This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json) Hash identifier: WQEy2FkR9zIdab9Npan38KdtDblN34N0GhjWg0TZ8uI= Subject key identifier: 12:33:2E:A2:1D:BD:83:27:A7:CF:C6:7C:12:37:83:46:2D:DB:42:BE Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb Certificate serial: 019B3A9006CF36FF95913DAD3A59F5B517C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft Manifest number: 14A3 Signing time: Sat 20 Dec 2025 07:01:15 +0000 Manifest this update: Sat 20 Dec 2025 07:01:15 +0000 Manifest next update: Sun 21 Dec 2025 07:01:15 +0000 Files and hashes: 1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=) 2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: db+9mDGWFUoDdSVQraf14pb9EVmcAEg+FoeCXORwlPs=) 3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:06:cf:36:ff:95:91:3d:ad:3a:59:f5:b5:17:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb Validity Not Before: Dec 20 07:01:15 2025 GMT Not After : Dec 21 07:01:15 2025 GMT Subject: CN=12332ea21dbd8327a7cfc67c123783462ddb42be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:53:98:b0:98:b9:25:de:f1:96:47:0a:71: 94:b4:70:85:a5:19:55:96:0a:89:f1:0d:ea:c9:06: b6:51:98:82:af:5e:cc:38:04:ac:4f:18:94:bd:81: a2:b9:d8:04:b5:b1:b8:31:57:7d:21:b1:a7:c1:9f: 51:1c:45:46:d6:c3:7b:30:a4:8a:c7:25:43:25:1c: 8f:8f:11:94:91:ea:d9:73:ec:95:63:53:c3:9a:dd: 75:c6:65:b6:ed:dc:5b:c3:05:6a:7f:1e:26:27:16: f5:de:94:81:79:72:91:9e:0b:00:62:f9:35:ba:f2: d2:2a:0d:5d:1e:de:e5:ca:36:f6:fd:16:2c:38:f5: a2:8d:af:a3:03:bc:a0:a6:4e:9b:2e:cf:b4:23:f7: 6e:de:db:a3:4d:f1:9f:48:4c:f2:ba:90:e5:70:95: fe:d7:28:09:08:c0:dd:2b:2d:5c:48:8f:e2:19:d2: 05:c5:97:e3:c3:4b:3d:3a:f5:6c:be:4e:5a:ec:f7: 8d:88:24:13:03:af:54:c4:cc:74:2d:cd:56:99:fd: 49:9e:05:ef:56:51:41:f8:5b:0d:63:57:7f:70:5e: c1:0c:b5:93:c6:be:fd:ea:86:7f:13:64:ab:c0:fa: ac:e4:39:1f:65:9a:b1:af:9f:35:c0:ee:88:18:86: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:33:2E:A2:1D:BD:83:27:A7:CF:C6:7C:12:37:83:46:2D:DB:42:BE X509v3 Authority Key Identifier: keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c4:95:7c:ff:db:0b:8d:a3:43:b2:22:47:0f:07:76:8e:6e: 06:70:07:88:37:29:78:bf:72:1c:ca:12:a3:cb:1b:a0:91:b4: 24:59:06:bb:c4:88:f8:b3:0b:d7:54:df:bd:a4:38:dc:54:76: 24:52:76:6a:9a:d0:7d:84:f4:db:0e:10:58:eb:ac:30:1c:e0: 36:d4:0c:78:89:83:8b:f2:82:0e:d5:e2:41:53:78:73:8c:4a: b2:d8:1d:ec:08:e4:21:3d:50:d4:b1:0c:56:99:d4:8b:7a:f4: 5b:99:9e:1a:1e:a4:ab:cb:a8:83:8a:67:df:4a:dc:19:bc:d0: d4:53:e7:e2:cf:80:1d:30:7d:e5:e3:04:1c:75:bb:26:cf:7f: b3:d1:3d:fb:78:5c:09:24:ad:25:57:22:ac:8a:71:20:6e:75: 40:e8:af:f4:01:f5:b5:42:e8:37:5e:f4:cd:6b:a9:bd:6e:64: 36:88:6c:1e:bf:6f:e8:2e:ea:1a:37:c9:f1:e3:d1:96:a1:07: 63:39:9b:2e:9e:ec:d6:d8:bc:39:8d:63:c9:7b:3d:09:0e:d8: ee:c4:d2:88:92:36:07:01:75:6d:bc:1e:d0:21:f7:2a:36:22: bb:1e:f6:48:3c:a8:6e:fc:7c:a0:a7:4c:57:7f:85:58:11:8f: 2b:b9:b9:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kAbPNv+VkT2tOln1tRfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NWU0ZDdlYThhMzQ3MGM5NzAzZWU3NTUxNDgxYzM2Zjc3 NGZlYmIwHhcNMjUxMjIwMDcwMTE1WhcNMjUxMjIxMDcwMTE1WjAzMTEwLwYDVQQD EygxMjMzMmVhMjFkYmQ4MzI3YTdjZmM2N2MxMjM3ODM0NjJkZGI0MmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv91TmLCYuSXe8ZZHCnGUtHCFpRlV lgqJ8Q3qyQa2UZiCr17MOASsTxiUvYGiudgEtbG4MVd9IbGnwZ9RHEVG1sN7MKSK xyVDJRyPjxGUkerZc+yVY1PDmt11xmW27dxbwwVqfx4mJxb13pSBeXKRngsAYvk1 uvLSKg1dHt7lyjb2/RYsOPWija+jA7ygpk6bLs+0I/du3tujTfGfSEzyupDlcJX+ 1ygJCMDdKy1cSI/iGdIFxZfjw0s9OvVsvk5a7PeNiCQTA69UxMx0Lc1Wmf1JngXv VlFB+FsNY1d/cF7BDLWTxr796oZ/E2SrwPqs5DkfZZqxr581wO6IGIan3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIzLqIdvYMnp8/GfBI3g0Yt20K+MB8GA1UdIwQY MBaAFGZeTX6oo0cMlwPudVFIHDb3dP67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmIt MTYyZWQ2MjRlMjgyLzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmItMTYyZWQ2MjRlMjgy LzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsSVfP/b C42jQ7IiRw8Hdo5uBnAHiDcpeL9yHMoSo8sboJG0JFkGu8SI+LML11TfvaQ43FR2 JFJ2aprQfYT02w4QWOusMBzgNtQMeImDi/KCDtXiQVN4c4xKstgd7AjkIT1Q1LEM VpnUi3r0W5meGh6kq8uog4pn30rcGbzQ1FPn4s+AHTB95eMEHHW7Js9/s9E9+3hc CSStJVcirIpxIG51QOiv9AH1tULoN170zWupvW5kNohsHr9v6C7qGjfJ8ePRlqEH YzmbLp7s1ti8OY1jyXs9CQ7Y7sTSiJI2BwF1bbwe0CH3KjYiux72SDyobvx8oKdM V3+FWBGPK7m5Dw== -----END CERTIFICATE-----Generated at Sat Dec 20 11:33:37 2025 by rpki-client