This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json) Hash identifier: fM7gOoPtlQ5vLH9CfpUl3ml++cIguBpXauofoV7b6sw= Subject key identifier: 65:61:43:4F:37:73:C6:B3:CF:FB:CC:F6:33:2C:AE:4A:D2:8A:39:86 Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Certificate serial: 019B3D90BAEC9DDC354DDB2D4311CEA343F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 21:00:53 +0000 Manifest this update: Sat 20 Dec 2025 21:00:53 +0000 Manifest next update: Sun 21 Dec 2025 21:00:53 +0000 Files and hashes: 1: 34m9tu8-VJMAF9BtHbwX9Jvv0x4.roa (hash: 8cDtrdeF9xJMrCFVsKTBOunUF2EsP6IX5xqHU+sWq6o=) 2: Cy2f1uXj9wbLpl4Aw6ZgdQs_Gm4.roa (hash: otz2U+ZxypMp06tq5uA+DLYREXHhlkXwvT+2vtKIHr0=) 3: JYtV1xya2PeTYSiqPGeg1v3D1hU.roa (hash: jSaIThGpGsn1CtL3kupT6o9d7MS0BOry41A4muvp5uA=) 4: L9Pl17zWKblG0Neut33hMgnvNwg.roa (hash: KjUxc5uZUEZddoMKFPfgxm4nuEI/U5FS/VZwNLhDnYw=) 5: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: 1Tn8RjsNQLU14JgWM/Ugd0KxIzck9zDAqy5lI12yeNg=) 6: pN9I61NTpOf1iptAeMEH4NWfXYw.roa (hash: /osyl/RRKnWZO9AXYWEI4cWy1HpYeLX7qYgqul7Ks0g=) 7: rVSBtBZCrH1-ozjLs4EWsLxZEKw.roa (hash: qYE3kOU/oBIWRjp9IVavev7WPsnGehT5UmTJ3lg1M9g=) 8: tonrQJbYKEeFepF8Mg5lWiEbslA.roa (hash: la8VTc6fuTFi7aBGI/izVEZyhP/KVuebx7O6/rsxC7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:ba:ec:9d:dc:35:4d:db:2d:43:11:ce:a3:43:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Validity Not Before: Dec 20 21:00:53 2025 GMT Not After : Dec 21 21:00:53 2025 GMT Subject: CN=6561434f3773c6b3cffbccf6332cae4ad28a3986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:72:99:01:79:7c:b3:65:a9:e8:dc:23:0d:ad: 8b:14:e0:4d:3b:b1:5b:74:1d:6b:81:c0:8f:e5:a5: 1f:38:68:2f:09:f0:6e:0b:0b:fc:7f:e2:1b:37:3e: c9:3e:8a:7e:ad:88:fa:14:22:14:1b:dd:08:9d:a5: cf:04:7a:6b:a9:06:f8:88:26:94:c8:f5:62:dd:74: 6d:15:9c:de:30:98:ae:30:05:ec:3d:29:69:5a:ba: c2:34:1b:2f:aa:7c:d7:c8:93:2c:f1:81:f0:09:c0: 79:b9:f7:4f:97:18:61:46:5d:c6:6c:44:c9:e3:59: 99:49:22:ed:5a:68:82:f8:66:89:08:91:71:3e:ce: a4:91:6c:40:ee:29:42:0d:f8:6c:ee:e9:5d:b3:cd: a9:43:91:7a:a6:5e:55:3f:6f:01:28:92:59:8b:1d: 25:11:d5:5e:36:4f:6b:8c:85:a0:20:cd:7f:5c:4c: 83:91:5b:c2:f4:3b:a1:b0:25:a1:5c:16:8a:ac:3e: e7:17:5d:14:0a:eb:b1:fe:5b:f2:7e:f6:6d:b6:d3: 92:da:54:a4:18:0e:a5:29:d1:a5:6b:75:f4:8b:ad: 39:c9:0d:18:bb:42:18:e2:16:e0:e7:0b:52:ad:d3: