This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft File: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft (raw, json) Hash identifier: EwYniXhOxNuGWXlkIRCyNiRhyNwEjWo00UwizA3q5yc= Subject key identifier: 50:96:31:A5:73:EF:39:62:59:6C:42:7C:43:24:1C:76:0E:20:0D:BD Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538 Certificate serial: 019AF3C07E0027E1A877FEED881C7F90CB97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft Manifest number: 0A54 Signing time: Sat 06 Dec 2025 13:01:09 +0000 Manifest this update: Sat 06 Dec 2025 13:01:09 +0000 Manifest next update: Sun 07 Dec 2025 13:01:09 +0000 Files and hashes: 1: GGIWecpIopyHoGkyMoac3XO9YI4.roa (hash: 9Tukemon/VB7WwBPqptslNoQ4E03a3N7Hs7ZGYVz5y8=) 2: SVFzdzAysgncimjsTM8ZPB01ik4.roa (hash: 4JCWCB2S361UZ2LToq4NVhBdfOkjLeEFo50YiBDwMdo=) 3: UGEidt7A5RBgDSJN2enYLor_7Sw.roa (hash: Ot0TYYvqctoOalqMeGcLH0JJ7jIcv187XU8D5PJV2GY=) 4: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl (hash: Cl5HyOIYF69uK1WC3mkAvjoQ0tVswQ8syesqcrFyuEk=) 5: xpTG82WAvygwU1980tZbJy-4VWI.roa (hash: 24TzHAnioYJA0NjqeaHw1acZCSVNR7w42ePz6kKrd88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:7e:00:27:e1:a8:77:fe:ed:88:1c:7f:90:cb:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538 Validity Not Before: Dec 6 13:01:09 2025 GMT Not After : Dec 7 13:01:09 2025 GMT Subject: CN=509631a573ef3962596c427c43241c760e200dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c4:eb:32:7d:32:b4:15:98:0b:b7:cb:ec:1b: 5e:45:34:61:dd:fc:19:da:72:7a:1a:20:c1:0f:bf: f1:db:ef:6c:3d:9d:be:b9:36:e6:e2:89:d0:79:57: c5:1e:de:87:0a:74:18:4a:23:62:71:bb:d3:17:d2: 8c:94:66:fc:8a:ae:ac:38:95:97:e2:89:3d:f1:97: c7:1c:d1:35:f7:08:1a:a4:3a:af:83:36:68:c0:d9: 09:4a:b4:5f:ea:80:38:68:32:66:69:be:49:f6:32: 41:ac:4e:78:d3:b1:f2:6b:82:eb:2d:a9:19:22:c5: 33:8c:58:6f:b6:64:fb:bb:34:16:0b:07:7e:c8:29: 52:2d:40:cd:bd:85:a7:e8:4d:9c:3a:41:ff:92:dd: 2b:73:87:0f:77:ef:10:70:8c:f9:55:6f:20:2e:8b: f3:3c:3d:b4:0c:35:e2:f1:a0:b0:16:d2:0c:76:51: f3:6a:9b:37:ac:ed:3a:ba:4c:ef:93:03:6d:1d:f4: 76:cb:ac:16:bf:4f:90:10:48:93:8d:27:ae:f0:83: ab:87:5d:86:91:fc:53:dc:f3:e4:0a:bd:05:23:f9: f0:b1:2a:b9:bc:17:72:e8:e1:bd:d9:4c:6c:bf:0c: 69:58:8f:e6:c3:24:15:05:17:2d:b8:10:fe:8f:c6: c5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:96:31:A5:73:EF:39:62:59:6C:42:7C:43:24:1C:76:0E:20:0D:BD