This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft File: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json) Hash identifier: LXVcmhdZ9Qzpt1Xg1N3Lvp33DaVWEZ/Lu6xJCA61lOg= Subject key identifier: DE:16:01:26:7E:4A:4E:D9:FA:24:19:D0:CE:88:F3:D6:A6:37:B5:29 Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41 Certificate issuer: /CN=656cc25012e3a4c8b1626dd757c7b0510e457341 Certificate serial: 019B37FC3E56603DDD41BFD7AD1AF900D116 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 19:00:36 +0000 Manifest this update: Fri 19 Dec 2025 19:00:36 +0000 Manifest next update: Sat 20 Dec 2025 19:00:36 +0000 Files and hashes: 1: 27WBhhpGCu8KcUXHgHNDtyT7qA4.roa (hash: hASVoi4FkuHDPpmp5IMQcLI7MKWjHmB6IplIj3b2UNs=) 2: BlXtwuXJZi1FsUYJseJuuvLHwG0.roa (hash: E+H4MQ+p60pNwEw6UNfCnrSspvLH+GiOyo4ssEl9XXQ=) 3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: MNtXp3Z1lbC6RsM4OjQbhGEsKbRePWzvGBfCa6y67xM=) 4: l7PaOk1ocbrgfH7RkR-EmGKNBYI.roa (hash: 2MdjtNxo4ObSDeeX352JxmkPKpeMrJB/59RsZtzSS9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:3e:56:60:3d:dd:41:bf:d7:ad:1a:f9:00:d1:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341 Validity Not Before: Dec 19 19:00:36 2025 GMT Not After : Dec 20 19:00:36 2025 GMT Subject: CN=de1601267e4a4ed9fa2419d0ce88f3d6a637b529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:05:04:fe:91:5f:4b:ea:84:c8:c7:f3:10: 90:ed:44:a8:5d:81:5a:e4:41:55:ff:fe:f8:6d:88: 95:52:53:bc:3b:49:e4:2c:97:28:58:53:64:88:d5: ec:aa:23:88:a6:4c:fc:fc:a3:dd:a4:1b:e9:13:93: a3:7b:d4:9f:b1:e9:c8:78:65:d4:db:5e:e4:79:11: 2e:92:39:0d:7c:33:a4:60:c4:62:87:1f:7a:37:6e: a2:84:24:2e:a1:c6:51:d1:eb:6f:8d:8c:0a:fb:86: e0:c2:15:bd:d6:c3:f3:8d:f9:6c:48:3e:82:a2:bf: 4f:8f:23:55:c1:af:62:5f:00:0d:35:0c:82:17:a9: da:c5:da:5f:ff:5b:0f:f5:1a:65:4d:ab:32:af:48: 9e:07:89:72:b1:3f:0e:fe:a2:dd:ca:71:79:fc:f6: 53:98:78:cd:f4:92:f7:7b:e0:24:f8:82:cd:b0:1d: a4:49:18:6d:1e:90:65:39:2c:06:cc:51:e0:4f:5a: 48:cc:fa:90:ac:9d:1a:96:93:33:69:08:41:7f:5b: 87:6f:9d:1d:ec:93:3b:85:f9:50:cc:da:3a:52:a9: 80:d4:2b:1f:bc:14:c4:aa:a2:4b:08:46:c6:cf:05: e0:bd:99:d4:fa:54:c4:0a:bd:78:92:9b:af:16:bd: a0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:16:01:26:7E:4A:4E:D9:FA:24:19:D0:CE:88:F3:D6:A6:37:B5:29 X509v3 Authority Key Identifier: keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9f:9c:6b:c6:f3:56:5a:3e:0b:c3:64:76:c4:d0:e8:4c:ff: