This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json) Hash identifier: cw36aL7xX5vbm8D102QH1Cl45d4hcPUQbMahf387jpY= Subject key identifier: A7:7A:F2:AC:04:9D:25:B2:67:37:5D:02:50:FD:F0:D7:A5:55:65:EF Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e Certificate serial: 019AF31C4F63981B34BAE6E293C927E5CF31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft Manifest number: 10E0 Signing time: Sat 06 Dec 2025 10:01:49 +0000 Manifest this update: Sat 06 Dec 2025 10:01:49 +0000 Manifest next update: Sun 07 Dec 2025 10:01:49 +0000 Files and hashes: 1: 1r-YWbxqyiaEeQQe7XhCESQq4-A.roa (hash: whgT3ej9YeVcd8f315sOoiAQXSfv+O+qM97fjItvC5w=) 2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: w+UuYNLOK97AsM80VCY3U8jh7Fc7vASMRl8pnd2Frrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:4f:63:98:1b:34:ba:e6:e2:93:c9:27:e5:cf:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e Validity Not Before: Dec 6 10:01:49 2025 GMT Not After : Dec 7 10:01:49 2025 GMT Subject: CN=a77af2ac049d25b267375d0250fdf0d7a55565ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c9:4b:8c:ec:78:d9:ae:94:7c:47:24:98:32: df:64:a1:a6:8a:28:1d:8e:4f:3e:e1:62:63:8f:2f: 26:46:f8:fa:21:b6:48:6e:89:ad:d3:73:ed:b3:2a: 15:bd:9e:dd:02:25:10:1e:fb:11:31:8b:93:91:7f: 04:d8:a0:55:46:19:5a:53:02:17:70:df:4b:4a:27: 18:14:1a:ca:f2:7e:d2:b6:7b:21:b8:6d:6d:2c:17: 23:4c:2b:4b:1f:86:a1:a7:f3:87:b8:62:a6:4a:a9: 02:65:6a:10:32:a4:81:0d:06:8e:66:aa:ae:df:6b: 90:67:c3:4e:73:22:8e:70:25:63:44:8f:59:86:2b: d2:8f:83:e4:3a:b1:31:35:0b:21:d8:3c:90:32:8f: 2b:f3:d2:97:c0:a9:ea:08:ed:7c:19:bd:21:de:a1: 42:fe:73:f2:36:27:8a:84:4c:b5:9f:20:fe:98:e6: f9:4f:0b:c4:c9:58:85:05:91:44:31:c5:63:19:87: b1:fd:fa:38:e9:a1:0a:93:76:1a:d8:f0:5b:c1:3d: 8f:4a:f5:df:3e:ff:01:06:ab:e6:8b:63:49:bf:aa: c5:13:6d:28:6e:d0:08:92:72:59:58:3f:38:3b:7a: d2:f0:51:cb:91:66:90:39:ff:a7:9b:d4:2e:bf:0f: c0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7A:F2:AC:04:9D:25:B2:67:37:5D:02:50:FD:F0:D7:A5:55:65:EF X509v3 Authority Key Identifier: keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:06:0b:14:57:20:57:73:e5:51:e9:1e:26:15:14:52:c2:74: 1b:fa:f5:e2:63:16:77:58:ec:c5:5d:8f:1b:18:85:82:bf:6c: 18:57:e8:d2:53:93:b7:49:40:37:97:2d:7c:59:3b:86:91:9e: ac:a4:b7:54:21:6d:c1:a0:c3:10:d4:1a:2a:12:75:a0:af:49: 43:b5:d5:fc:93:e8:28:de:14:d9:67:a1:d2:1a:bc:20:c8:85: b0:2c:2a:76:14:aa:93:53:00:b9:5e:0e:b6:c1:0a:11:30:af: 16:99:ed:73:c4:e2:4b:d4:a7:ae:54:c5:3c:f9:8c:33:5f:ca: 7c:e8:04:da:73:ee:2d:3e:a8:ec:1f:d1:c1:a4:b4:45:1b:1d: 3c:e0:83:96:f1:5e:99:50:84:8f:1e:f3:4c:e0:fb:fa:24:32: f5:a1:af:d1:71:15:a3:66:27:84:ec:78:f3:41:be:e7:5f:56: 45:4c:49:d6:3f:ed:2f:bb:05:98:2f:b1:3a:60:fc:5b:fa:33: 82:c1:51:1c:5d:41:ec:74:39:2b:d9:a9:f5:d5:84:89:5a:c3: 35:8c:a4:8d:92:00:70:41:c6:ee:8a:dc:6b:b2:26:04:02:d9: 0b:08:0f:9c:8f:d3:e8:01:ea:5f:b7:cd:61:e0:ca:02:24:30: de:f8:ee:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHE9jmBs0uubik8kn5c8xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMzA4N2NjNzAyYzhkOTM1M2ZlNzhmNzkzMjQ0MGI3ZTg0 MmZjNmUwHhcNMjUxMjA2MTAwMTQ5WhcNMjUxMjA3MTAwMTQ5WjAzMTEwLwYDVQQD EyhhNzdhZjJhYzA0OWQyNWIyNjczNzVkMDI1MGZkZjBkN2E1NTU2NWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98lLjOx42a6UfEckmDLfZKGmiigd jk8+4WJjjy8mRvj6IbZIbomt03PtsyoVvZ7dAiUQHvsRMYuTkX8E2KBVRhlaUwIX cN9LSicYFBrK8n7StnshuG1tLBcjTCtLH4ahp/OHuGKmSqkCZWoQMqSBDQaOZqqu 32uQZ8NOcyKOcCVjRI9ZhivSj4PkOrExNQsh2DyQMo8r89KXwKnqCO18Gb0h3qFC /nPyNieKhEy1nyD+mOb5TwvEyViFBZFEMcVjGYex/fo46aEKk3Ya2PBbwT2PSvXf Pv8BBqvmi2NJv6rFE20obtAIknJZWD84O3rS8FHLkWaQOf+nm9Quvw/AIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKd68qwEnSWyZzddAlD98NelVWXvMB8GA1UdIwQY MBaAFM0wh8xwLI2TU/5495MkQLfoQvxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWIt ZjA4ZDcxYzRmM2RiLzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWItZjA4ZDcxYzRmM2Ri LzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwYLFFcg V3PlUekeJhUUUsJ0G/r14mMWd1jsxV2PGxiFgr9sGFfo0lOTt0lAN5ctfFk7hpGe rKS3VCFtwaDDENQaKhJ1oK9JQ7XV/JPoKN4U2Weh0hq8IMiFsCwqdhSqk1MAuV4O tsEKETCvFpntc8TiS9SnrlTFPPmMM1/KfOgE2nPuLT6o7B/RwaS0RRsdPOCDlvFe mVCEjx7zTOD7+iQy9aGv0XEVo2YnhOx480G+519WRUxJ1j/tL7sFmC+xOmD8W/oz gsFRHF1B7HQ5K9mp9dWEiVrDNYykjZIAcEHG7orca7ImBALZCwgPnI/T6AHqX7fN YeDKAiQw3vjuyg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:55 2025 by rpki-client