This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft File: zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json) Hash identifier: 2OB5EgbU7q1hSKd/DTZIEuPG8/RjM34rh2lmD2BCeq8= Subject key identifier: A7:FC:16:6E:28:37:31:80:A7:AA:5F:28:94:40:46:68:72:69:C7:A4 Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Certificate serial: 019AF4D2BD265BD584BF0AEE19C81C16741A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft Manifest number: 1771 Signing time: Sat 06 Dec 2025 18:00:42 +0000 Manifest this update: Sat 06 Dec 2025 18:00:42 +0000 Manifest next update: Sun 07 Dec 2025 18:00:42 +0000 Files and hashes: 1: CMjm3mT93yGkp8LUoyzkdQ6l3EE.roa (hash: TkauNWMtnY8DBb4v5VsfB1yBCMV9bCsSOJxWA8/FXoo=) 2: HkTCrKZqDwa8EUL4YflDFIxvuSo.roa (hash: zO36rkW4iEPf0HW9ThqXz35RBy/UdvCTSm39AhOu1Wg=) 3: KcTcayFrsZLodbwf3DiREG7aMgQ.roa (hash: 8/vbDhWMe2EfxMGVicJi+/pUGnJZy6R4MjOjEjkxjUk=) 4: LsmwcIccA3zM4d7kxqt3XhLcSa0.roa (hash: 98WTFaz7XPqlrJj7+XyfBTJEw1Sf7UEiPzA9D8zWsIw=) 5: PneAThfusF70GWHWywmhFb0vzKg.roa (hash: 0kjnbKbpSjxRU2te032pdWFUGrUsCjxiyKJ48H1DPUU=) 6: QPCXSoVGqmo5YTCi73-CSDuyZ-M.roa (hash: BYlFE9CUTQ67gGcO7goW8z5RieIlu+Sp4h/7HCES0Bg=) 7: T-x5NWBWP7z0RtMavKGuf9lbyTk.roa (hash: 5meL33wuT4ICoWjsr5JwrdL6iizp93b+W5Vq2RQt4cs=) 8: Tvzwy8915xjtj1VO-nUlxadrJf0.roa (hash: 3HBDaFXyl/IL77d9OkQ1M1njyjo3lIiwhNWOJqmRMac=) 9: YPhWBSPHGs5SvVUlaCiCKWmqFfE.roa (hash: 5GbYaE22J8Owy6TgFxnM856qPEXWo4AxIXtfMEPnMxs=) 10: Yqt3Kg8k1YJOv7s88RcINuiKaCE.roa (hash: nWZ5K8Cmhazakp99a9slUSDcrdtW/sXazmS+lE8qgb8=) 11: d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa (hash: +81/qDkled7/tuehBezhqXR9TX8Qi/57Cwe4Hugu7Ps=) 12: e3hNMZozjl2a8wTj5jqUKt2netU.roa (hash: z65fVe11ggvNgyomVpHPZ3mT5uEYvV6n9cNO6WIVkOQ=) 13: jcSJxEfFuIOqv-vUuvBQckyf-ZI.roa (hash: V8+8ahCoa4BEtoKDRdWiWxQzrt5GRgWy4qkSi1g/uZs=) 14: lcN6tqSn03IPMO2AvpfpxpGgDQY.roa (hash: 8fvPqg+8qqIeW9Kd8tRNl8Xlys8MO8b9CTy9FA3u9tA=) 15: lzFclAiK-AKgH976Yl_uXg9r5wM.roa (hash: H/cy8Ymyjy+9oeeIlZQHYMPSRfjOx2uqFxTFGhSTiGE=) 16: oLt7xT_rHP-Hxh3lUeggtdVEvTs.roa (hash: hblIrYC6F95+wg2sH5P/uCfjsNRvIhmQ2s3oU6U1S/g=) 17: ogeSaiZjPO4Kd4PF4MmZ3E0M2dA.roa (hash: Y6nye2lCZkZiTnuBzh99LMq3fLt8LGMzc9QAvB3SwlM=) 18: p-aeeSEszU3aapQ0yEslN0bhQQ8.roa (hash: Mh/Q23651bJq9potJm5ecJKYPprCxzH57rPx/Ooy5iY=) 19: r40XtPdgr8Y3RxrHTUe0xVuomM0.roa (hash: t4ySxCeAxHkHkDK1q9KhuYpYVZshrBVi3KJ4uODs/8Q=) 20: rD4_vnlr510eZLzrr2aCnfyAvEE.roa (hash: dL+NP4nhH4zwWo5a+tL5dbCaIelO5RMTVy2uI8g69YI=) 21: rdclR5rmMPPiGdub64u9CAD4cr0.roa (hash: wXgXLOiDxEJK62XQ7DLJMuxi7/zXmFbGyGpgUuOv+8k=) 22: tNteV-bYipxacIdsneN2kRS27vI.roa (hash: DK40xOAWm2KZPWxZ02RGtb+aUbxm0wIjZBTHx/mZzWs=) 23: uzMFOnPKpMqU8CP0ss6Mpv56PiE.roa (hash: F8nsfvroSbli8FdaVZTheRyMCu5cUrtu6qwv9yns62A=) 24: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: bG3rDry7IC5Kkipe5ZD3mydECkal4ENBEtNeev+HPAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:bd:26:5b:d5:84:bf:0a:ee:19:c8:1c:16:74:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff Validity Not Before: Dec 6 18:00:42 2025 GMT Not After : Dec 7 18:00:42 2025 GMT Subject: