This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft File: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json) Hash identifier: TbTzRuPqGOvAyOs1J7HdbPSYPelqAszoPbtxtecY190= Subject key identifier: A6:FC:97:65:47:99:28:D3:26:A0:EC:BC:33:2D:4D:38:A8:57:B4:FC Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8 Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8 Certificate serial: 019AF12D1098D6B83A80CB33A7F137551D0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:00:53 +0000 Manifest this update: Sat 06 Dec 2025 01:00:53 +0000 Manifest next update: Sun 07 Dec 2025 01:00:53 +0000 Files and hashes: 1: 0eX0y1ByZozFyvqGz0EfmzMn6QQ.roa (hash: 9RKCNhJsqijEbBv8dV32/+CAVglgcAVrqc5Rx6tHl+s=) 2: PrLRWGrkGlOz391B_d1bhvHtRdM.roa (hash: Zq1F0wSxITxrY6z9+vuv+6+JvubiotTrHBEnZAFhoq4=) 3: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: /PckAq5aqfXXH+KsVooagmoYxsi1R2bnoVaydKovtHI=) 4: d-rt9f-dKC8oZEWyOv7rd6kbEo8.roa (hash: K8bXuYuwS4X0pfixId+iunQp5n4hsy6zV6Ye+pRdYtA=) 5: yIea70mz68MEWf7MSufqGinRRfw.roa (hash: C1KZ935qcqSwGSABodTKIPq8sxOye3X7esfEPyg6lGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:10:98:d6:b8:3a:80:cb:33:a7:f1:37:55:1d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8 Validity Not Before: Dec 6 01:00:53 2025 GMT Not After : Dec 7 01:00:53 2025 GMT Subject: CN=a6fc9765479928d326a0ecbc332d4d38a857b4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f1:49:b3:e1:1c:02:d0:17:f2:a2:89:3a:91: dc:30:c5:21:3f:b9:ab:41:a0:a3:25:a7:e6:64:ab: 1b:ec:c1:e4:65:98:38:6f:b2:1d:fa:86:9c:66:dd: f8:5f:0b:1d:92:74:31:a6:60:13:e9:b5:fa:dd:eb: 43:ec:6a:ea:23:12:0a:f0:ec:c2:5b:7f:fd:8a:b8: f0:2f:6a:50:aa:c4:76:69:50:29:08:6b:a6:37:72: ad:eb:02:f4:ec:33:0c:5f:74:20:2f:b5:e2:4f:20: a7:5f:56:45:42:10:ea:e9:4a:e3:a3:b7:c0:79:24: ac:9a:a4:38:0d:d4:4b:e6:a5:63:26:f8:c7:52:a0: 17:74:ff:8c:24:75:c6:69:54:5b:3d:c3:bf:a5:8a: da:ee:aa:c1:84:1e:44:0b:da:c1:e7:cf:d0:95:33: 82:b2:dd:db:89:e1:f3:89:a9:d9:ee:be:8e:59:f8: bd:4e:c5:e8:69:b1:50:11:f2:68:b4:12:68:0e:8e: 6e:a0:f8:eb:ea:c2:64:1a:59:fd:78:8c:73:5c:38: 47:23:8b:2e:43:74:4a:26:c8:c2:f1:8e:4a:07:1c: 7d:cf:ac:18:b9:55:d0:68:c3:81:de:a5:14:5d:7b: 47:9e:55:a8:2b:fb:e6:72:83:85:d5:74:d7:9a:9d: 95:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FC:97:65:47:99:28:D3:26:A0:EC:BC:33:2D:4D:38:A8:57:B4:FC X509v3 