This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft File: zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft (raw, json) Hash identifier: NMt+3/IeodDMUEn/B56r8SsztBOGpaAcji+cFr4x7uY= Subject key identifier: 2C:24:E3:D0:42:6B:E7:AC:09:FD:DB:D3:C1:27:75:B8:89:0B:3A:8E Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3 Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3 Certificate serial: 019AF1D1F7277A14A5323269947941008A9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft Manifest number: 1421 Signing time: Sat 06 Dec 2025 04:01:00 +0000 Manifest this update: Sat 06 Dec 2025 04:01:00 +0000 Manifest next update: Sun 07 Dec 2025 04:01:00 +0000 Files and hashes: 1: AalZ3RZGPmVBPL8EbkB-YzwV1bA.roa (hash: xQN6NagFLnVfkOh0FRJ47TszfhI1OJXGBTnKGRr5AuM=) 2: zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl (hash: jVzlCGoZzS8BDSBc3LY8p2f9YTM9Vk8Dq+93fVCLcag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f7:27:7a:14:a5:32:32:69:94:79:41:00:8a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3 Validity Not Before: Dec 6 04:01:00 2025 GMT Not After : Dec 7 04:01:00 2025 GMT Subject: CN=2c24e3d0426be7ac09fddbd3c12775b8890b3a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:d5:49:d3:39:b2:52:4a:c8:ed:19:d8:7e: 17:dd:11:69:61:43:b9:c7:bc:dc:63:91:85:f9:0a: f2:13:de:18:f7:2b:4c:6c:49:12:c3:b0:d6:e5:fb: 9b:d6:56:c1:a2:f1:da:4f:f5:0d:13:1d:d0:f7:40: 1a:a7:d7:25:69:1a:b7:13:8a:09:23:88:85:70:b4: 5b:af:d0:e9:8e:1f:0d:7d:9c:7f:e6:72:26:82:ca: 03:92:dd:f9:2b:c6:95:65:c3:c4:bb:db:f2:19:fb: de:91:b7:75:88:c1:a6:52:56:78:d6:1a:6d:8b:77: 76:a1:d4:ea:71:ad:c1:b4:6e:fd:27:34:8a:50:c9: 61:cc:1b:e2:75:bb:2e:80:3c:22:4e:1b:5e:21:a9: 7b:2f:d6:53:05:b8:91:2f:96:d9:b0:ee:ae:a3:a9: 20:66:d3:ee:ee:48:82:4e:c4:95:18:79:83:4a:e8: df:b4:79:ea:40:9f:ac:48:e8:b4:6c:ba:cc:63:8f: 3f:91:1c:b1:f7:9f:a9:38:d2:42:82:e6:ff:65:86: c6:ee:d3:5b:a8:9f:6d:0b:72:63:3a:e7:2d:d0:5b: ab:b0:45:9c:52:93:4b:38:6f:d2:f0:69:1d:e0:1a: 68:3a:56:cc:41:a0:6e:2c:19:89:d7:77:55:c0:24: 5f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:24:E3:D0:42:6B:E7:AC:09:FD:DB:D3:C1:27:75:B8:89:0B:3A:8E X509v3 Authority Key Identifier: keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f0:9f:a8:cc:92:39:75:b0:88:f4:d8:cb:82:79:bc:37:af: e6:61:45:6c:84:3b:91:26:ee:d6:7e:a4:27:bf:4d:cc:b4:47: 3b:43:67:79:ff:6d:b8:2b:ff:a2:b3:62:9e:b3:fe:1a:05:db: c9:da:9d:eb:dc:fa:c8:6d:f8:d5:89:dd:39:14:19:2c:17:7d: 16:b5:8c:33:a2:f3:0d:17:b3:55:10:4f:2c:1e:72:7e:b5:66: ef:78:34:e2:c0:37:5a:01:4e:1f:7d:41:e7:49:71:80:81:09: 72:1f:a2:3f:11:06:22:9c:02:55:f7:31:90:39:11:14:07:ba: bc:74:98:6d:c0:f8:3c:94:4d:61:3c:e8:8b:26:a6:30:ae:1a: 50:80:b7:67:94:b6:4a:48:79:74:16:77:76:d5:95:f0:82:7f: 7f:64:77:9b:21:47:66:61:2e:ce:ac:01:e8:bf:11:fe:2c:e0: 75:70:ef:27:97:3d:ef:79:74:cf:dc:aa:33:df:d7:99:ab:b0: 39:fc:e1:25:12:5f:69:fb:13:98:ff:f5:e0:8e:ce:71:9b:20: c3:d9:ec:ca:2a:35:8c:41:57:f3:da:27:65:bc:fd:de:38:cf: 85:3b:12:93:02:c1:74:0b:51:fa:17:04:eb:77:50:c1:de:5b: 26:a7:44:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fcnehSlMjJplHlBAIqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNjVjMmY5NThhN2UyMWEzMTM1OTE2ZWVkMWE0ZDk3ODZl MDlkYTMwHhcNMjUxMjA2MDQwMTAwWhcNMjUxMjA3MDQwMTAwWjAzMTEwLwYDVQQD EygyYzI0ZTNkMDQyNmJlN2FjMDlmZGRiZDNjMTI3NzViODg5MGIzYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvvVSdM5slJKyO0Z2H4X3RFpYUO5 x7zcY5GF+QryE94Y9ytMbEkSw7DW5fub1lbBovHaT/UNEx3Q90Aap9claRq3E4oJ I4iFcLRbr9Dpjh8NfZx/5nImgsoDkt35K8aVZcPEu9vyGfvekbd1iMGmUlZ41hpt i3d2odTqca3BtG79JzSKUMlhzBvidbsugDwiThteIal7L9ZTBbiRL5bZsO6uo6kg ZtPu7kiCTsSVGHmDSujftHnqQJ+sSOi0bLrMY48/kRyx95+pONJCgub/ZYbG7tNb qJ9tC3JjOuct0FursEWcUpNLOG/S8Gkd4BpoOlbMQaBuLBmJ13dVwCRfNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwk49BCa+esCf3b08EndbiJCzqOMB8GA1UdIwQY MBaAFM5lwvlYp+IaMTWRbu0aTZeG4J2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yZWE5MjgtZDk5Ni00YzRkLWIxM2It NWQ1OTZkMDBkZTljLzEvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yZWE5MjgtZDk5Ni00YzRkLWIxM2ItNWQ1OTZkMDBkZTlj LzEvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfCfqMyS OXWwiPTYy4J5vDev5mFFbIQ7kSbu1n6kJ79NzLRHO0Nnef9tuCv/orNinrP+GgXb ydqd69z6yG341YndORQZLBd9FrWMM6LzDRezVRBPLB5yfrVm73g04sA3WgFOH31B 50lxgIEJch+iPxEGIpwCVfcxkDkRFAe6vHSYbcD4PJRNYTzoiyamMK4aUIC3Z5S2 Skh5dBZ3dtWV8IJ/f2R3myFHZmEuzqwB6L8R/izgdXDvJ5c973l0z9yqM9/Xmauw OfzhJRJfafsTmP/14I7OcZsgw9nsyio1jEFX89onZbz93jjPhTsSkwLBdAtR+hcE 63dQwd5bJqdEIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:02 2025 by rpki-client