CN=a7fc166e28373180a7aa5f28944046687269c7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5f:9d:73:ce:d0:19:48:9d:3d:15:9e:9f:97: 54:d9:7b:13:36:43:29:6d:b9:96:c1:ec:00:90:a8: 5a:dc:4d:a8:59:af:1b:f2:05:9d:b8:61:9b:66:84: 69:2c:85:6c:68:9a:41:f4:d4:80:db:39:88:45:e3: e1:66:eb:63:86:b7:fb:4e:ea:6c:35:66:56:ed:e1: 72:e2:ef:c5:50:60:2a:1b:8b:7b:ad:23:f3:e9:60: a0:30:68:84:c4:24:53:86:83:82:84:bd:63:d9:94: 73:04:fe:18:2b:dd:fc:b2:71:94:e4:46:6d:5d:c7: 3a:1c:5b:81:ae:fb:c6:f4:93:96:aa:86:ac:76:e4: 49:0f:f3:a5:8c:4b:44:fb:77:3e:ff:31:9b:cc:6c: fe:ef:23:1c:e0:33:d3:68:d7:80:f6:d7:9e:9c:b7: ab:34:ee:5a:28:1b:ee:3a:99:0a:a6:b6:a3:f3:94: 26:07:48:d4:02:ab:0d:03:40:41:39:88:77:e5:cb: a1:4a:0b:19:5b:72:67:fa:a9:9c:d3:16:9c:bb:6d: 60:dc:d4:a5:75:a9:5f:85:eb:aa:79:0c:a9:45:01: 29:60:40:3f:30:88:2b:20:32:e9:77:a9:57:2f:79: f0:de:60:dc:8c:ee:1e:62:cf:c3:9d:84:d1:9f:d1: 88:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FC:16:6E:28:37:31:80:A7:AA:5F:28:94:40:46:68:72:69:C7:A4 X509v3 Authority Key Identifier: keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:de:ab:b1:45:a2:5b:9b:3c:c4:18:7a:e0:db:c3:73:a7:08: 51:19:1e:88:f0:39:c4:c4:73:42:35:0e:09:61:e3:86:76:bf: 4d:ad:7b:a8:de:63:bc:10:d1:2a:42:4f:97:f5:58:c5:b2:fe: c2:cf:79:e8:3a:75:10:0e:0a:da:5a:d8:99:fc:bb:f8:13:a1: 4d:82:b8:8e:03:fb:a9:08:10:8f:b6:22:ad:a3:db:ce:c9:10: f0:b9:aa:aa:48:4b:dd:53:89:13:c0:64:04:65:72:f1:87:f0: cd:71:af:a9:20:ae:cf:91:99:bc:a9:d8:7a:01:a2:d7:40:8a: 84:69:f4:ab:2e:e8:68:93:2f:4d:88:f5:34:b2:38:b4:16:2a: e9:4b:16:7a:f2:a7:96:27:32:65:c9:7d:d6:09:f0:70:0e:47: 6e:63:11:26:df:00:a6:20:5b:ae:c4:c3:30:8e:65:c1:a6:22: 00:8c:a9:21:78:bf:ef:44:98:22:f5:3f:45:dd:49:e1:85:11: d3:97:26:7c:c2:22:0f:66:67:e7:32:fb:07:e1:cd:71:13:5f: 8d:31:53:a0:c4:8c:8f:53:2d:75:19:80:c6:f9:86:73:b1:34: 97:7a:23:9a:44:c9:45:fd:fd:7a:9a:bb:73:22:d2:7a:da:25: 06:77:f0:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00r0mW9WEvwruGcgcFnQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz NmM0ZmYwHhcNMjUxMjA2MTgwMDQyWhcNMjUxMjA3MTgwMDQyWjAzMTEwLwYDVQQD EyhhN2ZjMTY2ZTI4MzczMTgwYTdhYTVmMjg5NDQwNDY2ODcyNjljN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV+dc87QGUidPRWen5dU2XsTNkMp bbmWwewAkKha3E2oWa8b8gWduGGbZoRpLIVsaJpB9NSA2zmIRePhZutjhrf7Tups NWZW7eFy4u/FUGAqG4t7rSPz6WCgMGiExCRThoOChL1j2ZRzBP4YK938snGU5EZt Xcc6HFuBrvvG9JOWqoasduRJD/OljEtE+3c+/zGbzGz+7yMc4DPTaNeA9teenLer NO5aKBvuOpkKpraj85QmB0jUAqsNA0BBOYh35cuhSgsZW3Jn+qmc0xacu21g3NSl dalfheuqeQypRQEpYEA/MIgrIDLpd6lXL3nw3mDcjO4eYs/DnYTRn9GIdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKf8Fm4oNzGAp6pfKJRARmhyacekMB8GA1UdIwQY MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMd6rsUWi W5s8xBh64NvDc6cIURkeiPA5xMRzQjUOCWHjhna/Ta17qN5jvBDRKkJPl/VYxbL+ ws956Dp1EA4K2lrYmfy7+BOhTYK4jgP7qQgQj7YiraPbzskQ8LmqqkhL3VOJE8Bk BGVy8YfwzXGvqSCuz5GZvKnYegGi10CKhGn0qy7oaJMvTYj1NLI4tBYq6UsWevKn licyZcl91gnwcA5HbmMRJt8ApiBbrsTDMI5lwaYiAIypIXi/70SYIvU/Rd1J4YUR 05cmfMIiD2Zn5zL7B+HNcRNfjTFToMSMj1MtdRmAxvmGc7E0l3ojmkTJRf39epq7 cyLSetolBnfwAg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:00:32 2025 by rpki-client