This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json) Hash identifier: iuali0S36ocLITEt3r7gb7dOzZgtz+1rozp1s6jZxRk= Subject key identifier: 63:58:AD:2B:D2:C1:0F:AD:AB:00:85:B2:B5:5B:E6:1F:B9:48:92:3A Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b Certificate serial: 019AF31BDF71CCB84FB1FD6C04345690A895 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft Manifest number: 095F Signing time: Sat 06 Dec 2025 10:01:21 +0000 Manifest this update: Sat 06 Dec 2025 10:01:21 +0000 Manifest next update: Sun 07 Dec 2025 10:01:21 +0000 Files and hashes: 1: cGaM1pqwI_iREeyFYU4bDaF6huI.roa (hash: ZX5FkbfvKLABufYmP9T9sbDn4rTGZcGZ9RNRwuV4C4s=) 2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: oUv2ZtFyhw0SIp6NdJVetp7v8T1vEqNhV3Z8wQJABUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:df:71:cc:b8:4f:b1:fd:6c:04:34:56:90:a8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b Validity Not Before: Dec 6 10:01:21 2025 GMT Not After : Dec 7 10:01:21 2025 GMT Subject: CN=6358ad2bd2c10fadab0085b2b55be61fb948923a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:65:88:43:9d:e4:87:04:c8:1a:fb:2d:62: 98:f6:ee:6b:a2:5d:f0:12:fa:11:b2:d5:8d:13:01: e5:4b:b2:ba:82:b2:8a:2e:9f:f3:50:62:51:6e:9e: a0:9a:32:eb:f7:d8:0c:a6:72:70:24:e1:3b:35:0e: 76:43:de:d2:22:3f:07:49:d9:7d:42:08:10:c8:25: f1:ea:12:1f:7e:ac:d0:0c:53:f8:68:28:29:49:c9: 12:07:21:1b:f6:3b:a6:f9:41:c0:81:c4:21:d2:20: a5:d0:37:6d:c2:f8:a8:4a:52:ac:b6:1d:80:e5:03: eb:b5:b8:8f:36:17:98:6c:ed:20:ab:82:13:6b:22: f6:7e:e3:1c:a4:bd:be:73:f0:fa:7e:23:68:d9:1e: b0:39:5a:50:d8:8a:aa:02:92:df:b2:a0:4f:02:cc: 6b:16:a1:bd:d0:d7:5f:df:ff:75:15:9f:b5:c2:33: f6:3f:4e:ce:0b:5c:ba:e6:fb:1e:62:88:1b:24:88: 3f:3a:e9:63:3b:a8:1f:48:0b:a6:23:b2:72:4e:63: 37:23:f9:a2:8a:42:3e:02:d1:ef:76:00:89:ea:4d: f2:1f:76:51:8a:ef:9c:a6:67:6c:e6:f7:dd:d0:f2: b5:22:a5:f8:ef:43:fa:5f:c4:bf:8e:63:78:65:b7: 6f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:58:AD:2B:D2:C1:0F:AD:AB:00:85:B2:B5:5B:E6:1F:B9:48:92:3A X509v3 Authority Key Identifier: keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:82:0b:5d:ca:d0:42:df:ce:68:0b:5b:7a:0c:f1:8b:a9:e1: ba:55:b8:59:a3:3a:e1:59:60:56:bd:78:de:1c:0c:be:bd:d4: 1c:1f:08:16:5d:1f:ba:90:cd:8a:e1:a2:82:e0:7a:ec:17:18: 43:90:52:81:e0:98:02:f2:7f:68:34:b9:99:01:b6:a3:f2:f0: a9:21:ba:8c:04:b3:66:8b:c9:8f:e9:23:59:4c:ec:36:72:81: 39:8a:86:ba:7f:84:51:67:8d:bd:ff:41:34:84:ff:dd:f2:0b: cb:41:c0:77:54:81:97:9d:1d:4e:92:45:1b:9d:8b:09:ed:b9: a0:95:45:41:e9:79:47:eb:6f:a2:18:d3:9d:fb:04:3d:f3:19: 21:2c:2f:3c:a3:4a:02:ed:aa:48:0c:a7:68:1d:44:55:41:aa: 62:f0:e3:3e:6c:b2:f6:51:ac:b3:99:b2:94:89:28:6f:4b:a0: 7b:e5:99:48:54:76:e0:8f:e8:d1:b0:f4:8f:51:a7:4a:e1:4b: 0d:36:e3:55:83:3a:df:06:32:86:68:e5:fc:a9:1e:9b:e2:cf: de:a6:95:ce:f4:7b:4a:d8:90:fb:57:89:09:a5:87:e9:94:19: 88:fa:b6:ff:29:6c:5a:08:ec:63:cf:38:9b:db:39:7e:6f:ac: db:80:b1:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG99xzLhPsf1sBDRWkKiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTRjMzFlMTVkZjRiN2E2MGU1ZDQwZGYzYWFjMTg1MmU4 ZGE3NGIwHhcNMjUxMjA2MTAwMTIxWhcNMjUxMjA3MTAwMTIxWjAzMTEwLwYDVQQD Eyg2MzU4YWQyYmQyYzEwZmFkYWIwMDg1YjJiNTViZTYxZmI5NDg5MjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaNliEOd5IcEyBr7LWKY9u5rol3w EvoRstWNEwHlS7K6grKKLp/zUGJRbp6gmjLr99gMpnJwJOE7NQ52Q97SIj8HSdl9 QggQyCXx6hIffqzQDFP4aCgpSckSByEb9jum+UHAgcQh0iCl0DdtwvioSlKsth2A 5QPrtbiPNheYbO0gq4ITayL2fuMcpL2+c/D6fiNo2R6wOVpQ2IqqApLfsqBPAsxr FqG90Ndf3/91FZ+1wjP2P07OC1y65vseYogbJIg/OuljO6gfSAumI7JyTmM3I/mi ikI+AtHvdgCJ6k3yH3ZRiu+cpmds5vfd0PK1IqX470P6X8S/jmN4ZbdvDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNYrSvSwQ+tqwCFsrVb5h+5SJI6MB8GA1UdIwQY MBaAFM6Uwx4V30t6YOXUDfOqwYUujadLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lZDdjYjItZTM4Ny00N2JmLWJlNGEt MDhmMjI2M2E0MTNjLzEvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lZDdjYjItZTM4Ny00N2JmLWJlNGEtMDhmMjI2M2E0MTNj LzEvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIILXcrQ Qt/OaAtbegzxi6nhulW4WaM64VlgVr143hwMvr3UHB8IFl0fupDNiuGiguB67BcY Q5BSgeCYAvJ/aDS5mQG2o/LwqSG6jASzZovJj+kjWUzsNnKBOYqGun+EUWeNvf9B NIT/3fILy0HAd1SBl50dTpJFG52LCe25oJVFQel5R+tvohjTnfsEPfMZISwvPKNK Au2qSAynaB1EVUGqYvDjPmyy9lGss5mylIkob0uge+WZSFR24I/o0bD0j1GnSuFL DTbjVYM63wYyhmjl/Kkem+LP3qaVzvR7StiQ+1eJCaWH6ZQZiPq2/ylsWgjsY884 m9s5fm+s24Cx1A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:08:58 2025 by rpki-client