This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft File: zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json) Hash identifier: kQZxXPbjhhPvHz2jAhrt3u7JClCK1W1j97AumXZMbx8= Subject key identifier: C3:D4:E5:D7:D5:8C:3F:E2:7D:46:16:66:C8:0A:78:6D:BD:13:28:B2 Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27 Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627 Certificate serial: 019B717DD4A8958390D1CE9DD8B9B86C79BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft Manifest number: 0715 Signing time: Tue 30 Dec 2025 23:00:30 +0000 Manifest this update: Tue 30 Dec 2025 23:00:30 +0000 Manifest next update: Wed 31 Dec 2025 23:00:30 +0000 Files and hashes: 1: FnA6f4DOd265nGzqUSApRurvL20.roa (hash: CKai/Ita+qQk4qWCNkCUXx6BxPFuVd8UKoy7z8Mf368=) 2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: 5hDm1T74D5mmW/8PUc8IWb+gB5rW4BA51NrN7vxOaaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7d:d4:a8:95:83:90:d1:ce:9d:d8:b9:b8:6c:79:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627 Validity Not Before: Dec 30 23:00:30 2025 GMT Not After : Dec 31 23:00:30 2025 GMT Subject: CN=c3d4e5d7d58c3fe27d461666c80a786dbd1328b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:24:15:5d:46:24:7b:8b:0b:54:60:d5:bf:bf: 04:fc:32:aa:d3:c3:91:b9:c8:dd:97:ed:2e:e1:9b: 7c:59:49:56:e8:29:cd:c1:13:68:d9:14:53:c4:47: 6e:f4:ad:e9:c8:6c:84:10:d6:f3:af:64:9a:e6:6b: 25:02:c4:40:ac:c9:cc:e0:62:94:88:2b:a8:f0:4e: b8:f0:41:0f:6c:ae:47:5b:21:2f:c2:3d:45:15:65: 9d:cb:10:79:de:46:50:5d:93:7e:c4:46:38:32:e7: 38:92:f0:24:73:2e:51:84:b6:f6:d2:50:2f:bd:98: c9:e9:6a:73:bd:a6:1e:f7:7c:55:3d:ca:4b:0e:fd: b2:d3:e8:7c:51:df:59:ab:ac:7b:04:84:c8:49:7d: bc:ed:7b:99:a3:e2:c8:2f:97:c6:f0:2e:18:6c:12: 54:62:58:1b:82:11:fb:fa:d9:cf:9c:b1:0e:d9:55: 61:10:c9:d3:a7:e5:da:df:19:07:2d:a3:2c:8c:40: 37:f3:29:ce:7b:3e:23:91:66:9a:ca:eb:d4:d0:89: 56:44:0d:49:6b:28:5b:a6:bc:8a:8c:b7:56:8f:69: c6:5a:70:53:12:b6:3d:ec:89:98:21:20:fa:d3:59: ca:bd:78:20:de:76:37:e5:ce:51:06:50:23:1e:7d: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D4:E5:D7:D5:8C:3F:E2:7D:46:16:66:C8:0A:78:6D:BD:13:28:B2 X509v3 Authority Key Identifier: keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:dc:90:f0:c4:cd:e5:ab:de:c0:67:76:b2:f3:d9:dc:8a:3b: 35:27:62:bf:e8:a9:7d:b0:06:93:a1:aa:17:a3:d7:66:78:96: e8:e4:49:c4:ff:a8:8a:ee:ef:a5:5b:29:80:1f:4b:b7:b2:78: 3a:0b:53:16:6a:08:93:fc:9b:6b:7c:31:f5:ed:7f:9a:98:bb: ba:c8:e1:33:ef:3e:00:f1:6a:0c:30:91:a4:cf:4a:43:ff:ca: b0:c6:da:40:02:1d:c7:32:00:5c:a3:13:90:d0:ee:9b:a6:5b: 61:e6:53:62:87:ab:12:52:8e:a0:a5:3a:e2:5f:48:2b:73:1c: 4c:f9:4e:3c:19:9c:ca:fc:99:53:65:39:f2:b2:c0:44:c1:40: be:1f:52:12:f2:93:4e:40:76:04:f9:b6:71:62:98:c7:25:ca: 36:94:cf:65:a2:c3:69:c1:17:d7:d3:6c:d7:6d:99:9a:3b:89: bf:e4:06:ec:20:3f:7c:ef:da:67:63:96:87:7a:2d:5c:9a:4e: 46:da:ec:c9:2f:83:47:91:ec:f8:bd:c4:4b:03:11:5f:f7:36: bd:18:7f:8d:24:7b:b8:7b:11:04:f7:48:5d:1d:65:a0:4f:b8: 62:59:d2:b7:94:05:1b:12:c0:f0:fe:60:48:62:9b:4d:91:e3: ce:8e:74:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfdSolYOQ0c6d2Lm4bHm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTg0MTQwY2QxYTIyM2Y2MzhiNzk5NmY1NDg5ZjQ4NWQ4 ZWU2MjcwHhcNMjUxMjMwMjMwMDMwWhcNMjUxMjMxMjMwMDMwWjAzMTEwLwYDVQQD EyhjM2Q0ZTVkN2Q1OGMzZmUyN2Q0NjE2NjZjODBhNzg2ZGJkMTMyOGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CQVXUYke4sLVGDVv78E/DKq08OR ucjdl+0u4Zt8WUlW6CnNwRNo2RRTxEdu9K3pyGyEENbzr2Sa5mslAsRArMnM4GKU iCuo8E648EEPbK5HWyEvwj1FFWWdyxB53kZQXZN+xEY4Muc4kvAkcy5RhLb20lAv vZjJ6WpzvaYe93xVPcpLDv2y0+h8Ud9Zq6x7BITISX287XuZo+LIL5fG8C4YbBJU YlgbghH7+tnPnLEO2VVhEMnTp+Xa3xkHLaMsjEA38ynOez4jkWaayuvU0IlWRA1J ayhbpryKjLdWj2nGWnBTErY97ImYISD601nKvXgg3nY35c5RBlAjHn2pEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPU5dfVjD/ifUYWZsgKeG29EyiyMB8GA1UdIwQY MBaAFM8YQUDNGiI/Y4t5lvVIn0hdjuYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhoQlFNMGFJajlqaTNtVzlVaWZTRjJPNWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wN2JmMjktMDdkMS00ZGFmLWIzYmIt Y2JmYjJjN2ZiYWRkLzEvenhoQlFNMGFJajlqaTNtVzlVaWZTRjJPNWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wN2JmMjktMDdkMS00ZGFmLWIzYmItY2JmYjJjN2ZiYWRk LzEvenhoQlFNMGFJajlqaTNtVzlVaWZTRjJPNWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtyQ8MTN 5avewGd2svPZ3Io7NSdiv+ipfbAGk6GqF6PXZniW6ORJxP+oiu7vpVspgB9Lt7J4 OgtTFmoIk/yba3wx9e1/mpi7usjhM+8+APFqDDCRpM9KQ//KsMbaQAIdxzIAXKMT kNDum6ZbYeZTYoerElKOoKU64l9IK3McTPlOPBmcyvyZU2U58rLARMFAvh9SEvKT TkB2BPm2cWKYxyXKNpTPZaLDacEX19Ns122ZmjuJv+QG7CA/fO/aZ2OWh3otXJpO RtrsyS+DR5Hs+L3ESwMRX/c2vRh/jSR7uHsRBPdIXR1loE+4YlnSt5QFGxLA8P5g SGKbTZHjzo502Q== -----END CERTIFICATE-----Generated at Wed Dec 31 05:55:58 2025 by rpki-client