This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft File: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json) Hash identifier: NW213ZlxID9LteTUKbXOkAtZTGACEIh7lCVkB/OthI4= Subject key identifier: 5E:B3:8C:69:CF:12:F5:31:12:BD:A2:28:A6:D3:5D:8B:55:B4:86:43 Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9 Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9 Certificate serial: 019AF2090A7618E9B3625C70094943467E41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft Manifest number: 10C8 Signing time: Sat 06 Dec 2025 05:01:10 +0000 Manifest this update: Sat 06 Dec 2025 05:01:10 +0000 Manifest next update: Sun 07 Dec 2025 05:01:10 +0000 Files and hashes: 1: 1M6uqQrJ-H8cZQtvFA1H52Pn6A4.roa (hash: nnfKaOcFHds8X3AM+jMxIYq03nNPy9Dlqx+6UDoHZiY=) 2: GKsMg22mlpLXCVq6Bfh92-dR9A0.roa (hash: vyV6Le4sH8oc7qh9Fe3hr94CnSdMfMjPQP6XmVQxrGc=) 3: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: P/HLnrRydwdt5xrRqcXSIc3KANuod371x4Py92qWwSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0a:76:18:e9:b3:62:5c:70:09:49:43:46:7e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9 Validity Not Before: Dec 6 05:01:10 2025 GMT Not After : Dec 7 05:01:10 2025 GMT Subject: CN=5eb38c69cf12f53112bda228a6d35d8b55b48643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:52:a5:de:64:68:4c:b2:b3:9f:8e:fa:4e:11: 0f:82:3b:b0:c0:40:37:29:76:03:f3:dc:ee:e9:e1: 94:2e:29:6b:0e:3d:c7:17:01:6b:28:46:cf:02:2d: e5:fb:82:e1:a7:59:9f:8d:8c:84:e5:2e:d5:c2:e8: 26:28:0b:16:0f:bb:31:f3:95:03:35:19:61:fe:1a: f7:c4:53:d9:8a:c0:84:8c:8e:5b:ac:96:8b:5e:92: 12:2f:2f:f1:74:47:7a:6e:c8:78:52:1f:1b:95:26: 00:f3:37:47:b5:90:05:6d:71:32:2d:d4:62:33:be: fb:70:b4:0c:60:12:fa:7d:17:1f:9b:28:4f:90:32: bc:ba:b4:fa:fb:69:ef:07:c4:1a:ff:3d:fd:15:6c: 55:1a:af:05:a1:48:33:fd:08:07:31:6f:b5:56:bb: b2:0a:f8:2c:18:60:7d:a0:7c:fc:be:56:d5:a7:d0: 8b:f9:cd:16:ff:be:9b:64:28:83:1c:7c:60:4e:c4: 11:1a:b0:99:78:d2:c0:31:28:33:b7:b7:40:e3:6e: a5:fb:c7:c3:46:5d:c2:53:ca:de:95:ba:70:92:fd: 9d:fe:29:88:5c:ee:3e:6f:77:0c:90:0b:a9:d8:c8: 49:50:43:21:6d:45:b0:34:3f:3d:16:26:24:9c:91: 51:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B3:8C:69:CF:12:F5:31:12:BD:A2:28:A6:D3:5D:8B:55:B4:86:43 X509v3 Authority Key Identifier: keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:39:a7:6c:78:34:fd:d7:cd:15:fa:67:e9:65:b1:ae:3c:0c: e5:84:16:e2:8e:22:85:4d:26:2f:1c:d1:7f:a6:74:bd:f6:67: 4f:af:e7:8c:11:7c:63:ea:22:4c:df:10:07:c3:d9:c9:44:46: db:91:92:c5:81:10:ae:8e:ee:7a:92:df:d9:59:2f:0b:6f:96: 96:ef:a0:61:19:49:60:83:45:20:1d:41:b8:8d:04:dc:9f:42: a6:a0:a7:dc:dd:a3:85:0c:de:75:18:bc:6b:77:53:f3:29:95: fe:7e:63:ef:25:8f:58:46:2f:a6:c4:2f:f3:ed:f4:da:8b:bc: 1a:d8:9a:43:a0:3b:5e:92:76:97:13:8b:6c:db:67:85:90:a7: 51:ef:bd:b4:fb:20:57:25:d9:6c:e5:b9:ce:fa:29:07:88:40: 7a:a3:8b:3c:e7:10:32:05:02:a5:7e:07:36:d8:4f:aa:cf:8a: 92:6d:b1:c0:4d:91:6b:73:67:d3:9b:d8:0c:99:f1:84:57:5e: 6f:ef:c6:d2:79:dd:cf:bb:77:82:ea:bb:5b:24:5b:cf:e1:53: 0c:2b:22:5c:c4:16:f7:ce:77:b3:f3:20:21:b0:76:ad:c5:f3: 44:3e:c7:d9:44:79:59:b0:60:aa:a5:c0:42:8a:84:79:56:5f: b2:5d:c5:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQp2GOmzYlxwCUlDRn5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YjU5YWU1MjE5NTJkYTU1ZTAzZjc3OWI4ODUwMzFjMGM4 MDljZjkwHhcNMjUxMjA2MDUwMTEwWhcNMjUxMjA3MDUwMTEwWjAzMTEwLwYDVQQD Eyg1ZWIzOGM2OWNmMTJmNTMxMTJiZGEyMjhhNmQzNWQ4YjU1YjQ4NjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61Kl3mRoTLKzn476ThEPgjuwwEA3 KXYD89zu6eGULilrDj3HFwFrKEbPAi3l+4Lhp1mfjYyE5S7VwugmKAsWD7sx85UD NRlh/hr3xFPZisCEjI5brJaLXpISLy/xdEd6bsh4Uh8blSYA8zdHtZAFbXEyLdRi M777cLQMYBL6fRcfmyhPkDK8urT6+2nvB8Qa/z39FWxVGq8FoUgz/QgHMW+1Vruy CvgsGGB9oHz8vlbVp9CL+c0W/76bZCiDHHxgTsQRGrCZeNLAMSgzt7dA426l+8fD Rl3CU8relbpwkv2d/imIXO4+b3cMkAup2MhJUEMhbUWwND89FiYknJFRlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6zjGnPEvUxEr2iKKbTXYtVtIZDMB8GA1UdIwQY MBaAFGS1muUhlS2lXgP3ebiFAxwMgJz5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQt NTFhZDAwZTU0MzMyLzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQtNTFhZDAwZTU0MzMy LzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjmnbHg0 /dfNFfpn6WWxrjwM5YQW4o4ihU0mLxzRf6Z0vfZnT6/njBF8Y+oiTN8QB8PZyURG 25GSxYEQro7uepLf2VkvC2+Wlu+gYRlJYINFIB1BuI0E3J9CpqCn3N2jhQzedRi8 a3dT8ymV/n5j7yWPWEYvpsQv8+302ou8GtiaQ6A7XpJ2lxOLbNtnhZCnUe+9tPsg VyXZbOW5zvopB4hAeqOLPOcQMgUCpX4HNthPqs+Kkm2xwE2Ra3Nn05vYDJnxhFde b+/G0nndz7t3guq7WyRbz+FTDCsiXMQW9853s/MgIbB2rcXzRD7H2UR5WbBgqqXA QoqEeVZfsl3FLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:39 2025 by rpki-client