This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft File: ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft (raw, json) Hash identifier: ddGydCHbaoLfejHQmDelb0he1KTXJ/GA45zvuutlgOo= Subject key identifier: 16:E6:21:A7:2D:34:DE:7D:2D:2F:7B:95:14:EA:E5:19:69:D9:DA:A9 Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7 Certificate issuer: /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7 Certificate serial: 019B3D906EE59F1392B436B3B4781DC96BB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft Manifest number: 1371 Signing time: Sat 20 Dec 2025 21:00:34 +0000 Manifest this update: Sat 20 Dec 2025 21:00:34 +0000 Manifest next update: Sun 21 Dec 2025 21:00:34 +0000 Files and hashes: 1: ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl (hash: DLva1VmWlCDVyiv6bFkmsOjg6ynyn0mXNpCov4i2+4M=) 2: zysotr6Zh0JowEPpxerhuN8FsPI.roa (hash: m7vcKgaxDGAMU/aHqkxYhIsxn/ZRzduC29i2UI0iCuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:6e:e5:9f:13:92:b4:36:b3:b4:78:1d:c9:6b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7 Validity Not Before: Dec 20 21:00:34 2025 GMT Not After : Dec 21 21:00:34 2025 GMT Subject: CN=16e621a72d34de7d2d2f7b9514eae51969d9daa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:15:97:dd:10:66:cc:45:ca:25:ae:90:87: 3f:e6:2d:3e:33:b3:2b:be:6d:55:db:3f:02:47:ee: 41:03:ba:d7:03:a9:78:09:bd:7f:e3:22:39:a5:15: f2:f9:8b:57:f7:41:f3:4c:98:64:72:de:a5:79:24: be:09:45:66:22:c1:8b:be:7f:73:71:ee:33:de:87: 55:4d:da:b1:ee:7c:06:f2:92:d3:63:9a:6e:d7:08: eb:f6:a9:29:2f:5f:9a:d9:e7:60:a3:1a:bb:2e:b7: e5:25:b0:68:f9:b3:5c:69:1c:f7:da:77:e3:0e:92: a5:b3:10:61:9d:a7:91:b2:45:e6:c2:d0:75:ab:a4: c5:f5:57:21:81:48:34:74:bf:2e:54:46:ba:ee:a3: 79:a8:74:78:9c:3d:eb:31:97:53:f5:c7:2c:14:e7: d8:d2:69:eb:9e:80:12:fb:6a:4d:51:1b:51:ce:e5: 3b:4c:a7:8e:6b:80:04:2b:fc:29:0c:e5:95:ec:74: be:8f:b7:65:79:90:06:81:2f:43:bb:84:16:a9:30: a6:06:6d:54:a7:e5:27:f8:cb:cd:c0:64:1a:11:0b: 18:66:72:27:fc:a8:42:f8:5e:b1:72:35:d7:3f:d4: 29:cf:4f:76:46:d9:fb:01:46:af:8b:b9:96:49:05: e8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E6:21:A7:2D:34:DE:7D:2D:2F:7B:95:14:EA:E5:19:69:D9:DA:A9 X509v3 Authority Key Identifier: keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:37:5d:17:21:2c:ca:61:7d:01:c5:93:af:19:cb:c3:a2:14: ec:b3:96:49:d6:6b:c0:5f:bd:e6:23:49:b2:ec:68:06:06:75: dd:dd:6c:ac:76:19:84:05:11:87:2e:d9:c7:ed:2e:3e:e1:64: 94:02:38:9e:41:c7:a7:ff:02:70:06:3a:9a:b9:b7:75:aa:6d: 15:5d:c1:81:9b:18:ce:6a:65:55:0d:92:22:13:61:d4:ad:4a: 65:8c:8f:e5:1c:c4:bf:1d:28:a6:82:6f:05:7d:a7:45:55:d8: 68:bb:d8:d4:ba:98:b4:1d:2c:a8:80:b6:95:27:2c:db:8f:7d: 0c:98:e4:b2:65:3a:e3:15:a8:0f:c7:bd:14:c9:c4:d0:34:51: 72:34:e5:b4:95:79:be:54:ca:68:08:6b:65:ca:f2:73:66:8c: 98:63:be:6d:ef:03:ef:f2:5e:5d:13:3e:d3:8e:b1:d2:8e:33: 80:35:aa:74:2b:bc:55:bc:dc:01:63:b9:d9:d9:46:37:4f:d1: 66:2d:36:c3:0d:0b:40:e1:3f:8e:a6:7f:3c:46:cf:bf:20:55: 4a:ed:99:6b:22:50:f4:ac:69:36:aa:a9:1c:e7:25:a9:26:c7: 52:4f:ee:ad:d9:ef:b2:54:f2:b4:13:cf:bd:09:a1:91:2a:e2: 9f:01:47:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kG7lnxOStDaztHgdyWuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NmI1MzI1NWU2YzhmYjc2ZmFjMWNjYjg0OGZlZTQ1NjAw YjU1ZjcwHhcNMjUxMjIwMjEwMDM0WhcNMjUxMjIxMjEwMDM0WjAzMTEwLwYDVQQD EygxNmU2MjFhNzJkMzRkZTdkMmQyZjdiOTUxNGVhZTUxOTY5ZDlkYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZgVl90QZsxFyiWukIc/5i0+M7Mr vm1V2z8CR+5BA7rXA6l4Cb1/4yI5pRXy+YtX90HzTJhkct6leSS+CUVmIsGLvn9z ce4z3odVTdqx7nwG8pLTY5pu1wjr9qkpL1+a2edgoxq7LrflJbBo+bNcaRz32nfj DpKlsxBhnaeRskXmwtB1q6TF9VchgUg0dL8uVEa67qN5qHR4nD3rMZdT9ccsFOfY 0mnrnoAS+2pNURtRzuU7TKeOa4AEK/wpDOWV7HS+j7dleZAGgS9Du4QWqTCmBm1U p+Un+MvNwGQaEQsYZnIn/KhC+F6xcjXXP9Qpz092Rtn7AUavi7mWSQXovQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbmIactNN59LS97lRTq5Rlp2dqpMB8GA1UdIwQY MBaAFGVrUyVebI+3b6wcy4SP7kVgC1X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWld0VEpWNXNqN2R2ckJ6TGhJX3VSV0FMVmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YzhlYWMtYmRjYi00ZjBkLWIyZDgt ZWE0MTgzMmFkMTcyLzEvWld0VEpWNXNqN2R2ckJ6TGhJX3VSV0FMVmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YzhlYWMtYmRjYi00ZjBkLWIyZDgtZWE0MTgzMmFkMTcy LzEvWld0VEpWNXNqN2R2ckJ6TGhJX3VSV0FMVmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDddFyEs ymF9AcWTrxnLw6IU7LOWSdZrwF+95iNJsuxoBgZ13d1srHYZhAURhy7Zx+0uPuFk lAI4nkHHp/8CcAY6mrm3daptFV3BgZsYzmplVQ2SIhNh1K1KZYyP5RzEvx0opoJv BX2nRVXYaLvY1LqYtB0sqIC2lScs2499DJjksmU64xWoD8e9FMnE0DRRcjTltJV5 vlTKaAhrZcryc2aMmGO+be8D7/JeXRM+046x0o4zgDWqdCu8VbzcAWO52dlGN0/R Zi02ww0LQOE/jqZ/PEbPvyBVSu2ZayJQ9KxpNqqpHOclqSbHUk/urdnvslTytBPP vQmhkSrinwFHNw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:39:50 2025 by rpki-client