This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json) Hash identifier: r4M9ShFvwf6xFEoqWi2v42I3jmKWS91YdAAfsmtahNc= Subject key identifier: CA:EF:58:33:A8:5F:47:C9:55:ED:C5:62:45:1F:1F:73:1C:11:35:9D Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a Certificate serial: 019AF352955A23C08EBDE90D253AFA879877 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:01:06 +0000 Manifest this update: Sat 06 Dec 2025 11:01:06 +0000 Manifest next update: Sun 07 Dec 2025 11:01:06 +0000 Files and hashes: 1: cvViwCnJHbOmjnS2VIR4xe7m6w0.roa (hash: fo4ubxrjnffY7zW1GcJNKmk2YbysHvDvLAY+YQK8Gj8=) 2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: 14+4CnD/A3oUlLNnIJBdy7jTpCt+nA7Od786TRLsKN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:95:5a:23:c0:8e:bd:e9:0d:25:3a:fa:87:98:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a Validity Not Before: Dec 6 11:01:06 2025 GMT Not After : Dec 7 11:01:06 2025 GMT Subject: CN=caef5833a85f47c955edc562451f1f731c11359d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:22:58:1b:7e:5e:34:f3:c4:36:50:80:c9: eb:ab:3e:3b:d0:f3:69:03:d1:a5:f4:54:56:63:f7: e9:30:39:62:63:26:c4:57:b6:0a:99:e4:db:d6:50: 54:1d:06:70:9f:fd:63:d1:fb:b3:60:96:9d:4b:51: 08:1f:ea:73:22:88:6b:c7:e5:7f:2a:28:3a:1c:fc: 68:19:b2:d9:3c:e4:b7:e1:18:e4:fa:cb:21:b6:1e: 4f:84:56:2f:d5:51:f4:61:16:4b:03:84:4f:5a:c4: 53:24:82:57:f0:2a:43:c5:26:97:06:25:2d:a8:4d: 71:ad:75:12:a9:4d:2c:01:6e:b1:20:f4:18:d5:cf: f5:21:48:c9:62:7a:b4:07:6a:62:98:8e:e7:e6:fe: 8d:d2:7c:58:80:e8:c8:6b:6a:98:e8:44:2d:9a:53: 1a:1a:99:93:3b:ea:fd:34:b6:db:ee:cb:d0:9a:96: 6a:98:9b:6a:f3:fe:ed:6e:65:8b:73:47:e8:c9:7c: 06:b0:e7:a5:d4:78:b8:3c:fe:ac:4a:c5:cf:19:73: 33:9b:d6:82:05:5a:06:ba:87:67:fa:58:7c:38:41: 7d:42:e1:aa:a8:da:67:43:95:ae:b6:bd:5d:37:b7: 0c:ca:c0:3b:18:31:3f:9f:fb:17:b8:26:21:a8:c2: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EF:58:33:A8:5F:47:C9:55:ED:C5:62:45:1F:1F:73:1C:11:35:9D X509v3 Authority Key Identifier: keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f1:41:47:81:22:90:d2:70:5c:18:64:5b:f2:b5:ef:85:d8: 4d:0a:18:44:94:ac:e9:57:ae:d6:f4:62:e2:22:0e:ad:83:9a: e8:a0:a0:b1:99:71:ba:6b:29:1c:eb:e2:f4:fb:c4:eb:09:59: e5:b4:b0:e6:49:bc:75:d6:fd:18:45:56:7a:82:f4:ea:e2:a5: 2d:6f:b4:88:fe:9c:04:9a:6a:f9:b0:49:1c:9a:e8:d6:6a:b0: f4:b9:94:61:12:35:21:67:6c:56:30:d3:35:ef:1b:15:b1:c6: 0c:3a:7f:a4:95:83:8d:fd:a4:15:4e:24:1f:07:bf:0a:86:b8: c6:a9:60:ba:51:45:6c:fb:4c:96:14:e1:28:8e:ec:6b:2d:6c: 7b:e6:3c:0e:88:c9:e8:83:c1:3f:02:c6:78:44:5f:40:74:f3: b7:07:2e:4c:50:d5:d3:eb:89:98:2d:31:37:52:ac:a1:b2:dc: 65:df:65:53:0e:eb:f7:ed:04:e4:06:3c:1e:4a:c5:f1:6f:5d: d0:c7:99:f2:3a:6f:0e:92:f9:de:d9:fb:37:93:a6:91:4a:bd: 7b:62:89:3c:cc:af:44:2e:e4:c5:39:8d:30:0c:23:8e:99:cf: 9f:1f:59:a1:e1:75:08:74:fd:c9:35:bd:b3:bd:46:8f:80:f7: 24:6b:47:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpVaI8COvekNJTr6h5h3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMzIzMTYzYmJiNDY1ZjJhMGZhMmY5M2ZhNTBlZjNiMGQ0 YzZhOWEwHhcNMjUxMjA2MTEwMTA2WhcNMjUxMjA3MTEwMTA2WjAzMTEwLwYDVQQD EyhjYWVmNTgzM2E4NWY0N2M5NTVlZGM1NjI0NTFmMWY3MzFjMTEzNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymciWBt+XjTzxDZQgMnrqz470PNp A9Gl9FRWY/fpMDliYybEV7YKmeTb1lBUHQZwn/1j0fuzYJadS1EIH+pzIohrx+V/ Kig6HPxoGbLZPOS34Rjk+sshth5PhFYv1VH0YRZLA4RPWsRTJIJX8CpDxSaXBiUt qE1xrXUSqU0sAW6xIPQY1c/1IUjJYnq0B2pimI7n5v6N0nxYgOjIa2qY6EQtmlMa GpmTO+r9NLbb7svQmpZqmJtq8/7tbmWLc0foyXwGsOel1Hi4PP6sSsXPGXMzm9aC BVoGuodn+lh8OEF9QuGqqNpnQ5Wutr1dN7cMysA7GDE/n/sXuCYhqMJkhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrvWDOoX0fJVe3FYkUfH3McETWdMB8GA1UdIwQY MBaAFMwyMWO7tGXyoPovk/pQ7zsNTGqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTIt MWVmMDA5MGI3MTU0LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTItMWVmMDA5MGI3MTU0 LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfFBR4Ei kNJwXBhkW/K174XYTQoYRJSs6Veu1vRi4iIOrYOa6KCgsZlxumspHOvi9PvE6wlZ 5bSw5km8ddb9GEVWeoL06uKlLW+0iP6cBJpq+bBJHJro1mqw9LmUYRI1IWdsVjDT Ne8bFbHGDDp/pJWDjf2kFU4kHwe/Coa4xqlgulFFbPtMlhThKI7say1se+Y8DojJ 6IPBPwLGeERfQHTztwcuTFDV0+uJmC0xN1KsobLcZd9lUw7r9+0E5AY8HkrF8W9d 0MeZ8jpvDpL53tn7N5OmkUq9e2KJPMyvRC7kxTmNMAwjjpnPnx9ZoeF1CHT9yTW9 s71Gj4D3JGtHEw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:57 2025 by rpki-client