This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: 8ED0Foo4FDf6BaO33Q0C6GOuuNDjhc2ag1YhWrmlXDE= Subject key identifier: D6:4B:16:35:73:F3:6A:BB:35:51:AA:D4:0D:DA:01:E4:E8:9E:63:C3 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019AF3890D39FAF6F6223BA2252EC240F68E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 176C Signing time: Sat 06 Dec 2025 12:00:36 +0000 Manifest this update: Sat 06 Dec 2025 12:00:36 +0000 Manifest next update: Sun 07 Dec 2025 12:00:36 +0000 Files and hashes: 1: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (hash: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=) 2: J2wVE-ysPom5E_5lF4tJldYNa-0.roa (hash: oUIFr0+ZyYlkYGUaUpe52i+2V6CsiaUkgkNDD+7+LeQ=) 3: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (hash: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=) 4: YwzWinKJc46_U8FICjJOYyamFbE.roa (hash: 6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=) 5: a5CofPxS02DnAUUS9BR-MfOlQu4.roa (hash: LylucOp1UfCFOp+5ipOtc4LcLveZAw9S3wnaBKPFnAA=) 6: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (hash: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=) 7: c_P4sr3Opke1mWU78BvJMlMDps8.roa (hash: epdNIDM+10/qxHg1G8njFcHs1LoWUpUQmmausYhNxGY=) 8: iI8DgizVWpbEfLLZJw23cwOMtao.roa (hash: gWEZpZ6NinOCicsU6XwwO/9pb7/TViv+n+2ETM0yooY=) 9: p1mSMR7xN9m1jztS6WxG27UANcc.roa (hash: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=) 10: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (hash: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=) 11: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (hash: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=) 12: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (hash: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: h8k/ynF37sBchlJXULHOp1V5/iN2730RSKcFeVC/axE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:0d:39:fa:f6:f6:22:3b:a2:25:2e:c2:40:f6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Dec 6 12:00:36 2025 GMT Not After : Dec 7 12:00:36 2025 GMT Subject: CN=d64b163573f36abb3551aad40dda01e4e89e63c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b5:31:6b:2e:9a:f1:89:64:40:19:7d:34:c8: 69:b7:dc:9e:56:1e:dc:37:23:b4:cb:76:8b:6a:37: 5f:08:3c:15:97:0d:e6:8e:74:d8:ed:6c:58:e1:b4: 09:29:74:f6:c9:a1:89:67:7a:8b:54:b2:c3:eb:56: ef:8d:d3:ad:6c:fc:30:45:3b:e7:6c:4f:ed:39:07: c4:1a:65:7c:31:52:9b:ab:b6:51:e0:e5:ca:96:06: 60:91:ee:ec:a6:66:93:94:c9:21:18:47:dd:15:e6: 32:c2:ab:cd:87:34:cd:00:fa:4f:81:24:d7:7d:5d: 09:20:05:a0:15:bb:9e:93:6d:60:5b:45:bc:b8:79: 07:60:9c:ea:d6:39:2c:40:f9:70:6e:bd:f1:9b:00: 25:ad:65:7e:ae:63:4f:2b:ab:e7:1f:76:94:0a:ee: 14:bb:c1:69:ed:a3:35:c2:1c:a7:9e:3f:70:ef:b0: b7:8f:7d:62:cb:b6:e5:3b:6c:78:6c:e6:e4:ce:46: a8:cd:cc:14:d1:ac:01:bb:0f:b7:ed:9c:3e:5d:a5: ca:2f:5b:ac:92:c9:1b:38:ba:4c:22:0b:2a:bd:2e: 06:01:ef:d6:72:80:1c:d5:58:af:8e:57:0b:99:d8: 8b:88:f5:75:55:7f:3e:2f:f9:d1:0e:65:68:56:24: 65:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4B:16:35:73:F3:6A:BB:35:51:AA:D4:0D:DA:01:E4:E8:9E:63:C3 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0f:a5:2c:d6:3c:11:db:6b:1a:b9:55:bb:ee:5f:4e:52:78: 9e:fb:9d:8f:fd:2d:7a:d4:c6:b8:a7:df:3c:fb:b8:0e:16:b4: 20:63:fe:b8:cb:f9:13:19:29:99:87:fa:2b:8c:1c:21:9c:86: 37:44:a8:00:c1:75:44:42:75:17:39:19:97:c2:47:53:77:a2: 73:ae:60:0b:50:52:78:97:27:40:0c:ad:0e:47:14:67:6e:cc: dd:fc:ba:60:b8:ae:b2:d6:49:7a:4b:0f:ec:ed:c3:ff:81:00: a3:1e:97:fe:63:07:20:1e:af:f9:ef:a5:a4:52:77:9d:67:c4: ca:b4:e5:dc:e7:79:fd:a4:0a:a8:a4:77:78:60:d1:72:27:79: 4b:a9:81:d3:89:7c:8c:a3:54:ef:f2:a2:f7:2e:c8:2b:51:57: d7:07:d8:6b:76:cc:94:ed:af:ce:1b:6a:1b:b1:67:3d:4a:e4: 8e:de:b1:d0:3d:43:69:16:12:5c:35:36:e9:80:de:2f:6f:51: 2c:82:11:6e:ff:e0:97:4b:b7:ad:16:4f:c9:6f:0f:88:c4:b5: 9e:e1:b5:e1:4f:ff:ec:fa:c0:b0:df:87:1b:21:05:ee:81:16: a6:b4:60:d7:6f:62:5d:a2:6d:07:4d:b6:a6:43:ce:b8:5c:4f: 2b:ec:d1:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQ05+vb2IjuiJS7CQPaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjUxMjA2MTIwMDM2WhcNMjUxMjA3MTIwMDM2WjAzMTEwLwYDVQQD EyhkNjRiMTYzNTczZjM2YWJiMzU1MWFhZDQwZGRhMDFlNGU4OWU2M2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbUxay6a8YlkQBl9NMhpt9yeVh7c NyO0y3aLajdfCDwVlw3mjnTY7WxY4bQJKXT2yaGJZ3qLVLLD61bvjdOtbPwwRTvn bE/tOQfEGmV8MVKbq7ZR4OXKlgZgke7spmaTlMkhGEfdFeYywqvNhzTNAPpPgSTX fV0JIAWgFbuek21gW0W8uHkHYJzq1jksQPlwbr3xmwAlrWV+rmNPK6vnH3aUCu4U u8Fp7aM1whynnj9w77C3j31iy7blO2x4bObkzkaozcwU0awBuw+37Zw+XaXKL1us kskbOLpMIgsqvS4GAe/WcoAc1VivjlcLmdiLiPV1VX8+L/nRDmVoViRl2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZLFjVz82q7NVGq1A3aAeTonmPDMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOw+lLNY8 EdtrGrlVu+5fTlJ4nvudj/0tetTGuKffPPu4Dha0IGP+uMv5ExkpmYf6K4wcIZyG N0SoAMF1REJ1FzkZl8JHU3eic65gC1BSeJcnQAytDkcUZ27M3fy6YLiustZJeksP 7O3D/4EAox6X/mMHIB6v+e+lpFJ3nWfEyrTl3Od5/aQKqKR3eGDRcid5S6mB04l8 jKNU7/Ki9y7IK1FX1wfYa3bMlO2vzhtqG7FnPUrkjt6x0D1DaRYSXDU26YDeL29R LIIRbv/gl0u3rRZPyW8PiMS1nuG14U//7PrAsN+HGyEF7oEWprRg129iXaJtB022 pkPOuFxPK+zRNw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:58:52 2025 by rpki-client