This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft File: ZD2vEi46h6yqb9tiw1olKhmaWNk.mft (raw, json) Hash identifier: pDtJVRLt7pufm9JDGbsff3qqqYYahtsCpSxjIblOUgg= Subject key identifier: 0B:49:7A:78:C2:22:27:C1:5F:57:A6:FC:D3:71:1F:6A:94:F7:88:3A Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9 Certificate issuer: /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9 Certificate serial: 019B337AC69CDF40C10B70B6A582BC9BCC06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft Manifest number: 0F06 Signing time: Thu 18 Dec 2025 22:00:42 +0000 Manifest this update: Thu 18 Dec 2025 22:00:42 +0000 Manifest next update: Fri 19 Dec 2025 22:00:42 +0000 Files and hashes: 1: 5y54voFpQemaWdhJdL3R6I-ZfdY.roa (hash: 0q0hdM7ItmEN9aXgu0xUxeLxjebZjyz7UrwOiAMpRFI=) 2: ZD2vEi46h6yqb9tiw1olKhmaWNk.crl (hash: D3/8Jm+j9bFqw9Wg8TXV7KaPx/kkOKHTf+TLfSQwiYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:c6:9c:df:40:c1:0b:70:b6:a5:82:bc:9b:cc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9 Validity Not Before: Dec 18 22:00:42 2025 GMT Not After : Dec 19 22:00:42 2025 GMT Subject: CN=0b497a78c22227c15f57a6fcd3711f6a94f7883a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2b:82:36:fc:38:ff:54:84:3d:2b:c6:ff:0f: e0:3b:5d:0f:82:8a:5b:62:65:08:28:d3:97:2f:71: 22:fe:f5:86:93:9b:2e:7a:bf:e6:2a:f6:72:54:3d: 23:c9:ec:b2:03:49:32:2a:69:02:5f:67:e4:ac:46: e2:02:dd:e8:dc:41:b3:5f:fb:ac:27:43:61:e2:5e: cd:02:e0:b7:de:02:6d:da:1a:fc:37:cd:94:e4:39: 3a:a1:23:85:27:c1:aa:61:9d:56:6c:c3:93:e2:d1: 3d:d1:59:51:e7:1b:d5:b4:84:f9:36:ab:70:fc:dc: bf:86:73:98:94:f4:0f:a9:e6:40:9f:ac:93:b4:c3: df:ec:76:d6:9e:f4:8e:b1:09:be:46:2b:e5:10:e9: f0:db:d8:12:4d:3b:15:d1:32:12:c9:d3:30:dd:b9: 24:c8:76:3c:b9:03:3c:ea:56:38:ee:d9:72:12:e5: 3e:83:6d:af:70:b3:5d:4b:17:e8:df:c6:31:d6:a1: fc:e8:98:63:fe:e8:d1:84:a8:ce:d7:a5:42:27:3f: cc:9b:0c:0a:1d:b6:05:0c:5a:2a:4f:66:6a:81:cf: a0:5e:ef:4a:c2:af:ba:75:10:d5:05:dd:5c:77:77: e8:87:94:19:7f:67:58:57:c5:65:f2:05:e0:9e:bc: d6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:49:7A:78:C2:22:27:C1:5F:57:A6:FC:D3:71:1F:6A:94:F7:88:3A X509v3 Authority Key Identifier: keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:32:33:f5:3b:31:60:0f:57:f8:d1:67:00:f9:23:7e:2f:13: a2:50:5d:0e:1e:e7:1e:97:32:8f:20:55:93:9b:45:d7:3a:c5: 81:80:a8:40:2d:3d:62:75:a4:63:a0:d8:71:39:60:73:9f:32: 33:18:67:70:bc:b5:0a:bd:dd:0b:7d:dd:b4:d3:74:a1:88:16: d6:83:2f:2f:25:59:0d:8a:bd:c8:e5:d0:29:77:64:32:e4:3a: 30:fb:69:96:dc:ae:c1:b7:b0:07:9b:0a:1c:95:d0:63:df:ca: 1f:c9:5a:c3:e8:7d:b9:3b:26:53:9d:9c:ee:71:82:16:ae:15: ac:cc:d6:ab:79:2b:18:5c:45:32:12:d6:ae:82:13:bc:48:f3: 55:5d:09:69:3c:b5:88:2b:5a:84:47:ef:6b:2e:02:5a:97:83: 8c:6d:0b:00:66:d6:82:00:91:e9:44:b6:5e:81:ec:c8:47:e8: 79:cc:3f:31:ba:ba:6b:c1:e3:50:98:66:59:e8:78:70:2d:f1: a0:eb:9f:9f:18:aa:59:d5:a4:6c:55:ea:65:2e:a2:79:24:0e: 16:d7:d1:8d:09:9c:12:2f:00:c3:45:dd:19:75:55:13:13:68: 4c:35:db:eb:90:62:ad:50:28:f1:cc:0b:59:7d:3b:6e:db:58: 91:10:d2:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszesac30DBC3C2pYK8m8wGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0M2RhZjEyMmUzYTg3YWNhYTZmZGI2MmMzNWEyNTJhMTk5 YTU4ZDkwHhcNMjUxMjE4MjIwMDQyWhcNMjUxMjE5MjIwMDQyWjAzMTEwLwYDVQQD EygwYjQ5N2E3OGMyMjIyN2MxNWY1N2E2ZmNkMzcxMWY2YTk0Zjc4ODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyuCNvw4/1SEPSvG/w/gO10Pgopb YmUIKNOXL3Ei/vWGk5suer/mKvZyVD0jyeyyA0kyKmkCX2fkrEbiAt3o3EGzX/us J0Nh4l7NAuC33gJt2hr8N82U5Dk6oSOFJ8GqYZ1WbMOT4tE90VlR5xvVtIT5Nqtw /Ny/hnOYlPQPqeZAn6yTtMPf7HbWnvSOsQm+RivlEOnw29gSTTsV0TISydMw3bkk yHY8uQM86lY47tlyEuU+g22vcLNdSxfo38Yx1qH86Jhj/ujRhKjO16VCJz/MmwwK HbYFDFoqT2Zqgc+gXu9Kwq+6dRDVBd1cd3foh5QZf2dYV8Vl8gXgnrzW7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtJenjCIifBX1em/NNxH2qU94g6MB8GA1UdIwQY MBaAFGQ9rxIuOoesqm/bYsNaJSoZmljZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lZDNkNGEtNzA0Zi00YWE0LTgyMWYt ZGNkNWU5NDc4MDg0LzEvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9lZDNkNGEtNzA0Zi00YWE0LTgyMWYtZGNkNWU5NDc4MDg0 LzEvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDIz9Tsx YA9X+NFnAPkjfi8TolBdDh7nHpcyjyBVk5tF1zrFgYCoQC09YnWkY6DYcTlgc58y MxhncLy1Cr3dC33dtNN0oYgW1oMvLyVZDYq9yOXQKXdkMuQ6MPtpltyuwbewB5sK HJXQY9/KH8law+h9uTsmU52c7nGCFq4VrMzWq3krGFxFMhLWroITvEjzVV0JaTy1 iCtahEfvay4CWpeDjG0LAGbWggCR6US2XoHsyEfoecw/Mbq6a8HjUJhmWeh4cC3x oOufnxiqWdWkbFXqZS6ieSQOFtfRjQmcEi8Aw0XdGXVVExNoTDXb65BirVAo8cwL WX07bttYkRDSQg== -----END CERTIFICATE-----Generated at Fri Dec 19 05:42:34 2025 by rpki-client