This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft File: ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json) Hash identifier: IZUeyvnEESq7Luqqx5nf/68Pj551XRBzxocFFzdTf2o= Subject key identifier: C0:9C:BC:B3:B8:D4:D1:A7:E1:35:1B:97:D5:78:73:2B:F9:31:1F:48 Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c Certificate serial: 019B533D3D7B78C56ECD047D4ACE9D427E45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft Manifest number: 17A2 Signing time: Thu 25 Dec 2025 02:01:20 +0000 Manifest this update: Thu 25 Dec 2025 02:01:20 +0000 Manifest next update: Fri 26 Dec 2025 02:01:20 +0000 Files and hashes: 1: 1-aRCdRBpKSBpGR4v9msgat9V61M.roa (hash: BYs6ku3Xn4FdJ9wa1nH/1VswjYO1JqNKzo75omWp/nM=) 2: BKrQXqfrcTeiKgHXj86E48D-w8g.roa (hash: L26jc+T0fl1hv7R2zWx4ljKg9N/dLOL1UCp15HLrhrY=) 3: Pl-xLYhjY5YlhNM49xs9QKMtfBU.roa (hash: UmyMwMyNw8j81M3/HKdHg6H50eTkm3sFnC7O9PysISQ=) 4: Smd34xeFUEeunOCrNaNvyPItMW4.roa (hash: tLjLkBtCoEO7JoIBI3BKAYDHLRl3QBXXfkRn3x13Z0I=) 5: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: WW5Lq6dbTmCVVgZtBWZSgNnV9LWs8tThg++StmEAPvk=) 6: iI9-w7tHXxNtTl_I4COghj0uNew.roa (hash: b/PEDW5ud97u67vxZ3rzQUfyJtK+SNRKCKr9PKh3cqQ=) 7: q_SHJ5IyXsykFgek4t_KsFaEQ5U.roa (hash: A4mKYpa62e2fZARPUeUv3pe7BMEESkmU9sbUJFjOPCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:3d:7b:78:c5:6e:cd:04:7d:4a:ce:9d:42:7e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c Validity Not Before: Dec 25 02:01:20 2025 GMT Not After : Dec 26 02:01:20 2025 GMT Subject: CN=c09cbcb3b8d4d1a7e1351b97d578732bf9311f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b3:9a:02:54:f2:2a:1c:50:9e:aa:d7:c2:c2: b6:b9:1f:1a:3c:7c:83:fb:96:43:f9:69:d8:09:3c: fd:1d:0e:27:0a:33:a7:f7:c5:82:f8:39:03:79:5c: 08:a5:05:0a:e5:90:75:e3:f9:34:dd:18:f7:ec:26: 73:a4:ba:09:a6:0e:e3:7c:47:38:af:d0:05:b4:32: 76:a3:c1:00:21:ab:30:d2:76:e1:a2:c5:10:d5:1b: 9b:3e:09:90:6d:c8:c7:45:b4:31:40:f5:96:20:b1: 8f:59:44:9b:05:b7:c3:70:8b:ab:07:78:a4:f6:88: d4:67:35:0c:08:18:fe:c8:1d:cd:a5:03:02:e9:5d: e4:a4:b7:77:34:66:1d:44:e4:68:0a:6e:6e:dd:56: 9d:df:51:06:b2:03:fb:bc:0f:27:3b:9b:90:ff:2b: 5b:8e:cb:03:56:ae:3b:7b:a6:7c:36:b3:a6:b8:b0: ca:02:f7:25:74:f5:e7:fb:b3:cb:70:f8:96:86:9f: fe:ad:df:b3:c2:14:42:5b:ba:24:ef:8c:52:e0:c2: 4f:62:9f:58:05:93:6b:22:cd:d8:c3:61:7d:9c:16: 1e:e7:de:58:36:d2:7f:58:39:0e:0e:d0:fe:4e:8e: b9:17:28:1f:69:8e:d2:2b:1c:ab:7a:c3:60:04:af: 