This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: dnUn8el5i+YbFpZWNoGIjbhyRpCHCEM5oVeZDYKDMdY= Subject key identifier: BE:9D:1B:02:76:7E:4E:21:77:AE:1C:E8:52:8C:FC:11:EA:55:34:A7 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019B3AC6E8F00DA7F43899A2AF7103209243 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0FE2 Signing time: Sat 20 Dec 2025 08:01:12 +0000 Manifest this update: Sat 20 Dec 2025 08:01:12 +0000 Manifest next update: Sun 21 Dec 2025 08:01:12 +0000 Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=) 2: FDfmsu_IgoQfV2wt46Usr4SYc3g.roa (hash: F5BDEBTgZRkZKg47n0IHrA45+01eu4MWtwsHqaOf0SA=) 3: G2YMUT8WZMSTQ7MK3_Sp1FETDAk.roa (hash: hIMlTU+DT4A6A7uZvfD/8ICFCxVi5QCIz8WhtkNI7dw=) 4: JiN8PiBQMRbhwwfYP31TY4I7csw.roa (hash: h0TWFXGwNIH5C18gFdaIzCuKZqZvskN5p9wyN3nfeO8=) 5: LHRhRb7BbKRJgX65EILPXtPyA9g.roa (hash: JYxrBZ5k+jIHAeW+R9UtHHezy3w3r2SNVSn9g/11gwU=) 6: _Hg3RiRRbCVFdEVQSVANmXe1AZM.roa (hash: craDG3qBGDlj43lq+QC1MGx/jTT9DqlZJhNew+U6jZ8=) 7: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=) 8: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=) 9: m5uzTjKBj1YNxt9lmpL_W70mOs4.roa (hash: XT7e+1v3eFE6ptU9W+MrlhCJgipVPDN9P/6NNIsbxmg=) 10: trGLVLEbETkdoQfzTAxgA4VvfLQ.roa (hash: 2FPq9I43dwPLTtZTvTVrXSwvRWgm6ojSYSnF0bcYf2o=) 11: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=) 12: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=) 13: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: SmE3EPAjaqBYN4qlaVk077jPqBeYERCmhX5yjD8nl9Q=) 14: zyelqOglgtBz_gr9QNv1lTVwAkM.roa (hash: yfFHop5WpzuJkOeUSy2+RjJbXW/uKtaXVgTVEPu3WAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:e8:f0:0d:a7:f4:38:99:a2:af:71:03:20:92:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Dec 20 08:01:12 2025 GMT Not After : Dec 21 08:01:12 2025 GMT Subject: CN=be9d1b02767e4e2177ae1ce8528cfc11ea5534a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2c:fe:60:63:01:6e:3a:31:f7:30:76:8e:44: f1:a7:0d:2c:5f:f5:37:64:42:0a:23:c1:80:aa:9c: 08:11:17:ba:22:c6:d8:93:f5:b2:53:11:bd:f0:b6: ea:33:dd:cf:32:6b:c7:e5:27:26:7f:2b:39:0b:61: 58:66:e7:4e:81:4f:b4:63:c4:ae:32:a2:3e:ef:d7: b1:4c:a6:38:65:79:9d:ff:00:f9:23:ef:82:60:9c: 06:a7:1f:de:88:d0:69:39:1a:8d:4a:8d:f7:ce:f9: 1b:c0:b1:e1:68:61:ac:94:73:bd:c2:85:9f:af:0b: b6:73:46:c7:48:1a:ce:1a:73:11:5f:8d:38:d4:56: 2b:be:d0:db:0c:fb:59:50:b5:c9:b8:76:23:39:8c: 82:72:d5:b2:2b:60:85:1b:de:34:6b:c6:ce:70:f7: