This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json) Hash identifier: IxUDAqDWuPkQ2r9mfzYSYCsz8VTSS1Z+IbX9UD/p0Bo= Subject key identifier: 17:E2:B3:87:15:AB:A5:B7:10:11:95:22:36:65:4D:BA:E8:4E:DA:DD Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2 Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2 Certificate serial: 019B3E6D1D74934BD816E2B4775321BD0EC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:01:36 +0000 Manifest this update: Sun 21 Dec 2025 01:01:36 +0000 Manifest next update: Mon 22 Dec 2025 01:01:36 +0000 Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=) 2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=) 3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: WHqNkm88i+ixPThfcHqHkgIoANAdRgG4T+wt5TexbIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:1d:74:93:4b:d8:16:e2:b4:77:53:21:bd:0e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2 Validity Not Before: Dec 21 01:01:36 2025 GMT Not After : Dec 22 01:01:36 2025 GMT Subject: CN=17e2b38715aba5b71011952236654dbae84edadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:eb:a7:a0:a8:ae:05:38:82:8c:b5:e9:30:59: 2c:bf:47:b3:e9:87:d0:77:78:ed:e2:1e:e2:f4:10: fb:c9:7a:01:49:69:59:8c:37:dd:f0:68:ca:36:b8: 19:be:32:07:9e:fc:d2:31:71:dd:67:c7:e8:18:2c: 5e:a8:f5:5e:c0:b0:7c:4b:f8:45:a7:ee:1e:7f:d8: f1:ac:cf:24:ea:97:f3:9e:c8:ed:c8:9f:8c:34:d4: e9:60:76:22:7c:ef:fe:0c:5f:46:bd:ba:28:f2:38: c5:af:f1:60:7f:4a:03:04:26:69:70:b8:f9:e9:58: d1:2e:71:8c:0a:47:11:e6:72:f4:59:56:39:68:f9: af:f3:44:42:33:74:3f:3b:48:e0:d9:c2:98:cf:e7: a3:4e:0d:f9:06:a6:f2:6f:09:cb:3f:cd:3e:90:f2: 99:5a:f8:36:2f:1a:ef:60:e7:8f:57:0a:83:51:23: 54:55:86:f0:10:8e:8e:bc:65:8c:59:9a:65:35:2f: 87:f6:5a:56:c9:2c:f9:25:34:14:70:b8:46:f6:62: 19:68:39:87:fd:ed:af:85:7e:5a:9f:37:96:3f:d7: 86:13:c6:2e:c0:d9:e2:6a:14:48:29:5f:65:6c:8e: 74:76:54:ce:55:c4:b3:00:e3:5b:5e:49:f5:7e:7f: 25:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E2:B3:87:15:AB:A5:B7:10:11:95:22:36:65:4D:BA:E8:4E:DA:DD X509v3 Authority Key Identifier: keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:98:71:92:4d:8d:2d:a6:08:21:1f:d2:d0:ee:ec:b9:ae:74: ea:8f:b9:17:9e:36:dd:5c:93:87:06:e9:8b:0f:92:3c:5b:46: 56:99:1e:06:3c:3e:eb:a7:40:6f:ad:7b:73:04:cb:fa:e1:57: 0c:67:1d:b9:97:1e:e5:f4:57:7f:b9:ff:70:8a:cb:2b:7f:14: ff:9d:f5:46:38:0f:55:cf:60:ee:90:82:84:2f:1c:db:8d:44: 99:3a:af:4a:4f:48:2b:2b:74:38:d6:65:e0:28:94:b1:40:2d: 41:b4:9b:89:1d:1e:9a:63:dc:50:a9:e0:cb:2e:b1:7c:66:68: df:22:8b:9b:41:ee:11:d9:f9:2d:1e:48:79:0e:eb:e0:07:1d: 4c:28:21:c3:2e:b6:f2:4e:61:a3:dc:e0:c5:98:b4:c5:6d:eb: 99:93:09:04:c1:fc:f7:70:6f:28:16:9f:3f:cb:8b:02:ba:9b: eb:dc:07:ab:e3:0f:f3:76:96:b3:07:48:37:0d:54:d7:d7:41: 76:92:d5:25:9b:c4:05:c1:66:0b:b5:2a:07:a7:fc:e3:26:47: 15:d7:47:5e:1c:dc:d6:88:7e:28:b3:3d:3c:d3:53:e6:c8:80: 66:2f:1a:6f:b9:bb:f7:52:f9:e0:fa:1c:85:af:f3:47:7d:70: c3:5c:d4:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bR10k0vYFuK0d1MhvQ7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZjlhNmQyZjZjZDU4OGE3N2Y0MjM2MjJlNmI4ZDFjNjU0 YmNkZjIwHhcNMjUxMjIxMDEwMTM2WhcNMjUxMjIyMDEwMTM2WjAzMTEwLwYDVQQD EygxN2UyYjM4NzE1YWJhNWI3MTAxMTk1MjIzNjY1NGRiYWU4NGVkYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquunoKiuBTiCjLXpMFksv0ez6YfQ d3jt4h7i9BD7yXoBSWlZjDfd8GjKNrgZvjIHnvzSMXHdZ8foGCxeqPVewLB8S/hF p+4ef9jxrM8k6pfznsjtyJ+MNNTpYHYifO/+DF9Gvboo8jjFr/Fgf0oDBCZpcLj5 6VjRLnGMCkcR5nL0WVY5aPmv80RCM3Q/O0jg2cKYz+ejTg35BqbybwnLP80+kPKZ Wvg2LxrvYOePVwqDUSNUVYbwEI6OvGWMWZplNS+H9lpWySz5JTQUcLhG9mIZaDmH /e2vhX5anzeWP9eGE8YuwNniahRIKV9lbI50dlTOVcSzAONbXkn1fn8luwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfis4cVq6W3EBGVIjZlTbroTtrdMB8GA1UdIwQY MBaAFMz5ptL2zViKd/QjYi5rjRxlS83yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUt MWIwZjI1NGRlNjE5LzEvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUtMWIwZjI1NGRlNjE5 LzEvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJhxkk2N LaYIIR/S0O7sua506o+5F5423VyThwbpiw+SPFtGVpkeBjw+66dAb617cwTL+uFX DGcduZce5fRXf7n/cIrLK38U/531RjgPVc9g7pCChC8c241EmTqvSk9IKyt0ONZl 4CiUsUAtQbSbiR0emmPcUKngyy6xfGZo3yKLm0HuEdn5LR5IeQ7r4AcdTCghwy62 8k5ho9zgxZi0xW3rmZMJBMH893BvKBafP8uLArqb69wHq+MP83aWswdINw1U19dB dpLVJZvEBcFmC7UqB6f84yZHFddHXhzc1oh+KLM9PNNT5siAZi8ab7m791L54Poc ha/zR31ww1zU/A== -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:31 2025 by rpki-client