This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft File: zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json) Hash identifier: oAvBiUaSfmoDT6iFN/fKyBsAJRxXWObbAodBBUUtcbk= Subject key identifier: 4E:FE:98:96:E1:FA:46:3E:D0:9E:B5:13:E2:08:D6:51:B7:F5:CF:D4 Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f Certificate serial: 019AF276DA668CDF0D691CC1241969AAA73D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:01:06 +0000 Manifest this update: Sat 06 Dec 2025 07:01:06 +0000 Manifest next update: Sun 07 Dec 2025 07:01:06 +0000 Files and hashes: 1: SEgDWEU92zAnfdKKSLnIVh9oR0w.roa (hash: GA6e5Om3W8hxoIZHlBedjOBv7v6eWZGQfFv5Miq1TxA=) 2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: 0Ovg8Vi9KgmWI1KgtCsGaPQe87w6ISShIKvOjeKqPm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:da:66:8c:df:0d:69:1c:c1:24:19:69:aa:a7:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f Validity Not Before: Dec 6 07:01:06 2025 GMT Not After : Dec 7 07:01:06 2025 GMT Subject: CN=4efe9896e1fa463ed09eb513e208d651b7f5cfd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:14:cf:92:c4:d1:e2:dd:d4:c8:95:15:8f:d8: 9c:d9:47:ba:0b:c3:79:cb:99:42:8d:ae:d6:9c:13: 92:8d:d6:9f:cf:1b:86:c1:fc:29:ef:23:cd:e3:76: e9:4e:28:ef:6a:5b:9f:6a:18:60:4e:07:12:66:61: 82:0d:b4:0c:55:0c:ac:23:2f:c8:bf:48:a2:99:f9: a1:3b:08:b9:fd:f3:b5:26:b7:7d:4a:0c:fd:15:03: 59:a6:c4:67:ba:ab:f1:8b:d5:ca:b5:2a:df:85:6d: e0:18:6b:1b:8d:1d:63:d7:4f:14:ab:3e:a9:db:bb: 84:b3:01:47:03:4a:78:75:fe:2b:f2:84:ed:87:29: 18:b9:68:a7:21:3b:b9:af:34:97:61:3d:1a:49:24: 96:1e:4f:99:7d:54:96:f2:0b:d8:14:0a:c2:b1:ca: 99:0c:f4:7c:a9:d7:b9:c9:5c:f1:64:a3:65:9e:12: 0c:75:d8:d6:f4:bd:c2:d6:26:c2:c2:a9:8e:75:da: 4d:ca:e7:41:ac:b7:4b:57:19:a0:15:4f:17:bb:7e: 68:98:b5:8c:60:03:5e:1c:46:eb:74:e6:26:f8:95: a9:ef:60:05:02:0f:62:14:01:a2:72:db:e3:3b:12: 53:3e:f1:6e:38:f2:86:fb:1e:e3:b9:d5:13:3d:4d: ef:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FE:98:96:E1:FA:46:3E:D0:9E:B5:13:E2:08:D6:51:B7:F5:CF:D4 X509v3 Authority Key Identifier: keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:fe:33:a8:2a:91:2a:9d:c2:f3:63:d8:55:0b:9e:22:44:12: ba:0e:bf:59:61:1a:07:47:d8:1e:79:89:a4:4d:73:ba:58:32: 27:ec:3e:87:1b:35:7e:5f:f2:51:11:1a:ca:66:a1:b1:cf:94: 34:3f:76:45:ec:df:5f:e2:51:d5:69:1c:27:a3:bb:1e:e9:d0: aa:45:5e:d5:0a:23:a7:ac:72:d1:51:fe:44:93:bf:df:e0:48: f9:9a:62:5d:38:4a:e7:bb:37:6e:1d:19:91:52:af:f4:c1:a3: b5:c3:53:bd:01:95:1b:8c:ef:6c:b5:61:27:42:e2:67:e1:63: f3:66:d3:90:e8:dc:fc:56:82:11:88:22:cf:e2:d2:6b:57:ae: 8b:a2:9a:11:86:6d:21:37:e9:c8:9e:b9:d1:ba:af:7b:b4:73: 45:69:36:47:d4:bb:f6:64:39:dd:32:d3:37:5f:14:9e:a0:7b: 1f:aa:b1:a3:53:5e:63:47:a6:ec:16:fc:c3:be:ca:5d:b6:86: c3:c1:3a:e5:76:14:4a:0c:05:1d:21:c3:67:94:8c:5e:7d:15: 97:16:2b:a8:b3:58:fd:38:a2:f0:11:bc:3a:99:53:e2:5b:89: e0:b4:46:10:a5:f9:d9:f4:84:4f:62:82:e0:26:d5:ab:25:96: 15:18:99:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtpmjN8NaRzBJBlpqqc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNTdlYzRjNDAyNWFkYWI4OGI5MjA3NGFkNDYwNTZlOWY5 MzA5OWYwHhcNMjUxMjA2MDcwMTA2WhcNMjUxMjA3MDcwMTA2WjAzMTEwLwYDVQQD Eyg0ZWZlOTg5NmUxZmE0NjNlZDA5ZWI1MTNlMjA4ZDY1MWI3ZjVjZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BTPksTR4t3UyJUVj9ic2Ue6C8N5 y5lCja7WnBOSjdafzxuGwfwp7yPN43bpTijvalufahhgTgcSZmGCDbQMVQysIy/I v0iimfmhOwi5/fO1Jrd9Sgz9FQNZpsRnuqvxi9XKtSrfhW3gGGsbjR1j108Uqz6p 27uEswFHA0p4df4r8oTthykYuWinITu5rzSXYT0aSSSWHk+ZfVSW8gvYFArCscqZ DPR8qde5yVzxZKNlnhIMddjW9L3C1ibCwqmOddpNyudBrLdLVxmgFU8Xu35omLWM YANeHEbrdOYm+JWp72AFAg9iFAGictvjOxJTPvFuOPKG+x7judUTPU3v1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7+mJbh+kY+0J61E+II1lG39c/UMB8GA1UdIwQY MBaAFM1X7ExAJa2riLkgdK1GBW6fkwmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMmYzNTQtOThjZC00MzI1LTlmYmUt NzYyNDMyZmRkNGRkLzEvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wMmYzNTQtOThjZC00MzI1LTlmYmUtNzYyNDMyZmRkNGRk LzEvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuv4zqCqR Kp3C82PYVQueIkQSug6/WWEaB0fYHnmJpE1zulgyJ+w+hxs1fl/yUREaymahsc+U ND92RezfX+JR1WkcJ6O7HunQqkVe1Qojp6xy0VH+RJO/3+BI+ZpiXThK57s3bh0Z kVKv9MGjtcNTvQGVG4zvbLVhJ0LiZ+Fj82bTkOjc/FaCEYgiz+LSa1eui6KaEYZt ITfpyJ650bqve7RzRWk2R9S79mQ53TLTN18UnqB7H6qxo1NeY0em7Bb8w77KXbaG w8E65XYUSgwFHSHDZ5SMXn0VlxYrqLNY/Tii8BG8OplT4luJ4LRGEKX52fSET2KC 4CbVqyWWFRiZTg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:06 2025 by rpki-client