This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: f2BNnlc+UQFprRV0ifOcGhXpk6SyVT0Y129xv8ev2eY= Subject key identifier: 42:2B:13:20:60:51:4A:41:9C:83:80:54:49:F1:A4:89:EB:1A:AB:9C Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019AF19AD5D2E476A481D7C5F9C18DBD6B60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 1775 Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: 1-mklDANMVJEiPmpBlxf2QE7U4xQ.roa (hash: nYcrxIcojCmllQ6KA3duBQeqM8wo1N5ldpzqFh4IADM=) 2: 1eb_RUUKl1wArkM4nQrNO8o6zA4.roa (hash: DnRX9ewfVK8qHRMwGypJDg5WY6eKWtJUTgSgVVUpaxk=) 3: 6jIK36Mhaa4Xbj7P1Zh2U_58p-M.roa (hash: U9tg2SAso4TZBWfhZ8a+7jSfIjc4dzku6E3DThi6OYI=) 4: GFllu8yCEzYxH4Ih5x02DmBd6d8.roa (hash: MMmyezgzI9GjhXg9IrhVD+9c+IgYTInaNbVAzHZN2q0=) 5: MrukXcFUqEow256KAYyeIYLRZog.roa (hash: XtBjKt0dD05c3nHn8KPQ936/hM8bld6aPmDpQ0/ANLw=) 6: QbMBVnYbFFojOFc196F2jGwUv80.roa (hash: PfefSPZEQEk15+9V5/IwtgSWUTKXs+bmANRjvJwpNgo=) 7: WpJJ_ikBuc-Y0bGUJcEnqRT8GwE.roa (hash: F2+S7SjwnB98jayV0ovfpTJ0OhWt8ofMSB+zMRafvPU=) 8: X-Wp2GdoJeyJqzlvdHdTYBcZFbQ.roa (hash: a4lrtqUDOD2jEGfmKJYDLSW6SifymwRthtLHwdcAY4w=) 9: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: FcyU4/jOYpuOZDvE6IfCHe1jdr4vgSvYwLZNZEle9Wo=) 10: i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa (hash: b9PLNQP5kOz4vbwmAcKMWxEW3G7VlFSo/at2gpQ0dIE=) 11: pghJNCWH2c3hSWAmOWfyoPTaVCo.roa (hash: 3MgIR2t5YYsTlUp3+6FJ07pdXvIG9/iFEZ56WzoCufA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d5:d2:e4:76:a4:81:d7:c5:f9:c1:8d:bd:6b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=422b132060514a419c83805449f1a489eb1aab9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:96:b2:0e:cd:3d:d7:4d:a3:9b:5f:bf:d5: 7f:5c:1f:f8:a8:08:d0:a8:a5:b3:03:42:48:f8:1b: f6:df:69:d4:bd:27:74:69:1c:ae:e8:88:cf:66:b2: da:b2:e2:9c:e5:97:b2:79:1e:94:c1:6c:59:19:fc: 83:40:23:4b:38:a0:7c:0b:64:b4:d7:b0:cd:20:30: 6d:17:25:52:9f:b2:53:a0:5d:d7:55:4f:6d:8d:f6: f4:66:01:03:35:cb:e0:02:21:fe:d6:b3:01:97:d6: 63:9c:59:26:2e:18:e1:39:da:9c:9a:de:ab:51:4c: b7:c8:12:82:7a:be:02:d1:54:59:f4:a0:50:53:a0: a7:89:87:e6:55:95:23:39:77:55:58:10:51:b6:c1: bb:9f:91:27:17:67:38:92:e6:28:e6:a5:0f:b3:9a: 22:7f:b0:99:e5:de:66:db:65:fc:85:93:53:6e:7b: e1:ee:45:ee:66:67:81:fc:18:6f:e2:22:67:5e:5b: 