This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: 7fcaIBWTofM5cRW8dfn4qu92Oj8ollMMnQ/dhdcSr50= Subject key identifier: E4:C7:A2:23:B6:EE:E2:0C:B0:54:BB:3D:A5:B3:3F:DC:A9:D4:FA:3C Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019B3A21DB5EEDED1D06BC2825E44C1ED636 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 0AE7 Signing time: Sat 20 Dec 2025 05:00:55 +0000 Manifest this update: Sat 20 Dec 2025 05:00:55 +0000 Manifest next update: Sun 21 Dec 2025 05:00:55 +0000 Files and hashes: 1: 0UnS-IxSrSbJu0LMwZGgrlOMQaY.roa (hash: RlE1mBt+QrDUuTHvHAH0++Dmsi2Z+uRQ/Byv5g9xWBY=) 2: 1-MsC5JIxdLnLZFyHuf6RgL5WGhc.roa (hash: pKBlmn1z+pps27wu7UmvO8rAolauod4xSkZZnJ9W1vs=) 3: 5iTlOOubPJODXH7vsUI7Wpq0ba8.roa (hash: VCwAilQGOK0VnPyRzIvdM0YYC7WGdN3kdeSa5Bw3IAA=) 4: AcjZPvLVEctq4aWtM9Se4g1Hez4.roa (hash: m4DjUNQ10CarUgcdKKVdQWZBHX6pVTG/J1Gv/VX/MoI=) 5: FMB-bLkFzuyKrNP2ugJeFR5FvcA.roa (hash: b4QarnLE9DJEtGHI3hEpn5pxBgsxCwePllqAAi4lx4c=) 6: GvpbXDZ3PvGHC6CRPFaBrB4OBOU.roa (hash: QK6+N1u3xwguItDTFCohthwXAVIsV2u4+FjHuAM9tAY=) 7: Pd7_BuMRngySvCOEXZzIMz9jyRk.roa (hash: sixeKX7UtbFferQNxLx2jnfuNmnIKZsouzMYORIygXY=) 8: U-0XoRYDV1K8NeLT79sQu_iy4t8.roa (hash: QAJ2fJtDmsN9XNVxW3a/dJEvqFcETnDiO1SCagG2pSk=) 9: X9nzYcXU9EgIVl_7ZZWxlGNl4g4.roa (hash: wL/WH3TZ58EyBKIgJ0ej+sAXqdnuotdQ0gWq1xiVtwU=) 10: XumlVyIVNMGHdK8sasVhYLHqWI0.roa (hash: sNAchm7qC5sJ8lucqaB2EFdUQUEmutQiLKjflZ2MgDg=) 11: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: D9SXybyh36M7SQ/arDtqgRj/KrFCjaHjp7tYz9GfVeg=) 12: aQ7JsCHnSB2G4dfY_3yHXhj3Wo8.roa (hash: jc74/wQHOsinC7epcPYWAUkOMi5kreIozg0B86UPDDA=) 13: a_6EfM_eUhmEh3H7meW3ObA4-Go.roa (hash: NcCAQGLpBENo3heEl3G42fQyl7X50upMygvTrvmVy/A=) 14: bXxx-llWekyrtBewA8UESiAygSk.roa (hash: CVAUCXJbLgxcc/u+sDImVr2cGi4Am9sXCXZAdGDnVHY=) 15: e7z0oRKCehd6Ea7tsIDH_CrT8g0.roa (hash: rqMdlglqnoJd6sqLsXF+uIqk3nINirrRe1Hs5mOfPEU=) 16: iCveD-Xjd5JabG_WX6frr5x6in0.roa (hash: 95l1uR3aj9xTQRq9TbMrNh9RKHM6w6gjilx0WBwNahE=) 17: lO_bhdVoi0rApHqZUYrR4e0dET0.roa (hash: L6ri99HTG/n8zl4aG6bBJmgMqEKOzJ8HTJ12NQEy2Ow=) 18: qOlRf_FFYvzJtrv5C1ObqUNVUzk.roa (hash: EfOedSZueUJgPg3V0RQ+mS3lngajdnN3iZ8o0TSNE3A=) 19: yH-qgMAP1a-ONlIbLyS-3YiA-v8.roa (hash: 5ALF18aBSR3V/0UBc56QwyH3CpaKIq6eI34/1+3sXLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:db:5e:ed:ed:1d:06:bc:28:25:e4:4c:1e:d6:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Dec 20 05:00:55 2025 GMT Not After : Dec 21 05:00:55 2025 GMT Subject: CN=e4c7a223b6eee20cb054bb3da5b33fdca9d4fa3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:51:cd:ac:55:b7:34:ce:4d:e6:63:32:a3: b3:e3:30:74:3b:df:d0:f0:c6:1d:df:66:de:d2:a8: 5b:87:b1:ee:bf:30:2f:ed:62:9d:4e:3a:89:ad:e0: 9c:56:8a:b5:a7:44:5b:5a:0b:fe:2d:64:52:59:d1: e3:db:37:9b:bc:2f:3d:9e:48:16:3f:af:59:57:b1: 6e:14:c2:de:31:88:d1:a1:c3:d4:bf:de:7e:45:10: d1:6e:5b:ab:f7:c5:ec:22:03:bf:48:ca:9c:85:44: b8:17:69:ac:e8:26:25:c3:bc:13:14:15:fc:dd:e8: 6b:b7:0d:c1:dc:58:9d:a2:7f:e3:8a:bd:3f:42:68: 59:28:15:50:66:90:7a:d2:83:55:79:7e:a1:27:44: 9f:b0:70:84:32:04:34:a1:2c:b3:f9:65:bb:ba:b7: 41:7c:41:98:5e:93:90:e8:8e:46:9c:6c:2d:94:d7: 77:6d:b4:d3:25:da:cc:77:4d:1d:19:aa:af:18:d5: 60:32:86:1b:db:5f:98:0a:29:48:6c:2b:f6:fc:be: 91:40:af:fd:bc:33:34:07:e4:66:44:b1:b1:e6:fb: d6:07:87:a2:75:8a:64:b1:4f:d3:a2:c3:24:3e:51: 69:45:6a:0e:d9:ed:98:10:ae:02:84:c0:7e:0e:06: 93:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C7:A2:23:B6:EE:E2:0C:B0:54:BB:3D:A5:B3:3F:DC:A9:D4:FA:3C X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d3:09:4b:03:15:7a:4c:b9:45:ef:b2:c1:67:a8:e2:af:b4: be:78:2f:9d:1d:9a:f8:a2:b5:60:d5:99:30:e8:bc:98:39:48: 22:24:dc:49:8b:87:f2:aa:69:bd:4d:91:68:58:bf:4b:49:e2: 51:e1:e0:4f:9f:26:97:92:08:45:a0:dd:22:fb:da:87:1c:09: db:4b:07:fa:09:f5:54:9f:f8:21:5b:42:b1:22:d6:4c:68:c6: 5d:b9:21:fc:f1:cf:7a:e5:8f:3d:17:23:c2:c8:31:97:1d:63: 4a:48:14:a3:e8:22:14:4b:61:e1:7a:d1:dd:20:95:8f:ff:a0: 61:02:72:00:65:a8:2c:05:27:f8:66:86:b6:13:53:ed:1c:7f: 7b:ae:03:ee:99:e9:f7:a8:2b:bd:0e:56:ee:24:89:09:8c:9b: 11:05:8b:8f:16:3f:ba:ee:5d:7d:53:1f:64:6c:85:dc:28:f7: 74:c0:ba:5b:83:5c:45:a8:5b:8a:1c:16:71:b9:2b:23:f9:fd: cb:6e:b0:9a:6f:6c:e4:60:83:42:76:4f:af:0c:69:80:91:f2: 10:21:de:75:ce:a6:45:e5:c7:93:d8:15:0c:e2:42:16:87:14: 3d:5c:ea:90:55:ea:b7:99:5f:47:66:f5:25:79:f3:99:0a:d9: 60:60:d2:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Idte7e0dBrwoJeRMHtY2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjUxMjIwMDUwMDU1WhcNMjUxMjIxMDUwMDU1WjAzMTEwLwYDVQQD EyhlNGM3YTIyM2I2ZWVlMjBjYjA1NGJiM2RhNWIzM2ZkY2E5ZDRmYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jFRzaxVtzTOTeZjMqOz4zB0O9/Q 8MYd32be0qhbh7HuvzAv7WKdTjqJreCcVoq1p0RbWgv+LWRSWdHj2zebvC89nkgW P69ZV7FuFMLeMYjRocPUv95+RRDRblur98XsIgO/SMqchUS4F2ms6CYlw7wTFBX8 3ehrtw3B3Fidon/jir0/QmhZKBVQZpB60oNVeX6hJ0SfsHCEMgQ0oSyz+WW7urdB fEGYXpOQ6I5GnGwtlNd3bbTTJdrMd00dGaqvGNVgMoYb21+YCilIbCv2/L6RQK/9 vDM0B+RmRLGx5vvWB4eidYpksU/TosMkPlFpRWoO2e2YEK4ChMB+DgaTvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTHoiO27uIMsFS7PaWzP9yp1Po8MB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtMJSwMV eky5Re+ywWeo4q+0vngvnR2a+KK1YNWZMOi8mDlIIiTcSYuH8qppvU2RaFi/S0ni UeHgT58ml5IIRaDdIvvahxwJ20sH+gn1VJ/4IVtCsSLWTGjGXbkh/PHPeuWPPRcj wsgxlx1jSkgUo+giFEth4XrR3SCVj/+gYQJyAGWoLAUn+GaGthNT7Rx/e64D7pnp 96grvQ5W7iSJCYybEQWLjxY/uu5dfVMfZGyF3Cj3dMC6W4NcRahbihwWcbkrI/n9 y26wmm9s5GCDQnZPrwxpgJHyECHedc6mReXHk9gVDOJCFocUPVzqkFXqt5lfR2b1 JXnzmQrZYGDSAg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:37:18 2025 by rpki-client