This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft File: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft (raw, json) Hash identifier: aFxibo4FjDrir9Cqd2nzH13e2L0cwwT1Ahxa4ZorRuM= Subject key identifier: 18:50:CD:02:F0:7C:8B:E0:38:4A:97:76:82:5F:F3:0C:35:28:C9:26 Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0 Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0 Certificate serial: 019B6BB35F5CF90D257C8A75B03F3E5648C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft Manifest number: 1580 Signing time: Mon 29 Dec 2025 20:01:16 +0000 Manifest this update: Mon 29 Dec 2025 20:01:16 +0000 Manifest next update: Tue 30 Dec 2025 20:01:16 +0000 Files and hashes: 1: CvkJme1LUR6Yylremh6T0ANylCI.roa (hash: 5zy6xol1m9FQbb/9TEgVPc4ZpyQ53XwKiYadQ98VX1U=) 2: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl (hash: m1bige4SNWWdxiHQRuXzKnk7CRn5flYwBo8mUV2NVMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b3:5f:5c:f9:0d:25:7c:8a:75:b0:3f:3e:56:48:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0 Validity Not Before: Dec 29 20:01:16 2025 GMT Not After : Dec 30 20:01:16 2025 GMT Subject: CN=1850cd02f07c8be0384a9776825ff30c3528c926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:92:81:41:9e:e9:d1:e9:24:9d:c7:5b:71: f1:5b:ae:fc:74:da:35:22:80:74:af:59:df:de:e0: 53:77:4a:8f:bb:0d:63:4b:29:36:0b:e1:9a:6c:13: 61:5b:9f:7a:8c:ab:c2:8a:84:83:10:39:15:b2:07: 04:ad:ab:4a:51:1a:96:7d:91:b2:05:5b:7d:ef:8f: 79:fc:eb:dc:2d:62:82:33:3e:a8:43:82:c0:6a:ae: 7b:c5:77:29:c3:ae:2b:5c:99:4c:25:70:58:5b:bd: ec:a5:d1:74:2d:5d:7d:86:44:2c:6b:c3:c2:65:b1: 25:2d:4d:90:56:3d:39:d5:96:1a:91:85:09:6f:eb: cc:91:a3:bc:75:51:14:6a:43:f1:b4:e4:0f:6e:67: 85:2b:b6:c3:cf:bd:2d:6f:2e:93:76:3d:33:00:f9: 18:2d:ea:21:7e:e8:c8:58:b2:54:e0:08:4b:26:5d: 01:f8:94:13:41:c7:45:37:a9:d2:1a:79:04:c5:ad: c5:22:ba:16:47:68:74:61:00:18:2a:46:9f:7c:0c: 97:e9:a2:3f:40:38:16:e0:d2:72:a0:dd:23:1f:01: 37:94:31:a3:de:d8:52:15:d1:9d:86:94:75:7a:f2: 2c:5a:11:4d:02:70:44:6e:56:e7:26:9f:23:84:c7: db:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:50:CD:02:F0:7C:8B:E0:38:4A:97:76:82:5F:F3:0C:35:28:C9:26 X509v3 Authority Key Identifier: keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:09:e3:01:04:24:8c:53:0b:29:3f:7a:32:f9:34:39:b3:e0: 35:24:2d:97:05:d9:12:56:32:36:6e:88:83:9a:c6:4a:3f:41: 28:06:b4:bd:f8:a8:a5:7f:12:23:7b:94:dd:6a:c5:03:9a:45: 28:f4:4a:d3:ab:1e:c4:c4:65:8b:94:f8:4b:56:bf:88:79:83: 56:45:cc:bc:f2:53:4d:94:d2:3a:c8:04:26:85:5a:a8:a5:36: 48:9b:9d:e7:50:10:6f:71:52:e7:33:1e:03:ab:4d:0c:e8:f7: a6:86:48:ce:08:e0:0f:6f:35:d5:8a:ca:87:a1:2d:81:9b:d7: bd:21:50:43:63:2c:84:4e:ae:59:45:8d:02:58:3c:02:4e:95: 5b:d2:1f:19:c3:2b:80:28:aa:d7:41:72:5c:70:f9:91:22:96: 65:2f:54:1e:03:89:d6:46:c2:2e:e0:8b:f5:4a:e4:61:0f:d8: b8:43:8f:52:05:65:fb:1f:00:f6:70:2b:74:13:ee:4b:6b:0a: 27:c4:47:40:44:55:be:5e:88:c7:e1:00:01:34:fc:1e:5d:91: 06:e8:3c:be:7a:99:41:d3:52:7e:7e:56:5c:06:81:fe:ea:64: 08:d1:02:48:45:7a:f6:18:c3:fa:d9:e5:7c:69:ed:87:c2:fa: df:87:d9:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrs19c+Q0lfIp1sD8+VkjHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjI2NjIzMDg0ZTZjZjExNjY3NGEzZmQwYTk5NTFjYWMw ZGVkYzAwHhcNMjUxMjI5MjAwMTE2WhcNMjUxMjMwMjAwMTE2WjAzMTEwLwYDVQQD EygxODUwY2QwMmYwN2M4YmUwMzg0YTk3NzY4MjVmZjMwYzM1MjhjOTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXGSgUGe6dHpJJ3HW3HxW678dNo1 IoB0r1nf3uBTd0qPuw1jSyk2C+GabBNhW596jKvCioSDEDkVsgcEratKURqWfZGy BVt97495/OvcLWKCMz6oQ4LAaq57xXcpw64rXJlMJXBYW73spdF0LV19hkQsa8PC ZbElLU2QVj051ZYakYUJb+vMkaO8dVEUakPxtOQPbmeFK7bDz70tby6Tdj0zAPkY LeohfujIWLJU4AhLJl0B+JQTQcdFN6nSGnkExa3FIroWR2h0YQAYKkaffAyX6aI/ QDgW4NJyoN0jHwE3lDGj3thSFdGdhpR1evIsWhFNAnBEblbnJp8jhMfbDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhQzQLwfIvgOEqXdoJf8ww1KMkmMB8GA1UdIwQY MBaAFGZiZiMITmzxFmdKP9CplRysDe3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1KbUl3aE9iUEVXWjBvXzBLbVZIS3dON2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83NjM5MjEtM2NkNy00NjZiLTg2NGIt MTg4YzRhNzhjZDYyLzEvWm1KbUl3aE9iUEVXWjBvXzBLbVZIS3dON2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83NjM5MjEtM2NkNy00NjZiLTg2NGItMTg4YzRhNzhjZDYy LzEvWm1KbUl3aE9iUEVXWjBvXzBLbVZIS3dON2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwnjAQQk jFMLKT96Mvk0ObPgNSQtlwXZElYyNm6Ig5rGSj9BKAa0vfiopX8SI3uU3WrFA5pF KPRK06sexMRli5T4S1a/iHmDVkXMvPJTTZTSOsgEJoVaqKU2SJud51AQb3FS5zMe A6tNDOj3poZIzgjgD2811YrKh6EtgZvXvSFQQ2MshE6uWUWNAlg8Ak6VW9IfGcMr gCiq10FyXHD5kSKWZS9UHgOJ1kbCLuCL9UrkYQ/YuEOPUgVl+x8A9nArdBPuS2sK J8RHQERVvl6Ix+EAATT8Hl2RBug8vnqZQdNSfn5WXAaB/upkCNECSEV69hjD+tnl fGnth8L634fZUQ== -----END CERTIFICATE-----Generated at Tue Dec 30 03:19:42 2025 by rpki-client