This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json) Hash identifier: 58xAdrqroPwIZDWFNkqA6+lSmpvKnZiXPyzBNkpqk9I= Subject key identifier: EC:90:FE:E1:63:23:2D:22:8C:64:87:52:1F:69:97:31:64:06:5D:89 Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb Certificate serial: 019AF31CDFA387959369C128A73170AC533A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft Manifest number: 147E Signing time: Sat 06 Dec 2025 10:02:26 +0000 Manifest this update: Sat 06 Dec 2025 10:02:26 +0000 Manifest next update: Sun 07 Dec 2025 10:02:26 +0000 Files and hashes: 1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=) 2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: Dzp6zf7uhNt5e/E0RGo0eU4Gtz01FjupCVOulMn1Co0=) 3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:df:a3:87:95:93:69:c1:28:a7:31:70:ac:53:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb Validity Not Before: Dec 6 10:02:26 2025 GMT Not After : Dec 7 10:02:26 2025 GMT Subject: CN=ec90fee163232d228c6487521f69973164065d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ea:7c:d6:26:4a:56:a3:b7:75:67:32:42:6d: 46:ca:b3:98:7e:75:70:15:10:3c:e7:59:c9:f3:51: 02:58:1e:77:ea:b5:3f:1e:c5:d4:36:8b:e7:5b:1d: 7a:bc:a2:05:5f:e9:db:73:76:25:da:f5:d5:46:7b: 41:bc:79:83:23:5f:43:f3:71:26:f2:a6:f4:fa:2b: b9:bd:8c:76:49:fb:56:71:13:cd:16:8f:c7:68:06: 11:25:42:0d:5a:64:12:69:72:3b:4f:a1:59:fe:78: 67:ba:9c:33:e1:0c:8c:56:bf:14:99:d3:ab:d8:d0: 14:e6:48:80:27:c3:13:ff:ee:00:c5:3a:04:d4:83: 05:b6:b1:3e:00:eb:3d:1c:84:7a:2b:94:4c:6f:68: b8:cd:8d:60:a1:8b:67:1c:87:91:02:06:e1:cb:ce: d9:f0:31:fc:dc:a6:53:cd:5d:a8:ad:51:96:db:88: 8e:b8:c0:f8:b3:e9:84:59:db:3d:89:b5:f8:5c:46: c1:1d:48:46:cd:ed:0d:a8:93:54:cf:60:cb:38:a4: 7f:03:4d:b1:8c:04:a3:07:a7:23:97:52:84:d9:e6: a3:ee:64:25:eb:41:a9:06:39:59:89:15:f1:f0:b5: 3d:6a:7c:a8:13:6b:3d:d3:8c:32:ce:f8:95:86:84: ce:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:90:FE:E1:63:23:2D:22:8C:64:87:52:1F:69:97:31:64:06:5D:89 X509v3 Authority Key Identifier: keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:1d:f1:4e:fb:04:c4:ae:1c:4f:17:df:a5:7e:fd:d4:c0:e5: 5a:e0:e3:c7:29:6d:19:16:ce:a7:c3:5f:99:e0:b5:64:19:da: 5c:a6:4a:22:7d:26:20:0c:c3:1e:04:43:35:3b:4d:75:f1:26: d4:29:f4:90:e8:d5:b5:2c:26:e4:87:f5:50:72:7c:51:0e:4f: 7d:8b:17:09:fe:f2:02:e5:8c:7e:98:db:7e:da:8a:84:f5:9f: 82:26:42:ac:75:13:0e:f6:88:58:f3:a1:fa:01:33:23:23:5e: 1a:70:ff:56:75:c7:2e:e0:44:d9:5e:8b:2c:d9:3d:4d:6d:24: f5:da:25:f4:22:4c:e1:e3:1a:2a:e8:ca:f5:22:11:c4:45:4f: 3b:2d:b0:da:1a:fe:f0:d3:59:66:f0:a8:00:ae:37:4c:9b:cc: 08:28:2d:bd:43:09:6a:18:11:c1:81:e1:44:5e:0a:9e:71:af: 99:45:cd:77:78:f5:cb:a1:a9:2b:72:8f:07:9e:fd:07:c4:c9: 9e:f1:1c:4c:e1:f6:1f:70:65:bd:40:21:60:3d:ea:ec:30:93: a7:e2:a4:d6:15:df:1b:a5:67:a8:e6:35:5c:0d:db:59:b3:5c: 77:75:5d:58:a4:86:64:50:8f:b7:88:8f:1d:4a:fe:57:98:89: 8a:08:e8:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHN+jh5WTacEopzFwrFM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NWU0ZDdlYThhMzQ3MGM5NzAzZWU3NTUxNDgxYzM2Zjc3 NGZlYmIwHhcNMjUxMjA2MTAwMjI2WhcNMjUxMjA3MTAwMjI2WjAzMTEwLwYDVQQD EyhlYzkwZmVlMTYzMjMyZDIyOGM2NDg3NTIxZjY5OTczMTY0MDY1ZDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnup81iZKVqO3dWcyQm1GyrOYfnVw FRA851nJ81ECWB536rU/HsXUNovnWx16vKIFX+nbc3Yl2vXVRntBvHmDI19D83Em 8qb0+iu5vYx2SftWcRPNFo/HaAYRJUINWmQSaXI7T6FZ/nhnupwz4QyMVr8UmdOr 2NAU5kiAJ8MT/+4AxToE1IMFtrE+AOs9HIR6K5RMb2i4zY1goYtnHIeRAgbhy87Z 8DH83KZTzV2orVGW24iOuMD4s+mEWds9ibX4XEbBHUhGze0NqJNUz2DLOKR/A02x jASjB6cjl1KE2eaj7mQl60GpBjlZiRXx8LU9anyoE2s904wyzviVhoTOtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyQ/uFjIy0ijGSHUh9plzFkBl2JMB8GA1UdIwQY MBaAFGZeTX6oo0cMlwPudVFIHDb3dP67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmIt MTYyZWQ2MjRlMjgyLzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmItMTYyZWQ2MjRlMjgy LzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIB3xTvsE xK4cTxffpX791MDlWuDjxyltGRbOp8NfmeC1ZBnaXKZKIn0mIAzDHgRDNTtNdfEm 1Cn0kOjVtSwm5If1UHJ8UQ5PfYsXCf7yAuWMfpjbftqKhPWfgiZCrHUTDvaIWPOh +gEzIyNeGnD/VnXHLuBE2V6LLNk9TW0k9dol9CJM4eMaKujK9SIRxEVPOy2w2hr+ 8NNZZvCoAK43TJvMCCgtvUMJahgRwYHhRF4KnnGvmUXNd3j1y6GpK3KPB579B8TJ nvEcTOH2H3BlvUAhYD3q7DCTp+Kk1hXfG6VnqOY1XA3bWbNcd3VdWKSGZFCPt4iP HUr+V5iJigjooQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:04 2025 by rpki-client