This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft File: ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json) Hash identifier: rJdMbPn3g/JmXLgk6Ftfmt06R4+8BSFuWnujfSfhvRY= Subject key identifier: D8:40:2E:B0:89:FF:E7:FE:04:6F:67:AE:D6:B0:C1:6F:7A:05:17:13 Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c Certificate serial: 019B4F600B237BD21E4351E186DBBD617564 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft Manifest number: 0C4C Signing time: Wed 24 Dec 2025 08:00:52 +0000 Manifest this update: Wed 24 Dec 2025 08:00:52 +0000 Manifest next update: Thu 25 Dec 2025 08:00:52 +0000 Files and hashes: 1: 5bucpm77LtnXjK7o-jpiDW291Yw.roa (hash: S2CYvpEr7FdqvUdlAxqrDbEjDQNF8pYqq1mftWv1ZPE=) 2: 81yN31-IxQXIZI5PlY-trqqNIno.roa (hash: v9l8y9I+7ljSUfpIaDADoFiNw5hBtJQ72MRZ64GdbyQ=) 3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: UU2mYO2betXS372xPs2vvhXMOrgFkqsb6mCZOIFKwb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:0b:23:7b:d2:1e:43:51:e1:86:db:bd:61:75:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c Validity Not Before: Dec 24 08:00:52 2025 GMT Not After : Dec 25 08:00:52 2025 GMT Subject: CN=d8402eb089ffe7fe046f67aed6b0c16f7a051713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0d:be:94:a9:b5:4d:7d:cc:ad:dd:3c:b6:da: a8:21:25:75:94:9a:48:e5:e6:07:a2:f3:dd:b4:fd: 28:c7:88:39:32:74:6b:cc:d0:d7:1e:ef:82:14:14: 1a:bd:cb:00:92:6c:40:e2:44:54:0f:dc:84:06:86: d9:87:9c:3e:8e:75:a4:a5:26:19:76:2c:ca:0e:23: 20:1e:d1:fe:4c:fe:aa:89:21:12:6f:9c:b8:de:e9: 94:fb:a8:8e:75:e8:ad:02:6c:a9:fa:76:d1:b8:fb: 47:3e:7d:32:1a:5d:93:14:a9:02:ee:62:ef:60:e8: 8f:8f:19:5a:86:0c:3a:fd:56:85:36:a0:b2:7d:cf: cb:35:0f:e1:e9:38:c6:cd:ad:53:e4:12:20:73:3b: bd:d5:d2:40:12:60:77:e8:25:8e:78:fc:e2:1c:bb: bd:72:58:75:dc:0e:ee:dc:36:5e:a3:92:43:42:00: 61:20:8f:e9:8a:86:f5:fe:25:59:24:65:23:33:28: 2d:c9:f4:ec:c3:53:72:96:08:12:9c:b3:3b:eb:14: 5d:0e:aa:ef:15:68:d9:7f:3b:5e:52:89:bb:c2:3d: f2:bc:78:74:6f:e3:f7:ea:59:94:e4:55:86:02:bb: 78:35:22:e6:b6:f6:d6:5b:70:b0:75:0f:11:c0:a5: 60:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:40:2E:B0:89:FF:E7:FE:04:6F:67:AE:D6:B0:C1:6F:7A:05:17:13 X509v3 Authority Key Identifier: keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:bd:d9:48:1f:5e:39:8f:d4:e9:00:f9:2d:29:ca:04:53:d4: 19:3a:97:22:92:6d:b7:06:44:e1:d4:e6:b4:51:ed:3a:cd:01: dd:73:d9:91:62:40:8e:66:35:28:dd:d6:d3:cd:59:65:8a:af: 9b:b0:08:9a:36:b7:7a:95:5a:32:bd:cf:73:83:8f:2f:b1:6a: 28:2d:c7:1b:a4:29:c8:95:7f:ad:a5:8d:47:7f:dd:a6:93:83: e5:33:41:2b:2a:21:66:09:d6:38:33:ec:19:0c:67:6b:29:9a: 6c:27:a2:6e:b6:8d:b7:24:0c:f7:1d:65:5e:44:97:49:4f:54: 62:05:e3:32:9e:d5:d4:7c:64:20:ad:b4:17:f5:1a:db:31:6d: d5:f5:cb:5d:70:e8:9c:eb:1a:c7:f4:23:5d:51:6c:bd:bb:45: ed:52:fe:bf:3c:82:ec:dd:aa:56:07:a2:1f:45:4e:43:c8:fd: 45:61:09:e6:e9:e4:14:2a:ce:72:37:72:7c:d0:d5:f2:51:91: 77:56:6b:fd:d9:81:b1:c1:38:fd:0f:92:f8:93:fa:9a:5c:07: 4f:02:c3:ea:e1:25:2b:2a:e6:11:a8:79:c1:be:64:8d:05:bb: 4e:f4:8f:67:58:67:f3:43:69:bf:09:ef:4e:1b:83:3c:07:3f: 61:0e:2b:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYAsje9IeQ1Hhhtu9YXVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjAzNGNhNmExNmJiZDAxNDRhYmRmNWNmMjQ1OGY5Njhi MTU4OWMwHhcNMjUxMjI0MDgwMDUyWhcNMjUxMjI1MDgwMDUyWjAzMTEwLwYDVQQD EyhkODQwMmViMDg5ZmZlN2ZlMDQ2ZjY3YWVkNmIwYzE2ZjdhMDUxNzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4g2+lKm1TX3Mrd08ttqoISV1lJpI 5eYHovPdtP0ox4g5MnRrzNDXHu+CFBQavcsAkmxA4kRUD9yEBobZh5w+jnWkpSYZ dizKDiMgHtH+TP6qiSESb5y43umU+6iOdeitAmyp+nbRuPtHPn0yGl2TFKkC7mLv YOiPjxlahgw6/VaFNqCyfc/LNQ/h6TjGza1T5BIgczu91dJAEmB36CWOePziHLu9 clh13A7u3DZeo5JDQgBhII/piob1/iVZJGUjMygtyfTsw1NylggSnLM76xRdDqrv FWjZfzteUom7wj3yvHh0b+P36lmU5FWGArt4NSLmtvbWW3CwdQ8RwKVgoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhALrCJ/+f+BG9nrtawwW96BRcTMB8GA1UdIwQY MBaAFGZgNMpqFrvQFEq99c8kWPlosVicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDIt NWQ0OGJjZDdjMWRjLzEvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDItNWQ0OGJjZDdjMWRj LzEvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFL3ZSB9e OY/U6QD5LSnKBFPUGTqXIpJttwZE4dTmtFHtOs0B3XPZkWJAjmY1KN3W081ZZYqv m7AImja3epVaMr3Pc4OPL7FqKC3HG6QpyJV/raWNR3/dppOD5TNBKyohZgnWODPs GQxnaymabCeibraNtyQM9x1lXkSXSU9UYgXjMp7V1HxkIK20F/Ua2zFt1fXLXXDo nOsax/QjXVFsvbtF7VL+vzyC7N2qVgeiH0VOQ8j9RWEJ5unkFCrOcjdyfNDV8lGR d1Zr/dmBscE4/Q+S+JP6mlwHTwLD6uElKyrmEah5wb5kjQW7TvSPZ1hn80Npvwnv ThuDPAc/YQ4rRA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:11:07 2025 by rpki-client