This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json) Hash identifier: j6uKvWAuZGmP7M0zirnBjepjyaBe6LGhQDfDIsghFpI= Subject key identifier: 0E:BC:B2:95:02:2C:D8:8B:FA:07:AA:11:F3:C8:34:61:88:07:B1:C1 Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89 Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489 Certificate serial: 019B3E6CBBFCE0A728D7781780D80846BA6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft Manifest number: 037F Signing time: Sun 21 Dec 2025 01:01:11 +0000 Manifest this update: Sun 21 Dec 2025 01:01:11 +0000 Manifest next update: Mon 22 Dec 2025 01:01:11 +0000 Files and hashes: 1: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (hash: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=) 2: VzQqyrs-uqIcVAV9Qkei6a34wwc.roa (hash: fyOWws5YA8x0adXdJbC1gsHmLihm5Um5wk56YNm2GDk=) 3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: AVcAD5J3bLfXdo2C3Yn/dVeMf0QZETSKHLETjHe+oRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:bb:fc:e0:a7:28:d7:78:17:80:d8:08:46:ba:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64c0bc594af811753dfc116af459b1b874471489 Validity Not Before: Dec 21 01:01:11 2025 GMT Not After : Dec 22 01:01:11 2025 GMT Subject: CN=0ebcb295022cd88bfa07aa11f3c834618807b1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ae:2d:aa:02:c8:57:31:d1:24:fd:19:bc:54: 46:49:74:98:c2:a5:10:ea:3c:9b:ff:e2:7f:9c:e0: 45:bf:bc:18:db:dd:5c:ce:98:56:d9:da:36:3d:4d: 6c:3d:b7:ca:5c:32:9b:cf:7b:ff:03:f4:bd:de:7c: c0:9c:0c:dd:17:17:7f:1a:50:ce:44:4b:67:fd:1d: 37:3e:ea:e0:ee:e4:69:14:eb:64:b5:ca:c7:c2:cc: cf:1f:de:7f:f1:fb:61:93:99:b8:1a:22:f3:d1:3c: 6b:da:b7:85:bd:e9:82:97:0b:6d:d2:de:9a:7e:5f: 37:eb:ad:4d:b0:90:25:b7:d4:f4:a6:f0:e1:1c:d4: 04:d3:e0:c7:80:60:05:6d:32:bd:cf:ba:15:27:ac: 75:d9:d5:04:5c:50:91:c5:e3:46:15:27:b0:5c:71: 10:d9:40:c9:43:1c:aa:14:85:32:6c:c6:19:52:dc: 8f:92:5f:bd:4d:02:03:a9:8f:36:11:23:f7:7e:35: 57:1d:7f:8f:d9:2e:9c:98:1c:a5:08:a4:3d:9f:1a: 34:58:5f:9a:81:4e:75:af:eb:bb:cf:83:45:1e:a6: 33:53:83:81:e4:74:db:a5:6d:68:b8:2e:d7:17:80: 4e:28:62:7a:d0:66:32:bc:db:4f:f4:53:5c:45:38: 85:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BC:B2:95:02:2C:D8:8B:FA:07:AA:11:F3:C8:34:61:88:07:B1:C1 X509v3 Authority Key Identifier: keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:34:b1:1a:5a:15:0d:c2:69:05:c3:8e:1e:ed:60:b2:fd:8c: 98:10:92:de:41:0a:62:17:0d:39:f5:9b:3a:1a:11:07:2c:f1: b7:52:2f:e1:6b:f8:8c:e0:8f:e5:f6:82:e5:a9:7c:28:98:a2: 94:95:36:ef:6d:4e:25:f4:1c:05:6b:48:30:0d:07:9e:3d:d4: 28:4a:80:98:ca:6e:a0:1f:48:88:e9:54:63:81:76:7b:b8:6e: 47:23:f3:50:0d:8d:51:d2:b0:ab:df:56:5f:3e:ce:28:e0:fa: 37:f9:59:84:1d:cb:68:86:ee:9a:3c:58:9b:77:68:aa:52:46: 15:b9:e9:75:21:ef:ea:30:48:2c:7c:c8:3d:a7:87:0a:cc:0d: 7b:f5:8a:5a:26:cc:30:af:8a:e5:87:6e:dd:36:80:ee:23:a1: 66:1a:b7:39:32:3c:4c:4b:1e:51:d5:15:30:c1:51:dd:3c:48: d8:32:c2:60:2b:db:88:0e:1c:cd:1f:56:5f:af:11:fc:db:45: 5f:62:12:7b:4d:19:ea:60:81:75:30:af:b4:fe:3f:7e:04:61: e3:b0:47:76:21:10:a2:43:13:15:1e:83:d9:c1:f7:85:84:d7: 86:c3:39:e4:16:71:bf:1a:f0:d9:a0:0e:1d:cd:79:21:e1:d5: a5:09:2e:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bLv84Kco13gXgNgIRrptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YzBiYzU5NGFmODExNzUzZGZjMTE2YWY0NTliMWI4NzQ0 NzE0ODkwHhcNMjUxMjIxMDEwMTExWhcNMjUxMjIyMDEwMTExWjAzMTEwLwYDVQQD EygwZWJjYjI5NTAyMmNkODhiZmEwN2FhMTFmM2M4MzQ2MTg4MDdiMWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6a4tqgLIVzHRJP0ZvFRGSXSYwqUQ 6jyb/+J/nOBFv7wY291czphW2do2PU1sPbfKXDKbz3v/A/S93nzAnAzdFxd/GlDO REtn/R03Purg7uRpFOtktcrHwszPH95/8fthk5m4GiLz0Txr2reFvemClwtt0t6a fl83661NsJAlt9T0pvDhHNQE0+DHgGAFbTK9z7oVJ6x12dUEXFCRxeNGFSewXHEQ 2UDJQxyqFIUybMYZUtyPkl+9TQIDqY82ESP3fjVXHX+P2S6cmBylCKQ9nxo0WF+a gU51r+u7z4NFHqYzU4OB5HTbpW1ouC7XF4BOKGJ60GYyvNtP9FNcRTiF7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA68spUCLNiL+geqEfPINGGIB7HBMB8GA1UdIwQY MBaAFGTAvFlK+BF1PfwRavRZsbh0RxSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjIt NDQzMTNiNDNlNTk0LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjItNDQzMTNiNDNlNTk0 LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDSxGloV DcJpBcOOHu1gsv2MmBCS3kEKYhcNOfWbOhoRByzxt1Iv4Wv4jOCP5faC5al8KJii lJU2721OJfQcBWtIMA0Hnj3UKEqAmMpuoB9IiOlUY4F2e7huRyPzUA2NUdKwq99W Xz7OKOD6N/lZhB3LaIbumjxYm3doqlJGFbnpdSHv6jBILHzIPaeHCswNe/WKWibM MK+K5Ydu3TaA7iOhZhq3OTI8TEseUdUVMMFR3TxI2DLCYCvbiA4czR9WX68R/NtF X2ISe00Z6mCBdTCvtP4/fgRh47BHdiEQokMTFR6D2cH3hYTXhsM55BZxvxrw2aAO Hc15IeHVpQkuJA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:33 2025 by rpki-client