This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json) Hash identifier: QlSPj8aGkNMZ+zffqwCZuGr70FKUqmAK8ZLzvhnpPlA= Subject key identifier: A1:30:16:C3:01:8A:FC:9A:20:F3:2E:D1:44:4B:92:96:1B:F7:FE:91 Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44 Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044 Certificate serial: 019AF1D2377C03AB6CCA95E0FB6582423372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:01:17 +0000 Manifest this update: Sat 06 Dec 2025 04:01:17 +0000 Manifest next update: Sun 07 Dec 2025 04:01:17 +0000 Files and hashes: 1: CGIluw5b3rFNq3TYcrDu-mJjjcY.roa (hash: 7XYO0sh+h2BXkgYXdxURNA8WGt1oRVxjTX46cE0gy/o=) 2: RLQ2xMmRZoZiAtZFS_YRcySPvAc.roa (hash: P8RbzLYf4UK0GuClJazmarq7imv/ewysF1Ivpx0otS4=) 3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: ecCk8QEKGThakdikTxxNjXZXTTwA/KFVFujH5Apmdvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:37:7c:03:ab:6c:ca:95:e0:fb:65:82:42:33:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044 Validity Not Before: Dec 6 04:01:17 2025 GMT Not After : Dec 7 04:01:17 2025 GMT Subject: CN=a13016c3018afc9a20f32ed1444b92961bf7fe91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ee:d0:9d:6a:1c:20:57:c7:df:dd:f7:15:b4: ff:8c:3d:64:fb:eb:b0:74:22:46:64:ce:7c:57:0a: 2e:9f:0b:76:85:d2:a4:1f:ae:83:b1:2c:1d:c8:c9: 80:3c:bc:d5:1d:52:c9:0a:f8:67:a2:07:90:93:71: 18:7e:f9:cd:62:5e:2b:7a:8f:60:e0:ec:4e:d5:6b: 34:1d:0c:80:fc:0c:4c:5d:08:8b:e9:0a:de:0e:14: f3:55:c5:38:44:42:b0:2d:06:0e:45:31:bb:25:ef: 88:52:33:c6:b8:c7:f6:6d:21:0c:80:59:5e:ec:21: 87:4f:be:b2:4f:11:5c:00:00:8a:21:7b:99:fb:8f: 5c:ff:ca:bf:a6:fb:c0:4d:49:ca:59:23:ce:d1:b2: da:9d:71:43:46:4e:0e:bc:16:52:e9:48:cc:6e:27: a2:bd:ea:ae:a1:b7:f9:c9:b0:31:00:ff:5c:b1:8b: 51:c9:34:dc:04:66:39:7a:e6:ba:b3:e0:55:46:cd: 52:90:b8:69:e3:2d:2f:65:d5:dd:a4:f5:b8:66:d3: d7:87:18:18:e7:4f:5d:9a:52:0d:1e:7b:fc:f7:b3: 83:26:fd:7f:dc:28:95:e5:20:a3:10:00:24:b4:ad: a9:69:ca:42:26:11:9d:8f:9b:ba:b0:01:99:11:fe: 39:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:30:16:C3:01:8A:FC:9A:20:F3:2E:D1:44:4B:92:96:1B:F7:FE:91 X509v3 Authority Key Identifier: keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c7:0b:90:ea:de:6e:85:51:b0:62:29:41:21:74:9e:71:42: 3a:8c:b4:81:32:81:28:ef:1e:28:2f:de:da:5c:01:f5:ec:26: d7:f7:de:1a:99:c4:6a:d3:48:b7:ca:43:49:65:2e:a1:20:33: b1:8b:f0:82:04:52:b4:23:8e:2e:58:a4:60:35:ed:2a:6d:72: d7:48:eb:71:36:62:af:e9:5a:92:dc:6a:fd:53:0b:db:b1:2e: 69:ac:25:4f:0a:cf:eb:c7:dc:86:0a:7c:0e:60:27:35:a0:3e: 0d:78:86:a8:7e:5c:b4:03:ac:6f:e6:2e:b6:be:79:b4:c5:1d: 97:d7:a8:e5:a0:26:61:66:1a:1e:74:ec:c4:0a:b3:e4:a7:3f: c9:b1:7f:10:48:4f:b0:f2:a3:01:d7:d8:26:1f:7f:b8:ff:6e: 75:40:fe:c4:e9:63:c2:e1:66:71:b0:bd:81:07:a7:65:26:31: 0b:e2:0b:77:11:0f:da:91:90:e8:09:88:bf:54:a4:c7:c2:54: c0:13:96:19:1f:99:86:ef:d6:2f:a9:b2:5b:8d:2b:ff:b8:7e: cb:0b:28:0e:69:22:e2:d5:ea:89:e5:16:e0:83:cd:b7:10:54: 07:76:99:fa:db:f5:14:f2:0f:0a:49:84:e3:d3:38:6c:3a:d0: e3:ef:a2:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jd8A6tsypXg+2WCQjNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOTRmMDMwNGVlZGQzNjNjNjYyMmZkOTFjNTliMTA4NzFh YTMwNDQwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD EyhhMTMwMTZjMzAxOGFmYzlhMjBmMzJlZDE0NDRiOTI5NjFiZjdmZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru7QnWocIFfH3933FbT/jD1k++uw dCJGZM58Vwounwt2hdKkH66DsSwdyMmAPLzVHVLJCvhnogeQk3EYfvnNYl4reo9g 4OxO1Ws0HQyA/AxMXQiL6QreDhTzVcU4REKwLQYORTG7Je+IUjPGuMf2bSEMgFle 7CGHT76yTxFcAACKIXuZ+49c/8q/pvvATUnKWSPO0bLanXFDRk4OvBZS6UjMbiei vequobf5ybAxAP9csYtRyTTcBGY5eua6s+BVRs1SkLhp4y0vZdXdpPW4ZtPXhxgY 509dmlINHnv897ODJv1/3CiV5SCjEAAktK2pacpCJhGdj5u6sAGZEf45fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEwFsMBivyaIPMu0URLkpYb9/6RMB8GA1UdIwQY MBaAFLGU8DBO7dNjxmIv2RxZsQhxqjBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUt YWZiZGJkYWQ1OGE1LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUtYWZiZGJkYWQ1OGE1 LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhccLkOre boVRsGIpQSF0nnFCOoy0gTKBKO8eKC/e2lwB9ewm1/feGpnEatNIt8pDSWUuoSAz sYvwggRStCOOLlikYDXtKm1y10jrcTZir+laktxq/VML27EuaawlTwrP68fchgp8 DmAnNaA+DXiGqH5ctAOsb+Yutr55tMUdl9eo5aAmYWYaHnTsxAqz5Kc/ybF/EEhP sPKjAdfYJh9/uP9udUD+xOljwuFmcbC9gQenZSYxC+ILdxEP2pGQ6AmIv1Skx8JU wBOWGR+Zhu/WL6myW40r/7h+ywsoDmki4tXqieUW4IPNtxBUB3aZ+tv1FPIPCkmE 49M4bDrQ4++iAA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:15 2025 by rpki-client