This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft File: ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json) Hash identifier: /lwtrJWa5TaWIozp3Xuy7L8cQkbKE21Jd9N26Hco0dM= Subject key identifier: AC:AC:64:2E:CB:BC:95:EA:14:10:1C:72:1A:B7:7C:80:F0:B5:F1:98 Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93 Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93 Certificate serial: 019B2B1CF4DFE98711A1A10A5A4B530ACAD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft Manifest number: 70 Signing time: Wed 17 Dec 2025 07:01:16 +0000 Manifest this update: Wed 17 Dec 2025 07:01:16 +0000 Manifest next update: Thu 18 Dec 2025 07:01:16 +0000 Files and hashes: 1: YI526rDjmCm4ZHVI5LkZmsJxBYA.roa (hash: mnwhg/AU2eU/IE/2TNO5wxiOwcdktq7wIdfPQ68gGbo=) 2: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: jfHboWS5JsU/+a94OdlgnLrYXVveHjpgBrscN1NKQ18=) 3: yW7cdRDGRGnl2p9hOjN1yRdkgZU.roa (hash: ZivRWx3B/fZFpGzZX+9m5QTKA6BgqDFkXZVcPhKEPac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:f4:df:e9:87:11:a1:a1:0a:5a:4b:53:0a:ca:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93 Validity Not Before: Dec 17 07:01:16 2025 GMT Not After : Dec 18 07:01:16 2025 GMT Subject: CN=acac642ecbbc95ea14101c721ab77c80f0b5f198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:08:f2:32:4e:5d:32:2a:8e:00:15:b7:fe: e9:2b:04:5d:04:b4:dc:4b:08:05:65:e6:a4:ff:56: 61:90:3c:41:4d:a2:95:05:e9:93:85:5a:89:98:84: d4:fd:aa:56:93:24:49:a7:af:94:63:11:8a:09:bb: 0a:42:34:6c:4a:07:9d:ce:b8:07:06:60:c7:ad:cf: c0:d4:f7:1c:47:85:70:43:d5:09:ce:21:e5:40:5a: d9:7c:15:d7:19:de:a7:f5:1a:44:ff:2a:08:c4:33: 12:b1:3d:e0:61:ed:ad:1a:8c:6f:0a:b0:56:4c:23: 89:2a:b2:86:a5:12:18:3a:f8:28:a1:98:9c:d0:78: 17:f5:85:60:78:fe:c2:65:6e:74:4e:9a:39:e7:13: 5f:12:86:9e:17:55:40:14:7f:17:2e:be:87:d7:d0: c9:bf:6f:50:3e:23:9a:d9:40:9c:f5:5d:a8:77:fd: 6f:bb:d7:2e:e1:ff:64:b9:b9:05:83:8b:2f:d9:ef: bf:23:97:65:73:9e:91:a0:1c:67:99:0e:2d:bc:a4: eb:77:dc:4c:8d:ff:33:6e:0d:8e:d2:ce:21:16:c6: 44:bb:0b:5d:e1:f2:d4:55:e7:74:a2:05:ba:07:04: 9b:0a:64:4d:3b:67:ee:0a:a0:fd:39:b7:40:6f:2c: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AC:64:2E:CB:BC:95:EA:14:10:1C:72:1A:B7:7C:80:F0:B5:F1:98 X509v3 Authority Key Identifier: keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f5:69:2a:56:e0:52:97:b6:b0:e0:c2:dc:a3:6d:d5:e7:98: 37:c3:4b:b1:28:cb:4f:55:8a:bf:86:70:d7:d1:10:36:bb:36: ad:a7:17:dc:7d:e1:c2:7f:67:af:e6:14:2e:33:41:ea:6f:fd: 26:66:ef:5d:1c:ae:9a:5a:3c:1a:e0:e8:1c:1b:6c:a0:9d:87: 14:2b:32:cf:0e:d7:0b:24:6a:d1:80:48:a6:5a:26:bc:02:89: 33:b3:56:ab:fa:fe:76:c3:c9:3f:fa:64:26:c6:b8:69:af:59: 9f:93:9a:31:d0:f9:6f:9a:73:c3:c8:5f:b6:96:34:c6:01:2d: cf:0b:89:dd:80:00:69:97:8c:fb:06:fc:ae:96:49:47:08:c9: c3:1b:f2:36:51:c6:ec:ea:8a:11:e3:2c:fd:c6:24:66:20:28: be:b2:a4:6c:d5:c8:9c:bc:e1:7f:3e:55:ae:69:f5:22:91:73: 8f:76:26:01:06:d5:82:f0:45:c3:92:ae:2e:03:8f:92:ac:5c: a6:f2:8f:6b:74:85:29:0e:d9:54:2e:69:1e:b2:c1:6a:a0:9d: a6:82:6b:10:4c:38:c5:f6:89:fc:7c:c9:94:f1:1f:f4:83:7d: 19:1e:84:18:7c:c4:4b:6c:04:c3:22:8d:42:a9:e1:d1:48:f0: 98:2b:0c:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHPTf6YcRoaEKWktTCsrTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MzA2ZTNhY2YzZWI5MDNjYzczOTczZmI2Mjg2MGI2NjM1 MTZjOTMwHhcNMjUxMjE3MDcwMTE2WhcNMjUxMjE4MDcwMTE2WjAzMTEwLwYDVQQD EyhhY2FjNjQyZWNiYmM5NWVhMTQxMDFjNzIxYWI3N2M4MGYwYjVmMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZgI8jJOXTIqjgAVt/7pKwRdBLTc SwgFZeak/1ZhkDxBTaKVBemThVqJmITU/apWkyRJp6+UYxGKCbsKQjRsSgedzrgH BmDHrc/A1PccR4VwQ9UJziHlQFrZfBXXGd6n9RpE/yoIxDMSsT3gYe2tGoxvCrBW TCOJKrKGpRIYOvgooZic0HgX9YVgeP7CZW50Tpo55xNfEoaeF1VAFH8XLr6H19DJ v29QPiOa2UCc9V2od/1vu9cu4f9kubkFg4sv2e+/I5dlc56RoBxnmQ4tvKTrd9xM jf8zbg2O0s4hFsZEuwtd4fLUVed0ogW6BwSbCmRNO2fuCqD9ObdAbyzTowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKysZC7LvJXqFBAcchq3fIDwtfGYMB8GA1UdIwQY MBaAFGYwbjrPPrkDzHOXP7YoYLZjUWyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODct ZWUyN2NiY2E3NDdlLzEvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODctZWUyN2NiY2E3NDdl LzEvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/VpKlbg Upe2sODC3KNt1eeYN8NLsSjLT1WKv4Zw19EQNrs2racX3H3hwn9nr+YULjNB6m/9 JmbvXRyumlo8GuDoHBtsoJ2HFCsyzw7XCyRq0YBIplomvAKJM7NWq/r+dsPJP/pk Jsa4aa9Zn5OaMdD5b5pzw8hftpY0xgEtzwuJ3YAAaZeM+wb8rpZJRwjJwxvyNlHG 7OqKEeMs/cYkZiAovrKkbNXInLzhfz5Vrmn1IpFzj3YmAQbVgvBFw5KuLgOPkqxc pvKPa3SFKQ7ZVC5pHrLBaqCdpoJrEEw4xfaJ/HzJlPEf9IN9GR6EGHzES2wEwyKN Qqnh0UjwmCsMaw== -----END CERTIFICATE-----Generated at Wed Dec 17 12:50:20 2025 by rpki-client