This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: SKWXWJxWk+3YFlEVD/JTOypGDtSYSrqV/C6fTm84Eu8= Subject key identifier: A0:A7:D0:CD:64:7A:66:5C:59:DE:25:DF:E7:28:17:84:88:ED:39:99 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019B3A587A331F37CF90034CA09BB3AD2FFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 1795 Signing time: Sat 20 Dec 2025 06:00:35 +0000 Manifest this update: Sat 20 Dec 2025 06:00:35 +0000 Manifest next update: Sun 21 Dec 2025 06:00:35 +0000 Files and hashes: 1: CMjm3mT93yGkp8LUoyzkdQ6l3EE.roa (hash: TkauNWMtnY8DBb4v5VsfB1yBCMV9bCsSOJxWA8/FXoo=) 2: HkTCrKZqDwa8EUL4YflDFIxvuSo.roa (hash: zO36rkW4iEPf0HW9ThqXz35RBy/UdvCTSm39AhOu1Wg=) 3: KcTcayFrsZLodbwf3DiREG7aMgQ.roa (hash: 8/vbDhWMe2EfxMGVicJi+/pUGnJZy6R4MjOjEjkxjUk=) 4: LsmwcIccA3zM4d7kxqt3XhLcSa0.roa (hash: 98WTFaz7XPqlrJj7+XyfBTJEw1Sf7UEiPzA9D8zWsIw=) 5: PneAThfusF70GWHWywmhFb0vzKg.roa (hash: 0kjnbKbpSjxRU2te032pdWFUGrUsCjxiyKJ48H1DPUU=) 6: QPCXSoVGqmo5YTCi73-CSDuyZ-M.roa (hash: BYlFE9CUTQ67gGcO7goW8z5RieIlu+Sp4h/7HCES0Bg=) 7: T-x5NWBWP7z0RtMavKGuf9lbyTk.roa (hash: 5meL33wuT4ICoWjsr5JwrdL6iizp93b+W5Vq2RQt4cs=) 8: Tvzwy8915xjtj1VO-nUlxadrJf0.roa (hash: 3HBDaFXyl/IL77d9OkQ1M1njyjo3lIiwhNWOJqmRMac=) 9: YPhWBSPHGs5SvVUlaCiCKWmqFfE.roa (hash: 5GbYaE22J8Owy6TgFxnM856qPEXWo4AxIXtfMEPnMxs=) 10: Yqt3Kg8k1YJOv7s88RcINuiKaCE.roa (hash: nWZ5K8Cmhazakp99a9slUSDcrdtW/sXazmS+lE8qgb8=) 11: d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa (hash: +81/qDkled7/tuehBezhqXR9TX8Qi/57Cwe4Hugu7Ps=) 12: e3hNMZozjl2a8wTj5jqUKt2netU.roa (hash: z65fVe11ggvNgyomVpHPZ3mT5uEYvV6n9cNO6WIVkOQ=) 13: jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa (hash: V8+8ahCoa4BEtoKDRdWiWxQzrt5GRgWy4qkSi1g/uZs=) 14: lcN6tqSn03IPMO2AvpfpxpGgDQY.roa (hash: 8fvPqg+8qqIeW9Kd8tRNl8Xlys8MO8b9CTy9FA3u9tA=) 15: lzFclAiK-AKgH976Yl_uXg9r5wM.roa (hash: H/cy8Ymyjy+9oeeIlZQHYMPSRfjOx2uqFxTFGhSTiGE=) 16: oLt7xT_rHP-Hxh3lUeggtdVEvTs.roa (hash: hblIrYC6F95+wg2sH5P/uCfjsNRvIhmQ2s3oU6U1S/g=) 17: ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa (hash: Y6nye2lCZkZiTnuBzh99LMq3fLt8LGMzc9QAvB3SwlM=) 18: p-aeeSEszU3aapQ0yEslN0bhQQ8.roa (hash: Mh/Q23651bJq9potJm5ecJKYPprCxzH57rPx/Ooy5iY=) 19: r40XtPdgr8Y3RxrHTUe0xVuomM0.roa (hash: t4ySxCeAxHkHkDK1q9KhuYpYVZshrBVi3KJ4uODs/8Q=) 20: rD4_vnlr510eZLzrr2aCnfyAvEE.roa (hash: dL+NP4nhH4zwWo5a+tL5dbCaIelO5RMTVy2uI8g69YI=) 21: rdclR5rmMPPiGdub64u9CAD4cr0.roa (hash: wXgXLOiDxEJK62XQ7DLJMuxi7/zXmFbGyGpgUuOv+8k=) 22: tNteV-bYipxacIdsneN2kRS27vI.roa (hash: DK40xOAWm2KZPWxZ02RGtb+aUbxm0wIjZBTHx/mZzWs=) 23: uzMFOnPKpMqU8CP0ss6Mpv56PiE.roa (hash: F8nsfvroSbli8FdaVZTheRyMCu5cUrtu6qwv9yns62A=) 24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: wZSJGb44SLPlIlT1h2fBvMdCgea/4zoxLhFtbM3Cinw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:7a:33:1f:37:cf:90:03:4c:a0:9b:b3:ad:2f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Dec 20 06:00:35 2025 GMT Not After : Dec 21 06:00:35 2025 GMT Subject: CN=a0a7d0cd647a665c59de25dfe728178488ed3999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b8:a7:08:29:d4:8d:cb:d3:21:05:a4:ee:d6: 45:f0:73:39:7a:a2:11:1d:1c:af:dd:2f:ec:38:ff: ea:4c:1b:05:1e:71:00:6f:fb:8d:05:5d:96:60:f9: 46:bc:a4:77:3b:bc:2b:5b:f6:c9:77:83:f9:af:11: a5:b5:7e:d3:71:bf:a6:0d:67:d4:0e:14:42:bc:36: 22:8a:3e:db:03:9f:b6:3b:94:dd:01:34:cd:f0:a8: f8:23:42:89:e2:3d:70:4c:e8:c3:04:9b:fa:58:25: 5a:b8:0c:10:11:bd:31:d3:8c:2e:d3:dd:6e:50:73: cd:e3:d1:79:dc:7e:6e:25:9f:c4:0d:63:cf:54:d3: e3:1f:07:1b:92:ce:53:61:c4:ee:e5:5d:20:2b:95: f6:20:bc:6e:6d:a2:bf:01:4d:a4:2e:10:f5:53:f0: 2d:00:8e:4a:3f:3f:d0:70:6a:9a:9b:12:96:f1:0e: 45:78:c4:2d:a6:c7:a6:1e:11:71:dd:74:5b:4b:91: 89:22:34:46:24:fa:a7:3a:e8:03:9e:3e:20:89:72: d0:15:03:64:f0:97:a5:39:f3:e6:a8:7f:48:99:55: b1:4f:1b:3c:46:b9:9c:5a:af:73:ba:46:27:0c:b1: 83:ad:a1:99:e7:5b:40:87:a1:b1:a1:e8:78:24:b5: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A7:D0:CD:64:7A:66:5C:59:DE:25:DF:E7:28:17:84:88:ED:39:99 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:06:0d:c2:43:68:59:54:d5:fc:2f:c8:1b:1e:db:b6:3b:3e: 82:7d:ae:16:8c:95:f9:74:16:a6:f1:ff:92:a4:d3:1c:5c:b7: 7d:0c:6b:4a:5d:90:2c:d0:a0:5d:4a:1e:d3:d4:7b:94:fd:21: 0e:3c:e2:dc:59:f7:2e:45:c3:1b:4e:8c:a0:0c:95:83:8e:6c: 83:a1:16:b9:89:d5:5c:ad:70:aa:43:5a:ee:30:4c:ae:de:0f: a5:ad:28:27:2a:8c:1a:69:d0:e9:68:cb:46:2d:16:dc:21:85: 4f:89:47:43:0b:62:1b:37:ea:93:f2:5c:71:5a:7a:3d:d7:a3: ae:99:9f:44:1b:8f:35:60:d8:87:18:4d:6c:1b:a0:16:84:8d: f2:f3:37:51:28:fc:7f:3d:c7:bd:d0:93:cc:64:de:31:ce:4f: b1:60:d6:92:a7:9a:a8:79:bd:8c:5c:bd:5b:6b:9e:fa:cd:c7: cf:59:61:fb:00:5b:e3:91:36:c9:6f:d4:f8:ec:9d:75:63:7f: 42:cb:d5:a5:26:87:21:dc:aa:bd:0d:53:c1:2a:1f:6d:d6:cc: 48:de:6d:ee:2a:ee:00:4c:1f:72:b3:3f:f7:8c:f0:69:b4:63: 0a:43:a7:a4:88:9b:8d:93:6a:8a:ad:fb:70:97:db:a5:3e:45: bf:9d:1c:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WHozHzfPkANMoJuzrS/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjUxMjIwMDYwMDM1WhcNMjUxMjIxMDYwMDM1WjAzMTEwLwYDVQQD EyhhMGE3ZDBjZDY0N2E2NjVjNTlkZTI1ZGZlNzI4MTc4NDg4ZWQzOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7inCCnUjcvTIQWk7tZF8HM5eqIR HRyv3S/sOP/qTBsFHnEAb/uNBV2WYPlGvKR3O7wrW/bJd4P5rxGltX7Tcb+mDWfU DhRCvDYiij7bA5+2O5TdATTN8Kj4I0KJ4j1wTOjDBJv6WCVauAwQEb0x04wu091u UHPN49F53H5uJZ/EDWPPVNPjHwcbks5TYcTu5V0gK5X2ILxubaK/AU2kLhD1U/At AI5KPz/QcGqamxKW8Q5FeMQtpsemHhFx3XRbS5GJIjRGJPqnOugDnj4giXLQFQNk 8JelOfPmqH9ImVWxTxs8RrmcWq9zukYnDLGDraGZ51tAh6Gxoeh4JLWc0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCn0M1kemZcWd4l3+coF4SI7TmZMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQYNwkNo WVTV/C/IGx7btjs+gn2uFoyV+XQWpvH/kqTTHFy3fQxrSl2QLNCgXUoe09R7lP0h Djzi3Fn3LkXDG06MoAyVg45sg6EWuYnVXK1wqkNa7jBMrt4Ppa0oJyqMGmnQ6WjL Ri0W3CGFT4lHQwtiGzfqk/JccVp6PdejrpmfRBuPNWDYhxhNbBugFoSN8vM3USj8 fz3HvdCTzGTeMc5PsWDWkqeaqHm9jFy9W2ue+s3Hz1lh+wBb45E2yW/U+OyddWN/ QsvVpSaHIdyqvQ1TwSofbdbMSN5t7iruAEwfcrM/94zwabRjCkOnpIibjZNqiq37 cJfbpT5Fv50cKg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:07:26 2025 by rpki-client