This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft File: zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json) Hash identifier: f9qDZO82mv6aXDpPGOjCHwZoZlixWTrMMzbxt6XFeTU= Subject key identifier: D7:2F:C9:BC:D8:F4:4F:9C:EF:30:D2:CB:DB:74:8C:72:73:8A:9A:E5 Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8 Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8 Certificate serial: 019B3D230DA42C8A2D7CCB96E672A2BEA672 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft Manifest number: 1084 Signing time: Sat 20 Dec 2025 19:01:05 +0000 Manifest this update: Sat 20 Dec 2025 19:01:05 +0000 Manifest next update: Sun 21 Dec 2025 19:01:05 +0000 Files and hashes: 1: O1GYVhxFS0M7H20Hoh1Atb3eLaE.roa (hash: tCVke6K7TW9gUgASV8dTundK+jeF3bulXbwfPaxFtHY=) 2: SWAth1mKD6FwJVqaJWtV6D-F51Y.roa (hash: REJDhZOwFyr4wdpkCheBE0DhoqN625ViwDnudBYPico=) 3: Sc-FyfdVDPaQqHGz-GI3fsuN6cM.roa (hash: zSZi5viNxy6Qez2EVg97kMrTwqojW2kb2exfumMpwjg=) 4: hkuhpnMVVYRgPxAr-LQ10OakoTI.roa (hash: oAtibnQ6KN2VeS7D1IHVgfHz1J3VS/wtW0fPG2i0OP0=) 5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: CE5f9Ovo/rq4+cr4g/lvSAY047uN1UeHpaIz1mpQWug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:0d:a4:2c:8a:2d:7c:cb:96:e6:72:a2:be:a6:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8 Validity Not Before: Dec 20 19:01:05 2025 GMT Not After : Dec 21 19:01:05 2025 GMT Subject: CN=d72fc9bcd8f44f9cef30d2cbdb748c72738a9ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a7:22:db:05:cf:37:61:c8:89:60:64:b7:8c: fa:55:9a:c2:41:7e:6e:a8:29:06:17:29:9f:4c:ef: 4d:af:fb:9f:33:1f:ad:57:23:f5:fa:f1:a4:17:e3: 49:88:11:68:db:7e:29:9e:10:1a:37:2f:42:b6:b5: 61:77:ac:2b:1a:00:9c:d7:94:99:5c:63:fc:43:68: bc:83:ac:32:5f:e1:7b:81:0b:26:13:51:3e:e2:18: 6c:81:9a:9b:3b:44:e4:24:2c:18:b1:4b:9c:b6:e1: b1:49:e1:ca:2f:85:86:e5:53:e5:6d:a5:47:df:1f: 53:aa:67:51:11:e8:da:ce:8b:ba:f5:0f:8b:39:52: 94:47:fe:3b:10:e6:20:88:1f:81:56:27:78:9a:58: aa:10:00:01:c7:f4:c4:50:f5:2f:32:6c:e3:d9:d4: 1c:d7:95:33:35:f6:3a:1c:19:d3:6d:36:e6:50:0b: 82:87:04:fe:78:0e:0c:a8:be:d7:7a:6b:ec:0d:43: 40:79:6c:32:c2:12:39:6a:ac:81:e3:af:ff:9c:fd: e1:23:f6:4c:94:41:a9:2b:f1:f9:7d:44:04:99:fc: 70:06:8f:66:e4:21:e4:03:40:23:0b:0e:ca:61:36: 8b:8d:31:13:ff:5f:3d:ba:03:63:d6:33:c0:7a:36: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2F:C9:BC:D8:F4:4F:9C:EF:30:D2:CB:DB:74:8C:72:73:8A:9A:E5 