This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft File: zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json) Hash identifier: LvheSDVrv0PJwbeBqB2wjGw73IbykHhbsNOW35vr5Lc= Subject key identifier: 0E:BE:AF:4C:1C:78:E6:AB:9A:8E:33:FC:05:1E:98:CB:34:B6:4C:AD Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87 Certificate issuer: /CN=cd40d5ea59f80da61b4486bd999be112a1a35387 Certificate serial: 019AF0BF33A4F95D3289182BF8F81627CF44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft Manifest number: 0F79 Signing time: Fri 05 Dec 2025 23:00:53 +0000 Manifest this update: Fri 05 Dec 2025 23:00:53 +0000 Manifest next update: Sat 06 Dec 2025 23:00:53 +0000 Files and hashes: 1: ahWZL5H1qGkfpR9r5MK6JSJk1Dc.roa (hash: WUef3WgjpaprU4IuIXYy1q31GG6Dfwy/D5/f2fp0uKs=) 2: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: 5w/VjyqtWmGIYqthJ7E3LRBZmVyqdTXwd/lBLkS/7fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:33:a4:f9:5d:32:89:18:2b:f8:f8:16:27:cf:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387 Validity Not Before: Dec 5 23:00:53 2025 GMT Not After : Dec 6 23:00:53 2025 GMT Subject: CN=0ebeaf4c1c78e6ab9a8e33fc051e98cb34b64cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:51:b1:b6:d7:60:fe:d9:74:01:9d:ab:7b:cb: 29:4e:6b:20:2b:b4:b9:cf:64:a0:60:62:71:f7:0b: 24:8e:1c:1c:5a:29:4f:8a:12:e6:5c:0e:ea:78:01: 28:ec:fc:20:f4:77:bd:e8:7f:98:1d:0e:22:e2:82: a6:52:ca:e1:37:04:cb:25:b6:4f:a9:c1:9b:aa:89: cf:3e:dd:b6:8d:57:91:55:f2:4d:82:09:a9:d2:84: d7:f1:f3:33:a7:0a:18:1e:1c:79:08:06:84:f0:0b: c9:55:0a:c9:29:9a:5d:1f:92:c0:3e:ce:c0:2a:90: 77:78:d5:bc:51:91:ec:4d:ae:31:ad:ec:6e:6d:0d: 5e:3f:57:74:9e:f9:e6:06:f1:29:bd:47:fd:36:e1: 33:1c:35:ce:e4:bf:79:69:ce:ad:67:b0:47:05:51: 40:50:ae:b5:08:fc:86:89:af:fe:fb:31:d5:1d:7e: ed:dc:83:4b:ac:1d:6f:a9:3d:1e:97:67:7d:72:d9: 68:fc:ed:1f:3f:ac:ba:e1:69:57:52:6b:16:13:bb: ff:43:8f:af:ae:a2:f4:b3:b8:bd:3a:40:ff:90:d7: 80:8f:d4:cd:b8:7b:5f:3b:f4:80:3f:98:44:20:32: d5:1a:43:79:ca:a0:93:75:99:95:94:5c:56:4a:02: 6e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BE:AF:4C:1C:78:E6:AB:9A:8E:33:FC:05:1E:98:CB:34:B6:4C:AD X509v3 Authority Key Identifier: keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c0:bc:81:e2:f1:f9:8a:04:f5:08:df:c2:8c:fb:78:bd:cb: 0b:cb:62:1b:bb:a8:5e:87:17:1d:b6:7e:6e:4a:0d:ab:26:e1: 64:09:5d:8e:ba:65:0b:70:c3:50:94:d7:5c:dd:3b:2c:9b:fd: 8a:ff:0b:f4:78:24:c4:bd:41:e0:38:08:92:f0:ca:e4:db:e4: d2:90:25:e7:ee:16:0d:6e:46:fa:95:f4:b9:21:68:57:af:ff: f6:c2:a0:b6:08:2c:8d:f5:ff:78:d9:aa:10:2b:4d:db:69:22: 10:d8:0e:55:79:d6:b8:3c:51:e7:a7:ff:ff:f0:96:f0:d2:f3: 94:e7:c0:cb:e0:1b:eb:c5:a7:22:81:2e:1b:b4:94:c2:2a:6f: 44:bf:fd:bf:10:e7:11:ff:64:62:2f:b1:33:cd:77:bf:68:dc: 24:5e:97:b9:58:dc:cd:fb:9d:a1:6a:2d:ac:e8:4d:42:42:1e: 47:eb:e2:9a:d0:f7:c8:dd:2a:a4:0d:85:08:30:de:5c:e6:84: 0b:7e:e8:9f:f1:bb:81:a0:67:db:68:e2:03:6f:94:f8:02:7a: 1a:47:15:4e:8e:6f:5b:36:0a:49:3e:72:77:d2:28:bd:c0:74: c7:85:37:8e:4f:b6:5f:6e:72:b4:10:91:c2:2a:22:b7:e0:46: 0b:53:9b:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzOk+V0yiRgr+PgWJ89EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNDBkNWVhNTlmODBkYTYxYjQ0ODZiZDk5OWJlMTEyYTFh MzUzODcwHhcNMjUxMjA1MjMwMDUzWhcNMjUxMjA2MjMwMDUzWjAzMTEwLwYDVQQD EygwZWJlYWY0YzFjNzhlNmFiOWE4ZTMzZmMwNTFlOThjYjM0YjY0Y2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVGxttdg/tl0AZ2re8spTmsgK7S5 z2SgYGJx9wskjhwcWilPihLmXA7qeAEo7Pwg9He96H+YHQ4i4oKmUsrhNwTLJbZP qcGbqonPPt22jVeRVfJNggmp0oTX8fMzpwoYHhx5CAaE8AvJVQrJKZpdH5LAPs7A KpB3eNW8UZHsTa4xrexubQ1eP1d0nvnmBvEpvUf9NuEzHDXO5L95ac6tZ7BHBVFA UK61CPyGia/++zHVHX7t3INLrB1vqT0el2d9ctlo/O0fP6y64WlXUmsWE7v/Q4+v rqL0s7i9OkD/kNeAj9TNuHtfO/SAP5hEIDLVGkN5yqCTdZmVlFxWSgJuWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6+r0wceOarmo4z/AUemMs0tkytMB8GA1UdIwQY MBaAFM1A1epZ+A2mG0SGvZmb4RKho1OHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWIt ZjYyMzMwNGVkNzlhLzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWItZjYyMzMwNGVkNzlh LzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMC8geLx +YoE9Qjfwoz7eL3LC8tiG7uoXocXHbZ+bkoNqybhZAldjrplC3DDUJTXXN07LJv9 iv8L9HgkxL1B4DgIkvDK5Nvk0pAl5+4WDW5G+pX0uSFoV6//9sKgtggsjfX/eNmq ECtN22kiENgOVXnWuDxR56f///CW8NLzlOfAy+Ab68WnIoEuG7SUwipvRL/9vxDn Ef9kYi+xM813v2jcJF6XuVjczfudoWotrOhNQkIeR+vimtD3yN0qpA2FCDDeXOaE C37on/G7gaBn22jiA2+U+AJ6GkcVTo5vWzYKST5yd9IovcB0x4U3jk+2X25ytBCR wioit+BGC1ObWA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:33 2025 by rpki-client