This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft File: zNHiiTDXen65iRtvq7spFe44hao.mft (raw, json) Hash identifier: P92L+XTt4NUzHf1F3KqZcUCwLTGRANKrV2+X6ygJtVY= Subject key identifier: 5A:36:5D:2C:85:6D:20:D7:B4:BE:70:E5:1C:4F:61:59:03:AF:CA:A9 Authority key identifier: CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA Certificate issuer: /CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa Certificate serial: 019AF5098FF809F36E717DDC67948C28B820 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:00:35 +0000 Manifest this update: Sat 06 Dec 2025 19:00:35 +0000 Manifest next update: Sun 07 Dec 2025 19:00:35 +0000 Files and hashes: 1: zNHiiTDXen65iRtvq7spFe44hao.crl (hash: ahDZj3yHwEsLu4jppbXEC6JtNG9Hral6fNnAdbKNpOw=) 2: zwMZXsX6Z6y_GtPEpsaBS7FPtIU.roa (hash: bi378rHsH1o9Uq16RD7qe5x44q14EkwJzXLivtK1Naw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:8f:f8:09:f3:6e:71:7d:dc:67:94:8c:28:b8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd1e28930d77a7eb9891b6fabbb2915ee3885aa Validity Not Before: Dec 6 19:00:35 2025 GMT Not After : Dec 7 19:00:35 2025 GMT Subject: CN=5a365d2c856d20d7b4be70e51c4f615903afcaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:38:a9:7a:71:3a:90:7d:1d:d0:a3:eb:a0:1c: ea:6d:a0:06:a6:9a:78:c8:ad:02:a0:16:04:af:bc: 23:88:6b:2d:1a:f3:7a:07:05:b3:13:f6:48:6c:06: f3:1a:26:be:84:e8:95:1a:99:f3:5e:ba:fa:18:55: f1:e6:2c:92:b2:64:95:4b:6f:6e:e2:0f:1c:ae:74: 33:eb:a1:ba:c4:79:f2:68:3a:f0:11:f2:a5:50:d3: f1:cc:09:6d:00:6b:88:ca:7b:9f:ce:92:9c:7e:0f: ec:71:90:88:d2:f0:b0:23:9b:24:2e:79:d6:af:3b: c5:e0:2e:e1:13:1e:fe:7b:5d:8a:41:dc:51:38:bd: 1b:77:65:b4:f9:91:56:84:16:99:f1:da:fe:00:0f: cd:1a:30:98:c6:28:2c:b1:be:8a:6d:cd:64:ef:42: 6e:aa:dc:8f:ac:d1:3c:a4:2f:ea:0a:60:27:73:d7: 3c:7f:11:29:c5:6f:7a:8b:08:57:5b:32:39:77:12: d6:25:e2:63:9e:84:e4:3c:9c:c3:86:9f:8f:01:87: 15:37:46:89:0d:fe:e7:b4:39:5c:6b:07:76:49:59: a4:e4:83:bb:75:d5:6d:78:34:5c:36:ac:02:0f:b0: a1:68:72:64:d1:ee:58:38:37:55:56:7e:94:ea:36: 5e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:36:5D:2C:85:6D:20:D7:B4:BE:70:E5:1C:4F:61:59:03:AF:CA:A9 X509v3 Authority Key Identifier: keyid:CC:D1:E2:89:30:D7:7A:7E:B9:89:1B:6F:AB:BB:29:15:EE:38:85:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNHiiTDXen65iRtvq7spFe44hao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1042dd-e67b-402a-81dc-c13b1f977d57/1/zNHiiTDXen65iRtvq7spFe44hao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:0e:30:f4:ff:aa:55:e9:08:5c:19:95:c1:a4:b8:ab:bc:68: 