This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: WjMrynrMUiCRe4j9+FrOACX/tIMdF+ABiI1CT61a3vI= Subject key identifier: 5D:54:4A:4E:47:E8:45:67:A2:49:2C:3A:D6:E5:B8:DF:97:32:60:41 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019B390EDB2FA66FB8851E1068CB13B08470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1790 Signing time: Sat 20 Dec 2025 00:00:33 +0000 Manifest this update: Sat 20 Dec 2025 00:00:33 +0000 Manifest next update: Sun 21 Dec 2025 00:00:33 +0000 Files and hashes: 1: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (hash: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=) 2: J2wVE-ysPom5E_5lF4tJldYNa-0.roa (hash: oUIFr0+ZyYlkYGUaUpe52i+2V6CsiaUkgkNDD+7+LeQ=) 3: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (hash: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=) 4: YwzWinKJc46_U8FICjJOYyamFbE.roa (hash: 6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=) 5: a5CofPxS02DnAUUS9BR-MfOlQu4.roa (hash: LylucOp1UfCFOp+5ipOtc4LcLveZAw9S3wnaBKPFnAA=) 6: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (hash: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=) 7: c_P4sr3Opke1mWU78BvJMlMDps8.roa (hash: epdNIDM+10/qxHg1G8njFcHs1LoWUpUQmmausYhNxGY=) 8: iI8DgizVWpbEfLLZJw23cwOMtao.roa (hash: gWEZpZ6NinOCicsU6XwwO/9pb7/TViv+n+2ETM0yooY=) 9: p1mSMR7xN9m1jztS6WxG27UANcc.roa (hash: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=) 10: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (hash: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=) 11: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (hash: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=) 12: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (hash: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: 4tg7tCrRSIJQu30q0C3IZDFGzJ9WMos9Y+RU/Ae+HQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:db:2f:a6:6f:b8:85:1e:10:68:cb:13:b0:84:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Dec 20 00:00:33 2025 GMT Not After : Dec 21 00:00:33 2025 GMT Subject: CN=5d544a4e47e84567a2492c3ad6e5b8df97326041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:75:84:33:98:43:e9:be:64:97:e3:03:d7: f9:09:81:fb:fb:e7:df:69:73:c8:46:94:ea:68:58: 73:d5:2b:01:c5:1e:e6:ab:7e:62:aa:61:84:72:30: 7b:a3:5f:48:f0:cf:70:9d:34:52:74:8e:1b:a9:f3: 9a:70:c9:cd:08:b6:72:47:c7:4e:0b:14:7f:f8:ab: c6:51:89:6b:d8:96:1a:da:b6:a3:bb:8e:07:fa:05: 16:e9:b4:51:2f:00:01:a6:8f:db:3e:1c:0b:94:0a: bf:d2:46:b0:62:46:c1:e2:c2:d0:68:61:ba:99:33: 73:e8:97:2d:d4:39:c3:a2:79:e6:1d:4f:09:c4:df: f6:3f:ba:fa:ef:16:90:ec:fa:65:35:f7:3a:6b:61: ac:43:e9:ff:40:47:01:f9:49:60:8c:e0:c9:12:d0: f8:4e:18:2a:96:01:78:63:37:c0:35:a5:f4:83:52: ac:dc:74:61:58:70:a6:81:31:25:24:d1:c3:5e:7b: 89:a5:af:c0:0c:b5:19:0e:60:4d:c6:11:f1:19:df: e4:0f:96:5c:be:0a:fb:68:15:62:18:38:20:79:35: 13:2e:7e:e6:88:2f:4e:db:4b:34:c9:3f:7c:67:e1: 2b:4f:51:c9:17:99:80:0b:eb:2b:53:e9:72:17:59: 45:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:54:4A:4E:47:E8:45:67:A2:49:2C:3A:D6:E5:B8:DF:97:32:60:41 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:fe:b4:dd:c0:18:aa:20:2d:c6:8d:63:e8:57:38:aa:d3:5b: ac:2d:c1:a0:36:5b:7b:18:44:2f:6d:56:cb:70:ed:9a:25:45: c7:cd:4a:1f:42:73:30:dc:21:45:0f:38:24:76:7a:2c:8e:67: e7:eb:61:25:a6:6d:54:4d:1c:68:ae:be:1f:4f:1c:55:13:cd: f3:a8:3a:90:73:59:c1:d2:bd:c8:99:bb:7e:7f:d5:98:6b:07: ee:9e:9b:50:3b:ac:f5:48:f8:e0:5a:f5:12:47:50:47:0b:e9: 2b:a3:84:41:1f:d3:a9:55:0b:4a:f4:c3:61:e5:bd:d1:d3:a7: ab:6c:aa:26:5d:e2:b2:be:66:96:27:c7:20:4d:fc:de:e4:5f: f8:5c:9f:88:ae:41:83:e5:af:88:b7:5c:88:2e:ea:ba:12:08: 53:e2:d5:43:87:87:ae:12:10:e7:01:af:11:dd:a2:53:72:fe: 89:93:39:25:1b:89:c8:b2:b2:d8:e2:6f:18:e7:3c:4b:ca:c5: f3:bf:44:81:7a:c3:c3:88:82:23:aa:f3:bd:e4:a2:8e:4f:bf: 79:c0:08:76:e7:15:c6:10:b9:a1:5b:52:03:aa:5e:ca:45:a3: cd:2b:53:54:b5:c2:97:a3:c1:fa:2e:97:53:79:ca:0f:11:12: 80:b5:08:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dtsvpm+4hR4QaMsTsIRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjUxMjIwMDAwMDMzWhcNMjUxMjIxMDAwMDMzWjAzMTEwLwYDVQQD Eyg1ZDU0NGE0ZTQ3ZTg0NTY3YTI0OTJjM2FkNmU1YjhkZjk3MzI2MDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGR1hDOYQ+m+ZJfjA9f5CYH7++ff aXPIRpTqaFhz1SsBxR7mq35iqmGEcjB7o19I8M9wnTRSdI4bqfOacMnNCLZyR8dO CxR/+KvGUYlr2JYa2raju44H+gUW6bRRLwABpo/bPhwLlAq/0kawYkbB4sLQaGG6 mTNz6Jct1DnDonnmHU8JxN/2P7r67xaQ7PplNfc6a2GsQ+n/QEcB+UlgjODJEtD4 ThgqlgF4YzfANaX0g1Ks3HRhWHCmgTElJNHDXnuJpa/ADLUZDmBNxhHxGd/kD5Zc vgr7aBViGDggeTUTLn7miC9O20s0yT98Z+ErT1HJF5mAC+srU+lyF1lFgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1USk5H6EVnokksOtbluN+XMmBBMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqP603cAY qiAtxo1j6Fc4qtNbrC3BoDZbexhEL21Wy3DtmiVFx81KH0JzMNwhRQ84JHZ6LI5n 5+thJaZtVE0caK6+H08cVRPN86g6kHNZwdK9yJm7fn/VmGsH7p6bUDus9Uj44Fr1 EkdQRwvpK6OEQR/TqVULSvTDYeW90dOnq2yqJl3isr5mlifHIE383uRf+FyfiK5B g+WviLdciC7quhIIU+LVQ4eHrhIQ5wGvEd2iU3L+iZM5JRuJyLKy2OJvGOc8S8rF 879EgXrDw4iCI6rzveSijk+/ecAIducVxhC5oVtSA6peykWjzStTVLXCl6PB+i6X U3nKDxESgLUIpQ== -----END CERTIFICATE-----Generated at Sat Dec 20 03:58:58 2025 by rpki-client