This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json) Hash identifier: y1tcQojNZ7nkmk4Cas8vzTQAuIMYWfjotIVD6AYFooQ= Subject key identifier: 8D:6C:9F:3A:13:AD:CE:51:95:74:6E:CB:4A:6C:A8:7C:83:DE:DB:62 Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5 Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5 Certificate serial: 019B3E357483FDED1F2DCE40975D02CB3E89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft Manifest number: 0A4A Signing time: Sun 21 Dec 2025 00:00:49 +0000 Manifest this update: Sun 21 Dec 2025 00:00:49 +0000 Manifest next update: Mon 22 Dec 2025 00:00:49 +0000 Files and hashes: 1: YDAV-stFbBYknK-MHQjAFGKIviM.roa (hash: SdDeY9dzrBZujPQFvilvXbGOkdZa6vv8FLkLN5jjZVw=) 2: dEUObDWNa5FqKquGmU4zDVPcPTA.asa (hash: X0dpeKb2QJ26yWMn3EtPwF2hrxKdQ3KKhaqlM/ZFVAA=) 3: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: rGYZM5aIDL07wEp+DCk2R4a8KHOS7MXSzo5GdDH1n0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:74:83:fd:ed:1f:2d:ce:40:97:5d:02:cb:3e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5 Validity Not Before: Dec 21 00:00:49 2025 GMT Not After : Dec 22 00:00:49 2025 GMT Subject: CN=8d6c9f3a13adce5195746ecb4a6ca87c83dedb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:0e:c4:9a:bc:ae:04:e4:bb:ee:c2:37:92: b4:91:15:e2:7c:b4:21:76:a3:05:6e:71:8b:d9:4f: bb:a8:e9:06:3a:f7:bb:4f:f1:fe:db:83:60:8c:06: 4b:a6:37:60:a6:c9:cb:76:d3:b9:db:7e:94:35:3f: b8:65:a4:45:8d:38:36:a9:5a:18:0f:4a:09:95:4d: c2:c0:60:08:d0:4e:54:81:ac:98:5d:31:88:29:9c: 3f:09:74:98:4d:2c:1f:6d:36:5b:02:6d:00:a8:d8: aa:e3:33:d5:ee:5e:d5:12:d1:b0:cf:52:8b:55:f2: 64:6b:d8:ae:d2:48:a9:e9:ec:b4:54:9f:d3:1e:18: 56:81:38:2a:7a:d4:93:d5:c6:73:2d:22:a8:bb:2b: ca:cc:cd:ac:78:74:45:3e:77:a7:89:26:bc:71:29: 34:92:07:a0:f1:a8:0f:4f:ab:e8:9c:49:5f:73:33: f9:5d:93:c3:41:57:18:35:85:03:a2:0e:74:d8:50: 61:7f:ba:46:5b:d7:ea:5e:cd:78:e3:12:a5:04:8a: 69:c1:0a:87:4e:78:c3:d0:1b:e6:1f:87:10:65:9a: 09:8c:7d:21:be:e5:f9:28:07:42:e6:cc:cd:8f:d8: 98:6a:e6:bd:8a:0a:f3:8e:f0:e8:f5:51:02:1b:07: a8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6C:9F:3A:13:AD:CE:51:95:74:6E:CB:4A:6C:A8:7C:83:DE:DB:62 X509v3 Authority Key Identifier: keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e2:ca:7f:c9:14:72:c4:f1:8e:b5:08:b6:e0:81:3d:9f:9a: 5f:09:85:e1:7b:74:17:1f:4d:d5:07:d0:8d:99:ec:01:8a:5c: 