This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft File: Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft (raw, json) Hash identifier: 9AhTOucKUnQ6rw7/3Kr2/D5Aotdj7vY/W5rlIwSSeic= Subject key identifier: 53:7D:2D:22:62:6C:D7:FF:1F:CA:26:28:2A:34:62:FC:96:FE:B8:98 Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C Certificate issuer: /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c Certificate serial: 019AF1D1CFE7A496E8D3D749642E360308CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: VTMTtjqH-zixo9hQexyKWnuO0p4.roa (hash: QpOOm2VlJ9G/CZEjnwWuM3L+t5sPw22wtkcRl/OMgAk=) 2: Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl (hash: yvI0gU+mUDO5RIQdyfqrgtnq9546nWLNlxeIlf3ZCG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:cf:e7:a4:96:e8:d3:d7:49:64:2e:36:03:08:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=537d2d22626cd7ff1fca26282a3462fc96feb898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:5c:14:cf:39:70:77:74:3f:96:29:57:10: 36:9b:c5:2c:10:75:14:cf:34:b4:e1:2d:9d:27:39: fa:2a:e4:55:42:13:8f:74:bf:a6:69:21:1e:38:5e: f2:8b:bb:a3:df:b9:64:c8:3c:a7:f0:e7:6a:7d:60: 95:04:98:bd:07:a9:02:9b:2d:70:e4:9b:f5:8f:fb: b6:b1:8b:0c:b5:75:21:01:b7:d9:6b:ba:7a:8a:43: 86:39:54:22:15:9e:14:3d:32:aa:e1:7e:a5:b5:0b: 47:4e:97:79:ec:f6:74:90:fe:9d:f6:8e:86:d0:e8: d5:2a:b9:ba:0f:a7:89:bf:42:2d:e2:70:0b:f5:16: c9:0b:e5:76:11:8b:4c:ad:f6:e8:fa:c8:a1:ca:06: 29:97:8d:48:c5:43:33:2c:4a:8b:d8:68:44:ee:77: 4c:18:80:35:f3:10:26:10:c7:b5:65:4a:f3:ef:91: 3b:a7:2b:2e:6b:fe:20:7b:5c:dd:6b:6e:d2:bf:4d: 38:84:d1:6c:fe:ac:6a:61:b6:ae:4b:3c:ad:cf:bf: e9:4c:93:59:c8:54:db:81:39:1e:7f:59:3f:11:c1: 9f:2c:e4:0f:b7:17:d4:7e:a7:1c:2b:7c:b2:5a:65: 0d:22:89:9a:69:f1:b5:4e:70:53:d2:95:06:ab:23: 0f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7D:2D:22:62:6C:D7:FF:1F:CA:26:28:2A:34:62:FC:96:FE:B8:98 X509v3 Authority Key Identifier: keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c7:40:50:1a:27:a9:fe:56:8e:18:69:b3:06:aa:28:bb:68: e6:ab:3a:0a:30:37:9c:07:76:de:db:cc:12:62:ed:53:76:bf: bd:8f:56:36:7c:cc:d0:54:ed:d9:1a:bb:da:d7:49:be:e7:f6: 1f:47:4e:cb:5b:db:78:6e:5d:59:20:3d:35:af:9b:e0:52:48: 0f:ae:a6:2b:4c:ca:04:a5:aa:47:ad:8d:f0:cd:7e:51:bb:d8: fb:6a:83:84:97:09:22:0b:35:a4:87:ac:38:51:59:43:eb:3d: 92:da:99:b7:eb:ce:c2:55:61:7b:09:85:d3:79:cd:fc:e4:c7: 8f:a0:6a:bc:aa:84:1e:2d:fb:a9:83:2c:3c:33:8c:3f:d2:c5: 46:4a:c8:9d:35:db:9d:b6:f2:e0:d2:f4:4b:90:d2:58:01:35: 6b:c1:36:1a:77:29:c0:65:81:b4:f6:0d:84:a5:8d:9f:cf:04: 69:2b:21:59:1d:64:f2:61:44:4e:e4:9c:26:df:1b:5b:58:db: 02:dc:72:8a:a0:6d:87:9e:ba:14:9d:ee:d4:c1:dd:e1:7d:53: db:e8:3f:6a:0e:4f:e8:b9:d7:95:a3:21:79:06:9c:20:0a:9b: 4f:d6:f4:62:00:07:f6:fa:95:0b:4b:cc:f5:58:d9:13:1f:37: 5c:9c:df:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c/npJbo09dJZC42AwjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZmYxZTZhNWNjM2MwNjk3NjI5ZjRhZmJiMGIwN2FlNzkx MzNjNWMwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD Eyg1MzdkMmQyMjYyNmNkN2ZmMWZjYTI2MjgyYTM0NjJmYzk2ZmViODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY1cFM85cHd0P5YpVxA2m8UsEHUU zzS04S2dJzn6KuRVQhOPdL+maSEeOF7yi7uj37lkyDyn8OdqfWCVBJi9B6kCmy1w 5Jv1j/u2sYsMtXUhAbfZa7p6ikOGOVQiFZ4UPTKq4X6ltQtHTpd57PZ0kP6d9o6G 0OjVKrm6D6eJv0It4nAL9RbJC+V2EYtMrfbo+sihygYpl41IxUMzLEqL2GhE7ndM GIA18xAmEMe1ZUrz75E7pysua/4ge1zda27Sv004hNFs/qxqYbauSzytz7/pTJNZ yFTbgTkef1k/EcGfLOQPtxfUfqccK3yyWmUNIomaafG1TnBT0pUGqyMPZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFN9LSJibNf/H8omKCo0YvyW/riYMB8GA1UdIwQY MBaAFGb/Hmpcw8Bpdin0r7sLB655EzxcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnY4ZWFsekR3R2wyS2ZTdnV3c0hybmtUUEZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wN2Q1ZWItNjIxMS00ZDdhLWE5NmQt ZWU0Mjc0NWQ4ZmQxLzEvWnY4ZWFsekR3R2wyS2ZTdnV3c0hybmtUUEZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wN2Q1ZWItNjIxMS00ZDdhLWE5NmQtZWU0Mjc0NWQ4ZmQx LzEvWnY4ZWFsekR3R2wyS2ZTdnV3c0hybmtUUEZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMdAUBon qf5WjhhpswaqKLto5qs6CjA3nAd23tvMEmLtU3a/vY9WNnzM0FTt2Rq72tdJvuf2 H0dOy1vbeG5dWSA9Na+b4FJID66mK0zKBKWqR62N8M1+UbvY+2qDhJcJIgs1pIes OFFZQ+s9ktqZt+vOwlVhewmF03nN/OTHj6BqvKqEHi37qYMsPDOMP9LFRkrInTXb nbby4NL0S5DSWAE1a8E2GncpwGWBtPYNhKWNn88EaSshWR1k8mFETuScJt8bW1jb AtxyiqBth566FJ3u1MHd4X1T2+g/ag5P6LnXlaMheQacIAqbT9b0YgAH9vqVC0vM 9VjZEx83XJzfQw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:42 2025 by rpki-client