This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft File: ZD2vEi46h6yqb9tiw1olKhmaWNk.mft (raw, json) Hash identifier: 6mygWfFJ1CAuajP7zg1HFtKW7ADt4i8czKlZ95eqY2E= Subject key identifier: A4:E5:29:14:E2:F3:92:3A:A8:42:C8:24:76:B9:90:3F:C8:B5:34:75 Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9 Certificate issuer: /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9 Certificate serial: 019AF1D1A01C50B5444EAB429486EB6D009F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft Manifest number: 0EE4 Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: 5y54voFpQemaWdhJdL3R6I-ZfdY.roa (hash: 0q0hdM7ItmEN9aXgu0xUxeLxjebZjyz7UrwOiAMpRFI=) 2: ZD2vEi46h6yqb9tiw1olKhmaWNk.crl (hash: c4BJCUq8zVrrT0eXN7HsOz3e+E1CKKAHq5o2JkJVAyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a0:1c:50:b5:44:4e:ab:42:94:86:eb:6d:00:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9 Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=a4e52914e2f3923aa842c82476b9903fc8b53475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cf:c0:07:7c:ed:55:c2:a1:e7:3c:73:be:7d: dd:8f:c9:a0:0f:7b:e8:36:81:e7:11:64:a8:81:ed: b7:53:fd:d0:cb:aa:10:e3:f1:7d:94:00:06:c4:73: 32:ee:15:4d:f3:e8:b4:dc:41:70:95:bb:01:27:1f: d7:dd:d7:5f:d9:89:2d:57:c6:e2:5f:23:f4:5a:f1: a4:75:14:77:a7:a3:1c:bd:dd:37:45:44:01:f5:bb: d3:89:25:73:4b:1e:36:9d:6d:51:62:e2:90:c8:d3: 68:54:cb:77:84:d4:6c:99:a5:ce:96:62:ce:5b:74: 56:e5:21:ef:d4:a5:9e:7c:0a:24:2e:9c:70:bf:bd: 10:8c:27:0c:6f:50:05:ba:e7:c0:59:ce:5d:3b:77: ea:d1:db:ab:1b:f8:e4:da:a7:86:1e:10:ac:2b:79: 53:18:7f:a2:f8:da:a0:3e:28:7a:d2:e0:cc:68:b8: 2a:39:8c:0a:e7:6b:58:46:10:0a:38:55:f9:33:5e: a2:cf:e5:51:7c:e0:e7:48:d4:a2:5e:ee:9d:ed:de: 01:44:2c:7d:bd:2b:4e:22:f4:98:64:5b:d5:b9:5b: 5a:9d:58:c5:56:d3:81:aa:c5:fc:62:bc:7f:a0:0e: 19:9c:54:93:1c:16:9f:ca:a6:06:ee:ce:96:23:65: fa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E5:29:14:E2:F3:92:3A:A8:42:C8:24:76:B9:90:3F:C8:B5:34:75 X509v3 Authority Key Identifier: keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:26:dd:20:9a:fc:80:bc:ae:b5:22:f6:5f:ca:db:41:a3:d6: f7:58:f2:99:61:b4:b9:8b:d0:52:a2:42:b8:3d:45:97:55:70: 4a:f8:74:dd:0f:75:ba:3b:79:e8:2b:e0:dc:c8:46:4c:d8:a6: 7d:58:76:86:16:8e:5d:c5:09:a0:99:b8:81:ac:99:e6:2a:3d: 9d:93:08:bd:66:cc:d9:eb:ef:f9:c6:67:ba:b5:b7:5e:9f:8b: 1d:7d:76:3f:6a:48:f5:da:63:b5:f0:e9:4d:98:15:22:dc:6b: 03:8d:03:cf:df:c6:d1:fa:a0:5a:e0:db:0e:e1:30:b8:6c:b9: 2f:da:a1:2b:b4:07:f2:47:c2:01:97:2a:ad:a9:e5:7e:2c:50: 6c:36:96:72:ad:b3:72:83:51:6e:68:8f:5c:8a:64:d1:df:e5: 75:38:6b:25:04:e8:0f:2a:1f:1e:bf:89:11:bf:74:44:46:15: d4:b1:a6:04:5b:e9:b4:3d:5c:54:48:ed:b1:4f:a6:46:4c:54: 20:da:20:ba:70:82:9a:8a:d0:4a:02:aa:08:b8:2c:08:78:c6: be:08:b0:fe:d6:52:19:06:fc:98:4a:f2:4d:f4:bd:a7:83:c7: 7c:a0:46:aa:60:58:e3:c7:ca:ff:7c:be:48:d2:b5:56:ff:3f: 3e:04:ca:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aAcULVETqtClIbrbQCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0M2RhZjEyMmUzYTg3YWNhYTZmZGI2MmMzNWEyNTJhMTk5 YTU4ZDkwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD EyhhNGU1MjkxNGUyZjM5MjNhYTg0MmM4MjQ3NmI5OTAzZmM4YjUzNDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs/AB3ztVcKh5zxzvn3dj8mgD3vo NoHnEWSoge23U/3Qy6oQ4/F9lAAGxHMy7hVN8+i03EFwlbsBJx/X3ddf2YktV8bi XyP0WvGkdRR3p6Mcvd03RUQB9bvTiSVzSx42nW1RYuKQyNNoVMt3hNRsmaXOlmLO W3RW5SHv1KWefAokLpxwv70QjCcMb1AFuufAWc5dO3fq0durG/jk2qeGHhCsK3lT GH+i+NqgPih60uDMaLgqOYwK52tYRhAKOFX5M16iz+VRfODnSNSiXu6d7d4BRCx9 vStOIvSYZFvVuVtanVjFVtOBqsX8Yrx/oA4ZnFSTHBafyqYG7s6WI2X68wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTlKRTi85I6qELIJHa5kD/ItTR1MB8GA1UdIwQY MBaAFGQ9rxIuOoesqm/bYsNaJSoZmljZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lZDNkNGEtNzA0Zi00YWE0LTgyMWYt ZGNkNWU5NDc4MDg0LzEvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9lZDNkNGEtNzA0Zi00YWE0LTgyMWYtZGNkNWU5NDc4MDg0 LzEvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSbdIJr8 gLyutSL2X8rbQaPW91jymWG0uYvQUqJCuD1Fl1VwSvh03Q91ujt56Cvg3MhGTNim fVh2hhaOXcUJoJm4gayZ5io9nZMIvWbM2evv+cZnurW3Xp+LHX12P2pI9dpjtfDp TZgVItxrA40Dz9/G0fqgWuDbDuEwuGy5L9qhK7QH8kfCAZcqranlfixQbDaWcq2z coNRbmiPXIpk0d/ldThrJQToDyofHr+JEb90REYV1LGmBFvptD1cVEjtsU+mRkxU INogunCCmorQSgKqCLgsCHjGvgiw/tZSGQb8mEryTfS9p4PHfKBGqmBY48fK/3y+ SNK1Vv8/PgTKJg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:35 2025 by rpki-client