This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft File: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft (raw, json) Hash identifier: 3MRtr90Vee1+iEf6p0FrkiBrJtxhGTDWAmX8jGplw1A= Subject key identifier: B0:C2:42:75:32:9E:90:FF:EE:99:6C:7E:2A:BB:E4:58:CF:0B:25:C2 Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0 Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0 Certificate serial: 019AF5E5C65A1DFA4273ECE6703C4DE2B5E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft Manifest number: 1543 Signing time: Sat 06 Dec 2025 23:01:07 +0000 Manifest this update: Sat 06 Dec 2025 23:01:07 +0000 Manifest next update: Sun 07 Dec 2025 23:01:07 +0000 Files and hashes: 1: CvkJme1LUR6Yylremh6T0ANylCI.roa (hash: 5zy6xol1m9FQbb/9TEgVPc4ZpyQ53XwKiYadQ98VX1U=) 2: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl (hash: XjZlygJg+Aa0ysMXN0sYVcy98gUJb53hOwiV50pMbsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:c6:5a:1d:fa:42:73:ec:e6:70:3c:4d:e2:b5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0 Validity Not Before: Dec 6 23:01:07 2025 GMT Not After : Dec 7 23:01:07 2025 GMT Subject: CN=b0c24275329e90ffee996c7e2abbe458cf0b25c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1c:02:04:81:8b:d0:d8:5a:5d:a3:a7:58:b5: fe:b6:3a:18:6b:4a:63:18:b5:18:e4:bd:1c:64:7d: 89:c1:ce:50:7d:53:5d:ae:c8:d9:87:36:27:3b:e4: b7:da:5e:a9:63:6e:b8:25:6a:23:7b:37:c4:4c:24: 4c:b7:3a:5f:96:20:c9:bc:42:94:b4:33:2f:3d:72: e6:fb:0a:d3:72:4a:3b:56:d4:a1:c1:25:4c:2d:2d: 29:da:15:55:9f:91:c6:28:65:61:00:98:3f:80:8d: e2:3e:8f:db:ed:65:79:cc:99:8d:30:c7:53:94:e7: 5a:ec:eb:18:8f:45:8d:89:f4:17:1a:3d:a6:2b:45: 7d:f9:ec:2c:14:2b:dc:16:21:81:b6:b5:12:09:c6: 36:52:fb:7f:d9:f3:76:b4:64:4d:9c:e3:64:b9:40: 7c:05:6e:fd:0b:42:ee:14:1b:fa:ca:82:dd:dd:67: 57:5d:66:cb:dc:22:ab:fe:9d:a9:09:f6:32:87:63: c3:97:fc:aa:1c:f3:93:b1:67:d2:00:de:a6:b0:04: 9a:ea:eb:a6:e8:a4:0d:f5:e8:8c:ca:33:b7:c6:52: 13:1c:7b:e7:e1:79:ed:e4:e3:60:47:85:bf:46:e6: 94:6b:16:f7:22:1a:a6:bb:2f:ab:5c:fc:af:e1:9d: fe:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C2:42:75:32:9E:90:FF:EE:99:6C:7E:2A:BB:E4:58:CF:0B:25:C2 X509v3 Authority Key Identifier: keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c7:98:a5:d2:3f:dc:d0:11:4e:f2:cc:5d:26:73:c7:79:8a: 9d:39:74:98:c4:17:6d:fb:fe:e8:2c:fc:54:0f:c3:64:76:a3: 