This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft File: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json) Hash identifier: XRhSg24GaNWeQuA+yEsl2k5Lx1mWpR4JR2q5Rqwkjzs= Subject key identifier: A2:95:BB:85:7F:D5:8E:69:45:D3:AF:B8:DF:76:D5:52:AE:20:DA:0C Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f Certificate serial: 019AF24029C573E957034B8F09BA797D0DDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 06:01:22 +0000 Manifest this update: Sat 06 Dec 2025 06:01:22 +0000 Manifest next update: Sun 07 Dec 2025 06:01:22 +0000 Files and hashes: 1: 1v8i4fKHGgVFWMzHMhW8J-xxCqk.roa (hash: 3nrn/SO1kBcjpxN/GEFTE06I2/Ei7ozh8XwfvRrFcmg=) 2: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: 9gJJWHT+Nd3WIdVmZoSRcsXos6CKpr9I4mby3FcvBSo=) 3: clYhAW8kFlSaTpdGL_6AqwLYC_c.roa (hash: XEbICpC7LdXsG9DjCaajLcED5VcPq/8r93ZX2PiFgnw=) 4: nXVN6v3CzmLleKeTxS_kRgT2CK8.roa (hash: oJxgRFyz2Xezz+l0iWGdoRK6g6HPkdzeG09BGt4Hpn8=) 5: yAPFTHuBSG8S3cBogTgaLXQHsIA.roa (hash: Dghvk7oUxYxn4x3kqmECJ3G0zYv5Ok/s1CWEsFSe7A0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:29:c5:73:e9:57:03:4b:8f:09:ba:79:7d:0d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f Validity Not Before: Dec 6 06:01:22 2025 GMT Not After : Dec 7 06:01:22 2025 GMT Subject: CN=a295bb857fd58e6945d3afb8df76d552ae20da0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3b:ca:9a:1d:dc:5a:b7:8f:94:71:32:9a:af: b4:16:8c:fc:8e:04:7c:31:f3:c1:35:96:a0:98:4c: b4:27:f9:9b:df:1c:cc:8f:4e:14:32:51:20:4d:dc: 73:10:eb:29:00:72:ef:b5:8d:3d:f0:eb:35:09:63: 5c:14:20:e8:12:f1:b9:c7:7f:1b:aa:fa:eb:cd:27: c6:fd:2d:a1:aa:93:74:3b:fd:c4:1c:2d:63:d7:57: 1f:0b:a3:d2:7d:2e:b4:df:1a:60:6d:ae:62:3a:7b: 55:36:d5:e3:75:ab:a8:50:80:a8:bc:0e:65:c9:43: 1b:d0:9a:88:72:ac:a9:6f:67:51:c0:21:b2:65:fa: 02:f6:2a:29:3c:6a:cf:e3:eb:df:99:0d:1f:43:fb: 0f:cc:8c:76:a6:17:9b:05:e2:fc:da:9d:33:ba:69: 49:76:a6:e8:f7:58:42:7c:23:73:0e:91:a8:63:63: 86:0d:5d:38:68:17:8e:2b:69:90:f8:f4:4d:51:6e: cf:b3:62:79:a2:29:0e:fd:e5:f0:11:3c:79:69:2f: 3f:d1:60:e9:74:ae:2f:82:2d:1d:8d:40:3b:f4:e2: 44:57:61:ac:4c:70:28:cc:f6:ad:2b:d2:79:8d:b7: df:4b:de:97:1e:20:aa:57:95:47:10:df:d4:24:ed: 0f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:95:BB:85:7F:D5:8E:69:45:D3:AF:B8:DF:76:D5:52:AE:20:DA:0C X509v3 Authority Key Identifier: keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:cc:e3:e0:0d:2e:60:85:5a:49:2d:14:19:ab:30:89:d3:b4: be:8d:53:de:95:1b:46:97:4b:57:8b:f0:cc:50:f0:5d:50:be: d1:be:a1:b9:e1:e3:8b:4d:bb:ac:07:32:09:b0:48:24:ad:69: 4f:fd:45:0a:c3:3d:d6:39:40:6b:c5:4c:61:df:77:bc:bf:68: 34:a6:76:3d:e8:53:1d:a1:ce:d9:cc:4d:7b:aa:cc:d7:8a:ec: f2:c3:1a:78:c2:da:5c:e1:21:d7:14:25:6b:d0:65:38:7e:9b: c5:a3:c9:f9:2e:2f:ac:14:53:e1:5b:57:aa:06:59:e6:dc:27: 15:7b:cc:c8:88:76:dd:3d:9c:93:cc:d0:62:77:81:1e:31:69: ba:b1:9e:cb:36:a8:da:5c:cc:7d:d3:8b:9e:8c:a7:4d:f5:c8: 9a:f2:cd:74:0e:e2:ad:ab:ab:9c:d1:49:88:87:7d:bc:9b:b5: 7e:6a:d2:7b:f0:21:c0:78:13:84:cb:6a:7b:48:c3:bb:a8:2e: 04:5e:02:8d:cf:fe:4b:23:62:9a:ab:dc:31:43:14:ef:7f:26: b3:32:a7:95:20:dc:c0:33:96:e2:bf:67:c6:df:b0:cd:8b:c1: af:bb:0f:8e:c0:b2:26:46:53:bb:6b:57:38:9f:50:4d:43:0b: 05:a5:29:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCnFc+lXA0uPCbp5fQ3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjVkZDk3NjY1YTIzYjFiMTgzZTIyMzgyMmI2NmI1YWU1 MzZhMmYwHhcNMjUxMjA2MDYwMTIyWhcNMjUxMjA3MDYwMTIyWjAzMTEwLwYDVQQD EyhhMjk1YmI4NTdmZDU4ZTY5NDVkM2FmYjhkZjc2ZDU1MmFlMjBkYTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTvKmh3cWrePlHEymq+0Foz8jgR8 MfPBNZagmEy0J/mb3xzMj04UMlEgTdxzEOspAHLvtY098Os1CWNcFCDoEvG5x38b qvrrzSfG/S2hqpN0O/3EHC1j11cfC6PSfS603xpgba5iOntVNtXjdauoUICovA5l yUMb0JqIcqypb2dRwCGyZfoC9iopPGrP4+vfmQ0fQ/sPzIx2phebBeL82p0zumlJ dqbo91hCfCNzDpGoY2OGDV04aBeOK2mQ+PRNUW7Ps2J5oikO/eXwETx5aS8/0WDp dK4vgi0djUA79OJEV2GsTHAozPatK9J5jbffS96XHiCqV5VHEN/UJO0PPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKVu4V/1Y5pRdOvuN921VKuINoMMB8GA1UdIwQY MBaAFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt ZThkNzA3MTdmZjhhLzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh LzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMzj4A0u YIVaSS0UGaswidO0vo1T3pUbRpdLV4vwzFDwXVC+0b6hueHji027rAcyCbBIJK1p T/1FCsM91jlAa8VMYd93vL9oNKZ2PehTHaHO2cxNe6rM14rs8sMaeMLaXOEh1xQl a9BlOH6bxaPJ+S4vrBRT4VtXqgZZ5twnFXvMyIh23T2ck8zQYneBHjFpurGeyzao 2lzMfdOLnoynTfXImvLNdA7iraurnNFJiId9vJu1fmrSe/AhwHgThMtqe0jDu6gu BF4Cjc/+SyNimqvcMUMU738mszKnlSDcwDOW4r9nxt+wzYvBr7sPjsCyJkZTu2tX OJ9QTUMLBaUpJw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:27:14 2025 by rpki-client