This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft File: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json) Hash identifier: +tVrpAAKvf9evLIYfkhpDCGVV4biAKvTKZnAO9aKfls= Subject key identifier: 04:C0:15:23:2B:D5:87:EB:71:44:B5:66:2A:CC:F3:65:C9:AD:5A:D6 Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8 Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8 Certificate serial: 019B32D7ED6A7A63CFA33F4350E4258C2E4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 19:02:50 +0000 Manifest this update: Thu 18 Dec 2025 19:02:50 +0000 Manifest next update: Fri 19 Dec 2025 19:02:50 +0000 Files and hashes: 1: 0eX0y1ByZozFyvqGz0EfmzMn6QQ.roa (hash: 9RKCNhJsqijEbBv8dV32/+CAVglgcAVrqc5Rx6tHl+s=) 2: PrLRWGrkGlOz391B_d1bhvHtRdM.roa (hash: Zq1F0wSxITxrY6z9+vuv+6+JvubiotTrHBEnZAFhoq4=) 3: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: awTsaaXVkByAGGUMs5lnKziRhJv0zz1ydGfr4n+Llf8=) 4: d-rt9f-dKC8oZEWyOv7rd6kbEo8.roa (hash: K8bXuYuwS4X0pfixId+iunQp5n4hsy6zV6Ye+pRdYtA=) 5: yIea70mz68MEWf7MSufqGinRRfw.roa (hash: C1KZ935qcqSwGSABodTKIPq8sxOye3X7esfEPyg6lGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:ed:6a:7a:63:cf:a3:3f:43:50:e4:25:8c:2e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8 Validity Not Before: Dec 18 19:02:50 2025 GMT Not After : Dec 19 19:02:50 2025 GMT Subject: CN=04c015232bd587eb7144b5662accf365c9ad5ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:9b:e6:ed:82:7e:21:7f:f1:99:3f:69:34: b1:d3:66:53:8e:bf:b2:7c:c6:be:ae:e1:40:19:f9: 10:d5:27:64:0c:ac:65:72:fb:79:77:7f:c8:f0:d4: 30:7c:d2:97:73:ab:f3:88:f0:f6:1e:f1:51:89:29: 8f:05:07:ca:c6:45:9f:b7:e1:de:dd:43:86:72:8d: 0d:7e:4c:df:b4:78:62:88:c7:32:a6:44:14:85:1b: 16:de:9d:a6:e5:3c:ae:c8:55:fe:03:84:3f:7b:93: 0f:25:48:43:96:b2:4a:8e:b8:9d:4d:d3:23:d2:b9: 75:40:29:f9:7c:7b:0c:ff:44:1e:82:1e:fe:6b:d6: c9:dd:7a:69:1f:28:27:f3:bf:83:64:46:10:ca:ea: 78:19:b2:ff:a0:c3:5f:e6:37:31:cc:29:64:2d:6e: 05:77:61:2a:f4:84:79:2e:ed:5b:19:5a:64:22:43: f0:8c:ae:2a:2c:f8:6d:f6:39:92:0d:10:0b:06:a5: 76:20:43:8f:4e:14:35:18:2d:03:df:d3:18:51:58: 88:4f:49:d2:94:94:33:6b:e7:27:4b:61:50:bf:32: c6:ba:85:72:1f:f4:7d:0d:c2:2a:60:37:59:73:ce: 0a:a2:5f:ac:7d:db:ef:6e:ee:f0:17:9a:ae:df:d9: 4e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C0:15:23:2B:D5:87:EB:71:44:B5:66:2A:CC:F3:65:C9:AD:5A:D6 X509v3 Authority Key Identifier: keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4b:99:f2:39:7e:45:25:66:77:fe:a2:e4:a6:02:4e:5f:37: ea:c1:69:46:fb:9e:d9:5b:cd:53:11:96:af:04:7c:88:d6:4c: 13:4b:6e:e5:0b:b6:23:7f:a6:3a:e2:ef:af:2f:0d:01:fc:de: 72:5d:ed:f6:9d:3c:cb:ed:e6:26:18:27:bb:8f:93:a3:fe:0c: 25:c2:7f:6d:91:a5:4a:9c:71:2a:44:5d:57:bd:28:92:5f:3a: 52:8d:82:4d:a5:0e:d0:d5:c7:a0:75:b3:8d:53:71:bb:d8:3c: 5b:10:10:bd:3a:c7:40:c9:35:a4:93:02:01:f2:be:8e:2f:1f: 11:b6:bb:f9:3f:a8:f4:a3:bb:e1:5a:f2:bf:2b:6e:14:da:eb: 9c:a2:54:69:9d:e6:12:7a:bd:cf:c4:38:cd:d2:b6:39:a6:4a: 1e:83:b9:21:3d:9d:65:2a:1f:f4:e9:c3:54:44:65:b1:3d:19: 54:3b:b1:84:80:d2:2f:bc:f2:64:72:f3:b3:52:81:e7:79:6e: c1:9c:db:03:74:eb:5c:07:de:69:ff:18:ab:f3:20:21:f8:89: 59:84:11:63:7d:17:1b:5b:af:cc:5c:1f:d2:ab:5a:9d:42:46: 26:c2:97:3c:19:bb:dd:40:e9:0c:37:e0:7f:80:36:8c:1e:fe: bf:ee:8e:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1+1qemPPoz9DUOQljC5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjM0ZjE0NTg2ZTM5OWNkMzgwMmQ5Yzg4YjFlNjdkOGRk YjAzYTgwHhcNMjUxMjE4MTkwMjUwWhcNMjUxMjE5MTkwMjUwWjAzMTEwLwYDVQQD EygwNGMwMTUyMzJiZDU4N2ViNzE0NGI1NjYyYWNjZjM2NWM5YWQ1YWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkqb5u2CfiF/8Zk/aTSx02ZTjr+y fMa+ruFAGfkQ1SdkDKxlcvt5d3/I8NQwfNKXc6vziPD2HvFRiSmPBQfKxkWft+He 3UOGco0NfkzftHhiiMcypkQUhRsW3p2m5TyuyFX+A4Q/e5MPJUhDlrJKjridTdMj 0rl1QCn5fHsM/0Qegh7+a9bJ3XppHygn87+DZEYQyup4GbL/oMNf5jcxzClkLW4F d2Eq9IR5Lu1bGVpkIkPwjK4qLPht9jmSDRALBqV2IEOPThQ1GC0D39MYUViIT0nS lJQza+cnS2FQvzLGuoVyH/R9DcIqYDdZc84Kol+sfdvvbu7wF5qu39lOMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATAFSMr1YfrcUS1ZirM82XJrVrWMB8GA1UdIwQY MBaAFGZjTxRYbjmc04AtnIix5n2N2wOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDct MTcxZGI0NjkwYzBhLzEvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYzJkMzMtYTM2Ny00NDliLTljNDctMTcxZGI0NjkwYzBh LzEvWm1OUEZGaHVPWnpUZ0MyY2lMSG1mWTNiQTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkuZ8jl+ RSVmd/6i5KYCTl836sFpRvue2VvNUxGWrwR8iNZME0tu5Qu2I3+mOuLvry8NAfze cl3t9p08y+3mJhgnu4+To/4MJcJ/bZGlSpxxKkRdV70okl86Uo2CTaUO0NXHoHWz jVNxu9g8WxAQvTrHQMk1pJMCAfK+ji8fEba7+T+o9KO74VryvytuFNrrnKJUaZ3m Enq9z8Q4zdK2OaZKHoO5IT2dZSof9OnDVERlsT0ZVDuxhIDSL7zyZHLzs1KB53lu wZzbA3TrXAfeaf8Yq/MgIfiJWYQRY30XG1uvzFwf0qtanUJGJsKXPBm73UDpDDfg f4A2jB7+v+6OpA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:16:53 2025 by rpki-client