This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: 8ensYtqP+YsJYw34uF6la7mHXvRgqN40ErNZxtmA0tw= Subject key identifier: 44:FE:30:30:E2:10:23:AA:3F:32:77:2F:5B:6F:D9:7D:35:15:3B:68 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019B49CB8ECCDEAD45CD89440FDCE0E636D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 179D Signing time: Tue 23 Dec 2025 06:00:35 +0000 Manifest this update: Tue 23 Dec 2025 06:00:35 +0000 Manifest next update: Wed 24 Dec 2025 06:00:35 +0000 Files and hashes: 1: CMjm3mT93yGkp8LUoyzkdQ6l3EE.roa (hash: TkauNWMtnY8DBb4v5VsfB1yBCMV9bCsSOJxWA8/FXoo=) 2: HkTCrKZqDwa8EUL4YflDFIxvuSo.roa (hash: zO36rkW4iEPf0HW9ThqXz35RBy/UdvCTSm39AhOu1Wg=) 3: KcTcayFrsZLodbwf3DiREG7aMgQ.roa (hash: 8/vbDhWMe2EfxMGVicJi+/pUGnJZy6R4MjOjEjkxjUk=) 4: LsmwcIccA3zM4d7kxqt3XhLcSa0.roa (hash: 98WTFaz7XPqlrJj7+XyfBTJEw1Sf7UEiPzA9D8zWsIw=) 5: PneAThfusF70GWHWywmhFb0vzKg.roa (hash: 0kjnbKbpSjxRU2te032pdWFUGrUsCjxiyKJ48H1DPUU=) 6: QPCXSoVGqmo5YTCi73-CSDuyZ-M.roa (hash: BYlFE9CUTQ67gGcO7goW8z5RieIlu+Sp4h/7HCES0Bg=) 7: T-x5NWBWP7z0RtMavKGuf9lbyTk.roa (hash: 5meL33wuT4ICoWjsr5JwrdL6iizp93b+W5Vq2RQt4cs=) 8: Tvzwy8915xjtj1VO-nUlxadrJf0.roa (hash: 3HBDaFXyl/IL77d9OkQ1M1njyjo3lIiwhNWOJqmRMac=) 9: YPhWBSPHGs5SvVUlaCiCKWmqFfE.roa (hash: 5GbYaE22J8Owy6TgFxnM856qPEXWo4AxIXtfMEPnMxs=) 10: Yqt3Kg8k1YJOv7s88RcINuiKaCE.roa (hash: nWZ5K8Cmhazakp99a9slUSDcrdtW/sXazmS+lE8qgb8=) 11: d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa (hash: +81/qDkled7/tuehBezhqXR9TX8Qi/57Cwe4Hugu7Ps=) 12: e3hNMZozjl2a8wTj5jqUKt2netU.roa (hash: z65fVe11ggvNgyomVpHPZ3mT5uEYvV6n9cNO6WIVkOQ=) 13: jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa (hash: V8+8ahCoa4BEtoKDRdWiWxQzrt5GRgWy4qkSi1g/uZs=) 14: lcN6tqSn03IPMO2AvpfpxpGgDQY.roa (hash: 8fvPqg+8qqIeW9Kd8tRNl8Xlys8MO8b9CTy9FA3u9tA=) 15: lzFclAiK-AKgH976Yl_uXg9r5wM.roa (hash: H/cy8Ymyjy+9oeeIlZQHYMPSRfjOx2uqFxTFGhSTiGE=) 16: oLt7xT_rHP-Hxh3lUeggtdVEvTs.roa (hash: hblIrYC6F95+wg2sH5P/uCfjsNRvIhmQ2s3oU6U1S/g=) 17: ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa (hash: Y6nye2lCZkZiTnuBzh99LMq3fLt8LGMzc9QAvB3SwlM=) 18: p-aeeSEszU3aapQ0yEslN0bhQQ8.roa (hash: Mh/Q23651bJq9potJm5ecJKYPprCxzH57rPx/Ooy5iY=) 19: r40XtPdgr8Y3RxrHTUe0xVuomM0.roa (hash: t4ySxCeAxHkHkDK1q9KhuYpYVZshrBVi3KJ4uODs/8Q=) 20: rD4_vnlr510eZLzrr2aCnfyAvEE.roa (hash: dL+NP4nhH4zwWo5a+tL5dbCaIelO5RMTVy2uI8g69YI=) 21: rdclR5rmMPPiGdub64u9CAD4cr0.roa (hash: wXgXLOiDxEJK62XQ7DLJMuxi7/zXmFbGyGpgUuOv+8k=) 22: tNteV-bYipxacIdsneN2kRS27vI.roa (hash: DK40xOAWm2KZPWxZ02RGtb+aUbxm0wIjZBTHx/mZzWs=) 23: uzMFOnPKpMqU8CP0ss6Mpv56PiE.roa (hash: F8nsfvroSbli8FdaVZTheRyMCu5cUrtu6qwv9yns62A=) 24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: 939OPex7i3ZQJaq8D8b2k0dY13AtYoWoqm0Dk86eG7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:cb:8e:cc:de:ad:45:cd:89:44:0f:dc:e0:e6:36:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Dec 23 06:00:35 2025 GMT Not After : Dec 24 06:00:35 2025 GMT Subject: