This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json) Hash identifier: yTPjLfVaw9lao7WUwoK1X808JiI3MLIIjloD3jtt0Qk= Subject key identifier: E6:69:86:61:4C:94:A5:3A:1C:64:C0:2A:8B:AF:62:30:51:52:E6:5D Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Certificate serial: 019AF23FC46FEB15084615AC2993CC45A266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 06:00:56 +0000 Manifest this update: Sat 06 Dec 2025 06:00:56 +0000 Manifest next update: Sun 07 Dec 2025 06:00:56 +0000 Files and hashes: 1: 34m9tu8-VJMAF9BtHbwX9Jvv0x4.roa (hash: 8cDtrdeF9xJMrCFVsKTBOunUF2EsP6IX5xqHU+sWq6o=) 2: Cy2f1uXj9wbLpl4Aw6ZgdQs_Gm4.roa (hash: otz2U+ZxypMp06tq5uA+DLYREXHhlkXwvT+2vtKIHr0=) 3: JYtV1xya2PeTYSiqPGeg1v3D1hU.roa (hash: jSaIThGpGsn1CtL3kupT6o9d7MS0BOry41A4muvp5uA=) 4: L9Pl17zWKblG0Neut33hMgnvNwg.roa (hash: KjUxc5uZUEZddoMKFPfgxm4nuEI/U5FS/VZwNLhDnYw=) 5: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: /H2cZf0C/C0XpTxvF9r2AWVXkmfUmTIZUY2urVrR5lc=) 6: pN9I61NTpOf1iptAeMEH4NWfXYw.roa (hash: /osyl/RRKnWZO9AXYWEI4cWy1HpYeLX7qYgqul7Ks0g=) 7: rVSBtBZCrH1-ozjLs4EWsLxZEKw.roa (hash: qYE3kOU/oBIWRjp9IVavev7WPsnGehT5UmTJ3lg1M9g=) 8: tonrQJbYKEeFepF8Mg5lWiEbslA.roa (hash: la8VTc6fuTFi7aBGI/izVEZyhP/KVuebx7O6/rsxC7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c4:6f:eb:15:08:46:15:ac:29:93:cc:45:a2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Validity Not Before: Dec 6 06:00:56 2025 GMT Not After : Dec 7 06:00:56 2025 GMT Subject: CN=e66986614c94a53a1c64c02a8baf62305152e65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:7e:32:2a:3f:2d:20:e6:39:36:e0:1b:48: dc:ae:cb:2a:cd:d2:ff:d0:68:77:f0:9c:4b:5d:f7: ef:90:65:a4:69:23:07:a1:26:4b:c7:89:f2:93:da: 5d:88:65:82:ee:80:8f:1d:5c:7e:b3:ad:7b:e5:c2: f2:ca:eb:5a:0c:3e:1a:f7:1f:4d:aa:90:80:cb:01: 5a:ab:29:9a:89:05:90:74:91:13:39:b2:8c:0c:0c: 9f:0b:11:59:b9:0d:41:d5:ff:6a:2e:3f:3c:6e:0d: f0:ab:4e:d7:55:ab:a6:d9:98:53:b8:a6:ca:f7:41: 0a:11:dc:de:c1:a8:a0:7e:d7:7b:5e:85:a1:8d:2b: 2c:89:28:f5:1f:1a:05:24:61:86:96:7c:64:d9:a0: e0:8c:4f:fd:89:1e:49:99:9b:c3:47:82:18:d5:fe: 80:a4:50:cc:ea:ab:76:c0:0a:f4:80:85:23:15:85: a1:3d:a2:0e:70:0b:25:45:a3:55:14:2c:63:de:b0: 52:53:f4:f3:78:8f:4c:55:12:94:2e:56:19:a3:1d: 38:9e:79:60:b8:f2:cd:6b:72:21:0d:61:8d:b0:09: c9:a5:78:5f:a3:7e:93:9e:3c:49:17:b1:68:de:76: 