83:9e:ac:d7:d8:e5:91:5e:62:b5:e4:f9:88:07:c3:6b:1f:4e: b9:ff:e2:82:92:11:89:e3:6c:d2:9a:90:c7:ed:57:35:bc:de: a9:a8:2a:08:31:a6:9c:d8:e0:a7:bc:d9:cc:fe:e3:2b:de:2e: 18:cd:63:a4:fe:86:62:e9:c1:4e:8f:8a:7c:8e:3d:d2:16:bb: 87:3e:c1:fe:44:0c:9c:cf:9e:91:62:09:56:bd:7f:50:d5:ee: 71:88:43:9e:13:e4:64:3f:62:53:1d:48:f1:af:a9:b1:3f:e0: 4c:4b:6b:8c:ad:ca:80:74:79:1b:9e:78:45:cb:fc:06:f7:23: 67:e8:c0:ae:b8:18:39:41:22:b2:10:e3:68:97:a6:35:31:90: fb:1c:ba:c2:80:20:c7:a8:c8:7c:3d:bc:92:0b:eb:d3:a8:6c: 02:f9:59:55:d4:4f:b5:c9:34:8e:d9:f3:72:0a:d9:82:75:71: 1d:14:48:07:83:f6:03:20:90:41:0e:af:68:dc:a7:7d:e3:26: ab:b1:e8:3f:3d:29:4e:e6:94:bc:ac:27:a7:4f:fd:ea:0a:77: 6b:8c:24:22:12:a9:14:a3:3a:02:04:89:0e:af:db:d8:87:39: 7a:24:38:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CY/4CfNucX3cZ5SMKLggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDFlMjg5MzBkNzdhN2ViOTg5MWI2ZmFiYmIyOTE1ZWUz ODg1YWEwHhcNMjUxMjA2MTkwMDM1WhcNMjUxMjA3MTkwMDM1WjAzMTEwLwYDVQQD Eyg1YTM2NWQyYzg1NmQyMGQ3YjRiZTcwZTUxYzRmNjE1OTAzYWZjYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jipenE6kH0d0KProBzqbaAGppp4 yK0CoBYEr7wjiGstGvN6BwWzE/ZIbAbzGia+hOiVGpnzXrr6GFXx5iySsmSVS29u 4g8crnQz66G6xHnyaDrwEfKlUNPxzAltAGuIynufzpKcfg/scZCI0vCwI5skLnnW rzvF4C7hEx7+e12KQdxROL0bd2W0+ZFWhBaZ8dr+AA/NGjCYxigssb6Kbc1k70Ju qtyPrNE8pC/qCmAnc9c8fxEpxW96iwhXWzI5dxLWJeJjnoTkPJzDhp+PAYcVN0aJ Df7ntDlcawd2SVmk5IO7ddVteDRcNqwCD7ChaHJk0e5YODdVVn6U6jZeiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFo2XSyFbSDXtL5w5RxPYVkDr8qpMB8GA1UdIwQY MBaAFMzR4okw13p+uYkbb6u7KRXuOIWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xMDQyZGQtZTY3Yi00MDJhLTgxZGMt YzEzYjFmOTc3ZDU3LzEvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xMDQyZGQtZTY3Yi00MDJhLTgxZGMtYzEzYjFmOTc3ZDU3 LzEvek5IaWlURFhlbjY1aVJ0dnE3c3BGZTQ0aGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0A4w9P+q VekIXBmVwaS4q7xog56s19jlkV5iteT5iAfDax9Ouf/igpIRieNs0pqQx+1XNbze qagqCDGmnNjgp7zZzP7jK94uGM1jpP6GYunBTo+KfI490ha7hz7B/kQMnM+ekWIJ Vr1/UNXucYhDnhPkZD9iUx1I8a+psT/gTEtrjK3KgHR5G554Rcv8BvcjZ+jArrgY OUEishDjaJemNTGQ+xy6woAgx6jIfD28kgvr06hsAvlZVdRPtck0jtnzcgrZgnVx HRRIB4P2AyCQQQ6vaNynfeMmq7HoPz0pTuaUvKwnp0/96gp3a4wkIhKpFKM6AgSJ Dq/b2Ic5eiQ4Ng== -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:23 2025 by rpki-client