This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json) Hash identifier: iIroxQVi1TLArg+hnmIRLxq5dj3KKx57BxxyxV00HTY= Subject key identifier: 9B:E2:D7:CC:C2:A9:5F:23:18:98:8C:02:F6:3A:D2:2D:E0:FF:22:93 Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb Certificate serial: 019B3A90851787D63CD700CCE80B7F11A392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 07:01:48 +0000 Manifest this update: Sat 20 Dec 2025 07:01:48 +0000 Manifest next update: Sun 21 Dec 2025 07:01:48 +0000 Files and hashes: 1: XmInGKZQVpi4yiOnRct1YYYqWiE.roa (hash: R86EgdaEJJTkg9AcxCYcJUrFnlotYJxO2Dz2JbHzD6o=) 2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: 3hsFs7kzdVwMQHQv9+M5BlhNaUWQvJKnKemNAY2KraQ=) 3: quUKUBb4zZe6-7AC8l87cCVH0H0.roa (hash: GrPFGNPKw3mudZK+q8bDj+RCkl+C4u9ag/IOaEBEaJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:85:17:87:d6:3c:d7:00:cc:e8:0b:7f:11:a3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb Validity Not Before: Dec 20 07:01:48 2025 GMT Not After : Dec 21 07:01:48 2025 GMT Subject: CN=9be2d7ccc2a95f2318988c02f63ad22de0ff2293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a5:31:ec:9c:d7:5c:25:aa:30:a2:f2:6c:50: d0:7e:ca:77:3b:62:7f:c0:b1:dc:ba:87:39:41:14: 71:04:8b:8d:59:07:2f:c0:9d:38:7e:79:dc:bf:2b: 4b:91:c1:f7:69:c3:b3:d3:41:a2:2c:a1:22:89:71: 36:99:95:e1:56:21:e8:65:19:e1:50:d7:3f:63:bc: d9:b4:77:06:83:76:26:e7:e7:17:e8:37:18:f2:b5: e6:b1:7e:45:91:50:3d:2c:95:03:d7:a9:dc:ee:ec: 3c:2b:b3:7f:83:3d:20:a3:a8:44:1e:8f:a0:2d:f0: 6a:ec:15:00:a2:82:5c:71:9b:ed:56:25:c4:04:8c: de:4b:4c:0a:24:52:5a:d6:1e:43:1e:3f:af:18:96: 1f:56:21:8e:cf:5f:20:49:63:24:cf:72:30:8d:2f: 45:cc:bc:7c:c7:60:c1:cb:24:7b:8b:4f:7c:63:6c: 7f:6d:e5:58:42:91:dd:78:8d:15:6b:52:d4:9d:3f: 13:15:1f:06:37:72:c4:82:8c:a3:a0:89:cb:3f:d4: 1f:d4:15:3e:f6:06:62:b7:d5:bb:ad:60:0b:c4:21: d5:ec:45:20:11:db:58:e7:58:73:f3:c1:9b:78:fa: 51:48:06:f4:e2:18:15:37:27:01:04:9e:7d:f2:9c: f9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E2:D7:CC:C2:A9:5F:23:18:98:8C:02:F6:3A:D2:2D:E0:FF:22:93 X509v3 Authority Key Identifier: keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b6:0b:f2:56:5d:6d:c6:cd:0b:c8:72:01:5c:3f:2c:9a:f6: 8f:9d:89:9c:57:51:46:5b:6b:76:ed:ab:f8:a7:0e:c2:30:b4: c6:a4:38:ba:eb:1d:9e:67:f4:8c:04:74:05:47:05:14:bd:ac: 73:16:51:d8:7d:cd:4e:d3:e4:c4:a6:f3:c9:6e:71:44:5f:e1: 8d:05:61:c5:57:05:d1:12:af:ac:22:fa:9b:a7:c1:78:65:25: 0a:16:d7:18:45:27:69:36:c6:87:b2:b4:98:65:69:f0:5a:0a: e2:00:db:e4:10:29:40:a5:b8:be:15:d1:07:88:06:9f:59:38: 45:1a:e5:74:02:27:a4:96:ea:a9:25:a8:fd:75:69:a2:aa:83: 29:e9:64:3a:36:df:1f:48:15:5c:b6:7e:87:06:a0:ae:d2:52: 51:cb:45:71:a3:7f:8b:67:2d:08:a7:7b:d7:4a:11:23:22:26: 7d:fc:74:0f:0b:1f:2a:23:96:09:0b:9b:07:6a:39:f4:4d:8a: e0:03:e9:b6:35:eb:c3:6b:56:c9:ce:08:b9:c8:13:43:0b:3f: fb:ed:bd:35:e0:7c:b0:55:08:ea:48:01:de:33:af:b5:b8:90: 08:ec:db:6b:8e:91:06:4e:5d:71:8f:d6:ba:f6:e9:3e:2f:1a: 52:8f:02:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kIUXh9Y81wDM6At/EaOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWYzMWFkYWM2NjM4NTViM2RkZDE5MzFjNDRjZjgwNjRk NmE2ZWIwHhcNMjUxMjIwMDcwMTQ4WhcNMjUxMjIxMDcwMTQ4WjAzMTEwLwYDVQQD Eyg5YmUyZDdjY2MyYTk1ZjIzMTg5ODhjMDJmNjNhZDIyZGUwZmYyMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKUx7JzXXCWqMKLybFDQfsp3O2J/ wLHcuoc5QRRxBIuNWQcvwJ04fnncvytLkcH3acOz00GiLKEiiXE2mZXhViHoZRnh UNc/Y7zZtHcGg3Ym5+cX6DcY8rXmsX5FkVA9LJUD16nc7uw8K7N/gz0go6hEHo+g LfBq7BUAooJccZvtViXEBIzeS0wKJFJa1h5DHj+vGJYfViGOz18gSWMkz3IwjS9F zLx8x2DByyR7i098Y2x/beVYQpHdeI0Va1LUnT8TFR8GN3LEgoyjoInLP9Qf1BU+ 9gZit9W7rWALxCHV7EUgEdtY51hz88GbePpRSAb04hgVNycBBJ598pz5pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvi18zCqV8jGJiMAvY60i3g/yKTMB8GA1UdIwQY MBaAFGbvMa2sZjhVs93RkxxEz4Bk1qbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUt ZGIwZGNjMDhmNDUyLzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUtZGIwZGNjMDhmNDUy LzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrYL8lZd bcbNC8hyAVw/LJr2j52JnFdRRltrdu2r+KcOwjC0xqQ4uusdnmf0jAR0BUcFFL2s cxZR2H3NTtPkxKbzyW5xRF/hjQVhxVcF0RKvrCL6m6fBeGUlChbXGEUnaTbGh7K0 mGVp8FoK4gDb5BApQKW4vhXRB4gGn1k4RRrldAInpJbqqSWo/XVpoqqDKelkOjbf H0gVXLZ+hwagrtJSUctFcaN/i2ctCKd710oRIyImffx0DwsfKiOWCQubB2o59E2K 4APptjXrw2tWyc4IucgTQws/++29NeB8sFUI6kgB3jOvtbiQCOzba46RBk5dcY/W uvbpPi8aUo8C4w== -----END CERTIFICATE-----Generated at Sat Dec 20 09:30:50 2025 by rpki-client