This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json) Hash identifier: Ao7PHx8m/X5y+27Nxit1YVvV35qFfPAXMkN3XAeXEzQ= Subject key identifier: FD:A0:B1:66:3D:39:3C:9B:49:9E:8C:DC:9E:1E:19:12:A4:0D:9B:E3 Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34 Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434 Certificate serial: 019B3C10829BF27466C821AF3C627BA35175 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft Manifest number: 12CA Signing time: Sat 20 Dec 2025 14:01:13 +0000 Manifest this update: Sat 20 Dec 2025 14:01:13 +0000 Manifest next update: Sun 21 Dec 2025 14:01:13 +0000 Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: BuDcsCXj8Rut5J1Adgb/YGbFHUcd0JYtJMKy47i+HwE=) 2: dP48VWalcUAAFfcn9eWWeMKf0-w.roa (hash: 1XMmQlTq3rn/vph5sokkv8eSVZlOdVkw7fiia74kGx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:82:9b:f2:74:66:c8:21:af:3c:62:7b:a3:51:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434 Validity Not Before: Dec 20 14:01:13 2025 GMT Not After : Dec 21 14:01:13 2025 GMT Subject: CN=fda0b1663d393c9b499e8cdc9e1e1912a40d9be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9c:ff:83:87:b1:8f:0e:ba:dc:c0:d1:60:0a: 43:32:fa:79:d8:9c:40:f3:51:cd:40:b7:ea:1a:51: 7e:62:0c:94:f3:9b:f4:0d:d7:eb:41:2a:48:62:ea: 05:df:ef:cd:8e:53:a8:20:ec:cb:41:19:ad:ad:7b: 78:71:b0:6d:17:e0:bc:87:43:2e:2f:15:54:42:6c: 9b:fb:d4:82:6c:b1:d3:ea:e2:79:f5:7d:35:d3:fa: b6:9f:23:9d:de:01:b8:22:35:3c:c0:32:14:f4:c6: 74:9b:5a:b9:c6:52:96:63:20:a1:02:d6:02:0f:da: 9f:09:26:26:6c:d0:1d:a8:0a:8f:6c:59:a0:fc:25: 4b:c7:72:ac:2c:71:34:88:98:a4:42:59:19:b0:0c: 32:10:6d:30:55:97:2d:37:28:2d:c2:72:51:be:b5: 61:41:84:59:f6:f8:a5:76:6b:15:16:05:a6:93:14: b4:7e:fc:72:a3:de:c9:03:fc:f0:19:20:1d:47:66: f4:17:4e:b4:f5:69:2e:ff:10:2f:a6:e6:82:1b:88: 2a:24:17:f0:50:78:68:9c:d9:50:8c:1c:ee:f8:07: 6b:e8:56:dc:79:0c:07:e9:26:48:b6:a9:6d:25:b8: a4:6d:57:5e:92:7d:f0:52:03:e5:1f:c2:6a:57:eb: 40:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A0:B1:66:3D:39:3C:9B:49:9E:8C:DC:9E:1E:19:12:A4:0D:9B:E3 X509v3 Authority Key Identifier: keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a6:15:1e:6a:cd:9a:d4:5b:5d:3b:3c:18:0e:fc:26:c4:23: 70:d1:c6:1e:2e:59:1d:da:70:25:04:d1:00:55:26:85:40:34: 66:9c:16:44:bc:4e:c4:15:a5:6e:3c:cc:24:85:85:2a:90:0b: 9f:9d:3f:31:05:2f:78:ab:cc:4d:1c:29:6e:c1:47:55:e4:a9: 7c:b3:b2:ee:52:3d:b8:9d:9f:32:19:c3:3a:44:75:e9:30:c7: b9:48:f0:56:12:48:63:cf:78:26:d7:cf:ce:56:9a:1d:48:b1: 9c:63:ca:2f:64:dd:a4:58:94:24:36:94:6f:44:84:af:05:49: fb:29:2c:7d:91:77:ff:be:e0:8c:6c:49:17:ef:95:b6:a6:0f: 8f:a6:03:dd:f0:eb:de:af:6e:94:d7:7a:d6:a5:4c:51:b3:e6: 33:27:90:3f:c6:8f:64:31:be:50:ae:e1:8a:75:55:fa:49:80: 5d:ba:38:62:39:09:d5:fb:63:7d:85:2a:38:c1:47:ee:2a:ce: ce:29:f9:5a:a8:f0:ee:26:36:66:86:50:a1:75:b0:84:c3:3e: 9e:28:2b:a4:a3:c7:3b:1c:ba:6c:08:36:f3:e6:c5:1e:77:ea: 70:56:05:b3:0e:20:89:ca:7c:74:e9:72:41:c5:c4:fa:54:20: c4:46:aa:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EIKb8nRmyCGvPGJ7o1F1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTMxN2QyNzIzOWRjN2IwZDU0MTMzYmUxYWE2NWM5ZGMw MWY0MzQwHhcNMjUxMjIwMTQwMTEzWhcNMjUxMjIxMTQwMTEzWjAzMTEwLwYDVQQD EyhmZGEwYjE2NjNkMzkzYzliNDk5ZThjZGM5ZTFlMTkxMmE0MGQ5YmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65z/g4exjw663MDRYApDMvp52JxA 81HNQLfqGlF+YgyU85v0DdfrQSpIYuoF3+/NjlOoIOzLQRmtrXt4cbBtF+C8h0Mu LxVUQmyb+9SCbLHT6uJ59X010/q2nyOd3gG4IjU8wDIU9MZ0m1q5xlKWYyChAtYC D9qfCSYmbNAdqAqPbFmg/CVLx3KsLHE0iJikQlkZsAwyEG0wVZctNygtwnJRvrVh QYRZ9vildmsVFgWmkxS0fvxyo97JA/zwGSAdR2b0F0609Wku/xAvpuaCG4gqJBfw UHhonNlQjBzu+Adr6FbceQwH6SZItqltJbikbVdekn3wUgPlH8JqV+tAgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2gsWY9OTybSZ6M3J4eGRKkDZvjMB8GA1UdIwQY MBaAFNGTF9JyOdx7DVQTO+GqZcncAfQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYt ZTZkOTU4OGNlN2U3LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYtZTZkOTU4OGNlN2U3 LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKYVHmrN mtRbXTs8GA78JsQjcNHGHi5ZHdpwJQTRAFUmhUA0ZpwWRLxOxBWlbjzMJIWFKpAL n50/MQUveKvMTRwpbsFHVeSpfLOy7lI9uJ2fMhnDOkR16TDHuUjwVhJIY894JtfP zlaaHUixnGPKL2TdpFiUJDaUb0SErwVJ+yksfZF3/77gjGxJF++VtqYPj6YD3fDr 3q9ulNd61qVMUbPmMyeQP8aPZDG+UK7hinVV+kmAXbo4YjkJ1ftjfYUqOMFH7irO zin5Wqjw7iY2ZoZQoXWwhMM+nigrpKPHOxy6bAg28+bFHnfqcFYFsw4gicp8dOly QcXE+lQgxEaqkA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:19:55 2025 by rpki-client