This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: gTO7go1Y0VCBrFQmah7RYrGFJLYzPdaidsKDTTzSeCM= Subject key identifier: D3:41:63:02:DC:4D:0E:65:5C:8C:5E:21:EF:2C:D7:B6:87:43:93:55 Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 019B2B8A9234EA64F0EA6F706BC0904EEB4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 10EF Signing time: Wed 17 Dec 2025 09:01:00 +0000 Manifest this update: Wed 17 Dec 2025 09:01:00 +0000 Manifest next update: Thu 18 Dec 2025 09:01:00 +0000 Files and hashes: 1: 0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa (hash: uWfrAsGA9zSBFRUppF4EGIbGfP7a2y+0eTMFReV79oU=) 2: 1-EH3zz14aNQaNvLk-kA5ObugP0M.roa (hash: AInhS8QzIu5+kTFM1AzSru0PxsCBAqGzcKM2yjycOYo=) 3: 1syEB_XNZhCqsIS16W8qNr-bnBE.roa (hash: Kwo3+iE1f0eCzsl7wTJPqBDN/PDvgx+vvxkKumcR6DI=) 4: 4nM4rBv9VVZiBpLQiIbQsg6NSx0.roa (hash: pcYAXIo8mN5119CAEJXDu1uZ7LPPD2vqAMHmgIZuOWM=) 5: R31VLBewgiodlHNc96NZMod-BMs.roa (hash: L1tzfKdGbqAYKzdHCS4ryKzvNcfxJIW6KvE4rua2XQw=) 6: T1D9x5sZuRac2c7oz4I264aKmE4.roa (hash: VNf45yATZxYkt7RFt2PCJKaQr4WutYjzNtIvrBF3RC8=) 7: aI-_oTt6aFi0rGtdpFFsZSUUhnk.roa (hash: ZpzPh7grr/BmAU1ND5+d/vIuS1VNGFc3sngZPWDtPBs=) 8: bZEbJRPxJReKy0hDBZERdUhjkh4.roa (hash: ni6mlIsteCmNwnZ8kh9b0fdcHAIWv53ytgA7gDmdlvE=) 9: dNAWbsFoIAa7vbufcHS0hoyCsWg.roa (hash: wscCbu3aT6nDlnhH6Y0eApXWMaH2Q/Fw0Qs8zp46iAc=) 10: qZSZRgV-vJBf_xQykzfiics3mkU.roa (hash: dWHqzEvTKVEmGqupQR8c601UkkKIg6uw+FC0NrVnCvY=) 11: qiz-f9e8_qagVo454Qf-usEmhyI.roa (hash: 0k1gLPvcIoWvEOFBnscDSuywq30yMwZrPLJ7ynVOwEs=) 12: uSWhGb7yh0hnhYBmE-uLSzu4Rns.roa (hash: K+cvStncEiJXwD+zki81oVh+wXS7gjez2aJZSXM9/64=) 13: y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa (hash: ZW4XWeHDbmOrkzP6lKA3E8FtGyPFeQqM41Y/X1LGTZg=) 14: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: fYJ2QPAQio3AaZubmSBXbUt1f+PjIOE1duudeHcQwo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:92:34:ea:64:f0:ea:6f:70:6b:c0:90:4e:eb:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Dec 17 09:01:00 2025 GMT Not After : Dec 18 09:01:00 2025 GMT Subject: CN=d3416302dc4d0e655c8c5e21ef2cd7b687439355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:03:cf:c7:ff:06:18:b2:4e:c8:66:82:35: 42:39:68:98:34:b4:50:d6:56:06:c1:43:82:f7:3f: 6b:ca:cd:b7:72:f1:c5:16:4b:39:65:b2:3b:9e:5d: 7b:45:79:d2:4d:8e:ee:fb:6b:19:db:55:ec:23:9f: 2a:b3:17:26:80:df:2e:0b:ff:f1:f6:06:95:84:b7: c7:1c:0f:10:bd:50:63:53:71:75:a1:b6:9d:31:14: f6:25:eb:ca:0b:14:a3:99:73:30:18:10:fd:89:46: b0:0d:9f:c7:14:cd:cb:6e:00:35:92:36:88:3a:05: ac:a2:c3:a8:b1:43:77:f0:15:b7:3d:6d:c6:b5:5f: