This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json) Hash identifier: ZqK/9VHxlu/x5M79dL6clKZ0wwVSvvosTD26UzbJNqM= Subject key identifier: F1:E8:E9:07:C5:91:BD:A6:71:65:8C:D0:87:E1:26:0D:C5:B2:B6:81 Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f Certificate serial: 019AF42DFAECF07726B2EE28EB860B97F20D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft Manifest number: 04EB Signing time: Sat 06 Dec 2025 15:00:45 +0000 Manifest this update: Sat 06 Dec 2025 15:00:45 +0000 Manifest next update: Sun 07 Dec 2025 15:00:45 +0000 Files and hashes: 1: x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa (hash: vQ6QPNwnnIFhCOXdhX1rKb14Trxw+IBL89xByl8hgdM=) 2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: zGsdq4srag2mFAjAtgxocNr3ErochsV/Un35Kb3Szgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:fa:ec:f0:77:26:b2:ee:28:eb:86:0b:97:f2:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f Validity Not Before: Dec 6 15:00:45 2025 GMT Not After : Dec 7 15:00:45 2025 GMT Subject: CN=f1e8e907c591bda671658cd087e1260dc5b2b681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:cc:3f:bb:f0:8a:1d:41:1a:90:91:b7:2f: 40:6f:f5:7d:a3:c9:f5:ab:cf:49:4c:08:38:2a:e5: 97:5b:b8:ee:e7:18:bf:94:6a:59:6c:ae:84:d1:0f: bb:66:de:98:49:56:e1:b5:fe:bb:86:87:c6:ff:96: 4f:33:91:73:1f:b4:da:f1:bd:a8:5f:7e:b8:b2:e3: a3:72:8a:a8:dc:1c:f8:88:ff:a2:4a:6e:38:d6:17: 59:d2:74:62:8c:37:41:df:eb:59:e6:56:a9:d5:55: 52:3d:ec:44:5e:c8:01:c9:00:16:90:63:a2:df:06: 34:e2:2c:56:a3:fb:ac:3f:19:a0:97:30:4b:34:64: 63:d9:1d:c4:e4:f4:e6:2a:d3:a5:eb:f8:ab:98:84: 90:5c:77:f6:13:e0:31:0c:de:5c:63:ff:f8:af:96: 52:16:b8:47:a2:a5:c8:9f:f2:d3:28:d3:46:6e:5f: 9d:10:cf:7b:3d:34:36:c0:00:b3:52:10:9d:b5:ea: f0:66:0d:49:81:02:e5:3c:38:c4:f5:4b:35:48:fb: 49:71:c4:b1:4d:d5:a7:47:91:d9:39:ee:c7:db:91: 59:c3:5d:73:cf:26:c6:8d:ef:1b:5c:6b:b2:22:08: cb:de:ef:a6:a2:c0:b5:98:4b:06:19:d0:0d:fe:1a: c7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E8:E9:07:C5:91:BD:A6:71:65:8C:D0:87:E1:26:0D:C5:B2:B6:81 X509v3 Authority Key Identifier: keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b4:9c:83:7c:32:42:f4:9c:34:4a:3c:ef:74:92:f7:84:02: 55:85:b9:66:51:f9:48:e3:ad:bd:c9:7a:23:07:28:11:b3:cb: ff:99:5d:57:d3:7c:8f:2d:a8:99:e2:ef:2b:3b:7a:56:a6:ec: b6:31:a5:03:95:09:b0:39:f6:31:ff:64:55:8d:5b:11:e4:b1: aa:74:89:69:a5:74:2c:dc:05:ad:e7:5c:41:c7:1e:d3:dd:be: 7a:d5:96:eb:21:9a:ba:d2:d7:7e:0a:6d:5e:ea:1d:40:48:4d: 7d:93:2c:68:e4:cc:8f:3c:c8:9b:5b:bc:6d:22:db:76:af:37: 29:08:e1:4f:af:b4:bf:67:4a:2d:83:c6:a1:b8:c9:18:ed:dd: 27:c2:98:ad:8c:5e:e7:f3:82:af:15:3a:8b:3f:db:e4:ba:1e: 94:48:31:c7:a2:36:10:f9:d9:74:df:21:b2:80:25:a3:54:79: 93:21:6d:25:c6:69:7f:02:27:1a:4b:ea:cc:e0:59:a7:f0:e3: 09:8c:ea:3d:0a:f7:d7:a2:8a:33:d2:66:e8:d7:98:4b:89:0f: 63:0b:cd:44:80:6e:16:5d:d0:5a:e8:08:68:dc:1a:bd:1f:71: dd:37:3e:84:1f:c0:72:5a:a4:7c:c7:81:6d:4f:df:ea:b2:40: 7c:07:fd:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lfrs8Hcmsu4o64YLl/INMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOWRlMDhiMzA1M2JhYzYxNzEzYzQ2YjQzZDQwOTM4MThj MjA0NmYwHhcNMjUxMjA2MTUwMDQ1WhcNMjUxMjA3MTUwMDQ1WjAzMTEwLwYDVQQD EyhmMWU4ZTkwN2M1OTFiZGE2NzE2NThjZDA4N2UxMjYwZGM1YjJiNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOnMP7vwih1BGpCRty9Ab/V9o8n1 q89JTAg4KuWXW7ju5xi/lGpZbK6E0Q+7Zt6YSVbhtf67hofG/5ZPM5FzH7Ta8b2o X364suOjcoqo3Bz4iP+iSm441hdZ0nRijDdB3+tZ5lap1VVSPexEXsgByQAWkGOi 3wY04ixWo/usPxmglzBLNGRj2R3E5PTmKtOl6/irmISQXHf2E+AxDN5cY//4r5ZS FrhHoqXIn/LTKNNGbl+dEM97PTQ2wACzUhCdterwZg1JgQLlPDjE9Us1SPtJccSx TdWnR5HZOe7H25FZw11zzybGje8bXGuyIgjL3u+mosC1mEsGGdAN/hrHBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHo6QfFkb2mcWWM0IfhJg3FsraBMB8GA1UdIwQY MBaAFM2d4IswU7rGFxPEa0PUCTgYwgRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zNGJmZjMtMzlkYS00ODc3LWI3NWMt NTAxNmNlOTJmMTIyLzEvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zNGJmZjMtMzlkYS00ODc3LWI3NWMtNTAxNmNlOTJmMTIy LzEvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLScg3wy QvScNEo873SS94QCVYW5ZlH5SOOtvcl6IwcoEbPL/5ldV9N8jy2omeLvKzt6Vqbs tjGlA5UJsDn2Mf9kVY1bEeSxqnSJaaV0LNwFredcQcce092+etWW6yGautLXfgpt XuodQEhNfZMsaOTMjzzIm1u8bSLbdq83KQjhT6+0v2dKLYPGobjJGO3dJ8KYrYxe 5/OCrxU6iz/b5LoelEgxx6I2EPnZdN8hsoAlo1R5kyFtJcZpfwInGkvqzOBZp/Dj CYzqPQr316KKM9Jm6NeYS4kPYwvNRIBuFl3QWugIaNwavR9x3Tc+hB/AclqkfMeB bU/f6rJAfAf9lg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:21:38 2025 by rpki-client