This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json) Hash identifier: YYG1GIxwdApqxNTTbNpEux1IL3CuMt8bA5WIwk3j+KQ= Subject key identifier: D8:4E:14:7C:1F:72:C0:46:38:3A:72:56:60:13:8A:E9:F9:21:CB:4B Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2 Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2 Certificate serial: 019AF31B6670686BDBA7EB73BE54C1579B1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:00:50 +0000 Manifest this update: Sat 06 Dec 2025 10:00:50 +0000 Manifest next update: Sun 07 Dec 2025 10:00:50 +0000 Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=) 2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=) 3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: RWvzhtTPgz0mae8qrn+llwH5AmeAHV/3cS/LTUZIAcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:66:70:68:6b:db:a7:eb:73:be:54:c1:57:9b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2 Validity Not Before: Dec 6 10:00:50 2025 GMT Not After : Dec 7 10:00:50 2025 GMT Subject: CN=d84e147c1f72c046383a725660138ae9f921cb4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e7:9d:6c:d7:25:f0:ce:34:ab:ca:a3:83:23: 13:82:d0:c4:0f:16:6f:43:19:cd:e6:19:e9:28:6f: e8:23:57:70:e2:ff:b4:3c:a3:d1:8c:e8:5c:46:8c: 3a:22:1e:9b:28:b8:ed:c8:ee:dd:44:69:c7:c4:3d: 08:d0:07:c9:d8:a6:8b:bd:a0:77:77:6d:d1:9c:08: e4:c5:d3:c4:65:79:a2:29:31:33:e9:55:61:7c:ca: f4:2b:a0:b2:0b:79:34:39:6b:6a:d8:9b:50:4b:ab: ca:8f:01:99:5a:b0:3a:9d:1c:0a:7d:e6:e0:79:68: 06:ca:85:e2:b3:82:93:46:78:6e:28:c7:6f:71:21: 00:c8:b2:8d:f0:45:d4:71:da:68:fe:03:d2:79:63: 9a:cd:23:2f:39:72:64:ed:32:8f:86:09:ff:90:30: 01:57:2e:86:b6:ec:8d:7e:4b:61:5c:a3:85:9c:0c: 24:89:1a:47:b5:9c:f3:18:85:e1:1d:af:fd:5e:64: 13:71:91:00:64:e4:b1:5a:a8:27:22:71:8a:7c:ed: 53:43:bd:98:dc:50:29:37:b4:42:06:19:1b:34:2d: 5d:04:bf:73:26:99:cf:67:44:25:67:93:d8:bf:7a: 1c:69:f3:e0:07:90:d4:e7:af:28:c2:4a:e0:36:16: 26:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4E:14:7C:1F:72:C0:46:38:3A:72:56:60:13:8A:E9:F9:21:CB:4B X509v3 Authority Key Identifier: keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2f:16:0e:77:6e:91:1c:7c:2c:97:47:6b:37:a0:18:9a:9e: 04:20:54:91:c0:09:f4:96:da:48:4f:94:8c:7a:e3:ba:0f:85: 15:04:5a:58:e3:70:ec:33:ea:3e:88:dd:15:d2:50:4c:c0:c1: 52:36:a8:b0:4d:d3:13:72:2c:a5:02:97:f4:fd:d1:d4:ef:b1: 10:45:4d:76:bd:fa:a5:41:d4:64:69:5b:cd:a3:ef:2e:6e:b3: 36:74:09:66:e2:3b:19:ea:e9:6e:63:ef:28:35:75:0a:41:f8: f5:b5:af:69:83:4f:4e:e0:2d:c2:d3:19:69:18:f9:62:cc:c5: eb:2f:19:d0:9f:d0:85:73:ff:d9:a4:07:8c:bb:f9:4d:c9:9d: a7:86:fe:8f:9d:68:1c:2a:61:d9:b5:81:82:b1:0b:d7:45:21: 74:b1:a9:b0:41:45:97:d2:70:4e:b4:4c:ba:52:76:02:87:b5: 58:5e:4e:44:47:fe:55:3a:c3:a0:e0:0f:75:d9:c5:dd:4b:e0: 20:0b:be:f3:9c:be:2f:99:ea:97:e3:c8:2e:d8:c7:1e:76:15: 0d:fc:10:f5:3f:ae:48:70:44:17:37:06:3e:89:3d:da:8a:02: 19:14:78:9a:2a:47:8e:3b:43:59:5e:11:df:77:1d:48:7d:19: 65:52:d6:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2ZwaGvbp+tzvlTBV5scMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZjlhNmQyZjZjZDU4OGE3N2Y0MjM2MjJlNmI4ZDFjNjU0 YmNkZjIwHhcNMjUxMjA2MTAwMDUwWhcNMjUxMjA3MTAwMDUwWjAzMTEwLwYDVQQD EyhkODRlMTQ3YzFmNzJjMDQ2MzgzYTcyNTY2MDEzOGFlOWY5MjFjYjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruedbNcl8M40q8qjgyMTgtDEDxZv QxnN5hnpKG/oI1dw4v+0PKPRjOhcRow6Ih6bKLjtyO7dRGnHxD0I0AfJ2KaLvaB3 d23RnAjkxdPEZXmiKTEz6VVhfMr0K6CyC3k0OWtq2JtQS6vKjwGZWrA6nRwKfebg eWgGyoXis4KTRnhuKMdvcSEAyLKN8EXUcdpo/gPSeWOazSMvOXJk7TKPhgn/kDAB Vy6GtuyNfkthXKOFnAwkiRpHtZzzGIXhHa/9XmQTcZEAZOSxWqgnInGKfO1TQ72Y 3FApN7RCBhkbNC1dBL9zJpnPZ0QlZ5PYv3ocafPgB5DU568owkrgNhYmTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhOFHwfcsBGODpyVmATiun5IctLMB8GA1UdIwQY MBaAFMz5ptL2zViKd/QjYi5rjRxlS83yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUt MWIwZjI1NGRlNjE5LzEvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUtMWIwZjI1NGRlNjE5 LzEvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANC8WDndu kRx8LJdHazegGJqeBCBUkcAJ9JbaSE+UjHrjug+FFQRaWONw7DPqPojdFdJQTMDB UjaosE3TE3IspQKX9P3R1O+xEEVNdr36pUHUZGlbzaPvLm6zNnQJZuI7GerpbmPv KDV1CkH49bWvaYNPTuAtwtMZaRj5YszF6y8Z0J/QhXP/2aQHjLv5Tcmdp4b+j51o HCph2bWBgrEL10UhdLGpsEFFl9JwTrRMulJ2Aoe1WF5OREf+VTrDoOAPddnF3Uvg IAu+85y+L5nql+PILtjHHnYVDfwQ9T+uSHBEFzcGPok92ooCGRR4mipHjjtDWV4R 33cdSH0ZZVLWvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:55 2025 by rpki-client