This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft File: zWmPVbQJWbF4987Lwgw16cE3k0Q.mft (raw, json) Hash identifier: 5JNJbLYwzZ/ZomZ58bLMWbvUtR433ecnAZ54ENDXrOo= Subject key identifier: C3:9D:F7:BE:47:A4:6F:3E:7D:CC:45:13:17:45:66:2C:3C:61:9C:7A Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44 Certificate issuer: /CN=cd698f55b40959b178f7cecbc20c35e9c1379344 Certificate serial: 019B41DBB2B95B4912B3EDDB2E588F3D4106 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 17:01:15 +0000 Manifest this update: Sun 21 Dec 2025 17:01:15 +0000 Manifest next update: Mon 22 Dec 2025 17:01:15 +0000 Files and hashes: 1: 4IRJfTOXaKsLO79AGo1JoJbZxnI.roa (hash: z5NYfWatjYuL33vBwldK4hifLGzdry9JPmtM091yFpE=) 2: zWmPVbQJWbF4987Lwgw16cE3k0Q.crl (hash: 52kPRfCqDhVLYmFAXgSw0XvxNPtKYujNkqdKoHzZF0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:b2:b9:5b:49:12:b3:ed:db:2e:58:8f:3d:41:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344 Validity Not Before: Dec 21 17:01:15 2025 GMT Not After : Dec 22 17:01:15 2025 GMT Subject: CN=c39df7be47a46f3e7dcc45131745662c3c619c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:22:e6:76:4b:21:a8:68:d0:a3:e7:9e:9c:40: e4:09:37:aa:b7:6b:a4:1b:6d:7c:63:87:0a:1e:bb: 0d:36:ab:69:62:07:59:1d:0e:57:dc:06:73:d3:ff: de:e0:96:64:3b:c6:45:3d:2a:01:02:2f:8c:b8:c6: 26:dc:fd:2f:10:19:e1:a4:dc:d6:53:20:4d:82:21: 4d:14:bc:f1:5d:ae:98:e6:91:ce:80:5b:27:97:d5: ee:34:86:b6:88:7a:6a:7f:b1:eb:14:69:ab:dc:3b: 06:e2:97:c7:06:2a:6b:d6:88:62:66:5a:48:32:b0: f6:cd:04:29:bd:4d:65:ea:ee:d2:a2:33:cc:9c:61: 69:d8:1b:f4:9d:88:57:da:3d:8b:87:61:c7:af:87: 3d:04:ab:39:72:8a:88:59:8c:18:76:29:06:6d:f8: 72:3c:e0:e8:be:5f:67:7d:83:c5:d7:f9:c7:72:57: d9:72:11:57:2d:ee:31:85:73:55:60:4b:91:4d:c7: ba:c0:79:f6:39:91:c5:15:ff:c1:28:22:f9:c2:73: c0:b7:5c:c1:e6:3e:8b:13:75:49:54:bd:78:e6:15: 9f:ae:bb:19:a8:bc:33:19:1f:ce:f1:47:28:ba:85: e2:35:dd:bb:7d:c1:7f:f6:07:44:86:b6:b1:6c:7e: fd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9D:F7:BE:47:A4:6F:3E:7D:CC:45:13:17:45:66:2C:3C:61:9C:7A X509v3 Authority Key Identifier: keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:07:60:df:29:e4:0b:d0:ca:bf:38:58:4a:10:6b:4a:b0:2b: 6e:9f:d2:50:d0:f0:bc:19:15:ab:43:88:73:d6:f9:ee:7b:76: d0:f6:da:14:08:b6:43:08:4c:4a:45:da:69:a9:8d:63:5d:9d: 