a7:93:9f:57:87:60:27:cb:e4:fd:62:00:7f:b9:ff: 1d:a3:bb:d3:eb:4b:f3:a6:ce:b8:82:39:11:8c:55: 54:57:52:0a:ed:7b:e9:c6:63:bf:6c:37:c0:83:80: b5:23:86:6e:28:f5:37:a1:20:1e:5c:f3:55:e4:fa: c2:e8:95:e2:7f:75:ab:21:24:a3:8c:ba:a9:90:f4: 01:22:f4:88:50:82:1e:54:c5:da:02:ed:21:24:cf: 03:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9D:1B:02:76:7E:4E:21:77:AE:1C:E8:52:8C:FC:11:EA:55:34:A7 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fe:c6:58:3d:41:11:c7:c7:93:fe:d0:85:52:76:01:c4:d4: de:4c:a0:5c:f7:8b:70:78:6a:bd:39:c1:b2:f5:2c:0c:47:27: 1c:5f:bf:89:d8:ff:49:44:4f:8d:ca:3b:07:a7:51:30:7f:cc: 32:6d:3d:c3:8f:13:17:96:4b:da:71:b7:b7:5f:b4:fd:79:1e: 06:37:d2:7c:7d:2d:c0:51:19:fe:00:fe:b8:a5:8e:00:15:b7: 0e:9a:0f:ef:a1:16:8e:3d:07:39:da:3e:57:11:d5:c7:ba:af: 46:2b:f2:02:2b:fd:9b:06:e3:65:a5:7b:ed:df:6c:70:cd:45: 9c:24:91:7c:66:46:40:16:1d:86:16:74:0c:fb:25:fc:25:04: f2:ae:c0:dc:48:b2:92:ed:53:2c:da:1d:82:80:84:3a:35:81: 4a:c6:e1:0b:80:a0:7c:1f:18:ff:c4:ab:26:83:60:f8:87:ef: 7c:36:a4:fa:1e:16:39:1d:bc:36:31:dd:5a:32:db:02:7b:9f: fb:c5:3b:31:6f:1b:72:59:53:9d:9b:42:a8:56:1e:c3:76:dd: 49:37:a1:51:47:42:f6:59:f6:04:1f:80:d2:41:d3:cf:b2:22: 25:c6:0e:a2:6e:db:d8:5d:f7:fc:a6:ee:63:cb:09:68:26:65: 4d:c7:61:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xujwDaf0OJmir3EDIJJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUxMjIwMDgwMTEyWhcNMjUxMjIxMDgwMTEyWjAzMTEwLwYDVQQD EyhiZTlkMWIwMjc2N2U0ZTIxNzdhZTFjZTg1MjhjZmMxMWVhNTUzNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Sz+YGMBbjox9zB2jkTxpw0sX/U3 ZEIKI8GAqpwIERe6IsbYk/WyUxG98LbqM93PMmvH5Scmfys5C2FYZudOgU+0Y8Su MqI+79exTKY4ZXmd/wD5I++CYJwGpx/eiNBpORqNSo33zvkbwLHhaGGslHO9woWf rwu2c0bHSBrOGnMRX4041FYrvtDbDPtZULXJuHYjOYyCctWyK2CFG940a8bOcPen k59Xh2Any+T9YgB/uf8do7vT60vzps64gjkRjFVUV1IK7XvpxmO/bDfAg4C1I4Zu KPU3oSAeXPNV5PrC6JXif3WrISSjjLqpkPQBIvSIUIIeVMXaAu0hJM8DKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6dGwJ2fk4hd64c6FKM/BHqVTSnMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/7GWD1B EcfHk/7QhVJ2AcTU3kygXPeLcHhqvTnBsvUsDEcnHF+/idj/SURPjco7B6dRMH/M Mm09w48TF5ZL2nG3t1+0/XkeBjfSfH0twFEZ/gD+uKWOABW3DpoP76EWjj0HOdo+ VxHVx7qvRivyAiv9mwbjZaV77d9scM1FnCSRfGZGQBYdhhZ0DPsl/CUE8q7A3Eiy ku1TLNodgoCEOjWBSsbhC4CgfB8Y/8SrJoNg+IfvfDak+h4WOR28NjHdWjLbAnuf +8U7MW8bcllTnZtCqFYew3bdSTehUUdC9ln2BB+A0kHTz7IiJcYOom7b2F33/Kbu Y8sJaCZlTcdhTA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:04:37 2025 by rpki-client