This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json) Hash identifier: n3fDid3y8TbnkahrR5TgVPXIskUpFU2BSeNRQ2Nqdqw= Subject key identifier: B7:51:D8:66:64:59:EA:F8:0D:62:52:EA:AB:EB:62:D8:61:B0:06:3D Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7 Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7 Certificate serial: 019B3FECACDA1DF954D27AC6BAA4AD21A895 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft Manifest number: 0615 Signing time: Sun 21 Dec 2025 08:00:33 +0000 Manifest this update: Sun 21 Dec 2025 08:00:33 +0000 Manifest next update: Mon 22 Dec 2025 08:00:33 +0000 Files and hashes: 1: R7JjHxkLaRMAq-eNFDHFR56Dyhw.roa (hash: QknjqXJUcPnKm7YDFtc8WvDMm5i4FQMrmsy86E9cK0o=) 2: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (hash: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=) 3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: +3jm7XXCxPAm6RY92nRmHmI7I221ThjTXUrAKfKqS9I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:ac:da:1d:f9:54:d2:7a:c6:ba:a4:ad:21:a8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7 Validity Not Before: Dec 21 08:00:33 2025 GMT Not After : Dec 22 08:00:33 2025 GMT Subject: CN=b751d8666459eaf80d6252eaabeb62d861b0063d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:55:d3:22:19:f1:97:1d:71:04:9e:9d:70: cd:fa:96:33:2b:b4:ae:08:2a:2c:c9:8b:5e:f8:78: a7:d0:be:63:b8:bb:6b:60:93:5f:0f:2e:5e:8b:0b: 5c:39:72:77:ae:1d:4d:6a:a7:43:af:d2:7c:4a:62: 54:c9:0c:af:39:05:59:ff:02:02:1d:fb:58:d2:fc: 59:65:9d:df:8c:d3:5d:fa:03:20:3d:69:9b:34:67: 5c:a5:07:d9:a9:20:9b:cc:55:2f:30:59:ae:8b:7a: 75:49:96:ec:b5:50:e1:a1:5d:2d:39:e4:ca:36:43: 2c:7a:58:b1:69:78:8f:d0:01:14:bb:8f:8d:da:29: 61:9e:eb:a3:cd:d5:6b:41:ac:8a:cc:4c:a8:91:d5: c0:84:32:50:90:a3:f9:3a:85:a9:9e:04:55:54:a3: 59:f4:e6:0f:37:35:fb:2b:77:be:14:ec:2f:9c:ef: cc:00:a9:1e:f0:4f:5c:fb:14:ab:dc:79:d1:fa:d2: 33:37:f2:e9:3a:d9:4b:a4:81:25:74:83:b4:6e:ee: ca:e7:8d:3e:e1:eb:4f:52:2d:fe:01:0f:7f:a9:a5: ce:1c:09:8e:06:76:89:d1:ce:60:c3:6b:c2:88:44: 87:e9:65:76:74:c6:34:68:3d:b2:a6:3b:6e:2d:34: fc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:51:D8:66:64:59:EA:F8:0D:62:52:EA:AB:EB:62:D8:61:B0:06:3D X509v3 Authority Key Identifier: keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:fe:4c:b1:d9:7c:16:dd:7b:0e:4d:94:36:73:02:73:05:c0: b3:78:2d:c6:58:4f:fc:9e:16:d0:e3:05:43:0c:df:fc:4f:39: 