X509v3 Authority Key Identifier: keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d3:d9:9f:e1:64:08:80:8f:b6:c8:0e:9c:f7:7a:5c:7b:29: 18:32:b0:e3:e7:1c:a3:ba:35:e3:d3:2d:3e:dd:05:13:c3:fb: 98:bf:b0:67:9e:51:dd:a1:ea:b3:c5:e1:a2:be:91:1d:57:b8: de:45:8c:7d:b1:5a:3a:01:c6:d2:bc:c0:65:3e:6d:e2:28:e0: 98:61:9c:4b:9d:c9:37:ce:e6:fe:36:3d:13:b4:23:3a:20:e5: 54:0b:84:09:30:ab:ba:58:65:ee:71:95:e8:01:44:42:76:bd: a0:e8:3f:86:3d:4f:ea:7a:80:11:cb:31:35:bd:b5:fe:7b:6e: 2b:e2:e9:74:c4:51:f0:6d:cf:f6:00:54:34:bc:91:47:47:ac: 2e:4a:e0:0a:54:3e:eb:81:3e:ff:9c:4d:c2:6e:7a:bc:3b:53: 23:dc:e6:25:c8:49:f9:d0:ad:d2:cf:fa:37:48:57:16:35:0f: 94:46:f6:f3:70:fe:78:d3:43:27:03:b4:a2:c6:58:56:49:b2: c3:77:44:28:bc:61:26:c0:dd:76:b5:06:9a:d6:9a:2d:1a:07: 30:cd:26:11:5f:10:9d:ca:76:88:8e:93:d2:00:5b:5e:04:ba: d3:f7:43:d4:54:1a:1c:0f:29:91:5b:ee:d3:99:99:03:ae:93: 87:f2:42:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iw2kLIotfMuW5nKivqZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjhmN2EzOTFiN2IxNjQ5ZWQ0OTAzNDgyZDNlOTMxZWQz NGUzZDgwHhcNMjUxMjIwMTkwMTA1WhcNMjUxMjIxMTkwMTA1WjAzMTEwLwYDVQQD EyhkNzJmYzliY2Q4ZjQ0ZjljZWYzMGQyY2JkYjc0OGM3MjczOGE5YWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qci2wXPN2HIiWBkt4z6VZrCQX5u qCkGFymfTO9Nr/ufMx+tVyP1+vGkF+NJiBFo234pnhAaNy9CtrVhd6wrGgCc15SZ XGP8Q2i8g6wyX+F7gQsmE1E+4hhsgZqbO0TkJCwYsUuctuGxSeHKL4WG5VPlbaVH 3x9TqmdREejazou69Q+LOVKUR/47EOYgiB+BVid4mliqEAABx/TEUPUvMmzj2dQc 15UzNfY6HBnTbTbmUAuChwT+eA4MqL7XemvsDUNAeWwywhI5aqyB46//nP3hI/ZM lEGpK/H5fUQEmfxwBo9m5CHkA0AjCw7KYTaLjTET/189ugNj1jPAejYl6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcvybzY9E+c7zDSy9t0jHJziprlMB8GA1UdIwQY MBaAFM1o96ORt7FkntSQNILT6THtNOPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQt MTY3M2FkOGM0MDEyLzEveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQtMTY3M2FkOGM0MDEy LzEveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActPZn+Fk CICPtsgOnPd6XHspGDKw4+cco7o149MtPt0FE8P7mL+wZ55R3aHqs8Xhor6RHVe4 3kWMfbFaOgHG0rzAZT5t4ijgmGGcS53JN87m/jY9E7QjOiDlVAuECTCrulhl7nGV 6AFEQna9oOg/hj1P6nqAEcsxNb21/ntuK+LpdMRR8G3P9gBUNLyRR0esLkrgClQ+ 64E+/5xNwm56vDtTI9zmJchJ+dCt0s/6N0hXFjUPlEb283D+eNNDJwO0osZYVkmy w3dEKLxhJsDddrUGmtaaLRoHMM0mEV8Qncp2iI6T0gBbXgS60/dD1FQaHA8pkVvu 05mZA66Th/JC/Q== -----END CERTIFICATE-----Generated at Sun Dec 21 01:21:34 2025 by rpki-client