CN=44fe3030e21023aa3f32772f5b6fd97d35153b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:de:26:52:8b:42:43:f1:45:83:4c:ec:6a:58: 2d:fd:e1:1c:75:ad:7f:e1:f2:af:ae:22:07:42:c4: b1:b2:dc:79:00:46:2d:e2:79:25:b1:68:62:87:0d: ea:31:55:75:93:a0:ac:2d:09:03:8f:9e:48:75:b0: 02:97:c6:fe:76:46:0b:82:8e:ba:98:05:3f:a5:14: d6:3b:5c:74:ca:06:04:2d:5d:fd:2c:76:3b:b9:1b: e9:10:f3:fd:cc:b8:f2:62:37:91:99:05:7f:4c:54: b9:53:cf:bf:37:05:1f:d4:08:87:b6:19:69:92:1e: aa:20:bf:41:4e:f0:73:3b:77:6c:83:0a:53:54:38: 22:d6:3e:af:09:49:d5:4b:ff:3c:f4:f4:b3:6e:64: 45:f6:6e:00:e4:bc:ca:3c:b8:60:bc:18:a0:b8:06: 4b:eb:04:2c:15:a5:0a:5f:ce:75:27:90:a7:4c:ea: 56:4b:b2:56:2f:4c:9a:80:50:43:de:f8:cd:8b:e0: 5b:a9:76:09:38:f1:6c:3c:36:fa:fe:6d:32:ff:14: 24:29:ca:a8:4c:8c:5c:10:12:ac:b3:e6:4e:1a:8a: 92:f7:2b:02:16:9c:8a:be:d8:b5:1b:91:4d:00:39: 39:cd:3c:7e:54:71:96:63:17:66:21:83:2d:9f:84: 18:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FE:30:30:E2:10:23:AA:3F:32:77:2F:5B:6F:D9:7D:35:15:3B:68 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:99:f9:a1:76:02:2e:45:d4:16:55:0e:d2:cd:dd:e2:f5:35: a0:09:a9:fe:f5:a5:37:00:04:79:86:f3:37:7f:2c:bd:12:c8: 6a:a0:78:02:ea:6d:d6:4f:5e:65:01:c6:8d:9f:6d:24:0f:68: 30:e1:49:ea:94:99:6e:01:8b:38:e3:f8:3d:b0:aa:04:be:f9: 64:74:8b:5b:ef:ef:c4:58:45:32:46:44:03:95:b3:80:57:9b: 39:34:0e:09:8e:f8:23:e7:2e:5a:ab:0e:47:18:1c:08:98:4a: b2:d1:4c:d3:d1:26:06:f7:20:b2:b4:2e:55:d0:d0:f0:91:c4: 05:f4:ae:08:99:67:19:c0:b0:0e:09:a3:08:d6:ea:23:fb:0c: dc:34:48:53:ed:1e:93:a2:d6:e8:b4:2a:3b:23:41:e7:da:58: 6f:2e:60:58:97:27:8f:62:b0:6c:93:a4:91:ae:52:f6:2a:0e: e6:a4:22:66:42:56:4d:1d:50:e5:7d:dd:2c:e6:7c:46:f5:dc: 78:90:a6:aa:9f:cd:8c:bc:d8:9d:be:a8:8d:28:ff:18:6e:bc: 60:a8:59:a4:c2:d2:47:de:ee:16:52:c9:cd:8b:87:de:d2:58: 0a:df:a0:4a:d8:5c:cf:9c:ec:74:28:84:0d:c3:63:bb:fd:7f: 79:bc:79:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJy47M3q1FzYlED9zg5jbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjUxMjIzMDYwMDM1WhcNMjUxMjI0MDYwMDM1WjAzMTEwLwYDVQQD Eyg0NGZlMzAzMGUyMTAyM2FhM2YzMjc3MmY1YjZmZDk3ZDM1MTUzYjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk94mUotCQ/FFg0zsalgt/eEcda1/ 4fKvriIHQsSxstx5AEYt4nklsWhihw3qMVV1k6CsLQkDj55IdbACl8b+dkYLgo66 mAU/pRTWO1x0ygYELV39LHY7uRvpEPP9zLjyYjeRmQV/TFS5U8+/NwUf1AiHthlp kh6qIL9BTvBzO3dsgwpTVDgi1j6vCUnVS/889PSzbmRF9m4A5LzKPLhgvBiguAZL 6wQsFaUKX851J5CnTOpWS7JWL0yagFBD3vjNi+BbqXYJOPFsPDb6/m0y/xQkKcqo TIxcEBKss+ZOGoqS9ysCFpyKvti1G5FNADk5zTx+VHGWYxdmIYMtn4QYnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFET+MDDiECOqPzJ3L1tv2X01FTtoMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpn5oXYC LkXUFlUO0s3d4vU1oAmp/vWlNwAEeYbzN38svRLIaqB4Aupt1k9eZQHGjZ9tJA9o MOFJ6pSZbgGLOOP4PbCqBL75ZHSLW+/vxFhFMkZEA5WzgFebOTQOCY74I+cuWqsO RxgcCJhKstFM09EmBvcgsrQuVdDQ8JHEBfSuCJlnGcCwDgmjCNbqI/sM3DRIU+0e k6LW6LQqOyNB59pYby5gWJcnj2KwbJOkka5S9ioO5qQiZkJWTR1Q5X3dLOZ8RvXc eJCmqp/NjLzYnb6ojSj/GG68YKhZpMLSR97uFlLJzYuH3tJYCt+gSthcz5zsdCiE DcNju/1/ebx5Qw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:19:18 2025 by rpki-client