This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: ANtn3cQ2Kq2mEmCHmdFYmYxC0pNH325pZsZqaJxHOKU= Subject key identifier: 80:62:E0:73:1A:62:E0:8B:F4:7E:97:66:DB:C9:97:98:CC:58:F4:E1 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019B30E97EC15B8284AEDEA80272CBD62600 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1790 Signing time: Thu 18 Dec 2025 10:02:47 +0000 Manifest this update: Thu 18 Dec 2025 10:02:47 +0000 Manifest next update: Fri 19 Dec 2025 10:02:47 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 4: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 5: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 6: SsXP67G5VXfNXRkOT8g60pbIt_E.roa (hash: AcS0tD1MMlzOq3CnSuSLecyLwb7WNgT+D5qJ5MY2JsE=) 7: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 8: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: yTXTX6ORs1e5t/HojuvrBiRrPMiSUY+f40cYbLLkh14=) 9: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 10: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 11: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 12: ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa (hash: EumygL53WWGsQCEg1Lem1grWf0oIkvDK9ERz5W1pGI8=) 13: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 14: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:7e:c1:5b:82:84:ae:de:a8:02:72:cb:d6:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Dec 18 10:02:47 2025 GMT Not After : Dec 19 10:02:47 2025 GMT Subject: CN=8062e0731a62e08bf47e9766dbc99798cc58f4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:22:19:5f:b2:51:07:7a:04:35:23:fd:fe: ad:f0:5b:29:84:3d:52:d2:a4:2e:7d:aa:db:e5:1e: db:8a:19:c7:d9:6e:11:c5:7c:ec:40:6a:cf:0a:33: 62:f3:52:88:3a:9a:20:91:47:ce:08:cd:41:4b:8b: 4b:f1:80:49:c5:80:ee:0b:69:ad:8a:cc:ba:fc:18: 75:bc:8a:62:90:c2:75:14:b3:35:90:39:82:25:42: b9:87:b2:1b:29:bb:1a:f7:b0:04:e8:16:ff:65:dd: f9:d5:13:6a:dc:4b:75:a9:91:c3:14:76:28:97:9f: a0:42:cf:b0:6d:c2:35:8e:c3:11:e0:e4:01:70:a8: 91:f3:20:62:f0:19:d6:9c:78:be:31:8d:f2:1a:ee: f2:0d:0b:ea:1b:94:09:1b:87:3d:de:df:18:5f:f6: eb:18:b4:93:d9:44:83:95:85:4d:b5:7a:68:e6:4f: f5:ed:61:60:ca:6d:32:18:fd:a1:8b:59:4b:44:4b: 87:db:08:ae:1e:ef:14:a4:f2:b1:1e:13:0a:b7:41: a2:7b:57:f3:72:ce:0d:1e:5e:46:bf:f1:a1:bb:42: 47:a3:e7:e3:7d:51:35:fc:50:4c:b9:e0:ac:22:68: e4:4f:14:cc:52:08:b5:ce:9b:23:0d:94:b9:03:a3: 68:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:62:E0:73:1A:62:E0:8B:F4:7E:97:66:DB:C9:97:98:CC:58:F4:E1 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5e:6a:03:24:ca:36:b9:0d:90:96:26:7d:ac:d7:e1:53:53: f1:7c:dc:24:50:51:07:27:03:41:3f:9d:3f:f7:0e:d7:cf:e3: 12:92:30:2e:4a:ee:31:75:27:f0:c2:35:c7:7a:05:3c:32:b0: cf:90:f8:e9:a5:64:30:0e:93:81:b5:88:13:a1:ae:e3:d4:2a: 0e:b0:b5:1b:a1:09:eb:b0:ed:d8:52:0b:e0:06:c6:d5:55:df: dc:82:cb:de:a8:97:7a:f1:a7:61:f2:27:e8:02:74:b0:aa:08: 36:24:59:ef:56:87:89:84:95:fc:c0:80:81:da:1d:b0:8d:1b: d3:54:72:00:bb:6c:62:49:8c:2e:4e:6d:14:14:52:ff:17:ca: 16:49:60:41:d6:29:64:7f:6b:cb:7f:68:0d:f0:03:b6:0d:a4: a4:4b:5f:f3:a1:c9:5c:7c:59:f0:55:53:1c:f4:92:a0:27:0f: b3:38:59:c6:ca:2f:05:13:37:7e:2e:6a:fb:4f:af:a3:e3:1a: e7:34:94:26:f0:f2:db:e7:8d:fd:22:57:c3:08:6c:c2:f9:2e: ac:f8:bc:17:a0:3f:35:05:32:e6:a7:27:44:c1:cd:2d:67:00: e4:fb:a8:97:4b:c6:67:c0:e9:cc:83:99:c4:f1:14:56:2e:93: 5a:69:56:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6X7BW4KErt6oAnLL1iYAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUxMjE4MTAwMjQ3WhcNMjUxMjE5MTAwMjQ3WjAzMTEwLwYDVQQD Eyg4MDYyZTA3MzFhNjJlMDhiZjQ3ZTk3NjZkYmM5OTc5OGNjNThmNGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQMiGV+yUQd6BDUj/f6t8FsphD1S 0qQufarb5R7bihnH2W4RxXzsQGrPCjNi81KIOpogkUfOCM1BS4tL8YBJxYDuC2mt isy6/Bh1vIpikMJ1FLM1kDmCJUK5h7IbKbsa97AE6Bb/Zd351RNq3Et1qZHDFHYo l5+gQs+wbcI1jsMR4OQBcKiR8yBi8BnWnHi+MY3yGu7yDQvqG5QJG4c93t8YX/br GLST2USDlYVNtXpo5k/17WFgym0yGP2hi1lLREuH2wiuHu8UpPKxHhMKt0Gie1fz cs4NHl5Gv/Ghu0JHo+fjfVE1/FBMueCsImjkTxTMUgi1zpsjDZS5A6NoBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBi4HMaYuCL9H6XZtvJl5jMWPThMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHF5qAyTK NrkNkJYmfazX4VNT8XzcJFBRBycDQT+dP/cO18/jEpIwLkruMXUn8MI1x3oFPDKw z5D46aVkMA6TgbWIE6Gu49QqDrC1G6EJ67Dt2FIL4AbG1VXf3ILL3qiXevGnYfIn 6AJ0sKoINiRZ71aHiYSV/MCAgdodsI0b01RyALtsYkmMLk5tFBRS/xfKFklgQdYp ZH9ry39oDfADtg2kpEtf86HJXHxZ8FVTHPSSoCcPszhZxsovBRM3fi5q+0+vo+Ma 5zSUJvDy2+eN/SJXwwhswvkurPi8F6A/NQUy5qcnRMHNLWcA5Puol0vGZ8DpzIOZ xPEUVi6TWmlW7g== -----END CERTIFICATE-----Generated at Thu Dec 18 12:43:09 2025 by rpki-client