This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json) Hash identifier: i8wI+JaImWN5ySSq7Neh65WGpu7N77r5M3lB9JXmkmU= Subject key identifier: B9:9F:A4:3F:5B:91:B2:CD:4C:F2:69:9D:15:47:D8:C3:6C:54:C4:CC Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Certificate serial: 019B35322304443F56A86A62155957E9108B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft Manifest number: 1186 Signing time: Fri 19 Dec 2025 06:00:36 +0000 Manifest this update: Fri 19 Dec 2025 06:00:36 +0000 Manifest next update: Sat 20 Dec 2025 06:00:36 +0000 Files and hashes: 1: 2YkU-KlvlcIh_M7FIIm73x5dHfA.roa (hash: SdTWFWGh+2RmhNZYbN14E4xNqRJjMV5KacVktQgyXJs=) 2: KyqWoLebligEUftYhU_Bgu-0Lts.roa (hash: VENXedlneKxldlXl7e/RQWS7U/FplQnliLqOvQVsbvA=) 3: YhHxsxNH4RP_FfePdq8SlQdgZyg.roa (hash: K3fGfKE/dBh+cdQFHO8biNnAdH/Glpbr/rysigKy5PI=) 4: jFc_wlQoiHbPyXbisyroWRENeu0.roa (hash: ITqThjHQNWEDIzaupfeF4coOz5rZPmtce8EoNUCuRBY=) 5: lCJmZzkmjXSr7FEoBdA3ylq1U04.roa (hash: STzWF0AEDLQ8FI+DmmWhhzxn4hvpubeIokmYgyoJVoQ=) 6: ubyCwlbzRZL2KOZ8mPfUrz1r_jE.roa (hash: N6l9QQBfT9lRXE69A3z5oJoeQofQ/m4QO9akh+rSPFY=) 7: zVdth24X5nqjsfHBDas52yk14is.crl (hash: FP1Eq1/kxBrbYGOvjgLZKrcBDVeTPEacOWAT2qcV5wI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:23:04:44:3f:56:a8:6a:62:15:59:57:e9:10:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Validity Not Before: Dec 19 06:00:36 2025 GMT Not After : Dec 20 06:00:36 2025 GMT Subject: CN=b99fa43f5b91b2cd4cf2699d1547d8c36c54c4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:80:7e:45:d7:5a:b3:de:7a:8f:e2:32:d8: c5:53:8d:62:d5:19:e1:f9:63:1c:89:aa:bc:4b:85: 80:3c:52:af:bb:67:ef:91:0d:48:20:8f:55:db:cb: 34:58:b3:61:7d:e7:f5:14:8e:a8:26:59:a3:00:b1: dd:e9:94:4a:b4:07:f5:1e:87:63:49:b0:a2:16:1b: 60:37:08:aa:4d:f1:7b:92:1f:8c:cf:8d:14:eb:3f: ff:a3:10:7a:f1:22:65:75:2a:c3:3e:e3:59:d8:ee: 8b:9e:55:1d:a9:0c:71:b5:52:13:8b:eb:cb:83:77: 4b:20:1e:21:26:09:99:7a:a3:7c:c4:2c:34:b7:d5: df:1b:11:f2:7e:62:dc:5f:95:af:19:8f:8d:20:94: cb:80:a0:56:81:59:20:eb:78:0c:0f:4c:d9:e2:a5: e5:32:92:9e:ca:0f:87:cc:13:66:fe:19:47:57:db: 7a:a0:6e:5e:79:41:39:6f:c1:85:73:ee:e5:ac:95: e9:3f:a5:d6:a4:10:8c:f0:b0:85:1f:f8:f4:f4:00: 45:23:23:89:5e:6a:57:b1:82:ef:80:7d:2e:91:d3: 54:1d:86:eb:b4:77:56:5f:04:f3:c9:0f:30:ed:64: 6e:ce:da:bf:1a:1f:36:a4:7e:28:3a:fd:3d:f8:9c: 99:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9F:A4:3F:5B:91:B2:CD:4C:F2:69:9D:15:47:D8:C3:6C:54:C4:CC