d1:9e:1f:67:c3:ec:aa:b6:bd:28:2c:6a:5c:aa:8b:01:d9:8d: 7e:47:57:2f:95:1b:5b:54:ed:c3:0e:c6:39:51:69:80:b4:a9: 5e:ef:7f:21:64:23:2c:4b:9e:8e:de:43:d4:6f:f2:e5:43:c9: d6:57:fb:83:4b:ea:4e:ad:d1:72:fc:5f:bb:75:b9:42:00:9c: f1:89:eb:e1:12:c1:b8:94:3e:ad:83:29:0d:ef:98:c8:e3:d6: c8:b0:fa:cb:cb:8f:33:d0:e5:fb:a6:76:71:6c:f2:3c:10:94: de:7e:37:b3:6e:e9:09:cb:07:df:9a:7e:b0:73:20:df:16:04: a8:86:67:7b:c7:cb:d1:ea:02:56:fe:63:10:55:66:1a:15:10: bd:88:e7:d4:43:69:27:84:e0:7e:98:4a:3a:e9:10:b0:4d:f8: d9:3a:5f:14:1a:1d:a7:18:26:6a:db:25:64:85:83:4c:fb:31: 83:78:11:fd:8b:cf:c9:c1:61:2b:4b:ad:f2:93:c8:68:6b:ff: c7:13:72:88:64:6a:16:d6:bd:ae:c4:55:8c:65:bd:7e:2c:b2: 3d:f7:db:a9:95:bc:46:93:b6:41:a4:b7:64:e8:29:43:0c:5c: 8f:12:53:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/D5WYD3dQb/XrRr5ANEWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NmNjMjUwMTJlM2E0YzhiMTYyNmRkNzU3YzdiMDUxMGU0 NTczNDEwHhcNMjUxMjE5MTkwMDM2WhcNMjUxMjIwMTkwMDM2WjAzMTEwLwYDVQQD EyhkZTE2MDEyNjdlNGE0ZWQ5ZmEyNDE5ZDBjZTg4ZjNkNmE2MzdiNTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA080FBP6RX0vqhMjH8xCQ7USoXYFa 5EFV//74bYiVUlO8O0nkLJcoWFNkiNXsqiOIpkz8/KPdpBvpE5Oje9SfsenIeGXU 217keREukjkNfDOkYMRihx96N26ihCQuocZR0etvjYwK+4bgwhW91sPzjflsSD6C or9PjyNVwa9iXwANNQyCF6naxdpf/1sP9RplTasyr0ieB4lysT8O/qLdynF5/PZT mHjN9JL3e+Ak+ILNsB2kSRhtHpBlOSwGzFHgT1pIzPqQrJ0alpMzaQhBf1uHb50d 7JM7hflQzNo6UqmA1CsfvBTEqqJLCEbGzwXgvZnU+lTECr14kpuvFr2gpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4WASZ+Sk7Z+iQZ0M6I89amN7UpMB8GA1UdIwQY MBaAFGVswlAS46TIsWJt11fHsFEORXNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWld6Q1VCTGpwTWl4WW0zWFY4ZXdVUTVGYzBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ZGI0NmQtYmMyZC00NWQ3LWEyNzkt ODIwMzI1ZjUzY2NiLzEvWld6Q1VCTGpwTWl4WW0zWFY4ZXdVUTVGYzBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82ZGI0NmQtYmMyZC00NWQ3LWEyNzktODIwMzI1ZjUzY2Ni LzEvWld6Q1VCTGpwTWl4WW0zWFY4ZXdVUTVGYzBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfp+ca8bz Vlo+C8NkdsTQ6Ez/0Z4fZ8Psqra9KCxqXKqLAdmNfkdXL5UbW1Ttww7GOVFpgLSp Xu9/IWQjLEuejt5D1G/y5UPJ1lf7g0vqTq3Rcvxfu3W5QgCc8Ynr4RLBuJQ+rYMp De+YyOPWyLD6y8uPM9Dl+6Z2cWzyPBCU3n43s27pCcsH35p+sHMg3xYEqIZne8fL 0eoCVv5jEFVmGhUQvYjn1ENpJ4TgfphKOukQsE342TpfFBodpxgmatslZIWDTPsx g3gR/YvPycFhK0ut8pPIaGv/xxNyiGRqFta9rsRVjGW9fiyyPffbqZW8RpO2QaS3 ZOgpQwxcjxJT/w== -----END CERTIFICATE-----Generated at Sat Dec 20 02:51:34 2025 by rpki-client