X509v3 Authority Key Identifier: keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a0:94:a8:0c:2c:82:57:8f:13:f0:77:bf:62:93:1f:4d:c5: 52:3d:ab:21:bb:5a:af:ab:5b:d1:da:af:17:0f:a4:a5:49:06: 3c:e7:be:7d:5c:f5:4a:ee:32:dc:50:6e:b2:4d:9c:a4:0d:db: 3d:2c:99:85:7c:e7:00:6d:7b:d1:64:b4:62:97:75:e5:63:9d: 90:d8:83:2f:87:00:65:4a:75:ee:89:17:12:ef:eb:d3:60:04: d8:76:f7:4a:74:3a:39:3f:b4:3b:bc:f8:5f:a6:cb:64:eb:cb: 17:ca:ea:56:f9:28:49:0a:37:ba:c7:6a:40:78:78:40:30:58: 7c:68:6f:31:c5:20:8b:6f:11:ea:bd:5a:d9:fc:5e:a7:06:19: 6d:f2:f1:58:8b:c9:4a:34:4c:48:99:43:a6:83:c7:50:e4:2c: ac:4f:f1:da:71:c8:90:83:73:f7:79:7f:a1:f7:8f:01:65:50: dc:2b:3f:0b:95:10:75:4f:fe:dd:57:24:10:6b:94:1d:a3:a3: ba:6c:91:30:9a:b3:2f:33:07:d2:c5:91:c2:2a:5e:60:8e:34: 10:e4:0d:b0:fc:75:2b:bc:10:53:dd:1e:a8:9d:2e:a1:73:af: 80:02:0c:e7:da:51:52:ec:4e:c4:5d:12:5e:e0:19:50:9f:04: 61:27:f0:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwH4AJ+God/7tiBx/kMuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDRlODcyMzQ1MGQwYTcxMGMzMmQ5MGZmZWExODUyOTEw NGU1MzgwHhcNMjUxMjA2MTMwMTA5WhcNMjUxMjA3MTMwMTA5WjAzMTEwLwYDVQQD Eyg1MDk2MzFhNTczZWYzOTYyNTk2YzQyN2M0MzI0MWM3NjBlMjAwZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMTrMn0ytBWYC7fL7BteRTRh3fwZ 2nJ6GiDBD7/x2+9sPZ2+uTbm4onQeVfFHt6HCnQYSiNicbvTF9KMlGb8iq6sOJWX 4ok98ZfHHNE19wgapDqvgzZowNkJSrRf6oA4aDJmab5J9jJBrE5407Hya4LrLakZ IsUzjFhvtmT7uzQWCwd+yClSLUDNvYWn6E2cOkH/kt0rc4cPd+8QcIz5VW8gLovz PD20DDXi8aCwFtIMdlHzaps3rO06ukzvkwNtHfR2y6wWv0+QEEiTjSeu8IOrh12G kfxT3PPkCr0FI/nwsSq5vBdy6OG92UxsvwxpWI/mwyQVBRctuBD+j8bFqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCWMaVz7zliWWxCfEMkHHYOIA29MB8GA1UdIwQY MBaAFGTU6HI0UNCnEMMtkP/qGFKRBOU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzIt NDIyYWVkM2E3NzAyLzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzItNDIyYWVkM2E3NzAy LzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKCUqAws glePE/B3v2KTH03FUj2rIbtar6tb0dqvFw+kpUkGPOe+fVz1Su4y3FBusk2cpA3b PSyZhXznAG170WS0Ypd15WOdkNiDL4cAZUp17okXEu/r02AE2Hb3SnQ6OT+0O7z4 X6bLZOvLF8rqVvkoSQo3usdqQHh4QDBYfGhvMcUgi28R6r1a2fxepwYZbfLxWIvJ SjRMSJlDpoPHUOQsrE/x2nHIkINz93l/ofePAWVQ3Cs/C5UQdU/+3VckEGuUHaOj umyRMJqzLzMH0sWRwipeYI40EOQNsPx1K7wQU90eqJ0uoXOvgAIM59pRUuxOxF0S XuAZUJ8EYSfwZg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:25:31 2025 by rpki-client