This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json) Hash identifier: TIsbrXIQyJdRgMAvh1+Zkw7W351QIAI6Acb72XSlR50= Subject key identifier: 82:C1:F6:A8:70:E4:2A:4E:96:B4:59:3C:5B:8D:AD:E6:60:5F:D4:98 Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc Certificate serial: 019B3EDABFB49910A02D9B49719657B4DE58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft Manifest number: 3A Signing time: Sun 21 Dec 2025 03:01:21 +0000 Manifest this update: Sun 21 Dec 2025 03:01:21 +0000 Manifest next update: Mon 22 Dec 2025 03:01:21 +0000 Files and hashes: 1: 7U5QACnIOaStbs622wsLddtqk54.roa (hash: MDxD55R7Tx2xc7RKGAiVm7EdWOaqbi6TPzSWLg28j/E=) 2: uUmO4eQgA06FWzBgXavgD4gUjsg.roa (hash: LjcuMLZh0tEDYE3iK8zXiD1BcoZPHkSMre/5r/BtqL8=) 3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: NDr6dVUqDc2A6bkTuhTbMQi4WMoFOoKiJh2l67XGfGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:bf:b4:99:10:a0:2d:9b:49:71:96:57:b4:de:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc Validity Not Before: Dec 21 03:01:21 2025 GMT Not After : Dec 22 03:01:21 2025 GMT Subject: CN=82c1f6a870e42a4e96b4593c5b8dade6605fd498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fe:f8:6e:62:20:fa:7b:18:4b:69:87:be:1c: e8:ab:1f:46:89:47:71:56:bb:26:00:ec:5b:13:98: 74:fe:ce:47:a3:1c:9f:8e:aa:5f:5b:4d:a8:b8:9f: 83:0e:b4:a8:d7:a7:7a:e2:42:3d:a7:ae:06:e6:f3: da:a1:09:bd:aa:67:1b:76:d4:8b:87:80:d3:ab:72: f3:56:c4:b1:44:b1:14:b9:ea:bb:f4:bc:4e:fa:fd: 48:94:93:69:ab:a0:9c:d1:80:8f:0f:01:d0:1e:8c: 98:91:3d:92:0f:cf:a8:e3:b2:dd:75:ac:a4:df:e8: 58:44:c8:64:99:6c:90:aa:3f:7a:5e:c0:94:e9:24: 62:fb:3d:02:47:9f:be:70:3e:8c:ff:be:79:3a:15: 23:89:63:95:d6:97:95:1e:27:7a:d6:e3:e8:d0:7a: 56:8c:13:9e:16:ee:3c:60:7a:27:dd:18:ae:b4:e6: ff:a4:ef:83:45:df:29:a3:02:b7:5b:7f:f5:9c:df: 4d:c3:a6:81:95:7c:c4:41:76:33:74:6a:38:bb:eb: c0:d6:30:0c:c7:e8:df:2d:88:3d:00:a8:05:ef:4b: da:9e:7c:99:89:d7:b4:ed:67:3d:eb:be:be:4a:57: e1:17:a9:0d:44:12:12:26:21:12:9b:0e:af:8b:e5: 10:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C1:F6:A8:70:E4:2A:4E:96:B4:59:3C:5B:8D:AD:E6:60:5F:D4:98 X509v3 Authority Key Identifier: keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:8d:42:4a:72:ca:70:41:1d:17:cf:18:7f:89:9c:21:f0:89: 72:1e:bf:be:84:9b:58:a1:b0:bc:fa:29:75:51:53:d4:40:c2: 95:ee:58:46:d1:ac:0e:96:bf:69:68:2c:f3:eb:58:d2:01:ed: 1b:c0:61:33:23:69:d8:22:a8:ea:c6:4c:27:64:6a:36:ca:32: 5c:7a:2c:f2:28:b6:27:d6:e5:64:e7:09:66:0d:a8:57:53:9b: 9f:9c:bf:70:c5:95:63:99:f1:18:65:5d:58:d7:f8:ab:b1:60: c4:8b:8d:ef:1f:68:30:be:4f:92:e7:f0:0d:66:86:e4:c3:ed: a8:02:9e:93:86:7d:de:98:aa:91:78:13:83:7e:16:d1:84:64: 5f:2c:69:8f:c3:64:c0:56:c9:bd:d8:c3:0f:36:01:33:75:01: 67:ad:3c:3f:d9:84:3a:09:ed:e4:2f:fb:0b:03:10:7e:e5:ac: dc:2d:5f:b0:ae:d4:76:7c:fb:89:db:33:48:e5:d9:52:91:62: 2d:20:e7:92:e9:aa:ed:c1:71:90:e8:cd:f4:f9:57:46:c6:63: 1b:90:34:bc:fb:15:82:32:ad:aa:b3:5d:b3:b3:79:cd:ce:02: 28:fb:a1:d9:a5:57:3f:ef:35:ce:e4:93:98:57:2f:17:57:38: fc:8f:4a:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2r+0mRCgLZtJcZZXtN5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZjUwMWQyZDA1MjE4NWQ0ZjY1NjkyMThjMjhiZjM1ODU5 MDAwZmMwHhcNMjUxMjIxMDMwMTIxWhcNMjUxMjIyMDMwMTIxWjAzMTEwLwYDVQQD Eyg4MmMxZjZhODcwZTQyYTRlOTZiNDU5M2M1YjhkYWRlNjYwNWZkNDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/74bmIg+nsYS2mHvhzoqx9GiUdx VrsmAOxbE5h0/s5HoxyfjqpfW02ouJ+DDrSo16d64kI9p64G5vPaoQm9qmcbdtSL h4DTq3LzVsSxRLEUueq79LxO+v1IlJNpq6Cc0YCPDwHQHoyYkT2SD8+o47Lddayk 3+hYRMhkmWyQqj96XsCU6SRi+z0CR5++cD6M/755OhUjiWOV1peVHid61uPo0HpW jBOeFu48YHon3RiutOb/pO+DRd8powK3W3/1nN9Nw6aBlXzEQXYzdGo4u+vA1jAM x+jfLYg9AKgF70vannyZide07Wc9676+SlfhF6kNRBISJiESmw6vi+UQJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILB9qhw5CpOlrRZPFuNreZgX9SYMB8GA1UdIwQY MBaAFM71AdLQUhhdT2VpIYwovzWFkAD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85OTk2NDctMWU3Zi00OTliLTlkNDgt Zjk1MDMyN2Y4OGQzLzEvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85OTk2NDctMWU3Zi00OTliLTlkNDgtZjk1MDMyN2Y4OGQz LzEvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuI1CSnLK cEEdF88Yf4mcIfCJch6/voSbWKGwvPopdVFT1EDCle5YRtGsDpa/aWgs8+tY0gHt G8BhMyNp2CKo6sZMJ2RqNsoyXHos8ii2J9blZOcJZg2oV1Obn5y/cMWVY5nxGGVd WNf4q7FgxIuN7x9oML5PkufwDWaG5MPtqAKek4Z93piqkXgTg34W0YRkXyxpj8Nk wFbJvdjDDzYBM3UBZ608P9mEOgnt5C/7CwMQfuWs3C1fsK7Udnz7idszSOXZUpFi LSDnkumq7cFxkOjN9PlXRsZjG5A0vPsVgjKtqrNds7N5zc4CKPuh2aVXP+81zuST mFcvF1c4/I9KuA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:39:37 2025 by rpki-client