43:50:43:46:78:79:07:bc:6e:15:b5:af:fc:77:bf:8a:02:05: 61:e9:90:ec:d2:0b:0d:4a:0c:22:41:c2:24:71:9e:ea:b1:a7: 86:18:0f:a7:11:19:ba:a4:4a:71:45:9d:93:ed:9c:83:14:d5: e7:ab:f8:b1:66:40:3d:52:5d:41:a9:b9:e5:ab:5c:06:66:01: 68:79:d7:c0:c2:6a:3c:14:ec:f1:2d:f9:b3:cd:08:1d:14:0c: 91:56:6a:16:82:48:93:c8:3a:9c:ac:af:24:82:84:c5:d4:c5: bc:9e:27:23:c4:aa:f0:ea:17:13:a3:e3:0a:d3:27:4d:af:00: 1b:cc:03:8c:28:bc:cc:28:0c:e4:db:15:2d:bb:33:80:ca:18: b6:4f:ea:01:85:a0:2e:8c:21:e7:47:75:16:c0:a0:da:af:45: 56:c9:2b:18:aa:96:d0:58:f9:fa:50:df:84:71:73:c3:36:41: 7b:77:ec:8b:7b:9f:d5:20:b0:8d:f0:7c:fe:e0:e3:4a:31:c7: cc:0d:04:f4:2a:00:ea:d1:4b:3b:a7:72:0c:a4:41:d4:07:0e: 44:ef:8f:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7KzaHflU0nrGuqStIaiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMzk4ZjdmM2Q1YjNiODJkY2ZkZWM5MDJiMDNmNzMzZDg5 NWRhZTcwHhcNMjUxMjIxMDgwMDMzWhcNMjUxMjIyMDgwMDMzWjAzMTEwLwYDVQQD EyhiNzUxZDg2NjY0NTllYWY4MGQ2MjUyZWFhYmViNjJkODYxYjAwNjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQNV0yIZ8ZcdcQSenXDN+pYzK7Su CCosyYte+Hin0L5juLtrYJNfDy5eiwtcOXJ3rh1NaqdDr9J8SmJUyQyvOQVZ/wIC HftY0vxZZZ3fjNNd+gMgPWmbNGdcpQfZqSCbzFUvMFmui3p1SZbstVDhoV0tOeTK NkMselixaXiP0AEUu4+N2ilhnuujzdVrQayKzEyokdXAhDJQkKP5OoWpngRVVKNZ 9OYPNzX7K3e+FOwvnO/MAKke8E9c+xSr3HnR+tIzN/LpOtlLpIEldIO0bu7K540+ 4etPUi3+AQ9/qaXOHAmOBnaJ0c5gw2vCiESH6WV2dMY0aD2ypjtuLTT8hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdR2GZkWer4DWJS6qvrYthhsAY9MB8GA1UdIwQY MBaAFM05j389WzuC3P3skCsD9zPYldrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelRtUGZ6MWJPNExjX2V5UUt3UDNNOWlWMnVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xOGQ5NTUtZTk5Mi00ZmEwLWJiYTAt YWM1OGIyODdmYjY0LzEvelRtUGZ6MWJPNExjX2V5UUt3UDNNOWlWMnVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8xOGQ5NTUtZTk5Mi00ZmEwLWJiYTAtYWM1OGIyODdmYjY0 LzEvelRtUGZ6MWJPNExjX2V5UUt3UDNNOWlWMnVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArf5Msdl8 Ft17Dk2UNnMCcwXAs3gtxlhP/J4W0OMFQwzf/E85Q1BDRnh5B7xuFbWv/He/igIF YemQ7NILDUoMIkHCJHGe6rGnhhgPpxEZuqRKcUWdk+2cgxTV56v4sWZAPVJdQam5 5atcBmYBaHnXwMJqPBTs8S35s80IHRQMkVZqFoJIk8g6nKyvJIKExdTFvJ4nI8Sq 8OoXE6PjCtMnTa8AG8wDjCi8zCgM5NsVLbszgMoYtk/qAYWgLowh50d1FsCg2q9F VskrGKqW0Fj5+lDfhHFzwzZBe3fsi3uf1SCwjfB8/uDjSjHHzA0E9CoA6tFLO6dy DKRB1AcORO+Pow== -----END CERTIFICATE-----Generated at Sun Dec 21 15:23:18 2025 by rpki-client