a1:0e:e0:7c:59:6a:c4:d4:a9:9d:36:c6:93:c5:f7: 4f:24:cd:89:66:f0:63:6a:b5:a5:4a:cc:46:3a:99: 58:77:35:84:36:4d:fd:4d:3d:8c:fe:be:8b:05:4f: 08:2a:9e:26:1a:0a:f1:47:35:40:78:68:18:8d:53: a4:b5:d4:34:30:4d:54:90:21:0e:f9:23:43:9b:fe: 5e:f6:b7:4a:ee:31:77:11:61:11:64:8e:b9:d5:80: f1:02:68:25:27:7d:07:7c:a7:b0:96:b2:57:0c:51: 00:5e:c0:58:cc:c3:b1:6a:66:7e:4a:39:07:09:24: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:41:63:02:DC:4D:0E:65:5C:8C:5E:21:EF:2C:D7:B6:87:43:93:55 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:f0:be:91:79:36:6b:e3:67:c0:09:0c:e8:41:61:2d:ea:29: 29:02:25:ad:e8:41:f7:48:8a:e2:85:22:04:bf:df:36:be:c3: 8e:15:96:7f:4b:56:22:a2:ee:c8:22:37:82:86:02:90:61:83: 98:d4:bd:34:87:9d:62:46:b1:9a:71:ff:dc:f3:b1:2b:7d:d4: 33:5d:6d:12:b6:b8:39:48:ed:e7:07:e0:70:e7:e9:94:58:1d: c0:63:f2:6b:71:84:1e:ed:37:03:ab:66:83:29:d9:fa:a0:ef: 9f:5c:e9:5c:39:98:7f:48:95:8c:51:a7:7a:10:24:85:b3:6e: ec:5e:b6:3b:a9:a4:60:f0:74:9c:98:32:be:b6:85:d5:89:55: fc:83:ce:cd:72:31:a2:1c:9a:76:5e:29:43:a0:48:d9:3b:4e: 19:58:21:b9:94:8f:f0:c1:18:42:b2:4e:21:9d:6b:ed:32:03: 0e:29:87:9e:b7:77:b3:43:9a:31:cc:81:a9:d2:0f:02:cd:75: f5:83:13:a0:ad:fb:67:7e:eb:4e:f7:6e:ef:a6:57:ef:d6:44: f0:93:a8:03:92:8c:80:ee:da:b5:43:ae:1b:e6:76:1b:c5:25: ff:bb:c0:8d:b1:4e:aa:0d:66:57:32:09:3b:85:95:82:61:fb: a0:5e:e7:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsripI06mTw6m9wa8CQTutPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjUxMjE3MDkwMTAwWhcNMjUxMjE4MDkwMTAwWjAzMTEwLwYDVQQD EyhkMzQxNjMwMmRjNGQwZTY1NWM4YzVlMjFlZjJjZDdiNjg3NDM5MzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppgDz8f/BhiyTshmgjVCOWiYNLRQ 1lYGwUOC9z9rys23cvHFFks5ZbI7nl17RXnSTY7u+2sZ21XsI58qsxcmgN8uC//x 9gaVhLfHHA8QvVBjU3F1obadMRT2JevKCxSjmXMwGBD9iUawDZ/HFM3LbgA1kjaI OgWsosOosUN38BW3PW3GtV+hDuB8WWrE1KmdNsaTxfdPJM2JZvBjarWlSsxGOplY dzWENk39TT2M/r6LBU8IKp4mGgrxRzVAeGgYjVOktdQ0ME1UkCEO+SNDm/5e9rdK 7jF3EWERZI651YDxAmglJ30HfKewlrJXDFEAXsBYzMOxamZ+SjkHCSRswwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNBYwLcTQ5lXIxeIe8s17aHQ5NVMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvC+kXk2 a+NnwAkM6EFhLeopKQIlrehB90iK4oUiBL/fNr7DjhWWf0tWIqLuyCI3goYCkGGD mNS9NIedYkaxmnH/3POxK33UM11tEra4OUjt5wfgcOfplFgdwGPya3GEHu03A6tm gynZ+qDvn1zpXDmYf0iVjFGnehAkhbNu7F62O6mkYPB0nJgyvraF1YlV/IPOzXIx ohyadl4pQ6BI2TtOGVghuZSP8MEYQrJOIZ1r7TIDDimHnrd3s0OaMcyBqdIPAs11 9YMToK37Z37rTvdu76ZX79ZE8JOoA5KMgO7atUOuG+Z2G8Ul/7vAjbFOqg1mVzIJ O4WVgmH7oF7neg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:48:31 2025 by rpki-client