2b:c8:00:4a:bf:a4:92:0a:ca:3e:87:65:00:d8:f4: 09:aa:73:6e:0a:9a:dc:48:7c:7f:7c:06:d5:8c:15: eb:4b:c4:d4:1c:1c:f6:68:99:eb:63:41:47:58:90: 32:e6:c8:0a:32:e1:8d:c5:f8:8c:41:28:33:f0:32: 5b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2B:13:20:60:51:4A:41:9C:83:80:54:49:F1:A4:89:EB:1A:AB:9C X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:15:4a:1c:c5:81:6b:b4:40:a7:b5:e6:7b:d4:b7:35:f6:bb: 19:58:83:a4:8a:e4:24:d1:53:8c:11:64:e7:6c:ac:76:dc:7f: a9:49:a7:c1:05:2c:ac:96:be:af:1d:9c:a0:5e:35:1d:6a:41: fc:f0:f7:51:13:2e:08:d4:02:f4:15:c3:3a:40:15:c9:bc:28: 4f:38:6e:1b:03:ae:15:94:2c:da:42:e4:dc:3a:a3:b0:3b:9b: 21:a3:1f:2d:5e:54:ff:39:f3:e0:57:99:99:6c:d9:55:6a:52: a5:f7:3d:f5:a2:09:40:be:b9:da:eb:a7:76:12:9c:bb:42:06: 87:b3:85:08:61:ff:3f:95:10:11:f2:cd:06:d0:3d:73:71:9b: 69:65:9a:61:54:2a:ee:15:3b:96:16:f2:59:96:83:b8:58:fc: 6f:41:78:a7:92:9c:c5:83:a2:56:9f:0a:b7:53:cf:93:37:9f: 20:f0:f1:66:4d:9c:a3:98:6b:b6:12:24:2a:86:13:b4:5e:e3: fc:66:e1:08:1e:48:f5:f4:28:e0:b7:0e:6b:9e:4b:6d:c2:f4: 3c:f9:55:28:77:26:69:f3:33:d6:f2:80:49:87:b8:29:75:78: fa:0f:a0:09:25:79:96:20:37:39:75:4e:4f:b0:d4:da:3f:37: 1e:d5:a8:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtXS5HakgdfF+cGNvWtgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD Eyg0MjJiMTMyMDYwNTE0YTQxOWM4MzgwNTQ0OWYxYTQ4OWViMWFhYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlOWsg7NPddNo5tfv9V/XB/4qAjQ qKWzA0JI+Bv232nUvSd0aRyu6IjPZrLasuKc5ZeyeR6UwWxZGfyDQCNLOKB8C2S0 17DNIDBtFyVSn7JToF3XVU9tjfb0ZgEDNcvgAiH+1rMBl9ZjnFkmLhjhOdqcmt6r UUy3yBKCer4C0VRZ9KBQU6CniYfmVZUjOXdVWBBRtsG7n5EnF2c4kuYo5qUPs5oi f7CZ5d5m22X8hZNTbnvh7kXuZmeB/Bhv4iJnXlsryABKv6SSCso+h2UA2PQJqnNu CprcSHx/fAbVjBXrS8TUHBz2aJnrY0FHWJAy5sgKMuGNxfiMQSgz8DJbjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIrEyBgUUpBnIOAVEnxpInrGqucMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexVKHMWB a7RAp7Xme9S3Nfa7GViDpIrkJNFTjBFk52ysdtx/qUmnwQUsrJa+rx2coF41HWpB /PD3URMuCNQC9BXDOkAVybwoTzhuGwOuFZQs2kLk3DqjsDubIaMfLV5U/znz4FeZ mWzZVWpSpfc99aIJQL652uundhKcu0IGh7OFCGH/P5UQEfLNBtA9c3GbaWWaYVQq 7hU7lhbyWZaDuFj8b0F4p5KcxYOiVp8Kt1PPkzefIPDxZk2co5hrthIkKoYTtF7j /GbhCB5I9fQo4LcOa55LbcL0PPlVKHcmafMz1vKASYe4KXV4+g+gCSV5liA3OXVO T7DU2j83HtWoVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:24:47 2025 by rpki-client