This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft File: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft (raw, json) Hash identifier: lxorwCaUlO2PpWUKKHmrSHFTO0MQ30Ky63yvobJlogQ= Subject key identifier: E9:E1:F4:01:1D:B2:C0:5C:99:8A:48:02:2D:6D:32:9A:83:24:27:43 Authority key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1 Certificate issuer: /CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1 Certificate serial: 019B40FFBD6FE8F5C7432A470CFC8B436529 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft Manifest number: 030D Signing time: Sun 21 Dec 2025 13:01:00 +0000 Manifest this update: Sun 21 Dec 2025 13:01:00 +0000 Manifest next update: Mon 22 Dec 2025 13:01:00 +0000 Files and hashes: 1: 6w-yXh1-tMAIvo8oiWeiA5ImsoE.roa (hash: I2XmgPmlr8AeGcV748BNU3DKlg3Epa3bbBrXS+lzrBo=) 2: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl (hash: A3CBQchKkgCglcaqcViuNLVz5dbHLuQGnHwPmNDNcJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:bd:6f:e8:f5:c7:43:2a:47:0c:fc:8b:43:65:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1 Validity Not Before: Dec 21 13:01:00 2025 GMT Not After : Dec 22 13:01:00 2025 GMT Subject: CN=e9e1f4011db2c05c998a48022d6d329a83242743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:73:81:8f:a1:29:42:ed:1f:51:da:b1:ae:a7: d3:02:4e:f5:ee:73:66:2f:8d:41:f1:37:ef:33:b5: 60:e4:af:4a:6b:ea:23:5c:3f:ea:c1:83:80:08:b9: 2d:5b:14:3b:95:c1:5f:bb:d0:1d:2f:cb:c1:59:b3: 42:cf:7c:b1:a6:8f:fc:7d:db:b9:37:6b:b8:23:81: 50:3b:9b:5c:eb:0f:fb:9b:f6:14:be:f9:d9:96:38: 76:48:d5:aa:59:4c:14:7d:1e:b0:5f:2f:8c:13:7e: b2:2a:c7:d1:4a:98:78:27:75:f2:cc:7c:85:e5:52: 6d:1d:9a:10:22:e6:5b:41:88:d6:a2:df:f0:52:c9: ca:b3:d7:a4:91:ca:0f:45:d0:62:1c:16:4f:38:0b: ed:34:8e:70:fd:ef:9d:78:95:8d:26:95:00:1c:47: 20:43:24:d3:8d:aa:f9:ab:ad:08:1f:7b:4f:59:3d: 5b:87:7f:89:bd:4f:c6:6b:7d:ab:9f:76:f0:bb:94: 9d:51:43:15:bb:17:5a:37:c9:ae:54:84:1a:48:8b: c5:41:7b:fe:9d:23:c4:79:94:a9:5d:27:03:50:28: f1:90:ed:c0:48:0b:94:37:1c:cf:af:23:b1:a9:39: d4:e8:c2:92:39:56:5e:12:3d:cf:8b:79:c5:5b:12: 8f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E1:F4:01:1D:B2:C0:5C:99:8A:48:02:2D:6D:32:9A:83:24:27:43 X509v3 Authority Key Identifier: keyid:64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:9d:36:59:99:0b:87:ab:02:5c:58:b1:a6:3b:ed:ee:73:b9: ad:e2:09:ae:37:25:07:05:a5:19:10:67:cb:5d:39:24:96:b6: c2:58:79:fa:b9:5e:70:d1:98:91:39:18:e3:65:7e:2c:63:6a: 0a:08:3c:82:12:ed:98:a4:53:ea:ba:8f:88:02:d0:75:8d:47: 8f:44:0c:e0:1c:e5:ea:d6:f0:61:c1:07:95:6e:b8:39:2b:21: 0a:e4:5c:ca:22:5c:a0:15:c2:da:db:61:66:91:d5:7d:53:a8: 45:8d:73:7c:56:e8:b2:23:a9:e6:39:23:5d:fc:15:e9:9d:48: a1:7a:c3:ed:63:0c:c7:bd:b1:fa:b4:72:5b:f1:58:46:7a:ef: 23:78:e5:75:de:2a:5b:57:b2:cf:a2:4d:13:e0:de:ac:17:df: 9d:e5:9f:11:85:72:e9:cb:75:d2:e3:f8:51:d2:dc:1b:4a:6b: 5c:b5:da:26:a8:8b:82:7f:74:67:ab:7c:d7:07:56:b1:cc:e1: d2:6f:d0:89:61:2d:3d:40:46:dc:51:4f:7b:3b:67:a9:0c:b0: 6b:8c:68:4d:02:1b:e0:3e:a1:18:9c:ab:99:dd:b4:8a:ff:ce: 77:20:0b:5b:25:38:7c:cd:fb:23:64:73:c7:82:65:3b:6d:fe: 80:c8:88:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/71v6PXHQypHDPyLQ2UpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Y2YxZWU5MDY1M2I3YjgxNGQ2YjU0NTk0OWJkOTRkZGUw ZmM2YTEwHhcNMjUxMjIxMTMwMTAwWhcNMjUxMjIyMTMwMTAwWjAzMTEwLwYDVQQD EyhlOWUxZjQwMTFkYjJjMDVjOTk4YTQ4MDIyZDZkMzI5YTgzMjQyNzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23OBj6EpQu0fUdqxrqfTAk717nNm L41B8TfvM7Vg5K9Ka+ojXD/qwYOACLktWxQ7lcFfu9AdL8vBWbNCz3yxpo/8fdu5 N2u4I4FQO5tc6w/7m/YUvvnZljh2SNWqWUwUfR6wXy+ME36yKsfRSph4J3XyzHyF 5VJtHZoQIuZbQYjWot/wUsnKs9ekkcoPRdBiHBZPOAvtNI5w/e+deJWNJpUAHEcg QyTTjar5q60IH3tPWT1bh3+JvU/Ga32rn3bwu5SdUUMVuxdaN8muVIQaSIvFQXv+ nSPEeZSpXScDUCjxkO3ASAuUNxzPryOxqTnU6MKSOVZeEj3Pi3nFWxKPowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnh9AEdssBcmYpIAi1tMpqDJCdDMB8GA1UdIwQY MBaAFGTPHukGU7e4FNa1RZSb2U3eD8ahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk04ZTZRWlR0N2dVMXJWRmxKdlpUZDRQeHFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yOTljYWEtOGNjZC00OWMxLTkwMjkt ODgwNGRhZDc4MGExLzEvWk04ZTZRWlR0N2dVMXJWRmxKdlpUZDRQeHFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yOTljYWEtOGNjZC00OWMxLTkwMjktODgwNGRhZDc4MGEx LzEvWk04ZTZRWlR0N2dVMXJWRmxKdlpUZDRQeHFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJ02WZkL h6sCXFixpjvt7nO5reIJrjclBwWlGRBny105JJa2wlh5+rlecNGYkTkY42V+LGNq Cgg8ghLtmKRT6rqPiALQdY1Hj0QM4Bzl6tbwYcEHlW64OSshCuRcyiJcoBXC2tth ZpHVfVOoRY1zfFbosiOp5jkjXfwV6Z1IoXrD7WMMx72x+rRyW/FYRnrvI3jldd4q W1eyz6JNE+DerBffneWfEYVy6ct10uP4UdLcG0prXLXaJqiLgn90Z6t81wdWsczh 0m/QiWEtPUBG3FFPeztnqQywa4xoTQIb4D6hGJyrmd20iv/OdyALWyU4fM37I2Rz x4JlO23+gMiIBw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:16:31 2025 by rpki-client