf:8b:09:38:6c:0a:bf:d4:8d:6e:fc:39:59: a1:c2:a0:a1:2b:36:dc:f8:2d:a3:71:c1:94:c7:38: 8a:5d:74:ef:99:28:46:05:25:bf:99:25:da:56:fd: b6:32:58:f1:38:36:dc:fd:e5:e0:3d:d1:22:c7:93: 09:6c:eb:c3:8d:21:2a:92:3a:49:84:5f:dd:a5:83: e9:3d:14:df:69:6f:86:b3:71:47:cf:79:94:2a:cc: 4c:cc:33:5e:2e:55:b8:d5:2f:3e:ea:cc:92:ae:7d: b6:20:ae:a5:38:fb:d7:0d:99:5e:76:55:e7:6b:7a: 8e:6a:79:3d:8f:af:8a:cd:51:cd:6d:c4:b6:5b:39: b7:05:24:30:15:ea:c4:55:c2:5a:4e:0c:ec:54:8c: 9f:c7:ba:e7:a8:76:87:18:c6:05:0b:8a:7a:02:17: db:2a:34:03:b3:1e:58:36:73:ea:3f:2f:cd:aa:ff: 11:bc:45:18:f4:8d:85:bb:f1:e7:d4:fc:e9:36:f8: d0:66:fa:99:3c:49:cc:92:23:fa:0f:7a:ba:8a:37: 95:3c:e8:8a:1d:eb:09:1d:a7:c0:b6:0f:c1:06:84: e4:68:45:10:d2:24:60:bd:19:f7:ff:f5:29:67:fa: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:67:EC:9D:E0:F5:77:D3:FF:70:73:C2:E0:9E:7C:4F:17:99:C8:4D X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1b:74:ba:17:6d:3e:0d:a4:ab:89:31:45:7e:f0:fb:eb:12: 4b:ee:5c:ef:27:96:73:ee:ff:14:ad:3f:92:57:6e:ff:b8:a1: 1f:1c:aa:45:be:ed:a6:01:35:39:e2:43:f6:10:90:f1:ad:20: 5d:4f:2c:64:96:1f:99:93:5f:fb:ce:5b:33:a3:ce:7d:45:ad: 64:41:ea:8d:11:83:86:e9:4c:95:6e:9f:03:71:25:4a:d5:8e: a0:09:a0:20:7f:6c:98:c8:5b:73:45:f4:67:f4:6c:20:a2:8c: 21:fb:3e:61:68:50:ba:cd:f3:ed:fa:86:05:36:cf:cb:1c:48: a0:0e:fe:df:09:2f:7c:29:c9:95:af:16:bc:52:e4:b5:a3:35: a5:af:b7:0c:9f:3e:75:ac:41:e2:82:29:e6:40:90:7a:38:65: 8e:1a:35:02:86:05:66:15:b3:38:55:34:97:ed:e8:57:15:35: 19:86:83:ad:19:8d:ed:65:fe:ca:88:09:d4:fb:b1:44:12:5c: 0e:e9:69:9a:de:b2:de:58:3c:ce:84:2b:2c:50:85:60:1d:81: 19:65:99:8b:06:30:9f:fb:cc:58:db:08:33:7c:17:b3:68:92: 42:15:58:33:c1:42:15:7a:7e:20:65:ec:42:41:ac:29:07:22: 76:04:4b:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuDx1UevZ5L2oCSHzcMV5hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUxMjMwMDcwMDQyWhcNMjUxMjMxMDcwMDQyWjAzMTEwLwYDVQQD Eyg3YTY3ZWM5ZGUwZjU3N2QzZmY3MDczYzJlMDllN2M0ZjE3OTljODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf+L/wcptLfwFT0+mdPSCb+LCThs Cr/UjW78OVmhwqChKzbc+C2jccGUxziKXXTvmShGBSW/mSXaVv22MljxODbc/eXg PdEix5MJbOvDjSEqkjpJhF/dpYPpPRTfaW+Gs3FHz3mUKsxMzDNeLlW41S8+6syS rn22IK6lOPvXDZledlXna3qOank9j6+KzVHNbcS2Wzm3BSQwFerEVcJaTgzsVIyf x7rnqHaHGMYFC4p6AhfbKjQDsx5YNnPqPy/Nqv8RvEUY9I2Fu/Hn1PzpNvjQZvqZ PEnMkiP6D3q6ijeVPOiKHesJHafAtg/BBoTkaEUQ0iRgvRn3//UpZ/rkLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpn7J3g9XfT/3BzwuCefE8XmchNMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxt0uhdt Pg2kq4kxRX7w++sSS+5c7yeWc+7/FK0/kldu/7ihHxyqRb7tpgE1OeJD9hCQ8a0g XU8sZJYfmZNf+85bM6POfUWtZEHqjRGDhulMlW6fA3ElStWOoAmgIH9smMhbc0X0 Z/RsIKKMIfs+YWhQus3z7fqGBTbPyxxIoA7+3wkvfCnJla8WvFLktaM1pa+3DJ8+ daxB4oIp5kCQejhljho1AoYFZhWzOFU0l+3oVxU1GYaDrRmN7WX+yogJ1PuxRBJc Dulpmt6y3lg8zoQrLFCFYB2BGWWZiwYwn/vMWNsIM3wXs2iSQhVYM8FCFXp+IGXs QkGsKQcidgRLqw== -----END CERTIFICATE-----Generated at Tue Dec 30 14:58:24 2025 by rpki-client