c5:bb:c1:9e:91:2c:d0:c4:0c:ea:41:76:42:fa:08: 83:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:61:43:4F:37:73:C6:B3:CF:FB:CC:F6:33:2C:AE:4A:D2:8A:39:86 X509v3 Authority Key Identifier: keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:16:41:20:b0:cd:13:17:e5:5c:cc:8a:a7:00:71:42:ae:8a: 75:87:9f:15:5a:ac:6f:85:99:0d:dd:42:4c:a0:d2:d2:bf:1f: 5a:2b:e8:1c:63:cb:be:95:d3:2d:e5:2a:05:1a:30:53:6d:83: 80:61:3d:82:21:e5:83:e1:d1:65:67:a0:90:48:85:7a:b6:01: 84:58:ee:37:c6:37:09:83:a0:e5:73:b5:e1:df:ca:e6:7b:21: 72:95:21:a6:dc:5b:eb:85:d8:60:01:99:b4:c9:43:29:58:96: 24:ea:ae:1b:10:de:cb:8f:d2:1c:92:c1:5f:16:2a:7c:d7:64: c9:16:c5:27:e4:5e:7b:c4:15:61:67:9a:d8:9e:c2:ad:d3:95: 04:99:85:e4:63:18:c0:69:be:7e:c5:86:80:1a:d8:cc:ba:f1: c6:37:64:da:f9:33:54:9d:61:40:d9:33:4b:96:c2:1f:2f:fc: a7:0b:6e:bf:4e:c2:44:e4:d2:8f:a3:dc:62:64:f5:17:85:d4: 08:c0:4e:71:80:2d:0f:58:54:8f:11:b8:98:62:68:15:6f:cb: 21:5f:f8:c1:a0:5a:3b:c1:fd:d5:f4:d7:af:9a:d6:ba:3f:88: ad:62:48:6a:ea:d9:5a:a6:5a:b4:bc:e3:35:0c:78:4f:4f:a5: 9d:74:1f:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kLrsndw1TdstQxHOo0P2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3 OGIzOGQwHhcNMjUxMjIwMjEwMDUzWhcNMjUxMjIxMjEwMDUzWjAzMTEwLwYDVQQD Eyg2NTYxNDM0ZjM3NzNjNmIzY2ZmYmNjZjYzMzJjYWU0YWQyOGEzOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXKZAXl8s2Wp6NwjDa2LFOBNO7Fb dB1rgcCP5aUfOGgvCfBuCwv8f+IbNz7JPop+rYj6FCIUG90InaXPBHprqQb4iCaU yPVi3XRtFZzeMJiuMAXsPSlpWrrCNBsvqnzXyJMs8YHwCcB5ufdPlxhhRl3GbETJ 41mZSSLtWmiC+GaJCJFxPs6kkWxA7ilCDfhs7ulds82pQ5F6pl5VP28BKJJZix0l EdVeNk9rjIWgIM1/XEyDkVvC9DuhsCWhXBaKrD7nF10UCuux/lvyfvZtttOS2lSk GA6lKdGla3X0i605yQ0Yu0IY4hbg5wtSrdPFu8GekSzQxAzqQXZC+giDgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVhQ083c8azz/vM9jMsrkrSijmGMB8GA1UdIwQY MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt NmIxNDY5YzNiOTVhLzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBZBILDN ExflXMyKpwBxQq6KdYefFVqsb4WZDd1CTKDS0r8fWivoHGPLvpXTLeUqBRowU22D gGE9giHlg+HRZWegkEiFerYBhFjuN8Y3CYOg5XO14d/K5nshcpUhptxb64XYYAGZ tMlDKViWJOquGxDey4/SHJLBXxYqfNdkyRbFJ+Ree8QVYWea2J7CrdOVBJmF5GMY wGm+fsWGgBrYzLrxxjdk2vkzVJ1hQNkzS5bCHy/8pwtuv07CROTSj6PcYmT1F4XU CMBOcYAtD1hUjxG4mGJoFW/LIV/4waBaO8H91fTXr5rWuj+IrWJIaurZWqZatLzj NQx4T0+lnXQfWA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:55:53 2025 by rpki-client