This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json) Hash identifier: VXwtiddKPvzIJUknnjx901MYRKe63y859QgHitkkQP0= Subject key identifier: 4A:6D:B3:0A:6D:AF:9E:AE:66:A7:80:48:42:1F:29:F8:95:4F:66:C5 Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74 Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874 Certificate serial: 019B31C4429C633B74634006CD23B78F84E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft Manifest number: 1238 Signing time: Thu 18 Dec 2025 14:01:44 +0000 Manifest this update: Thu 18 Dec 2025 14:01:44 +0000 Manifest next update: Fri 19 Dec 2025 14:01:44 +0000 Files and hashes: 1: sQGDlHpoLDO9MGkxSeBWC8uppqs.roa (hash: 6KgDIkevhFyVfhdKRkIXWLxH6LsOjOgpwNrZ+fmFguE=) 2: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: PmWcdBh3aouSquIBkilZfwPkqKAZsehWOo9BsoWb1e8=) 3: ziOY-6fncsLuQQzVu0Sf6c2Hbmk.roa (hash: AVAQzd3M8IxybV2CUgMzwoAYpnE92DpPd7dWpe04sBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c4:42:9c:63:3b:74:63:40:06:cd:23:b7:8f:84:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874 Validity Not Before: Dec 18 14:01:44 2025 GMT Not After : Dec 19 14:01:44 2025 GMT Subject: CN=4a6db30a6daf9eae66a78048421f29f8954f66c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:03:4f:7e:fa:cb:3e:6f:15:5e:0c:37:63: 79:55:5d:ee:66:de:05:61:e5:a8:ae:78:f8:a5:b7: f9:76:24:62:3e:22:68:51:98:db:fe:7b:9b:a4:91: 61:b7:77:3a:e4:96:b8:bb:af:bf:5e:5f:18:59:8f: b7:1e:b3:08:4e:41:55:a6:9e:12:32:8f:c7:fc:95: e4:25:68:e9:8f:02:8a:7b:8e:94:45:13:e9:d7:e8: 2e:59:bf:bb:00:c0:b7:36:4e:34:df:29:f7:a3:b7: 76:64:75:58:ef:d0:3d:bf:09:71:2c:43:0e:91:a1: bb:9f:02:64:f4:c8:1d:8b:4d:dd:d6:5b:14:48:44: 1f:87:84:5d:bb:f7:fa:bb:5a:b6:1a:61:92:9f:2b: d5:ee:93:3a:4c:c4:bb:d6:68:18:28:02:a6:8f:b9: c8:bc:14:7a:6c:59:ca:f9:3d:d6:05:c1:79:c8:b7: 0c:50:2b:e2:4e:d0:8a:c8:bc:23:4a:db:4e:8d:2e: 12:69:e5:09:64:8d:4a:e6:32:d4:84:97:2b:32:81: 85:37:3a:cf:69:70:8a:61:25:96:ee:42:0a:16:5a: 7e:97:14:f9:4b:e9:c0:d2:57:cd:84:f2:bd:10:5b: 79:55:36:ed:b5:e2:55:60:b2:b2:3b:76:33:a6:77: 5e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6D:B3:0A:6D:AF:9E:AE:66:A7:80:48:42:1F:29:F8:95:4F:66:C5 X509v3 Authority Key Identifier: keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:55:14:e0:68:06:ac:76:8d:68:8a:7b:99:89:bf:b8:5a:52: 71:e4:8e:4d:9f:44:40:a8:47:bb:04:0b:e8:b7:21:eb:bb:2b: 7c:9b:8c:e3:98:32:49:c4:a7:68:7e:bc:47:9d:34:53:c8:b3: 85:48:9f:71:78:5a:63:d9:36:08:95:94:cc:7e:c5:f2:85:78: 95:a7:8e:ac:f3:60:09:7e:01:8c:ea:75:b5:ec:18:7c:29:3f: bf:46:e9:60:23:c5:57:d4:d1:c0:ed:fb:30:6d:6a:a0:01:bf: 60:d0:23:56:53:53:9f:94:68:33:d8:2b:ac:0f:3d:cf:d2:ef: 36:93:05:f8:c8:d3:ad:ea:9a:1b:e6:bf:c6:12:8e:eb:79:6c: 47:a7:15:b1:0c:a0:e0:08:f3:2f:27:08:6b:0a:ca:fc:84:92: 35:f1:93:da:cc:7e:10:0b:30:b6:9b:45:32:de:55:4d:a8:cb: 58:19:61:2b:d4:84:26:c9:3b:63:9f:80:22:34:05:45:72:29: 30:21:e0:10:a7:e4:75:bf:0a:42:db:78:84:5e:e0:72:ce:ac: b6:a3:92:de:9b:f3:99:42:ce:55:7b:40:af:2d:70:a7:3f:07: 04:e3:c9:a7:8b:fc:ad:d4:0f:d3:20:b0:cd:35:27:ef:5e:29: 5c:80:93:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxxEKcYzt0Y0AGzSO3j4TnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWE1MzU5MzVhNGJjNzg2YzFkZDc1YjdmMTA4N2YxM2Yz ZTA4NzQwHhcNMjUxMjE4MTQwMTQ0WhcNMjUxMjE5MTQwMTQ0WjAzMTEwLwYDVQQD Eyg0YTZkYjMwYTZkYWY5ZWFlNjZhNzgwNDg0MjFmMjlmODk1NGY2NmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGEDT376yz5vFV4MN2N5VV3uZt4F YeWornj4pbf5diRiPiJoUZjb/nubpJFht3c65Ja4u6+/Xl8YWY+3HrMITkFVpp4S Mo/H/JXkJWjpjwKKe46URRPp1+guWb+7AMC3Nk403yn3o7d2ZHVY79A9vwlxLEMO kaG7nwJk9Mgdi03d1lsUSEQfh4Rdu/f6u1q2GmGSnyvV7pM6TMS71mgYKAKmj7nI vBR6bFnK+T3WBcF5yLcMUCviTtCKyLwjSttOjS4SaeUJZI1K5jLUhJcrMoGFNzrP aXCKYSWW7kIKFlp+lxT5S+nA0lfNhPK9EFt5VTbtteJVYLKyO3Yzpnde/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEptswptr56uZqeASEIfKfiVT2bFMB8GA1UdIwQY MBaAFM1aU1k1pLx4bB3XW38Qh/E/Pgh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iOWFhZDUtY2ZlMi00NDgwLWFjNWUt MDVjMTNmODkwYjljLzEvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iOWFhZDUtY2ZlMi00NDgwLWFjNWUtMDVjMTNmODkwYjlj LzEvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFUU4GgG rHaNaIp7mYm/uFpSceSOTZ9EQKhHuwQL6Lch67srfJuM45gyScSnaH68R500U8iz hUifcXhaY9k2CJWUzH7F8oV4laeOrPNgCX4BjOp1tewYfCk/v0bpYCPFV9TRwO37 MG1qoAG/YNAjVlNTn5RoM9grrA89z9LvNpMF+MjTreqaG+a/xhKO63lsR6cVsQyg 4AjzLycIawrK/ISSNfGT2sx+EAswtptFMt5VTajLWBlhK9SEJsk7Y5+AIjQFRXIp MCHgEKfkdb8KQtt4hF7gcs6stqOS3pvzmULOVXtAry1wpz8HBOPJp4v8rdQP0yCw zTUn714pXICT4g== -----END CERTIFICATE-----Generated at Thu Dec 18 20:38:17 2025 by rpki-client