This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json) Hash identifier: ZcIup4mbDRqjM2CVChCIMcZtWq2wEuBD/cGI4FzHmA8= Subject key identifier: 33:C2:A4:AD:B8:6C:A3:E5:78:CD:84:60:D1:23:0A:4E:AC:80:F6:54 Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b Certificate serial: 019B3AC69EA7CF3F882B486B655D126C212A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft Manifest number: 0723 Signing time: Sat 20 Dec 2025 08:00:53 +0000 Manifest this update: Sat 20 Dec 2025 08:00:53 +0000 Manifest next update: Sun 21 Dec 2025 08:00:53 +0000 Files and hashes: 1: KPkdoY_KgRYfITsmBsTAiiNwJ1o.roa (hash: qNqRsYBUnp//vKxwQPAS8HfS3NzzNrMRwJJrGZ7LQGs=) 2: ZhxwMRHWErqoZg_Itz4BRM1Zy1g.roa (hash: pA1I1yaFQSWAdVvtp/IDWYB864SqtxE1eJEw16TKrNs=) 3: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: vQL5lSIRlFKMtPVSuHqzuUKB2zvur1qgVLxRMnSfBbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:9e:a7:cf:3f:88:2b:48:6b:65:5d:12:6c:21:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b Validity Not Before: Dec 20 08:00:53 2025 GMT Not After : Dec 21 08:00:53 2025 GMT Subject: CN=33c2a4adb86ca3e578cd8460d1230a4eac80f654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9b:c8:d4:71:81:04:23:c8:6b:ee:c5:c5:98: 12:36:13:78:e9:77:56:fc:f7:b4:76:30:c4:2c:2b: 47:fe:46:50:1b:2b:be:d8:32:3b:38:da:58:8f:7e: f4:88:3b:a1:25:ad:dc:25:ce:da:dd:36:3b:35:a8: 24:08:c3:cb:b0:a3:9d:18:5e:b6:7d:0c:2d:38:6b: 80:89:a4:5c:aa:c9:f5:91:6d:ab:58:c8:00:f5:6b: a2:16:20:26:02:eb:fb:71:a1:d5:b2:67:b1:39:48: aa:2a:4b:0c:c4:11:52:36:a6:3f:dd:c0:82:46:e3: 9c:98:ae:46:25:d3:94:3c:a9:73:cf:32:7d:92:84: 44:46:f7:4f:d8:67:bb:ee:b1:0d:25:c7:cb:b1:fd: c9:21:8c:83:ee:60:3d:21:a7:80:52:73:03:91:5b: 67:88:8b:5d:c9:ec:0d:b6:e6:62:e4:c1:3a:61:71: 09:0a:22:f3:40:16:d4:ae:8a:a0:47:05:d0:c1:37: bd:a5:a6:53:dd:b3:46:dd:09:97:f9:d7:df:44:18: 10:9d:2b:4b:a8:34:08:b6:b7:d4:68:18:a7:d6:07: 26:4b:42:5d:17:13:b9:ca:15:f4:47:d6:23:b1:8b: 2a:45:c0:f7:5b:c8:a9:88:e4:59:b9:1b:cf:4c:db: 5a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C2:A4:AD:B8:6C:A3:E5:78:CD:84:60:D1:23:0A:4E:AC:80:F6:54 X509v3 Authority Key Identifier: keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:47:37:95:a9:60:88:7b:c7:61:9e:00:05:33:f1:88:10:b5: 27:25:4b:b6:e9:c7:21:dc:62:a4:e2:60:f6:09:56:56:a8:0b: f9:82:bd:2c:6e:9d:ba:9b:63:3d:fd:40:f1:b2:cc:0b:17:ea: cf:c3:da:af:32:9e:04:96:15:d9:9f:b7:6d:06:5d:8f:0d:8f: 3e:58:3c:a9:66:1b:95:9f:eb:5b:88:16:9d:a4:29:dd:23:0d: b4:a8:a9:6c:6b:c9:ee:80:16:ec:dc:46:a4:96:7b:8a:5c:42: 7e:2f:aa:45:b8:0f:b8:d2:db:95:c7:79:aa:4b:e3:9b:25:83: 2a:36:a2:1a:a0:e2:3b:9b:40:5d:81:d8:0c:61:f0:96:48:68: ac:ed:37:52:7a:e2:2e:04:7a:9d:be:7e:09:f1:dc:7b:c6:45: 93:03:c3:b9:5d:9e:a5:94:7f:21:8c:cc:21:3c:82:58:1d:8e: 2c:aa:af:99:76:c4:5e:a0:5e:14:aa:71:71:bb:bb:0a:13:ab: f7:0a:e1:00:3a:b4:ad:00:de:57:6a:c8:82:ae:f7:bc:68:de: fb:ff:a8:22:24:a5:f6:2c:97:9a:bd:9a:d0:74:96:21:3c:ea: b9:c5:8e:2f:69:b3:eb:4e:7c:89:fa:79:c9:4b:be:f7:a4:a0: e1:11:30:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xp6nzz+IK0hrZV0SbCEqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NWUxN2MwOGFjZGM3N2U5NDRiMjgzOTUwOGYxZmQ3MTFl OGU5N2IwHhcNMjUxMjIwMDgwMDUzWhcNMjUxMjIxMDgwMDUzWjAzMTEwLwYDVQQD EygzM2MyYTRhZGI4NmNhM2U1NzhjZDg0NjBkMTIzMGE0ZWFjODBmNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15vI1HGBBCPIa+7FxZgSNhN46XdW /Pe0djDELCtH/kZQGyu+2DI7ONpYj370iDuhJa3cJc7a3TY7NagkCMPLsKOdGF62 fQwtOGuAiaRcqsn1kW2rWMgA9WuiFiAmAuv7caHVsmexOUiqKksMxBFSNqY/3cCC RuOcmK5GJdOUPKlzzzJ9koRERvdP2Ge77rENJcfLsf3JIYyD7mA9IaeAUnMDkVtn iItdyewNtuZi5ME6YXEJCiLzQBbUroqgRwXQwTe9paZT3bNG3QmX+dffRBgQnStL qDQItrfUaBin1gcmS0JdFxO5yhX0R9YjsYsqRcD3W8ipiORZuRvPTNtavwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPCpK24bKPleM2EYNEjCk6sgPZUMB8GA1UdIwQY MBaAFGZeF8CKzcd+lEsoOVCPH9cR6Ol7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTIt MDBjZWViNmE0MTRmLzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTItMDBjZWViNmE0MTRm LzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0c3lalg iHvHYZ4ABTPxiBC1JyVLtunHIdxipOJg9glWVqgL+YK9LG6duptjPf1A8bLMCxfq z8ParzKeBJYV2Z+3bQZdjw2PPlg8qWYblZ/rW4gWnaQp3SMNtKipbGvJ7oAW7NxG pJZ7ilxCfi+qRbgPuNLblcd5qkvjmyWDKjaiGqDiO5tAXYHYDGHwlkhorO03Unri LgR6nb5+CfHce8ZFkwPDuV2epZR/IYzMITyCWB2OLKqvmXbEXqBeFKpxcbu7ChOr 9wrhADq0rQDeV2rIgq73vGje+/+oIiSl9iyXmr2a0HSWITzqucWOL2mz6058ifp5 yUu+96Sg4REwOg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:04:38 2025 by rpki-client