Authority Key Identifier: keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:39:84:18:ed:ec:98:49:95:76:5b:5b:81:fe:98:a3:a2:4b: 67:93:50:9f:b9:60:f8:3a:cf:e2:3a:ad:3f:25:40:15:0b:dd: 90:84:1e:a1:cc:8d:a7:b6:28:85:f0:c7:df:03:70:1c:d9:72: 32:cf:b8:58:a4:53:e0:ad:f8:50:9e:42:3f:ee:c8:6b:b6:ce: da:94:c6:68:3c:8e:5e:4b:1b:e6:a6:2d:a6:f7:1f:2e:43:72: 3e:b9:7c:97:b6:ff:db:19:d5:02:99:de:42:7a:35:0a:20:ef: 03:69:f0:13:38:a2:28:e3:42:c6:1e:40:71:d1:39:8f:6a:e8: 76:4a:f2:2f:47:15:4b:c4:62:0d:0a:87:90:04:80:b8:ff:a2: 2a:a9:91:b9:fc:48:20:d5:ed:85:1e:fb:91:29:fe:b1:99:6e: 1b:8e:53:fd:6f:d7:ce:20:39:d6:97:29:9f:1a:53:b8:17:5d: e3:d9:45:5c:2d:e7:e4:5a:2b:a0:f5:67:de:45:be:7b:7b:10: 88:89:5d:25:70:2c:4e:f7:22:b4:fc:6b:62:a8:69:f2:61:79: c6:a9:5c:12:8a:c6:ef:15:65:dd:a2:7c:08:d0:dc:32:64:d5: 9e:1b:69:e8:da:b8:af:42:6a:33:59:b6:2d:9a:06:2b:82:e1: 90:c1:78:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRCY1rg6gMszp/E3VR0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjM0ZjE0NTg2ZTM5OWNkMzgwMmQ5Yzg4YjFlNjdkOGRk YjAzYTgwHhcNMjUxMjA2MDEwMDUzWhcNMjUxMjA3MDEwMDUzWjAzMTEwLwYDVQQD EyhhNmZjOTc2NTQ3OTkyOGQzMjZhMGVjYmMzMzJkNGQzOGE4NTdiNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vFJs+EcAtAX8qKJOpHcMMUhP7mr QaCjJafmZKsb7MHkZZg4b7Id+oacZt34XwsdknQxpmAT6bX63etD7GrqIxIK8OzC W3/9irjwL2pQqsR2aVApCGumN3Kt6wL07DMMX3QgL7XiTyCnX1ZFQhDq6Urjo7fA eSSsmqQ4DdRL5qVjJvjHUqAXdP+MJHXGaVRbPcO/pYra7qrBhB5EC9rB58/QlTOC st3bieHzianZ7r6OWfi9TsXoabFQEfJotBJoDo5uoPjr6sJkGln9eIxzXDhHI4su Q3RKJsjC8Y5KBxx9z6wYuVXQaMOB3qUUXXtHnlWoK/vmcoOF1XTXmp2VWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKb8l2VHmSjTJqDsvDMtTTioV7T8MB8GA1UdIwQY MBaAFGZjTxRYbjmc04AtnIix5n2N2wOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDct MTcxZGI0NjkwYzBhLzEvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDctMTcxZGI0NjkwYzBh LzEvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTmEGO3s mEmVdltbgf6Yo6JLZ5NQn7lg+DrP4jqtPyVAFQvdkIQeocyNp7YohfDH3wNwHNly Ms+4WKRT4K34UJ5CP+7Ia7bO2pTGaDyOXksb5qYtpvcfLkNyPrl8l7b/2xnVApne Qno1CiDvA2nwEziiKONCxh5AcdE5j2rodkryL0cVS8RiDQqHkASAuP+iKqmRufxI INXthR77kSn+sZluG45T/W/XziA51pcpnxpTuBdd49lFXC3n5ForoPVn3kW+e3sQ iIldJXAsTvcitPxrYqhp8mF5xqlcEorG7xVl3aJ8CNDcMmTVnhtp6Nq4r0JqM1m2 LZoGK4LhkMF4wg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:08 2025 by rpki-client