5b:66:c9:ed:99:92:47:ab:12:1c:a2:e3:04:62:c1:c0:cf:c2: 8e:a1:4f:79:10:c0:60:bc:d3:dc:a7:2e:09:b8:13:29:f3:3e: ec:1f:42:66:50:20:e7:6e:7e:8d:b4:e1:d6:f5:d0:f7:58:59: 2a:a2:5d:7f:77:fe:17:cc:a5:50:8e:2a:1e:39:3e:49:06:cb: aa:19:33:af:38:33:de:c2:7a:f9:64:d5:7b:3b:24:cb:b1:b5: 00:d5:3d:a0:22:a3:2f:d0:c0:3c:3f:08:3d:f1:c9:0a:ad:d3: 4d:7b:88:5b:f0:1f:3b:e0:0e:b7:6c:bb:46:ca:88:47:7b:99: 75:16:d2:69:25:e9:98:ce:51:3b:82:f4:eb:19:bc:01:96:cd: 4d:05:56:ce:8a:82:ea:e0:46:b1:39:e5:be:02:35:32:94:78: d8:3e:ee:61:88:c6:43:ba:82:db:49:2e:e7:42:aa:7e:c3:ad: 6c:5d:0b:29:e3:f1:2c:84:ec:47:b4:ad:34:b6:eb:56:33:ac: 76:c0:30:8e:0a:84:16:d4:8b:25:fc:95:48:8c:cb:e2:dd:f2: ad:00:1a:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NXSD/e0fLc5Al10Cyz6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNmNiYTEwYWI0NjVjZjBlZTNlNzYwMjVjNjdmODU1NGQy ZDAxYTUwHhcNMjUxMjIxMDAwMDQ5WhcNMjUxMjIyMDAwMDQ5WjAzMTEwLwYDVQQD Eyg4ZDZjOWYzYTEzYWRjZTUxOTU3NDZlY2I0YTZjYTg3YzgzZGVkYjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN0OxJq8rgTku+7CN5K0kRXifLQh dqMFbnGL2U+7qOkGOve7T/H+24NgjAZLpjdgpsnLdtO5236UNT+4ZaRFjTg2qVoY D0oJlU3CwGAI0E5UgayYXTGIKZw/CXSYTSwfbTZbAm0AqNiq4zPV7l7VEtGwz1KL VfJka9iu0kip6ey0VJ/THhhWgTgqetST1cZzLSKouyvKzM2seHRFPneniSa8cSk0 kgeg8agPT6vonElfczP5XZPDQVcYNYUDog502FBhf7pGW9fqXs144xKlBIppwQqH TnjD0BvmH4cQZZoJjH0hvuX5KAdC5szNj9iYaua9igrzjvDo9VECGweovQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1snzoTrc5RlXRuy0psqHyD3ttiMB8GA1UdIwQY MBaAFM1suhCrRlzw7j52Alxn+FVNLQGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveld5NkVLdEdYUER1UG5ZQ1hHZjRWVTB0QWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81MWRkMjEtOWRiMS00MjI0LTlhYWMt NTZhZmMzY2JkZjRlLzEveld5NkVLdEdYUER1UG5ZQ1hHZjRWVTB0QWFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81MWRkMjEtOWRiMS00MjI0LTlhYWMtNTZhZmMzY2JkZjRl LzEveld5NkVLdEdYUER1UG5ZQ1hHZjRWVTB0QWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuLKf8kU csTxjrUItuCBPZ+aXwmF4Xt0Fx9N1QfQjZnsAYpcW2bJ7ZmSR6sSHKLjBGLBwM/C jqFPeRDAYLzT3KcuCbgTKfM+7B9CZlAg525+jbTh1vXQ91hZKqJdf3f+F8ylUI4q Hjk+SQbLqhkzrzgz3sJ6+WTVezsky7G1ANU9oCKjL9DAPD8IPfHJCq3TTXuIW/Af O+AOt2y7RsqIR3uZdRbSaSXpmM5RO4L06xm8AZbNTQVWzoqC6uBGsTnlvgI1MpR4 2D7uYYjGQ7qC20ku50KqfsOtbF0LKePxLITsR7StNLbrVjOsdsAwjgqEFtSLJfyV SIzL4t3yrQAa2w== -----END CERTIFICATE-----Generated at Sun Dec 21 04:46:41 2025 by rpki-client