This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File: ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier: BdbBowkMCddBtOHqwDbi1CY1OGwSTFbnx9NFuyw17iQ=
Subject key identifier: C7:9B:2B:A8:9B:7D:2F:F0:88:16:B8:6C:00:86:7F:EE:A5:99:8A:F8
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 019AFA671A0F6B394FC0408D0842BCF25A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number: 0C20
Signing time: Sun 07 Dec 2025 20:00:52 +0000
Manifest this update: Sun 07 Dec 2025 20:00:52 +0000
Manifest next update: Mon 08 Dec 2025 20:00:52 +0000
Files and hashes: 1: 5bucpm77LtnXjK7o-jpiDW291Yw.roa (hash: S2CYvpEr7FdqvUdlAxqrDbEjDQNF8pYqq1mftWv1ZPE=)
2: 81yN31-IxQXIZI5PlY-trqqNIno.roa (hash: v9l8y9I+7ljSUfpIaDADoFiNw5hBtJQ72MRZ64GdbyQ=)
3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: pv2m2CONz+sWQ7tAf15e7XKCQizEzEXMecUfY/5xnLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Dec 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:fa:67:1a:0f:6b:39:4f:c0:40:8d:08:42:bc:f2:5a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Dec 7 20:00:52 2025 GMT
Not After : Dec 8 20:00:52 2025 GMT
Subject: CN=c79b2ba89b7d2ff08816b86c00867feea5998af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:fa:61:a7:49:77:02:3e:2d:df:36:1c:3a:
22:6c:fd:2d:90:c3:91:89:56:b2:eb:88:83:1f:5c:
0c:ff:5f:30:b1:fa:7c:46:bb:24:fd:8b:f9:65:07:
e1:b2:54:66:ec:c3:9a:64:96:12:ff:6f:23:c6:0e:
46:3b:b7:71:56:51:b6:04:f2:a6:17:51:ae:2d:30:
f5:85:60:ed:24:1c:64:5d:75:45:c4:35:7f:5c:08:
37:32:a2:32:15:89:3e:85:b5:92:77:76:15:ff:76:
cc:d2:16:40:33:4a:93:3b:7d:d4:8d:2d:18:ed:28:
9d:31:90:b5:d8:8c:7b:8d:2d:bc:78:ab:51:dc:56:
bb:1a:ff:80:68:e8:fe:20:1a:4b:5e:30:f3:f5:25:
f9:15:a7:15:f8:5f:40:19:c3:a7:f9:9b:d6:a4:b1:
f8:8e:34:15:0c:3b:5d:5a:3e:d3:4f:c0:5c:d2:c5:
f8:c6:2b:f4:05:ec:2d:29:50:a9:d2:8c:d7:ea:89:
62:9e:0b:ee:45:ea:47:0f:e7:14:0c:d1:c7:d0:96:
95:16:58:64:0f:5a:34:cc:b2:1a:74:6d:b2:83:65:
7e:64:ad:fa:a8:0c:38:1d:75:a4:96:d2:ac:17:28:
67:22:3a:10:b3:2f:c4:93:fc:b9:68:30:78:29:7c:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9B:2B:A8:9B:7D:2F:F0:88:16:B8:6C:00:86:7F:EE:A5:99:8A:F8
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:05:38:c5:90:8f:d8:74:be:02:96:cf:da:6a:46:3c:8e:77:
57:a5:b1:7b:72:51:e0:19:71:38:20:7e:b3:73:ab:6f:f2:a7:
35:68:88:0e:a5:4e:9a:b1:a0:ba:18:a0:4b:ae:4a:c4:ac:24:
22:98:01:29:fe:55:ea:7c:1c:58:bc:9e:32:7a:10:e6:4d:ba:
59:74:0e:56:e1:e6:af:07:a8:83:d2:ef:be:45:6c:14:69:e4:
59:98:8a:a7:a0:25:15:2e:bc:92:59:05:c2:fc:a2:49:05:c2:
ea:58:07:56:61:73:8f:55:f5:54:cc:f9:cd:92:ed:e8:a3:16:
35:68:0c:57:02:b0:44:1a:81:25:67:76:e4:7e:34:87:a3:e8:
18:54:55:1b:65:dd:b8:7d:a9:a8:c7:a5:45:9d:55:44:5f:de:
43:36:52:35:7c:98:4b:22:4d:fa:39:fa:b5:c2:5c:a7:28:94:
67:cb:cd:7a:8c:91:8f:dd:14:35:56:fa:80:d0:54:68:6f:d0:
ec:84:3a:73:a1:6d:6e:95:31:8f:49:76:85:33:22:a5:63:f3:
2b:45:81:b6:f3:38:71:53:01:55:cb:e6:2c:92:91:09:1c:dc:
c0:43:98:09:b5:5d:70:37:72:15:02:be:96:c3:27:79:45:c3:
e1:f2:9c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr6ZxoPazlPwECNCEK88looMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjAzNGNhNmExNmJiZDAxNDRhYmRmNWNmMjQ1OGY5Njhi
MTU4OWMwHhcNMjUxMjA3MjAwMDUyWhcNMjUxMjA4MjAwMDUyWjAzMTEwLwYDVQQD
EyhjNzliMmJhODliN2QyZmYwODgxNmI4NmMwMDg2N2ZlZWE1OTk4YWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj36YadJdwI+Ld82HDoibP0tkMOR
iVay64iDH1wM/18wsfp8Rrsk/Yv5ZQfhslRm7MOaZJYS/28jxg5GO7dxVlG2BPKm
F1GuLTD1hWDtJBxkXXVFxDV/XAg3MqIyFYk+hbWSd3YV/3bM0hZAM0qTO33UjS0Y
7SidMZC12Ix7jS28eKtR3Fa7Gv+AaOj+IBpLXjDz9SX5FacV+F9AGcOn+ZvWpLH4
jjQVDDtdWj7TT8Bc0sX4xiv0BewtKVCp0ozX6olingvuRepHD+cUDNHH0JaVFlhk
D1o0zLIadG2yg2V+ZK36qAw4HXWkltKsFyhnIjoQsy/Ek/y5aDB4KXx6SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMebK6ibfS/wiBa4bACGf+6lmYr4MB8GA1UdIwQY
MBaAFGZgNMpqFrvQFEq99c8kWPlosVicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDIt
NWQ0OGJjZDdjMWRjLzEvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDItNWQ0OGJjZDdjMWRj
LzEvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAU4xZCP
2HS+ApbP2mpGPI53V6Wxe3JR4BlxOCB+s3Orb/KnNWiIDqVOmrGguhigS65KxKwk
IpgBKf5V6nwcWLyeMnoQ5k26WXQOVuHmrweog9LvvkVsFGnkWZiKp6AlFS68klkF
wvyiSQXC6lgHVmFzj1X1VMz5zZLt6KMWNWgMVwKwRBqBJWd25H40h6PoGFRVG2Xd
uH2pqMelRZ1VRF/eQzZSNXyYSyJN+jn6tcJcpyiUZ8vNeoyRj90UNVb6gNBUaG/Q
7IQ6c6FtbpUxj0l2hTMipWPzK0WBtvM4cVMBVcvmLJKRCRzcwEOYCbVdcDdyFQK+
lsMneUXD4fKc6A==
-----END CERTIFICATE-----
Generated at Mon Dec 8 02:13:43 2025 by rpki-client