This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json) Hash identifier: ztDefQ0BYEFnGKijp6owiJwZI6iHCDGGRk7b19SdSts= Subject key identifier: ED:D3:A8:E0:24:39:B9:29:70:E6:74:75:41:9F:63:E9:70:70:08:91 Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36 Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36 Certificate serial: 019AF276607A53E381E2C01C49DFF859A075 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft Manifest number: 105E Signing time: Sat 06 Dec 2025 07:00:35 +0000 Manifest this update: Sat 06 Dec 2025 07:00:35 +0000 Manifest next update: Sun 07 Dec 2025 07:00:35 +0000 Files and hashes: 1: iFAQtylr3ZRvM5JOhViQDahNSl8.roa (hash: ziaVf39GfMHlG6F56FK5ey4SYxeBfLmJtFc4nGwT8Lo=) 2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: 9YwDYxkZ4enmdDsYzhpRuS71BCqLdolnHAM1LCiUzR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:60:7a:53:e3:81:e2:c0:1c:49:df:f8:59:a0:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36 Validity Not Before: Dec 6 07:00:35 2025 GMT Not After : Dec 7 07:00:35 2025 GMT Subject: CN=edd3a8e02439b92970e67475419f63e970700891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:03:c9:da:70:97:39:93:1e:b4:1e:63:0c: 80:22:88:79:cb:e7:83:9b:ee:7f:ea:78:93:c8:f1: 77:3d:2b:0d:39:61:05:4a:7d:b0:ca:79:12:c1:ae: 90:83:83:4a:29:ce:4c:26:b4:85:29:c6:b6:55:25: 1e:05:5c:c2:33:91:01:23:d1:18:b7:52:3d:4e:19: b0:c1:ef:3b:18:1f:8c:41:b9:36:4a:6e:53:96:43: ef:d9:e8:bb:2e:7e:54:5e:e1:64:dc:8a:04:6b:04: 5f:24:ad:2b:c2:ad:f1:06:40:00:c5:7a:f5:01:3c: 51:ed:1f:89:e0:1c:09:f7:5b:11:1b:80:10:d0:af: 7d:d2:31:c6:17:fd:52:d6:ce:41:19:b6:1f:35:21: 4b:53:c7:b7:67:aa:20:b9:a8:1a:68:01:5a:dc:01: 30:90:49:9e:cd:da:03:b6:21:90:01:1d:0d:b8:f4: 5d:96:0f:c9:9f:20:36:1c:7b:3d:5d:09:95:00:e7: 7d:be:3c:0d:5f:3e:d4:8a:0b:63:53:29:6e:58:e3: 24:a6:fe:dc:e6:71:8c:8e:84:91:6b:b0:50:c8:6b: 9e:03:ba:86:1e:0b:17:77:9a:76:05:22:57:d2:ff: 95:61:1f:b1:3d:a8:31:d5:2d:c6:53:fb:77:b6:23: 09:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D3:A8:E0:24:39:B9:29:70:E6:74:75:41:9F:63:E9:70:70:08:91 X509v3 Authority Key Identifier: keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:79:9f:59:79:2d:7c:38:6e:f0:a9:81:0f:6c:0b:a3:af:26: e7:4b:16:78:a8:d3:ad:ca:f9:6c:1c:47:e7:90:8a:56:9a:0d: 13:3d:9a:76:b3:96:72:b6:fb:0a:22:be:51:fa:ea:33:59:1c: 61:25:74:42:77:32:59:b9:4f:38:00:5e:21:f0:17:78:e7:cb: a5:ee:6d:73:7c:db:74:c2:42:8c:71:88:5c:46:50:45:26:78: 6f:e8:a4:41:72:b1:1b:31:1f:fa:d2:1d:83:3a:65:00:67:68: 3d:ee:1f:86:f0:80:b6:41:44:27:46:27:d2:9f:62:ab:86:c4: 6b:9b:f9:54:c0:3a:c1:58:3d:61:38:59:66:bf:5f:ca:09:05: 04:79:81:06:79:02:5b:76:93:06:80:65:73:ba:1c:62:3c:e9: 78:29:97:da:ea:0a:90:0a:1c:24:7c:91:b8:c0:8e:e6:41:38: e9:46:aa:d2:31:30:7a:aa:df:66:30:80:dc:42:8d:3a:b2:0e: 4c:49:e4:08:79:ac:f3:50:32:59:a2:1f:81:3d:60:43:72:ec: ae:2a:ad:9c:1d:5b:56:da:81:37:45:d3:f4:12:97:fe:45:c0: 0a:35:44:13:10:8d:43:67:af:72:fe:1d:68:b4:79:b4:8e:51: 3a:c1:a8:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmB6U+OB4sAcSd/4WaB1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNmUxYTIyMDhmYTNmMWI5ZjNkMzhmZmYxZjhlMmMzNGQ5 MTFmMzYwHhcNMjUxMjA2MDcwMDM1WhcNMjUxMjA3MDcwMDM1WjAzMTEwLwYDVQQD EyhlZGQzYThlMDI0MzliOTI5NzBlNjc0NzU0MTlmNjNlOTcwNzAwODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1cDydpwlzmTHrQeYwyAIoh5y+eD m+5/6niTyPF3PSsNOWEFSn2wynkSwa6Qg4NKKc5MJrSFKca2VSUeBVzCM5EBI9EY t1I9Thmwwe87GB+MQbk2Sm5TlkPv2ei7Ln5UXuFk3IoEawRfJK0rwq3xBkAAxXr1 ATxR7R+J4BwJ91sRG4AQ0K990jHGF/1S1s5BGbYfNSFLU8e3Z6oguagaaAFa3AEw kEmezdoDtiGQAR0NuPRdlg/JnyA2HHs9XQmVAOd9vjwNXz7UigtjUyluWOMkpv7c 5nGMjoSRa7BQyGueA7qGHgsXd5p2BSJX0v+VYR+xPagx1S3GU/t3tiMJ5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3TqOAkObkpcOZ0dUGfY+lwcAiRMB8GA1UdIwQY MBaAFM5uGiII+j8bnz04//H44sNNkR82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2Mt OWZlZjAxMTRhMmU1LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2MtOWZlZjAxMTRhMmU1 LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHmfWXkt fDhu8KmBD2wLo68m50sWeKjTrcr5bBxH55CKVpoNEz2adrOWcrb7CiK+UfrqM1kc YSV0QncyWblPOABeIfAXeOfLpe5tc3zbdMJCjHGIXEZQRSZ4b+ikQXKxGzEf+tId gzplAGdoPe4fhvCAtkFEJ0Yn0p9iq4bEa5v5VMA6wVg9YThZZr9fygkFBHmBBnkC W3aTBoBlc7ocYjzpeCmX2uoKkAocJHyRuMCO5kE46Uaq0jEweqrfZjCA3EKNOrIO TEnkCHms81AyWaIfgT1gQ3LsriqtnB1bVtqBN0XT9BKX/kXACjVEExCNQ2evcv4d aLR5tI5ROsGoTA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:57 2025 by rpki-client