This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json) Hash identifier: Riqc/pEVlH499x0dP42ieYypOvkYTa99Zp/AIzlcK4w= Subject key identifier: 02:D6:E6:44:B4:A4:C1:00:8A:3A:7F:F3:DB:EC:DF:10:39:F6:B4:3A Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36 Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36 Certificate serial: 019B2C668782553DA4F9B0E10E7B639C626B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft Manifest number: 107C Signing time: Wed 17 Dec 2025 13:01:15 +0000 Manifest this update: Wed 17 Dec 2025 13:01:15 +0000 Manifest next update: Thu 18 Dec 2025 13:01:15 +0000 Files and hashes: 1: iFAQtylr3ZRvM5JOhViQDahNSl8.roa (hash: ziaVf39GfMHlG6F56FK5ey4SYxeBfLmJtFc4nGwT8Lo=) 2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: /v2vpg10QmqXdAgbmzDLBaF6xmw4hC39hjhGdVELiK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:87:82:55:3d:a4:f9:b0:e1:0e:7b:63:9c:62:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36 Validity Not Before: Dec 17 13:01:15 2025 GMT Not After : Dec 18 13:01:15 2025 GMT Subject: CN=02d6e644b4a4c1008a3a7ff3dbecdf1039f6b43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1c:c3:81:75:30:f4:af:52:50:6e:c0:df:60: c2:59:f1:6b:f4:31:0e:54:96:cc:bc:cf:20:96:ae: ec:52:52:2a:69:bc:47:82:a2:8b:d4:6c:3d:2c:71: 26:6a:ca:fa:2c:08:fe:14:7b:7b:f8:f5:9a:69:58: fe:d8:fb:2f:8a:ec:ba:35:6f:e0:45:81:56:ec:af: e9:d7:d7:e6:51:c0:de:44:99:26:7a:11:d0:e9:a9: 08:bf:6d:89:5e:5e:3c:77:8d:5b:18:13:e9:f8:bd: 17:79:d8:59:81:ef:dd:dc:45:aa:96:b3:c2:02:91: e4:8a:af:e7:82:b8:a3:af:02:da:c4:9e:15:04:41: da:15:a4:a8:55:5b:78:2b:f0:a4:6b:0d:47:dd:f8: 53:06:cc:26:49:71:4d:90:ae:be:c8:1d:af:8c:48: e9:8e:14:47:3d:ff:76:f7:bf:54:95:a0:3d:5d:8d: df:c1:08:48:f3:3e:93:50:57:83:42:8a:c8:1f:2d: 35:80:a1:6b:83:a2:09:72:ff:f9:a8:df:69:96:99: 79:40:ff:36:0a:66:0c:e0:7e:43:54:98:54:b4:2f: ce:68:75:e4:c3:31:32:e7:c1:22:0a:7b:4b:7d:da: 5c:7d:bc:0c:9f:2f:09:8e:e6:c1:4b:4f:fb:50:55: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D6:E6:44:B4:A4:C1:00:8A:3A:7F:F3:DB:EC:DF:10:39:F6:B4:3A X509v3 Authority Key Identifier: keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:de:ee:39:26:64:26:2f:1a:3b:d0:a6:96:44:05:44:c4:e7: 32:03:65:bf:b3:8f:ab:d3:6a:e1:5b:1f:46:6e:43:d1:47:22: 89:93:16:eb:42:9e:2d:d6:fd:52:fc:7f:0b:33:6f:79:6c:7e: a4:b6:00:41:70:e4:2b:e9:8e:05:57:ae:40:94:0a:0b:34:fe: 46:8b:50:19:e2:eb:8a:99:e4:c5:8f:b0:d0:58:1d:f0:ec:52: ae:40:f1:af:1a:79:91:ae:b7:7f:cd:65:35:61:06:77:68:c9: 83:a1:2d:e8:ee:5d:51:52:03:ae:55:a3:3b:4f:78:6d:57:3a: 96:4a:c2:b2:62:0c:29:f5:77:b0:65:7e:58:d9:3f:9e:ee:da: 63:6a:8a:90:76:6b:1c:08:a6:93:79:63:79:72:c0:e1:52:07: 7e:e8:68:4b:e8:ee:14:3f:28:72:9b:1f:f2:6d:74:1e:2b:16: 80:8b:f9:06:22:9f:37:d2:e3:6d:2a:13:96:d0:70:e2:5f:46: 11:d9:66:b3:96:b1:92:eb:e3:52:1d:5c:64:06:06:61:dc:69: 61:81:34:76:23:6c:29:99:21:66:0c:e4:e8:54:34:4b:9f:2d: 9d:79:c4:ce:e4:7d:d8:3f:38:87:24:6d:0e:12:04:82:44:3b: c9:4b:99:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZoeCVT2k+bDhDntjnGJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNmUxYTIyMDhmYTNmMWI5ZjNkMzhmZmYxZjhlMmMzNGQ5 MTFmMzYwHhcNMjUxMjE3MTMwMTE1WhcNMjUxMjE4MTMwMTE1WjAzMTEwLwYDVQQD EygwMmQ2ZTY0NGI0YTRjMTAwOGEzYTdmZjNkYmVjZGYxMDM5ZjZiNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxzDgXUw9K9SUG7A32DCWfFr9DEO VJbMvM8glq7sUlIqabxHgqKL1Gw9LHEmasr6LAj+FHt7+PWaaVj+2Psviuy6NW/g RYFW7K/p19fmUcDeRJkmehHQ6akIv22JXl48d41bGBPp+L0XedhZge/d3EWqlrPC ApHkiq/ngrijrwLaxJ4VBEHaFaSoVVt4K/Ckaw1H3fhTBswmSXFNkK6+yB2vjEjp jhRHPf92979UlaA9XY3fwQhI8z6TUFeDQorIHy01gKFrg6IJcv/5qN9plpl5QP82 CmYM4H5DVJhUtC/OaHXkwzEy58EiCntLfdpcfbwMny8JjubBS0/7UFV6GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALW5kS0pMEAijp/89vs3xA59rQ6MB8GA1UdIwQY MBaAFM5uGiII+j8bnz04//H44sNNkR82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2Mt OWZlZjAxMTRhMmU1LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2MtOWZlZjAxMTRhMmU1 LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASd7uOSZk Ji8aO9CmlkQFRMTnMgNlv7OPq9Nq4VsfRm5D0UciiZMW60KeLdb9Uvx/CzNveWx+ pLYAQXDkK+mOBVeuQJQKCzT+RotQGeLripnkxY+w0Fgd8OxSrkDxrxp5ka63f81l NWEGd2jJg6Et6O5dUVIDrlWjO094bVc6lkrCsmIMKfV3sGV+WNk/nu7aY2qKkHZr HAimk3ljeXLA4VIHfuhoS+juFD8ocpsf8m10HisWgIv5BiKfN9LjbSoTltBw4l9G Edlms5axkuvjUh1cZAYGYdxpYYE0diNsKZkhZgzk6FQ0S58tnXnEzuR92D84hyRt DhIEgkQ7yUuZPA== -----END CERTIFICATE-----Generated at Wed Dec 17 15:11:35 2025 by rpki-client