This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json) Hash identifier: spnyJbs1ZgiArkPS4V2CBDhAj/+NtEXMcDoRIPqq7RY= Subject key identifier: E0:DF:D5:35:89:5D:59:43:61:59:88:FD:82:2D:F1:82:AB:0E:D7:00 Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce Certificate serial: 019AFD9F1C9484A688D36776DD9AA2CE034B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft Manifest number: 0A8B Signing time: Mon 08 Dec 2025 11:00:54 +0000 Manifest this update: Mon 08 Dec 2025 11:00:54 +0000 Manifest next update: Tue 09 Dec 2025 11:00:54 +0000 Files and hashes: 1: 3EEDSMX4c2BQtUFlexj7ViVaNFg.roa (hash: i/HEM5WN4SpMsFYFUufkSvdwrDOTS979dTw2WJmTqxo=) 2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: VP7eeUbOQMBTmMhA/uvw8lVdZSiqwgNDVlimwN80pSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:9f:1c:94:84:a6:88:d3:67:76:dd:9a:a2:ce:03:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce Validity Not Before: Dec 8 11:00:54 2025 GMT Not After : Dec 9 11:00:54 2025 GMT Subject: CN=e0dfd535895d5943615988fd822df182ab0ed700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:71:41:4b:6b:82:82:65:53:f1:1a:d1:a5: 69:b3:80:0b:f4:97:f8:72:61:2a:40:c8:96:0d:8d: 83:16:b5:6d:a9:65:9a:e7:3e:b2:4c:ac:ab:ec:3e: e5:bb:18:b1:54:ab:de:6d:96:13:2a:90:f1:94:74: 25:ac:89:c1:e5:d1:ae:66:30:6a:4a:35:f0:b9:53: 50:d8:da:9a:ea:9b:09:2c:66:cb:ae:f3:fa:4e:d2: 1b:18:13:d2:fb:b9:b7:1b:77:16:4a:35:77:5a:92: 0c:a2:48:08:0a:de:b8:a7:c0:6a:93:9d:fd:9a:e0: 78:28:b2:7f:c0:b3:36:c0:7c:0b:e0:f5:ea:a9:51: c7:63:68:c9:d5:20:0d:6f:66:ed:7f:86:8a:6d:75: 5f:63:6c:2a:d2:51:e3:b7:09:28:64:fa:73:2e:6b: 49:eb:cf:04:1c:45:bc:37:ad:a1:f5:16:62:9c:0c: e9:6d:cb:2e:da:59:48:7d:61:5f:73:de:b0:f1:65: 52:fc:b9:ee:ff:9b:f8:1a:70:30:56:f2:d8:f9:b1: e0:f5:f2:43:81:f3:2f:28:c5:61:d0:b2:d9:2a:f9: b5:96:47:eb:ef:19:71:21:d3:a2:15:37:d2:dd:df: 30:ad:b1:09:49:19:75:aa:fc:b9:d7:fc:7c:7a:b5: 05:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DF:D5:35:89:5D:59:43:61:59:88:FD:82:2D:F1:82:AB:0E:D7:00 X509v3 Authority Key Identifier: keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0f:b7:c4:b9:82:77:a3:98:55:1f:70:85:24:42:4d:f8:30: fe:b6:2e:5f:20:a2:a4:51:82:b1:69:91:4d:94:53:d8:47:ad: 6e:24:f3:6c:3e:2d:b9:ff:13:c7:8e:42:85:d5:e5:9e:33:93: 40:02:ec:58:e8:35:61:a3:6e:69:29:e5:ed:da:76:3e:51:0c: 35:07:6f:d1:50:82:17:40:eb:04:9e:66:08:f2:2c:b7:f1:b7: 57:3c:3d:00:db:47:69:6f:51:10:82:aa:2c:f1:e4:aa:86:7e: f5:e6:2b:5b:e9:6d:92:b2:35:aa:99:f4:55:54:33:ed:bc:23: f5:a9:4e:72:0f:ba:cb:e1:0c:1a:57:90:d2:2a:48:7a:27:ae: 4a:69:cd:9d:8d:7c:67:eb:7f:3d:08:50:3a:8b:41:03:ad:5a: c7:2e:98:d8:c2:ff:3d:24:45:a0:e1:4f:5a:f9:77:ee:d3:cc: 2a:e8:d7:e5:ef:9e:1f:f5:73:3f:c4:20:e8:7b:71:8d:8d:07: 7f:f1:69:73:94:a6:6c:94:38:6b:17:79:a1:49:ce:37:b2:3a: 09:0c:a9:86:24:f5:66:9b:53:29:c5:2d:bb:c3:40:c5:6b:b6: cb:d6:55:ab:71:87:5c:65:0c:ba:91:a3:5a:94:53:ce:b6:cd: 65:1c:dd:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr9nxyUhKaI02d23ZqizgNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMmQwZTM5ZDc4ZmM2MjAyMjU1YTViNGFkYjU0NTgzZDlk ZWRkY2UwHhcNMjUxMjA4MTEwMDU0WhcNMjUxMjA5MTEwMDU0WjAzMTEwLwYDVQQD EyhlMGRmZDUzNTg5NWQ1OTQzNjE1OTg4ZmQ4MjJkZjE4MmFiMGVkNzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugtxQUtrgoJlU/Ea0aVps4AL9Jf4 cmEqQMiWDY2DFrVtqWWa5z6yTKyr7D7luxixVKvebZYTKpDxlHQlrInB5dGuZjBq SjXwuVNQ2Nqa6psJLGbLrvP6TtIbGBPS+7m3G3cWSjV3WpIMokgICt64p8Bqk539 muB4KLJ/wLM2wHwL4PXqqVHHY2jJ1SANb2btf4aKbXVfY2wq0lHjtwkoZPpzLmtJ 688EHEW8N62h9RZinAzpbcsu2llIfWFfc96w8WVS/Lnu/5v4GnAwVvLY+bHg9fJD gfMvKMVh0LLZKvm1lkfr7xlxIdOiFTfS3d8wrbEJSRl1qvy51/x8erUFNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODf1TWJXVlDYVmI/YIt8YKrDtcAMB8GA1UdIwQY MBaAFM0tDjnXj8YgIlWltK21RYPZ3t3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelMwT09kZVB4aUFpVmFXMHJiVkZnOW5lM2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81MTg4NWItNTY5My00ODkyLWExZDQt MWExOTc5MmExZDI2LzEvelMwT09kZVB4aUFpVmFXMHJiVkZnOW5lM2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS81MTg4NWItNTY5My00ODkyLWExZDQtMWExOTc5MmExZDI2 LzEvelMwT09kZVB4aUFpVmFXMHJiVkZnOW5lM2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWg+3xLmC d6OYVR9whSRCTfgw/rYuXyCipFGCsWmRTZRT2EetbiTzbD4tuf8Tx45ChdXlnjOT QALsWOg1YaNuaSnl7dp2PlEMNQdv0VCCF0DrBJ5mCPIst/G3Vzw9ANtHaW9REIKq LPHkqoZ+9eYrW+ltkrI1qpn0VVQz7bwj9alOcg+6y+EMGleQ0ipIeieuSmnNnY18 Z+t/PQhQOotBA61axy6Y2ML/PSRFoOFPWvl37tPMKujX5e+eH/VzP8Qg6HtxjY0H f/Fpc5SmbJQ4axd5oUnON7I6CQyphiT1ZptTKcUtu8NAxWu2y9ZVq3GHXGUMupGj WpRTzrbNZRzdlA== -----END CERTIFICATE-----Generated at Mon Dec 8 20:56:39 2025 by rpki-client