This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft File: zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json) Hash identifier: k8iSWY2DUPIn/TnDfp0bOXPkc6IyrWoDQdOJ99pKQBg= Subject key identifier: 01:41:1B:71:A3:A7:52:85:13:27:23:74:31:16:36:14:12:58:F3:18 Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b Certificate serial: 019AF57824EED3427D3D7965595A6DBD9D88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 21:01:22 +0000 Manifest this update: Sat 06 Dec 2025 21:01:22 +0000 Manifest next update: Sun 07 Dec 2025 21:01:22 +0000 Files and hashes: 1: aAOgx1Ep0O9ts33PDFAvITsVd3A.roa (hash: ztOFWm+dTJZa1671YtrvwaHCfWHjo8X63L1Exz6NaMI=) 2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: lbin5stT4Sm2n4h+0vwrPVM9zPTmj1/clMZ3ASoagBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:24:ee:d3:42:7d:3d:79:65:59:5a:6d:bd:9d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b Validity Not Before: Dec 6 21:01:22 2025 GMT Not After : Dec 7 21:01:22 2025 GMT Subject: CN=01411b71a3a7528513272374311636141258f318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a9:b2:8c:9a:d8:d1:d4:3e:0f:22:39:c6:f7: 21:37:4b:5d:23:e8:da:7b:ff:19:a1:37:ac:fd:d8: 85:bf:bf:cb:56:22:bd:fc:68:a5:09:71:4d:9b:1f: 9f:58:41:c4:4a:27:5c:aa:cf:c6:a5:6a:da:6e:43: d0:cd:3d:72:4a:e7:84:73:03:c5:fc:ed:c8:05:d9: 6d:f0:51:52:ce:02:cd:9b:3e:48:2e:27:e1:13:a7: f7:44:e2:29:c6:2e:ff:35:b7:f5:8c:b8:48:46:f4: 3c:8b:86:0a:f3:79:0b:2c:b9:23:3f:28:35:38:f1: 84:8a:47:21:9c:66:fc:56:5a:e0:43:93:83:87:46: bd:d8:1d:16:8e:50:a5:f1:21:2c:da:5f:a1:84:cc: 6f:eb:34:fb:7d:0f:51:9f:a8:a2:00:c6:e4:42:4b: a1:b4:fd:f3:1b:8e:8b:bb:ba:87:f8:7d:b7:e1:18: e0:5a:cf:a5:c5:6c:e6:a4:0c:5a:63:67:fe:99:2c: 7f:15:64:e0:49:77:6d:98:4c:05:36:07:12:c6:a3: af:a2:85:51:c3:59:6e:32:48:40:a6:54:28:2f:69: 46:2b:58:5f:e1:86:73:df:b9:78:5a:95:30:52:4c: a3:d0:84:58:56:08:bb:ca:ad:e0:b6:4c:83:28:f0: 51:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:41:1B:71:A3:A7:52:85:13:27:23:74:31:16:36:14:12:58:F3:18 X509v3 Authority Key Identifier: keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f5:97:2f:77:3e:d4:e4:6e:7d:05:e0:26:9d:dd:0c:2d:bc: b1:66:05:30:ac:03:11:1f:4c:cb:02:ef:a9:1b:1d:03:e9:4e: b3:9f:07:0e:f2:c5:93:50:d9:f4:a5:9c:da:65:a6:5a:ba:2d: 02:7b:82:c7:17:c9:95:06:11:64:3c:71:c5:40:75:42:89:1a: 68:4f:a5:da:63:0f:f3:9e:8c:b4:1d:58:6c:c0:38:ae:3b:6b: 18:c2:63:a5:73:df:88:3a:fe:1f:a9:73:d5:8c:39:4d:a8:91: 99:93:31:3c:78:e1:02:1f:a0:62:bc:82:52:44:59:cf:67:50: 33:e1:7d:88:0d:56:ad:52:6b:4a:e1:5d:f8:30:2c:cf:ec:37: 1c:eb:89:d1:91:8d:ec:44:68:34:9b:82:d4:15:e7:01:67:82: 0a:a4:29:9e:18:19:63:04:86:89:1a:59:03:70:9d:76:07:60: bc:22:ad:63:c9:38:dd:ab:55:f3:8d:f0:b0:68:5b:c8:96:43: 10:68:aa:21:5e:51:34:d5:6d:d4:2c:6c:dc:08:33:93:42:90: 81:88:7c:3a:1f:ab:6e:c9:60:34:59:5c:76:42:1d:3e:be:b7: 9b:d8:4b:4f:cf:34:ce:54:3a:52:b7:46:39:34:82:d6:4d:4e: 82:66:3f:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eCTu00J9PXllWVptvZ2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNjU0NzFiOTRhMzI2MGMyZDlmNjU4ZGNlZDJmODdmNDBi NTQyNGIwHhcNMjUxMjA2MjEwMTIyWhcNMjUxMjA3MjEwMTIyWjAzMTEwLwYDVQQD EygwMTQxMWI3MWEzYTc1Mjg1MTMyNzIzNzQzMTE2MzYxNDEyNThmMzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKmyjJrY0dQ+DyI5xvchN0tdI+ja e/8ZoTes/diFv7/LViK9/GilCXFNmx+fWEHESidcqs/GpWrabkPQzT1ySueEcwPF /O3IBdlt8FFSzgLNmz5ILifhE6f3ROIpxi7/Nbf1jLhIRvQ8i4YK83kLLLkjPyg1 OPGEikchnGb8VlrgQ5ODh0a92B0WjlCl8SEs2l+hhMxv6zT7fQ9Rn6iiAMbkQkuh tP3zG46Lu7qH+H234RjgWs+lxWzmpAxaY2f+mSx/FWTgSXdtmEwFNgcSxqOvooVR w1luMkhAplQoL2lGK1hf4YZz37l4WpUwUkyj0IRYVgi7yq3gtkyDKPBRCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFBG3Gjp1KFEycjdDEWNhQSWPMYMB8GA1UdIwQY MBaAFM5lRxuUoyYMLZ9ljc7S+H9AtUJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem1WSEc1U2pKZ3d0bjJXTnp0TDRmMEMxUWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iYTg3OTAtZWY0My00MGVhLWJlY2Yt YmIwZTBjYzI2YzQ5LzEvem1WSEc1U2pKZ3d0bjJXTnp0TDRmMEMxUWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9iYTg3OTAtZWY0My00MGVhLWJlY2YtYmIwZTBjYzI2YzQ5 LzEvem1WSEc1U2pKZ3d0bjJXTnp0TDRmMEMxUWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/WXL3c+ 1ORufQXgJp3dDC28sWYFMKwDER9MywLvqRsdA+lOs58HDvLFk1DZ9KWc2mWmWrot AnuCxxfJlQYRZDxxxUB1QokaaE+l2mMP856MtB1YbMA4rjtrGMJjpXPfiDr+H6lz 1Yw5TaiRmZMxPHjhAh+gYryCUkRZz2dQM+F9iA1WrVJrSuFd+DAsz+w3HOuJ0ZGN 7ERoNJuC1BXnAWeCCqQpnhgZYwSGiRpZA3CddgdgvCKtY8k43atV843wsGhbyJZD EGiqIV5RNNVt1Cxs3Agzk0KQgYh8Oh+rbslgNFlcdkIdPr63m9hLT880zlQ6UrdG OTSC1k1OgmY/kw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:20:00 2025 by rpki-client