This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft File: zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft (raw, json) Hash identifier: w4U0VzBEKg/UTjavN0D8UcOdzXZtbPl9qWK+X7ZX57s= Subject key identifier: 2C:50:B5:99:D3:2F:57:3A:20:C4:39:A1:3F:E1:F5:F3:89:74:2B:3B Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3 Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3 Certificate serial: 019B3B34A66F4F60D19C44CD411F5056464F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft Manifest number: 1447 Signing time: Sat 20 Dec 2025 10:01:04 +0000 Manifest this update: Sat 20 Dec 2025 10:01:04 +0000 Manifest next update: Sun 21 Dec 2025 10:01:04 +0000 Files and hashes: 1: AalZ3RZGPmVBPL8EbkB-YzwV1bA.roa (hash: xQN6NagFLnVfkOh0FRJ47TszfhI1OJXGBTnKGRr5AuM=) 2: zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl (hash: tVqRZUXuKW4iaU3wlpFqgj2iM8HAKwy5pB7KMlxIcns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:a6:6f:4f:60:d1:9c:44:cd:41:1f:50:56:46:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3 Validity Not Before: Dec 20 10:01:04 2025 GMT Not After : Dec 21 10:01:04 2025 GMT Subject: CN=2c50b599d32f573a20c439a13fe1f5f389742b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:92:bd:1a:51:4d:c5:7b:1a:27:9a:24:c0:74: f7:5e:28:e5:e5:d0:67:bc:f2:23:32:d6:a6:40:37: d7:b4:01:01:2d:34:52:8a:41:31:71:c6:f8:34:9e: ac:fb:6f:a5:4d:2e:7a:07:20:71:b4:49:a3:dd:17: 8c:bf:41:e5:8f:6b:66:6c:48:c4:20:c1:e5:38:da: d8:11:46:ca:35:9b:68:a0:a0:24:20:29:4a:ce:09: 3b:48:92:15:37:d9:0a:13:d0:00:ea:45:aa:e6:d6: a4:16:bc:81:4b:ef:b3:7c:d0:1c:5c:8d:3b:a0:37: 39:6d:ff:45:bb:02:c0:af:62:4a:c1:9d:a1:68:55: 3f:6b:0c:87:fd:11:07:6e:c3:d5:ce:e3:83:64:40: 96:7b:12:7e:5b:17:82:bc:cb:65:ad:22:f3:57:0d: e7:b7:38:41:3b:a0:01:8e:10:e7:09:c1:3c:3b:04: 2c:ce:08:0d:02:12:11:72:8f:6b:7b:e0:41:08:20: 4c:35:fd:7b:51:0c:89:5d:b3:48:0a:b9:8a:05:2c: 0b:ac:21:45:4d:89:98:81:e0:c1:16:75:45:c2:96: aa:1a:6a:c5:15:41:67:39:9b:cc:dc:b8:d2:14:26: 56:b8:df:41:26:18:1e:a4:8e:39:a4:a2:2e:dd:a3: 08:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:50:B5:99:D3:2F:57:3A:20:C4:39:A1:3F:E1:F5:F3:89:74:2B:3B X509v3 Authority Key Identifier: keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:81:dd:8d:60:43:81:c5:02:50:15:8c:76:8b:68:27:23:f3: db:5e:78:b5:da:cb:ab:c4:cd:ee:ef:4a:be:78:43:0e:3c:79: 51:0f:60:1f:11:ad:0a:d0:bd:93:64:93:51:bb:7e:ce:70:40: 14:79:58:00:83:60:b9:95:ed:77:56:c0:43:42:6b:97:f0:7c: e4:fc:89:63:11:dd:2d:92:91:55:9a:a0:99:8d:46:b4:07:90: bb:61:37:31:f6:23:1a:9d:84:a4:03:a3:5a:54:33:fc:70:2c: 61:6b:89:5d:ff:8d:09:5f:15:80:8f:58:49:e1:79:95:07:69: bb:92:0e:98:30:be:42:87:92:20:2f:b1:0c:7b:f3:3b:5f:53: aa:a8:c7:c4:fd:02:18:42:28:ef:ad:be:35:ce:82:5c:e9:0d: 3c:83:2c:11:59:db:ad:d8:6d:9c:1a:00:83:5e:26:5e:b5:86: 8a:6c:f5:0e:13:6a:be:93:21:8f:f9:9f:e6:9c:e3:b2:06:0e: 41:1f:f3:53:d5:5a:d7:e5:09:d8:42:37:5c:be:5b:27:7d:b1: 0a:ce:36:49:8d:99:7e:f7:47:4e:4b:81:9f:cc:bf:15:0c:e5: 1e:25:11:22:42:26:cf:c9:55:f8:07:ea:ee:12:c5:66:3a:4f: 06:93:5e:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NKZvT2DRnETNQR9QVkZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNjVjMmY5NThhN2UyMWEzMTM1OTE2ZWVkMWE0ZDk3ODZl MDlkYTMwHhcNMjUxMjIwMTAwMTA0WhcNMjUxMjIxMTAwMTA0WjAzMTEwLwYDVQQD EygyYzUwYjU5OWQzMmY1NzNhMjBjNDM5YTEzZmUxZjVmMzg5NzQyYjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5K9GlFNxXsaJ5okwHT3Xijl5dBn vPIjMtamQDfXtAEBLTRSikExccb4NJ6s+2+lTS56ByBxtEmj3ReMv0Hlj2tmbEjE IMHlONrYEUbKNZtooKAkIClKzgk7SJIVN9kKE9AA6kWq5takFryBS++zfNAcXI07 oDc5bf9FuwLAr2JKwZ2haFU/awyH/REHbsPVzuODZECWexJ+WxeCvMtlrSLzVw3n tzhBO6ABjhDnCcE8OwQszggNAhIRco9re+BBCCBMNf17UQyJXbNICrmKBSwLrCFF TYmYgeDBFnVFwpaqGmrFFUFnOZvM3LjSFCZWuN9BJhgepI45pKIu3aMI/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxQtZnTL1c6IMQ5oT/h9fOJdCs7MB8GA1UdIwQY MBaAFM5lwvlYp+IaMTWRbu0aTZeG4J2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yZWE5MjgtZDk5Ni00YzRkLWIxM2It NWQ1OTZkMDBkZTljLzEvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yZWE5MjgtZDk5Ni00YzRkLWIxM2ItNWQ1OTZkMDBkZTlj LzEvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4HdjWBD gcUCUBWMdotoJyPz2154tdrLq8TN7u9KvnhDDjx5UQ9gHxGtCtC9k2STUbt+znBA FHlYAINguZXtd1bAQ0Jrl/B85PyJYxHdLZKRVZqgmY1GtAeQu2E3MfYjGp2EpAOj WlQz/HAsYWuJXf+NCV8VgI9YSeF5lQdpu5IOmDC+QoeSIC+xDHvzO19TqqjHxP0C GEIo762+Nc6CXOkNPIMsEVnbrdhtnBoAg14mXrWGimz1DhNqvpMhj/mf5pzjsgYO QR/zU9Va1+UJ2EI3XL5bJ32xCs42SY2ZfvdHTkuBn8y/FQzlHiURIkImz8lV+Afq 7hLFZjpPBpNeFg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:51:50 2025 by rpki-client