This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft File: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json) Hash identifier: +3wwa35+SDKfGi0PAxhDpkDaxaBfCJpzJuYysY4HVwk= Subject key identifier: 69:1A:BB:F3:48:35:38:A4:A9:A3:66:68:B3:E7:79:09:4C:1E:21:42 Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f Certificate serial: 019B3BA212509BA3E4E193882D31D2F30763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 12:00:35 +0000 Manifest this update: Sat 20 Dec 2025 12:00:35 +0000 Manifest next update: Sun 21 Dec 2025 12:00:35 +0000 Files and hashes: 1: 1v8i4fKHGgVFWMzHMhW8J-xxCqk.roa (hash: 3nrn/SO1kBcjpxN/GEFTE06I2/Ei7ozh8XwfvRrFcmg=) 2: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: WxP53iWeXNrARsDLcbxSTMj+UFaUh8SPJnI4qznOJdU=) 3: clYhAW8kFlSaTpdGL_6AqwLYC_c.roa (hash: XEbICpC7LdXsG9DjCaajLcED5VcPq/8r93ZX2PiFgnw=) 4: nXVN6v3CzmLleKeTxS_kRgT2CK8.roa (hash: oJxgRFyz2Xezz+l0iWGdoRK6g6HPkdzeG09BGt4Hpn8=) 5: yAPFTHuBSG8S3cBogTgaLXQHsIA.roa (hash: Dghvk7oUxYxn4x3kqmECJ3G0zYv5Ok/s1CWEsFSe7A0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:12:50:9b:a3:e4:e1:93:88:2d:31:d2:f3:07:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f Validity Not Before: Dec 20 12:00:35 2025 GMT Not After : Dec 21 12:00:35 2025 GMT Subject: CN=691abbf3483538a4a9a36668b3e779094c1e2142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:56:00:30:29:16:38:6b:4e:ce:73:83:e2:cd: 68:93:04:14:e9:7b:a7:68:b6:f4:49:d1:20:06:49: b4:4f:c2:c8:3a:bc:1b:8b:4d:96:76:ff:d2:b3:e4: 6b:bf:29:12:e9:a4:d5:e3:e2:77:40:19:03:f8:8a: 0a:79:ae:73:f6:51:30:75:17:04:82:91:e3:21:2a: e8:bd:55:01:40:1c:02:ec:e0:be:c0:34:68:74:bf: a4:54:43:6b:34:00:66:27:37:53:84:24:a4:81:48: 7e:fb:c4:ab:0c:78:e4:15:e3:32:ac:be:8b:1f:e8: 17:e2:fc:c0:58:dc:40:2c:c7:1f:85:ac:e7:a9:97: c5:e1:9e:05:9d:8b:8f:ef:1f:62:f7:9d:ea:34:bc: 67:6c:8d:4b:40:61:4c:60:b2:85:f4:6f:2a:cc:3a: e8:7a:3c:79:5b:9b:33:ee:3a:5a:15:cb:4a:ff:da: 31:11:1f:81:87:6e:a9:09:64:f0:b2:c5:0b:65:60: 45:40:6a:4a:5b:5b:30:08:16:81:bd:6e:e1:1e:58: b4:e4:d5:9a:e2:16:64:ec:65:47:b2:d5:33:08:a1: 5f:12:2e:41:55:bb:e1:69:68:dd:5b:19:76:05:0a: 09:9c:eb:55:47:46:b4:a7:2a:78:ad:f6:32:4c:c2: 3a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1A:BB:F3:48:35:38:A4:A9:A3:66:68:B3:E7:79:09:4C:1E:21:42 X509v3 Authority Key Identifier: keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d9:46:57:eb:ba:f5:0c:d2:d7:90:51:28:fe:c9:cf:79:6c: 31:27:b7:02:99:0c:ba:ac:bc:5a:19:00:2f:ae:50:48:b3:ea: 09:7b:97:8f:28:93:07:16:e9:fc:74:9c:bc:f8:66:dc:82:89: 25:e9:4f:8b:50:0e:03:04:27:f8:ff:c5:26:ba:30:88:6c:46: 9c:33:8e:1d:57:5a:f4:6d:c9:cf:13:03:a0:a2:a4:b5:b8:a4: f0:c0:db:96:71:92:72:58:31:9e:72:14:48:41:3f:7b:cc:73: 0b:f0:14:5f:24:4c:07:74:d6:e8:4d:34:32:07:ed:b1:ea:be: 1c:0f:0f:4f:f5:e3:17:85:2a:30:6b:b1:6e:ed:bf:19:c3:5d: 31:cd:bd:52:83:af:59:94:8f:4e:d0:cc:41:b4:58:ad:59:42: 20:a8:53:8b:74:40:cb:ec:b7:e5:6d:f1:a2:ba:eb:19:f8:e4: 9a:f2:36:d4:39:8d:a3:51:eb:5f:d6:5f:4c:1a:ef:02:bc:92: 1b:23:e7:90:95:f8:4c:a2:b2:fe:82:31:e3:50:b8:81:36:45: d8:03:5a:c8:90:63:76:0c:59:a9:57:e0:20:83:9b:03:68:43: ba:32:9f:12:b5:0b:7c:ec:bf:9a:56:6f:c1:9d:05:4b:eb:fa: d8:29:b0:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohJQm6Pk4ZOILTHS8wdjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjVkZDk3NjY1YTIzYjFiMTgzZTIyMzgyMmI2NmI1YWU1 MzZhMmYwHhcNMjUxMjIwMTIwMDM1WhcNMjUxMjIxMTIwMDM1WjAzMTEwLwYDVQQD Eyg2OTFhYmJmMzQ4MzUzOGE0YTlhMzY2NjhiM2U3NzkwOTRjMWUyMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVYAMCkWOGtOznOD4s1okwQU6Xun aLb0SdEgBkm0T8LIOrwbi02Wdv/Ss+RrvykS6aTV4+J3QBkD+IoKea5z9lEwdRcE gpHjISrovVUBQBwC7OC+wDRodL+kVENrNABmJzdThCSkgUh++8SrDHjkFeMyrL6L H+gX4vzAWNxALMcfhaznqZfF4Z4FnYuP7x9i953qNLxnbI1LQGFMYLKF9G8qzDro ejx5W5sz7jpaFctK/9oxER+Bh26pCWTwssULZWBFQGpKW1swCBaBvW7hHli05NWa 4hZk7GVHstUzCKFfEi5BVbvhaWjdWxl2BQoJnOtVR0a0pyp4rfYyTMI6KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkau/NINTikqaNmaLPneQlMHiFCMB8GA1UdIwQY MBaAFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt ZThkNzA3MTdmZjhhLzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh LzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNlGV+u6 9QzS15BRKP7Jz3lsMSe3ApkMuqy8WhkAL65QSLPqCXuXjyiTBxbp/HScvPhm3IKJ JelPi1AOAwQn+P/FJrowiGxGnDOOHVda9G3JzxMDoKKktbik8MDblnGSclgxnnIU SEE/e8xzC/AUXyRMB3TW6E00Mgftseq+HA8PT/XjF4UqMGuxbu2/GcNdMc29UoOv WZSPTtDMQbRYrVlCIKhTi3RAy+y35W3xorrrGfjkmvI21DmNo1HrX9ZfTBrvAryS GyPnkJX4TKKy/oIx41C4gTZF2ANayJBjdgxZqVfgIIObA2hDujKfErULfOy/mlZv wZ0FS+v62Cmw0A== -----END CERTIFICATE-----Generated at Sat Dec 20 18:24:01 2025 by rpki-client