This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft File: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft (raw, json) Hash identifier: 7gCTOk4Fpa/I5Qxr5yOVF/krizopz3sdlzY3fKAtPE8= Subject key identifier: D3:C5:BF:53:C4:62:E0:87:74:67:6E:BF:9C:68:D0:79:EA:1F:94:D1 Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19 Certificate issuer: /CN=66e3ed06e88e5591d9096676951555c0dc535c19 Certificate serial: 019AF23FE2FD7D5A7E169A88F1F26DB48844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: 6ekzezCQTRRJ6ani1kLlgl9_UEQ.roa (hash: E8YKQ+7oKbQVBsilOuJbTsXN0BQkzpHb4tN03LRQOhY=) 2: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl (hash: yLySoPFT/ayM96/Se5FtTyIZ3ywcgkZV+l+HDTBJ0pw=) 3: jjkw7d-vM1Kuz3VrP2qfo9DvNCo.roa (hash: VJTPRYmj0bLLGoSUyYkDz754dQcYj27q2IKg/a+56Gg=) 4: rWTg50lIWr4eBCYZpN1g2rEsvwA.roa (hash: h6askj3XUZ9cNfHdvd89Te7uFDoO162bWotdGeS5FPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e2:fd:7d:5a:7e:16:9a:88:f1:f2:6d:b4:88:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19 Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=d3c5bf53c462e08774676ebf9c68d079ea1f94d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:87:f4:60:95:a6:2d:d4:05:43:59:d7:d3: 35:fa:68:31:08:e7:36:d0:e9:75:41:09:18:70:e4: 2f:25:e9:14:59:90:e2:64:9f:bc:57:e0:51:e6:67: 5d:10:56:e7:9b:1e:d4:62:f8:2f:9d:10:30:fb:5d: be:11:70:b9:88:8e:69:a0:38:7b:eb:79:af:45:4b: fc:67:c2:b4:17:c9:11:00:91:58:b0:f5:7c:78:ab: 5a:a6:e8:6b:3a:57:a9:62:ff:ca:65:6b:3a:8a:4e: c8:71:54:a1:ab:34:98:61:a2:3f:98:c9:b9:1f:a0: 7c:23:c6:cd:4c:1c:90:19:46:92:33:46:80:f0:a8: f2:99:c1:48:f4:93:5b:f3:06:8f:a6:c6:dd:4b:14: 61:62:ca:4b:42:6f:db:c4:53:cd:dc:12:d9:8a:e4: 36:5d:c4:1c:88:92:8e:5d:04:5b:24:12:08:f9:1f: 72:df:b7:2d:d8:85:23:92:f3:c4:4f:44:81:91:ad: f7:9d:be:59:48:21:1b:8b:51:3d:47:13:83:0a:38: 05:cf:b9:5e:29:1e:df:53:1f:68:15:75:6b:af:f9: 72:f1:02:48:fe:4f:fd:9d:09:0d:3a:b4:2e:d7:7d: d5:1a:64:15:7b:8e:88:ad:94:65:10:3a:73:e8:33: 86:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C5:BF:53:C4:62:E0:87:74:67:6E:BF:9C:68:D0:79:EA:1F:94:D1 X509v3 Authority Key Identifier: keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:7d:2a:76:af:3d:ff:39:be:9f:9b:35:85:38:c8:8b:d8:37: 52:75:52:03:34:e9:cb:0b:65:de:2e:e2:cd:c6:0b:81:2b:ff: 7a:b6:2c:32:c9:5e:fb:be:26:f7:2e:18:2c:31:05:1a:50:e9: 43:1f:e4:e2:26:55:6c:5a:49:a1:f1:b9:8f:b9:1c:5c:a7:a1: 7b:7a:85:d7:dd:e4:dd:65:fb:01:6c:45:b2:a6:86:c2:80:7b: 6c:cd:47:d7:12:38:dc:c6:5d:63:2d:6e:15:aa:00:d8:02:50: e1:4a:4d:b9:27:62:b1:be:29:e9:03:65:2f:9c:68:81:b9:1d: 26:ed:67:ba:7d:5e:37:17:5d:92:b6:35:67:1e:ca:7a:e9:13: e0:7c:aa:89:f3:d9:77:3b:d8:21:17:11:cf:57:e3:f9:61:c5: c1:fa:11:69:2f:5a:72:a4:7f:8d:39:c0:cd:b3:b3:06:83:c6: bb:3b:06:0b:b1:ae:b5:3c:5a:48:77:37:69:ea:48:81:7a:6f: af:53:94:64:11:75:df:cf:a3:52:04:f5:8b:35:dc:01:cf:08: 6a:88:7e:bb:46:c8:8e:cf:e5:76:ea:06:85:34:8e:f2:30:89: cb:da:d7:44:7b:b3:b1:3f:ce:1b:b3:cc:cd:7d:bb:56:66:78: fa:06:15:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+L9fVp+FpqI8fJttIhEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZTNlZDA2ZTg4ZTU1OTFkOTA5NjY3Njk1MTU1NWMwZGM1 MzVjMTkwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD EyhkM2M1YmY1M2M0NjJlMDg3NzQ2NzZlYmY5YzY4ZDA3OWVhMWY5NGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNaH9GCVpi3UBUNZ19M1+mgxCOc2 0Ol1QQkYcOQvJekUWZDiZJ+8V+BR5mddEFbnmx7UYvgvnRAw+12+EXC5iI5poDh7 63mvRUv8Z8K0F8kRAJFYsPV8eKtapuhrOlepYv/KZWs6ik7IcVShqzSYYaI/mMm5 H6B8I8bNTByQGUaSM0aA8KjymcFI9JNb8waPpsbdSxRhYspLQm/bxFPN3BLZiuQ2 XcQciJKOXQRbJBII+R9y37ct2IUjkvPET0SBka33nb5ZSCEbi1E9RxODCjgFz7le KR7fUx9oFXVrr/ly8QJI/k/9nQkNOrQu133VGmQVe46IrZRlEDpz6DOGTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPFv1PEYuCHdGduv5xo0HnqH5TRMB8GA1UdIwQY MBaAFGbj7QbojlWR2QlmdpUVVcDcU1wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnVQdEJ1aU9WWkhaQ1daMmxSVlZ3TnhUWEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZDc1NDgtMDc1My00MGRjLThmYmIt ZGUyMWY1ZmVlM2RiLzEvWnVQdEJ1aU9WWkhaQ1daMmxSVlZ3TnhUWEJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni84ZDc1NDgtMDc1My00MGRjLThmYmItZGUyMWY1ZmVlM2Ri LzEvWnVQdEJ1aU9WWkhaQ1daMmxSVlZ3TnhUWEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMX0qdq89 /zm+n5s1hTjIi9g3UnVSAzTpywtl3i7izcYLgSv/erYsMsle+74m9y4YLDEFGlDp Qx/k4iZVbFpJofG5j7kcXKehe3qF193k3WX7AWxFsqaGwoB7bM1H1xI43MZdYy1u FaoA2AJQ4UpNuSdisb4p6QNlL5xogbkdJu1nun1eNxddkrY1Zx7KeukT4HyqifPZ dzvYIRcRz1fj+WHFwfoRaS9acqR/jTnAzbOzBoPGuzsGC7GutTxaSHc3aepIgXpv r1OUZBF138+jUgT1izXcAc8Iaoh+u0bIjs/lduoGhTSO8jCJy9rXRHuzsT/OG7PM zX27VmZ4+gYVQw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:20:56 2025 by rpki-client