21:04:6f:73:96:3f:7a:75:88:6c:79:e0:d5:ed:88:af:bd:b3: b0:8a:2c:98:54:d9:29:d2:14:57:df:12:7b:e9:25:ea:5d:68: 70:18:3f:34:94:d4:f2:95:c9:1c:02:a0:04:b8:4a:6a:0e:fb: 21:0d:5e:25:fa:7b:ef:91:63:53:ba:cf:d5:24:83:d8:fb:a5: 48:b4:4d:b2:bc:cb:91:cc:9a:66:43:13:ce:2b:d7:09:8a:ac: ec:25:ea:ae:f7:c3:6e:14:6c:03:ba:ec:de:54:81:b3:87:0b: 40:f0:34:8a:34:a4:cb:c9:3f:06:73:5e:65:ac:65:41:5a:c9: d8:86:e9:02:3a:23:5c:df:3b:bc:db:1c:77:af:a1:af:de:11: 12:a7:da:92:70:3a:85:3d:b9:72:bc:87:a8:a7:96:e5:65:cc: 06:8a:f1:df:45:61:19:fe:d1:c8:5e:6e:54:4a:97:91:98:e5: 35:36:d6:59:fe:05:d2:4c:5e:88:7f:3d:2e:1f:23:4a:d8:ff: 4c:83:11:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB27K5W0kSs+3bLliPPUEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjk4ZjU1YjQwOTU5YjE3OGY3Y2VjYmMyMGMzNWU5YzEz NzkzNDQwHhcNMjUxMjIxMTcwMTE1WhcNMjUxMjIyMTcwMTE1WjAzMTEwLwYDVQQD EyhjMzlkZjdiZTQ3YTQ2ZjNlN2RjYzQ1MTMxNzQ1NjYyYzNjNjE5YzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iLmdkshqGjQo+eenEDkCTeqt2uk G218Y4cKHrsNNqtpYgdZHQ5X3AZz0//e4JZkO8ZFPSoBAi+MuMYm3P0vEBnhpNzW UyBNgiFNFLzxXa6Y5pHOgFsnl9XuNIa2iHpqf7HrFGmr3DsG4pfHBipr1ohiZlpI MrD2zQQpvU1l6u7SojPMnGFp2Bv0nYhX2j2Lh2HHr4c9BKs5coqIWYwYdikGbfhy PODovl9nfYPF1/nHclfZchFXLe4xhXNVYEuRTce6wHn2OZHFFf/BKCL5wnPAt1zB 5j6LE3VJVL145hWfrrsZqLwzGR/O8UcouoXiNd27fcF/9gdEhraxbH79DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOd975HpG8+fcxFExdFZiw8YZx6MB8GA1UdIwQY MBaAFM1pj1W0CVmxePfOy8IMNenBN5NEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldtUFZiUUpXYkY0OTg3THdndzE2Y0UzazBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hMTQ0OWUtMmFkYi00YjFhLWIyM2Mt YmQ2ZDhiYWRjZGMwLzEveldtUFZiUUpXYkY0OTg3THdndzE2Y0UzazBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9hMTQ0OWUtMmFkYi00YjFhLWIyM2MtYmQ2ZDhiYWRjZGMw LzEveldtUFZiUUpXYkY0OTg3THdndzE2Y0UzazBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAdg3ynk C9DKvzhYShBrSrArbp/SUNDwvBkVq0OIc9b57nt20PbaFAi2QwhMSkXaaamNY12d IQRvc5Y/enWIbHng1e2Ir72zsIosmFTZKdIUV98Se+kl6l1ocBg/NJTU8pXJHAKg BLhKag77IQ1eJfp775FjU7rP1SSD2PulSLRNsrzLkcyaZkMTzivXCYqs7CXqrvfD bhRsA7rs3lSBs4cLQPA0ijSky8k/BnNeZaxlQVrJ2IbpAjojXN87vNscd6+hr94R EqfaknA6hT25cryHqKeW5WXMBorx30VhGf7RyF5uVEqXkZjlNTbWWf4F0kxeiH89 Lh8jStj/TIMRdQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:59:42 2025 by rpki-client