This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft File: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json) Hash identifier: K/qjhtCDgJ6Oi7SVMtrx2bjDEy2qfZtTcXQpW3T31HQ= Subject key identifier: 5F:BC:1F:D3:AF:9D:1C:7C:A5:F9:0D:6C:09:EC:F2:22:75:6B:AA:A1 Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8 Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8 Certificate serial: 019B3C7EBAFDDF5DD2719C652392A2DE7803 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:01:36 +0000 Manifest this update: Sat 20 Dec 2025 16:01:36 +0000 Manifest next update: Sun 21 Dec 2025 16:01:36 +0000 Files and hashes: 1: 0eX0y1ByZozFyvqGz0EfmzMn6QQ.roa (hash: 9RKCNhJsqijEbBv8dV32/+CAVglgcAVrqc5Rx6tHl+s=) 2: PrLRWGrkGlOz391B_d1bhvHtRdM.roa (hash: Zq1F0wSxITxrY6z9+vuv+6+JvubiotTrHBEnZAFhoq4=) 3: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: LJR6sp1MtXeowRqNgzGOo8Q5p1Dih1jVjscsTFaq3r8=) 4: d-rt9f-dKC8oZEWyOv7rd6kbEo8.roa (hash: K8bXuYuwS4X0pfixId+iunQp5n4hsy6zV6Ye+pRdYtA=) 5: yIea70mz68MEWf7MSufqGinRRfw.roa (hash: C1KZ935qcqSwGSABodTKIPq8sxOye3X7esfEPyg6lGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:ba:fd:df:5d:d2:71:9c:65:23:92:a2:de:78:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8 Validity Not Before: Dec 20 16:01:36 2025 GMT Not After : Dec 21 16:01:36 2025 GMT Subject: CN=5fbc1fd3af9d1c7ca5f90d6c09ecf222756baaa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bd:cb:99:fd:25:68:3a:b2:88:f0:ae:46:1f: 5e:8b:36:ae:bc:86:c3:fd:55:04:37:66:58:0b:64: c7:81:2a:72:30:99:b6:01:a1:e4:58:ad:60:fd:64: 39:1e:2f:91:64:c3:19:1a:80:6e:17:45:0a:30:e1: 56:c5:55:e1:31:4f:0e:15:d5:ef:22:47:bf:21:5b: 0f:ef:b3:d5:19:79:78:16:bb:d2:0c:54:e6:a5:6c: 4d:48:b4:ee:5a:32:18:60:be:df:34:a3:1c:f5:0b: da:97:03:24:b8:fb:a9:e8:ea:ff:1b:73:55:21:bc: 14:87:e3:51:b8:40:78:6f:6e:92:00:0a:6e:57:85: 22:40:61:4a:66:6b:7d:f1:bc:fc:b6:61:81:c8:31: b7:39:47:88:d4:d5:ea:a2:09:30:e8:99:2e:64:2a: 4e:d2:44:75:fd:e5:84:e7:e4:1b:26:cb:54:d2:92: d9:9b:d9:dc:de:6a:8a:76:05:ff:09:f8:7b:c3:f4: 95:4d:e2:a0:8f:16:22:f2:5f:76:81:ec:97:49:43: 46:b9:c1:4b:15:0d:f8:7b:b2:03:7a:61:b4:fc:01: 92:2f:d6:ea:1b:3a:db:d4:94:b1:f5:2a:75:f2:1a: 38:5c:ab:a0:90:86:79:9e:63:1b:f6:92:2e:54:4f: 82:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BC:1F:D3:AF:9D:1C:7C:A5:F9:0D:6C:09:EC:F2:22:75:6B:AA:A1 