X509v3 Authority Key Identifier: keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:44:d9:f5:4e:1a:a8:0e:0f:6c:39:cb:a9:7c:45:96:50:df: b9:7c:b1:42:79:4d:9a:15:e2:07:b6:c3:c6:e2:83:a9:1c:8d: 50:3d:ec:95:88:00:78:27:f9:20:cc:16:0e:9f:48:87:c5:5c: 3a:6a:5f:5c:b2:84:ed:fe:22:ec:9f:07:d3:70:1f:bb:ac:46: 40:bf:a0:c1:2e:e5:a6:09:a6:73:d7:5f:fd:7c:15:51:bd:93: b3:99:50:f2:b5:52:56:a8:e4:bf:bc:68:16:88:41:3b:40:ee: a3:ff:c3:26:6a:5f:e5:d2:e8:c8:fc:2c:4a:9c:25:39:7e:cf: 7c:55:b4:0e:f7:8d:44:f4:e6:97:88:67:f7:c4:f8:5a:e2:72: 54:b9:8c:4e:20:db:48:ec:4a:0b:44:8b:96:8e:45:8c:d2:6f: 42:7c:51:7b:1b:88:b3:6b:6a:3c:0a:ea:99:a7:5c:a1:f3:ee: 67:2e:3d:b7:05:fc:8f:2a:83:22:1b:6d:b2:e0:79:01:3b:3c: e4:d6:4c:45:a5:12:d5:c8:5d:16:01:b3:91:5d:b8:02:94:8d: 59:80:f2:b6:c5:c7:d1:8b:ef:06:ea:88:2b:81:ea:92:15:d4: a2:0a:c2:ca:04:33:97:8d:8c:20:d0:3c:73:8a:c0:38:5a:b7: b9:8a:a5:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MiMERD9WqGpiFVlX6RCLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNTc2ZDg3NmUxN2U2N2FhM2IxZjFjMTBkYWIzOWRiMjkz NWUyMmIwHhcNMjUxMjE5MDYwMDM2WhcNMjUxMjIwMDYwMDM2WjAzMTEwLwYDVQQD EyhiOTlmYTQzZjViOTFiMmNkNGNmMjY5OWQxNTQ3ZDhjMzZjNTRjNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI6AfkXXWrPeeo/iMtjFU41i1Rnh +WMciaq8S4WAPFKvu2fvkQ1III9V28s0WLNhfef1FI6oJlmjALHd6ZRKtAf1Hodj SbCiFhtgNwiqTfF7kh+Mz40U6z//oxB68SJldSrDPuNZ2O6LnlUdqQxxtVITi+vL g3dLIB4hJgmZeqN8xCw0t9XfGxHyfmLcX5WvGY+NIJTLgKBWgVkg63gMD0zZ4qXl MpKeyg+HzBNm/hlHV9t6oG5eeUE5b8GFc+7lrJXpP6XWpBCM8LCFH/j09ABFIyOJ XmpXsYLvgH0ukdNUHYbrtHdWXwTzyQ8w7WRuztq/Gh82pH4oOv09+JyZKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmfpD9bkbLNTPJpnRVH2MNsVMTMMB8GA1UdIwQY MBaAFM1XbYduF+Z6o7HxwQ2rOdspNeIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMt MWE4MGEyZjdkN2VhLzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMtMWE4MGEyZjdkN2Vh LzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0TZ9U4a qA4PbDnLqXxFllDfuXyxQnlNmhXiB7bDxuKDqRyNUD3slYgAeCf5IMwWDp9Ih8Vc OmpfXLKE7f4i7J8H03Afu6xGQL+gwS7lpgmmc9df/XwVUb2Ts5lQ8rVSVqjkv7xo FohBO0Duo//DJmpf5dLoyPwsSpwlOX7PfFW0DveNRPTml4hn98T4WuJyVLmMTiDb SOxKC0SLlo5FjNJvQnxRexuIs2tqPArqmadcofPuZy49twX8jyqDIhttsuB5ATs8 5NZMRaUS1chdFgGzkV24ApSNWYDytsXH0YvvBuqIK4HqkhXUogrCygQzl42MINA8 c4rAOFq3uYqlYw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:18:32 2025 by rpki-client