9e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9C:BC:B3:B8:D4:D1:A7:E1:35:1B:97:D5:78:73:2B:F9:31:1F:48 X509v3 Authority Key Identifier: keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:93:56:52:78:e7:dc:bb:af:81:db:5a:6b:a7:1d:46:9f:f8: 51:e9:b1:32:3a:53:ce:69:3d:3a:52:36:ac:42:16:08:52:dd: 8f:16:5f:95:e4:ab:6a:3c:6f:47:e8:70:05:57:96:46:88:80: 2d:e6:66:40:37:9f:82:c2:83:18:e8:a7:46:d4:8c:92:ad:7c: 82:06:9f:57:03:42:1d:b3:d9:22:50:40:b6:34:c8:a6:0d:40: 81:0d:23:bb:c7:40:4d:82:c6:b9:df:7d:20:98:9e:c3:48:72: 09:0a:7a:f5:c7:56:f3:ec:90:92:26:85:fb:15:c9:25:ed:0d: 25:12:38:29:34:e0:f9:99:a6:b3:8b:07:af:29:43:9b:ba:db: b1:94:09:6e:a3:a4:33:b4:6d:f6:7a:22:40:ee:5e:df:ac:06: 95:a8:7a:84:03:cc:59:9d:bd:3c:19:e1:49:e5:e9:2a:07:bb: c3:6b:36:44:c5:92:cf:74:43:cc:c9:d4:7b:3f:15:15:a7:c8: 96:fe:39:4b:d3:92:d8:7e:f7:75:83:96:61:90:eb:51:8e:05: b6:57:4c:93:67:b9:b4:43:19:6e:9c:29:db:91:8a:b5:bb:b4: d3:e2:af:13:4c:a6:b7:5f:d7:d8:8b:e4:cd:91:ee:4e:3a:7d: 0a:2f:92:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPT17eMVuzQR9Ss6dQn5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjgyMDZlMzMxMWRmMzk0ZjQ4Mzg5YjgxMjJiOTRhYTFm MGIwNWMwHhcNMjUxMjI1MDIwMTIwWhcNMjUxMjI2MDIwMTIwWjAzMTEwLwYDVQQD EyhjMDljYmNiM2I4ZDRkMWE3ZTEzNTFiOTdkNTc4NzMyYmY5MzExZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77OaAlTyKhxQnqrXwsK2uR8aPHyD +5ZD+WnYCTz9HQ4nCjOn98WC+DkDeVwIpQUK5ZB14/k03Rj37CZzpLoJpg7jfEc4 r9AFtDJ2o8EAIasw0nbhosUQ1RubPgmQbcjHRbQxQPWWILGPWUSbBbfDcIurB3ik 9ojUZzUMCBj+yB3NpQMC6V3kpLd3NGYdRORoCm5u3Vad31EGsgP7vA8nO5uQ/ytb jssDVq47e6Z8NrOmuLDKAvcldPXn+7PLcPiWhp/+rd+zwhRCW7ok74xS4MJPYp9Y BZNrIs3Yw2F9nBYe595YNtJ/WDkODtD+To65FygfaY7SKxyresNgBK+eQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCcvLO41NGn4TUbl9V4cyv5MR9IMB8GA1UdIwQY MBaAFGb4IG4zEd85T0g4m4EiuUqh8LBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt YmJmZDQ1Yzg0YmVhLzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh LzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5NWUnjn 3Luvgdtaa6cdRp/4UemxMjpTzmk9OlI2rEIWCFLdjxZfleSrajxvR+hwBVeWRoiA LeZmQDefgsKDGOinRtSMkq18ggafVwNCHbPZIlBAtjTIpg1AgQ0ju8dATYLGud99 IJiew0hyCQp69cdW8+yQkiaF+xXJJe0NJRI4KTTg+Zmms4sHrylDm7rbsZQJbqOk M7Rt9noiQO5e36wGlah6hAPMWZ29PBnhSeXpKge7w2s2RMWSz3RDzMnUez8VFafI lv45S9OS2H73dYOWYZDrUY4FtldMk2e5tEMZbpwp25GKtbu00+KvE0ymt1/X2Ivk zZHuTjp9Ci+SQg== -----END CERTIFICATE-----Generated at Thu Dec 25 07:22:54 2025 by rpki-client