28:9a:f7:f4:d9:9e:de:b1:03:af:fb:78:16:4c:c2: ed:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:69:86:61:4C:94:A5:3A:1C:64:C0:2A:8B:AF:62:30:51:52:E6:5D X509v3 Authority Key Identifier: keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:dc:cf:c1:6a:8b:c1:f5:c8:f4:f5:8e:4c:7c:11:b8:09:ed: 73:25:13:84:9a:a0:f2:3b:92:76:80:d8:ae:05:b0:73:73:4b: c7:98:31:80:1a:21:72:ce:fb:5e:6c:b5:cb:ee:4e:ec:4b:29: 53:75:85:3b:5e:9a:bf:ec:09:f0:91:85:b4:13:e6:f3:e4:2d: 31:a7:56:d7:d1:36:00:35:c9:86:4e:b3:48:d9:2a:a1:0d:2e: 01:c2:68:c4:7e:35:ab:90:6a:16:8a:4c:c4:79:81:ca:98:50: d5:0a:aa:0f:c1:c7:83:3a:1c:4d:2c:04:74:b4:da:d3:ec:21: e3:76:8b:db:c7:42:32:5e:15:c7:bd:19:df:04:28:bc:9e:3d: 8f:10:ee:31:91:e0:c7:6e:89:74:fd:4e:c0:8a:03:dd:44:20: aa:e9:aa:14:cd:e9:de:fe:04:5e:86:bf:d4:c0:10:66:5c:a0: 90:d7:36:8b:45:dd:d1:7b:46:e2:65:d4:ef:2c:dd:03:46:5e: 70:87:83:7b:cf:3e:16:f2:d9:3a:9e:f6:10:9b:c4:e1:e0:15: 4a:c8:89:fc:fd:4c:ca:4d:73:78:2c:dc:39:47:ff:7e:b6:08: 27:7d:05:49:02:34:26:db:66:b6:07:6a:70:48:18:cc:52:48: 99:9f:38:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8Rv6xUIRhWsKZPMRaJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3 OGIzOGQwHhcNMjUxMjA2MDYwMDU2WhcNMjUxMjA3MDYwMDU2WjAzMTEwLwYDVQQD EyhlNjY5ODY2MTRjOTRhNTNhMWM2NGMwMmE4YmFmNjIzMDUxNTJlNjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ5+Mio/LSDmOTbgG0jcrssqzdL/ 0Gh38JxLXffvkGWkaSMHoSZLx4nyk9pdiGWC7oCPHVx+s6175cLyyutaDD4a9x9N qpCAywFaqymaiQWQdJETObKMDAyfCxFZuQ1B1f9qLj88bg3wq07XVaum2ZhTuKbK 90EKEdzewaigftd7XoWhjSssiSj1HxoFJGGGlnxk2aDgjE/9iR5JmZvDR4IY1f6A pFDM6qt2wAr0gIUjFYWhPaIOcAslRaNVFCxj3rBSU/TzeI9MVRKULlYZox04nnlg uPLNa3IhDWGNsAnJpXhfo36TnjxJF7Fo3nYomvf02Z7esQOv+3gWTMLtKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZphmFMlKU6HGTAKouvYjBRUuZdMB8GA1UdIwQY MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt NmIxNDY5YzNiOTVhLzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtzPwWqL wfXI9PWOTHwRuAntcyUThJqg8juSdoDYrgWwc3NLx5gxgBohcs77Xmy1y+5O7Esp U3WFO16av+wJ8JGFtBPm8+QtMadW19E2ADXJhk6zSNkqoQ0uAcJoxH41q5BqFopM xHmByphQ1QqqD8HHgzocTSwEdLTa0+wh43aL28dCMl4Vx70Z3wQovJ49jxDuMZHg x26JdP1OwIoD3UQgqumqFM3p3v4EXoa/1MAQZlygkNc2i0Xd0XtG4mXU7yzdA0Ze cIeDe88+FvLZOp72EJvE4eAVSsiJ/P1Myk1zeCzcOUf/frYIJ30FSQI0Jttmtgdq cEgYzFJImZ84GA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:29:42 2025 by rpki-client