91:65:75:5e:d1:70:13:11:67:37:4f:24:d3:8d:fc:8a:9f:ca: 3f:6d:82:f6:79:58:be:b3:97:3c:d1:15:6a:87:a3:ac:a7:cf: a3:4e:b8:85:9b:fe:d5:62:71:b7:70:f2:65:0c:95:fc:6c:b6: 4d:4c:ac:9a:4c:9a:c4:6f:10:a4:c2:11:08:09:b8:a5:80:60: 45:7a:46:3a:82:19:c8:3f:fc:ce:2c:68:e8:f8:2f:d4:17:6e: dc:c7:bd:28:8a:f1:33:c3:53:cb:90:02:ed:6f:40:a8:91:7c: 6e:1e:33:a4:bb:42:e5:c7:4a:d9:98:23:61:13:98:89:eb:f9: 56:d4:1e:e5:89:49:f8:c0:54:bc:d5:8f:97:3c:88:68:53:7d: a5:26:9d:e5:6e:8e:ca:91:06:9c:ed:8d:b2:2d:bc:34:df:59: 06:9a:8f:cb:fb:a9:0e:4e:ee:27:24:76:ab:43:8a:37:2d:e0: 36:82:74:88:ec:da:0b:4c:3f:3f:0d:6d:5f:b0:b4:67:6e:2a: 14:e4:24:28:c4:35:ea:03:a6:d4:58:3d:62:ef:02:68:d3:b2: 9f:fd:c2:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15cZaHfpCc+zmcDxN4rXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjI2NjIzMDg0ZTZjZjExNjY3NGEzZmQwYTk5NTFjYWMw ZGVkYzAwHhcNMjUxMjA2MjMwMTA3WhcNMjUxMjA3MjMwMTA3WjAzMTEwLwYDVQQD EyhiMGMyNDI3NTMyOWU5MGZmZWU5OTZjN2UyYWJiZTQ1OGNmMGIyNWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hwCBIGL0NhaXaOnWLX+tjoYa0pj GLUY5L0cZH2Jwc5QfVNdrsjZhzYnO+S32l6pY264JWojezfETCRMtzpfliDJvEKU tDMvPXLm+wrTcko7VtShwSVMLS0p2hVVn5HGKGVhAJg/gI3iPo/b7WV5zJmNMMdT lOda7OsYj0WNifQXGj2mK0V9+ewsFCvcFiGBtrUSCcY2Uvt/2fN2tGRNnONkuUB8 BW79C0LuFBv6yoLd3WdXXWbL3CKr/p2pCfYyh2PDl/yqHPOTsWfSAN6msASa6uum 6KQN9eiMyjO3xlITHHvn4Xnt5ONgR4W/RuaUaxb3Ihqmuy+rXPyv4Z3+3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDCQnUynpD/7plsfiq75FjPCyXCMB8GA1UdIwQY MBaAFGZiZiMITmzxFmdKP9CplRysDe3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1KbUl3aE9iUEVXWjBvXzBLbVZIS3dON2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83NjM5MjEtM2NkNy00NjZiLTg2NGIt MTg4YzRhNzhjZDYyLzEvWm1KbUl3aE9iUEVXWjBvXzBLbVZIS3dON2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83NjM5MjEtM2NkNy00NjZiLTg2NGItMTg4YzRhNzhjZDYy LzEvWm1KbUl3aE9iUEVXWjBvXzBLbVZIS3dON2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOceYpdI/ 3NARTvLMXSZzx3mKnTl0mMQXbfv+6Cz8VA/DZHajkWV1XtFwExFnN08k0438ip/K P22C9nlYvrOXPNEVaoejrKfPo064hZv+1WJxt3DyZQyV/Gy2TUysmkyaxG8QpMIR CAm4pYBgRXpGOoIZyD/8zixo6Pgv1Bdu3Me9KIrxM8NTy5AC7W9AqJF8bh4zpLtC 5cdK2ZgjYROYiev5VtQe5YlJ+MBUvNWPlzyIaFN9pSad5W6OypEGnO2Nsi28NN9Z BpqPy/upDk7uJyR2q0OKNy3gNoJ0iOzaC0w/Pw1tX7C0Z24qFOQkKMQ16gOm1Fg9 Yu8CaNOyn/3CCw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:19 2025 by rpki-client