This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft File: znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json) Hash identifier: ZGXTJZ2LunH6vULrAA6M0CrCK5wnWidnQxOPasd9iHw= Subject key identifier: 95:77:00:EA:85:5D:0B:7B:3A:A5:F4:2D:8F:3E:43:15:A7:A4:6C:9D Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0 Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0 Certificate serial: 019AF3520D66D3AAC76165DA77AC62122611 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 11:00:32 +0000 Manifest this update: Sat 06 Dec 2025 11:00:32 +0000 Manifest next update: Sun 07 Dec 2025 11:00:32 +0000 Files and hashes: 1: tI06KHzBBY3ciTxCvrFdxn-AF88.roa (hash: S7ryr3BP0FqkUSqJufb4MUZCom0jlItHHtPlMcuWHB8=) 2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: ygAw64uxx+12CA524/KL/WEU+qixTZ+WLEnDuFPrcZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:0d:66:d3:aa:c7:61:65:da:77:ac:62:12:26:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0 Validity Not Before: Dec 6 11:00:32 2025 GMT Not After : Dec 7 11:00:32 2025 GMT Subject: CN=957700ea855d0b7b3aa5f42d8f3e4315a7a46c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e0:b2:ec:2a:24:09:56:46:19:00:14:d6:9d: 2b:93:d1:c3:60:78:b5:66:68:33:11:29:66:44:09: 9d:8f:d4:20:f9:9e:50:00:da:01:7c:da:df:0a:35: 4f:97:51:6f:7d:a1:58:cf:47:6f:f9:cb:81:76:3f: 77:dc:88:74:c1:ec:0c:48:f8:11:9a:d5:ed:26:b8: e1:1c:01:5f:d3:01:37:d2:e2:73:0e:0a:5d:26:a4: f8:18:25:53:7d:5e:0b:39:2f:7b:01:19:26:98:96: ec:f7:a0:c6:d3:8c:de:09:dc:b2:9e:df:50:94:7d: 5a:5b:d4:99:a9:f0:ec:d7:3f:e8:b9:ae:54:5f:3c: ba:19:4b:76:91:a4:bf:48:0c:b4:6c:c6:6f:b6:4b: 78:5c:71:58:ac:94:18:7a:70:89:9d:63:70:f6:32: e3:79:1e:fc:bb:17:f3:b8:e3:ab:f7:72:23:e2:87: bf:18:46:3a:a7:d3:cf:cb:e3:60:1b:1e:e4:73:a2: 8c:61:8d:8c:72:a8:0d:7d:9c:e9:b4:56:1f:a1:c3: 9f:fb:97:3d:4b:28:0b:40:3f:1b:06:a2:c6:2c:8a: 02:fa:c1:5e:51:0e:a8:82:33:7e:c9:3c:03:fb:e1: e9:7d:22:cd:86:c7:a8:81:14:b4:ff:df:e0:75:8b: 94:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:77:00:EA:85:5D:0B:7B:3A:A5:F4:2D:8F:3E:43:15:A7:A4:6C:9D X509v3 Authority Key Identifier: keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:79:5f:52:66:f4:a5:15:f8:ca:f4:26:27:7c:c0:aa:cb:c1: 47:01:23:7a:b7:b6:92:70:13:3f:00:3b:74:33:09:12:50:95: 94:28:4b:4a:e4:a3:43:a3:4c:76:1a:ac:f6:6c:d5:45:f0:9c: 13:c6:70:32:57:1b:c9:12:e3:00:e6:15:1c:56:c1:80:4c:1b: 4d:bb:bb:48:4d:f0:67:1b:ad:d3:03:29:b4:9e:d5:31:ee:9d: 9b:ec:14:ae:50:aa:3f:c0:fd:da:6d:74:3c:47:a6:85:e0:a8: 80:6e:99:d4:91:6d:8e:96:93:4f:12:e3:59:56:b0:4d:61:e5: 32:7f:34:1d:cb:bf:ea:70:04:0e:ed:26:a6:e2:a9:6e:a2:ce: 65:5d:b5:b7:7b:13:69:4b:68:a7:4a:ab:09:40:92:ac:ed:52: 50:2c:d9:df:6c:54:eb:95:26:41:ec:e6:42:89:87:a0:48:ed: fe:d3:4e:e6:38:09:80:fe:00:6d:0a:f8:75:7c:fa:3e:14:f8: 97:c0:09:fd:4d:cc:34:90:f5:16:63:98:32:a7:86:1b:51:23: 92:54:f3:32:74:86:4e:20:54:6c:15:c7:1f:4e:d9:37:9e:72: 97:01:02:53:c8:6d:b4:92:75:c7:b4:2b:2e:b0:df:61:20:b4: 3c:5d:70:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUg1m06rHYWXad6xiEiYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNzBmZTY5OGU0ZGFlOWQ3YzMyYmMxNTZjNDE4MDY0ZmRj ZmY0YjAwHhcNMjUxMjA2MTEwMDMyWhcNMjUxMjA3MTEwMDMyWjAzMTEwLwYDVQQD Eyg5NTc3MDBlYTg1NWQwYjdiM2FhNWY0MmQ4ZjNlNDMxNWE3YTQ2YzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquCy7CokCVZGGQAU1p0rk9HDYHi1 ZmgzESlmRAmdj9Qg+Z5QANoBfNrfCjVPl1FvfaFYz0dv+cuBdj933Ih0wewMSPgR mtXtJrjhHAFf0wE30uJzDgpdJqT4GCVTfV4LOS97ARkmmJbs96DG04zeCdyynt9Q lH1aW9SZqfDs1z/oua5UXzy6GUt2kaS/SAy0bMZvtkt4XHFYrJQYenCJnWNw9jLj eR78uxfzuOOr93Ij4oe/GEY6p9PPy+NgGx7kc6KMYY2McqgNfZzptFYfocOf+5c9 SygLQD8bBqLGLIoC+sFeUQ6ogjN+yTwD++HpfSLNhseogRS0/9/gdYuUiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJV3AOqFXQt7OqX0LY8+QxWnpGydMB8GA1UdIwQY MBaAFM5w/mmOTa6dfDK8FWxBgGT9z/SwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84NzViYTUtOGJiMS00OGFiLWI0N2Qt ODFmZWEwZjc3Mjg2LzEvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84NzViYTUtOGJiMS00OGFiLWI0N2QtODFmZWEwZjc3Mjg2 LzEvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXlfUmb0 pRX4yvQmJ3zAqsvBRwEjere2knATPwA7dDMJElCVlChLSuSjQ6NMdhqs9mzVRfCc E8ZwMlcbyRLjAOYVHFbBgEwbTbu7SE3wZxut0wMptJ7VMe6dm+wUrlCqP8D92m10 PEemheCogG6Z1JFtjpaTTxLjWVawTWHlMn80Hcu/6nAEDu0mpuKpbqLOZV21t3sT aUtop0qrCUCSrO1SUCzZ32xU65UmQezmQomHoEjt/tNO5jgJgP4AbQr4dXz6PhT4 l8AJ/U3MNJD1FmOYMqeGG1EjklTzMnSGTiBUbBXHH07ZN55ylwECU8httJJ1x7Qr LrDfYSC0PF1wyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:50 2025 by rpki-client