This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft File: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft (raw, json) Hash identifier: 3CBThvqnJ/iYzVIF0UASNSqsqiiMz4Uw9lIb6pD704s= Subject key identifier: E5:FE:C9:57:77:8F:77:DC:92:C4:93:1C:1A:38:52:44:C8:71:0E:33 Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4 Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4 Certificate serial: 019AF2AD6439137B9D1728C99D543BF7777B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft Manifest number: 0F65 Signing time: Sat 06 Dec 2025 08:00:40 +0000 Manifest this update: Sat 06 Dec 2025 08:00:40 +0000 Manifest next update: Sun 07 Dec 2025 08:00:40 +0000 Files and hashes: 1: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl (hash: 80dwkJkoE9BnBz6vriWyBXDWaQAavkEByoz4GBg/u3g=) 2: wkjfrbnsCzTaC-aAcjv50o1HMDE.roa (hash: dQtuR5zZvWV7UZVnWgEUEkCk6dSEncyOV819xoZiAcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:64:39:13:7b:9d:17:28:c9:9d:54:3b:f7:77:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4 Validity Not Before: Dec 6 08:00:40 2025 GMT Not After : Dec 7 08:00:40 2025 GMT Subject: CN=e5fec957778f77dc92c4931c1a385244c8710e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:44:b3:e6:1b:b1:fe:a5:48:a4:64:61:56: 2f:e9:e9:ed:c2:7d:d1:24:32:3b:c3:fa:d5:b6:a8: d0:77:78:ef:fd:89:dc:75:ad:6a:1c:d7:4f:a9:7b: 71:8f:87:03:f1:d3:b1:7c:ae:d7:2a:bd:ca:e6:22: 85:59:ba:79:31:9d:21:0a:86:70:c8:3b:c0:75:24: e8:21:74:a6:6f:f5:6c:85:11:6b:d7:df:e3:50:02: 0a:90:cf:63:8a:d7:57:82:37:92:8f:b2:da:92:7a: 8e:1c:3c:6f:a1:94:de:02:e4:b8:10:fc:3b:42:b9: c1:93:e8:55:f8:a0:0d:a0:c7:5a:64:8b:18:f3:59: f2:df:6c:18:8c:df:d8:36:d9:64:7c:26:87:c9:f8: 0a:42:90:85:51:4e:80:28:7e:f7:50:9e:65:b6:ae: 8a:28:22:e9:97:f8:56:37:4c:8e:0e:ac:be:b4:28: d6:e1:11:48:24:ea:d3:28:6b:ed:b7:9a:a4:1b:38: 18:0d:b9:51:83:fc:af:a8:6c:4e:5b:d7:d4:37:8a: 59:b1:a8:28:e1:55:8c:7a:e5:ea:97:a4:5f:a5:81: d6:59:4f:5c:62:21:80:e7:a0:88:45:bc:16:ab:55: 46:a1:2f:ba:35:c9:72:04:9a:5e:f8:13:0d:fe:5f: f0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FE:C9:57:77:8F:77:DC:92:C4:93:1C:1A:38:52:44:C8:71:0E:33 X509v3 Authority Key Identifier: keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1c:80:d3:a6:c3:8d:4a:8f:f4:b7:18:57:ca:a2:4c:68:6e: 88:54:33:7b:00:42:09:95:38:33:32:9f:c2:a1:de:7d:0c:84: 22:98:b8:d6:5d:24:60:33:c3:90:cb:0a:1e:07:ed:94:fd:82: 4c:af:5d:d3:84:6e:85:47:c7:48:b9:b7:a4:4a:00:0f:36:06: 51:46:d3:c0:c8:1d:e2:63:7c:81:0c:e0:10:b5:f8:68:7e:a2: 26:5b:ea:c1:c3:bd:30:da:f4:d2:df:4c:12:6f:83:2e:63:75: 17:62:34:9f:ea:68:8c:4d:eb:b6:f9:63:15:b8:14:41:4b:df: 08:d2:f6:fb:d7:19:2f:56:2b:87:a4:6b:7c:5e:35:93:7d:63: eb:0d:3b:5b:6b:d8:be:7a:56:d7:71:2b:5c:93:40:45:c5:cc: f1:8d:61:14:04:ad:a8:ae:28:c1:6f:99:f6:c1:aa:b7:29:3a: 33:52:25:85:fd:e7:90:9f:f8:e9:0e:55:d8:ef:07:46:1c:66: 2d:78:85:5b:04:ad:96:05:a6:e2:14:76:5e:58:6c:04:9f:36: be:d0:24:f5:d2:28:42:77:78:fb:e2:93:cb:a9:41:a6:4e:b9: 43:b3:35:90:80:96:29:81:c5:f3:74:be:be:2d:31:ac:d1:c0: 33:a1:b6:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWQ5E3udFyjJnVQ793d7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YzVmZDFkYzBjNDU3ZDllYzExM2QyM2JkNDkzNWM3MjNl OWVjZjQwHhcNMjUxMjA2MDgwMDQwWhcNMjUxMjA3MDgwMDQwWjAzMTEwLwYDVQQD EyhlNWZlYzk1Nzc3OGY3N2RjOTJjNDkzMWMxYTM4NTI0NGM4NzEwZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvBEs+Ybsf6lSKRkYVYv6entwn3R JDI7w/rVtqjQd3jv/Yncda1qHNdPqXtxj4cD8dOxfK7XKr3K5iKFWbp5MZ0hCoZw yDvAdSToIXSmb/VshRFr19/jUAIKkM9jitdXgjeSj7LaknqOHDxvoZTeAuS4EPw7 QrnBk+hV+KANoMdaZIsY81ny32wYjN/YNtlkfCaHyfgKQpCFUU6AKH73UJ5ltq6K KCLpl/hWN0yODqy+tCjW4RFIJOrTKGvtt5qkGzgYDblRg/yvqGxOW9fUN4pZsago 4VWMeuXql6RfpYHWWU9cYiGA56CIRbwWq1VGoS+6NclyBJpe+BMN/l/wawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOX+yVd3j3fcksSTHBo4UkTIcQ4zMB8GA1UdIwQY MBaAFGTF/R3AxFfZ7BE9I71JNccj6ez0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk1YOUhjREVWOW5zRVQwanZVazF4eVBwN1BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hNDY0MGMtZTY5YS00MzM3LWIxYWEt NGNiMDY3OWFjZTdmLzEvWk1YOUhjREVWOW5zRVQwanZVazF4eVBwN1BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9hNDY0MGMtZTY5YS00MzM3LWIxYWEtNGNiMDY3OWFjZTdm LzEvWk1YOUhjREVWOW5zRVQwanZVazF4eVBwN1BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRyA06bD jUqP9LcYV8qiTGhuiFQzewBCCZU4MzKfwqHefQyEIpi41l0kYDPDkMsKHgftlP2C TK9d04RuhUfHSLm3pEoADzYGUUbTwMgd4mN8gQzgELX4aH6iJlvqwcO9MNr00t9M Em+DLmN1F2I0n+pojE3rtvljFbgUQUvfCNL2+9cZL1Yrh6RrfF41k31j6w07W2vY vnpW13ErXJNARcXM8Y1hFAStqK4owW+Z9sGqtyk6M1Ilhf3nkJ/46Q5V2O8HRhxm LXiFWwStlgWm4hR2XlhsBJ82vtAk9dIoQnd4++KTy6lBpk65Q7M1kICWKYHF83S+ vi0xrNHAM6G2iQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:49 2025 by rpki-client