X509v3 Authority Key Identifier: keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d2:87:66:4f:46:c6:b2:4e:18:35:63:e2:50:17:c6:66:72: 7a:9b:75:90:f0:b0:4a:72:15:a9:68:15:fb:a2:91:29:86:37: 37:0b:56:80:f3:ab:82:ee:d8:6d:fe:81:e3:2d:db:85:f4:bd: e1:83:be:91:e3:72:f1:40:21:a6:43:11:a5:43:2d:ba:44:f3: 6c:17:49:9d:a9:05:84:c7:4d:5c:d0:22:f4:78:34:7e:e7:c7: ec:22:06:a9:27:97:8b:4c:bf:9e:42:da:89:35:cc:c8:81:5f: bc:31:bd:53:71:6f:50:2d:68:b1:41:54:31:82:37:82:55:f4: 2c:07:c0:e7:1e:cc:4f:33:6c:24:99:44:f5:24:65:2a:ac:b4: 46:e7:c6:c2:8c:54:2d:51:18:99:45:93:00:8b:fc:d8:72:88: a6:6a:e3:71:2e:07:ad:de:da:68:16:f5:6b:90:62:9b:df:79: da:75:a9:ff:d8:66:78:e8:75:ba:58:bc:cb:51:de:98:ef:cb: 51:32:31:df:5e:23:31:1a:55:5a:12:d5:83:1a:bf:93:dd:80: 92:f8:ef:f0:14:da:65:d4:70:97:3d:07:13:68:fe:c3:b4:bf: 2c:c6:2e:36:21:f3:51:12:bc:5b:4e:23:1a:e5:d2:20:89:4e: 37:79:09:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8frr9313ScZxlI5Ki3ngDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjM0ZjE0NTg2ZTM5OWNkMzgwMmQ5Yzg4YjFlNjdkOGRk YjAzYTgwHhcNMjUxMjIwMTYwMTM2WhcNMjUxMjIxMTYwMTM2WjAzMTEwLwYDVQQD Eyg1ZmJjMWZkM2FmOWQxYzdjYTVmOTBkNmMwOWVjZjIyMjc1NmJhYWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5b3Lmf0laDqyiPCuRh9eizauvIbD /VUEN2ZYC2THgSpyMJm2AaHkWK1g/WQ5Hi+RZMMZGoBuF0UKMOFWxVXhMU8OFdXv Ike/IVsP77PVGXl4FrvSDFTmpWxNSLTuWjIYYL7fNKMc9QvalwMkuPup6Or/G3NV IbwUh+NRuEB4b26SAApuV4UiQGFKZmt98bz8tmGByDG3OUeI1NXqogkw6JkuZCpO 0kR1/eWE5+QbJstU0pLZm9nc3mqKdgX/Cfh7w/SVTeKgjxYi8l92geyXSUNGucFL FQ34e7IDemG0/AGSL9bqGzrb1JSx9Sp18ho4XKugkIZ5nmMb9pIuVE+CvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+8H9OvnRx8pfkNbAns8iJ1a6qhMB8GA1UdIwQY MBaAFGZjTxRYbjmc04AtnIix5n2N2wOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDct MTcxZGI0NjkwYzBhLzEvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDctMTcxZGI0NjkwYzBh LzEvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNKHZk9G xrJOGDVj4lAXxmZyept1kPCwSnIVqWgV+6KRKYY3NwtWgPOrgu7Ybf6B4y3bhfS9 4YO+keNy8UAhpkMRpUMtukTzbBdJnakFhMdNXNAi9Hg0fufH7CIGqSeXi0y/nkLa iTXMyIFfvDG9U3FvUC1osUFUMYI3glX0LAfA5x7MTzNsJJlE9SRlKqy0RufGwoxU LVEYmUWTAIv82HKIpmrjcS4Hrd7aaBb1a5Bim9952nWp/9hmeOh1uli8y1HemO/L UTIx314jMRpVWhLVgxq/k92Akvjv8BTaZdRwlz0HE2j+w7S/LMYuNiHzURK8W04j GuXSIIlON3kJVg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:23:50 2025 by rpki-client