This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft File: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft (raw, json) Hash identifier: eczhjF6FxQVDvSW99YlirUp6edL0mnvJMSeuLBn8M2Y= Subject key identifier: 5E:DD:FD:06:E9:02:32:AC:9F:03:C2:C1:20:58:8C:B6:E9:85:28:01 Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB Certificate issuer: /CN=6431e960cd061039b3b27fd25d4160771c498bab Certificate serial: 019AF50BA06DE2DCD89D8429DE58C53CDC72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft Manifest number: 13B6 Signing time: Sat 06 Dec 2025 19:02:50 +0000 Manifest this update: Sat 06 Dec 2025 19:02:50 +0000 Manifest next update: Sun 07 Dec 2025 19:02:50 +0000 Files and hashes: 1: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl (hash: W0QZTDmem9dkrbFx3V4zTbyONF81QKalInSHDybHgMY=) 2: ZNva-8ABsvjJ6HrNFF7Xd55KW-w.roa (hash: nx2aCY2Bfbi+2/xFJXRwWrGYEeyRAMv/De92goZyeZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:a0:6d:e2:dc:d8:9d:84:29:de:58:c5:3c:dc:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab Validity Not Before: Dec 6 19:02:50 2025 GMT Not After : Dec 7 19:02:50 2025 GMT Subject: CN=5eddfd06e90232ac9f03c2c120588cb6e9852801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:89:c7:01:95:6d:ec:00:32:00:99:e7:79:5b: 70:cb:b3:bc:56:b4:4f:4f:65:56:a8:74:fa:d2:6a: 25:24:51:ba:48:c8:50:99:82:9a:a9:27:83:1d:64: cb:a3:08:59:86:24:97:4d:0f:dd:af:54:ea:b7:4e: b9:ff:67:fa:6d:c5:92:4a:9a:1d:87:d2:21:13:fa: 6f:c9:7e:fe:a6:3e:a5:e2:d4:1e:05:99:ec:9d:37: b2:4d:6a:42:fe:3d:e6:e7:9d:e1:23:3a:3f:32:4b: f6:fe:aa:a7:47:17:9f:59:af:78:61:29:83:a7:25: 81:54:71:f8:fb:68:f4:71:ca:af:75:eb:9b:19:e0: fa:7a:43:a4:b0:00:94:52:c3:b7:25:26:28:5c:ed: 0e:29:23:ca:45:82:6d:a8:13:61:ca:02:8e:f4:0a: 56:1a:65:c6:5f:a8:7c:29:c3:b5:ee:ef:61:40:5b: 90:89:2b:84:2f:82:25:31:7a:c5:91:73:c7:71:75: 36:72:85:8c:5d:24:3b:1b:90:07:77:b6:a5:df:1b: c9:6f:f3:6f:a6:e2:5d:aa:90:d0:8f:86:3f:23:b6: cb:2e:2f:0f:e0:11:fb:0f:47:0f:bf:89:4f:ee:e8: 2b:5a:41:21:17:09:05:34:e1:dc:5a:51:3f:7d:f9: 52:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DD:FD:06:E9:02:32:AC:9F:03:C2:C1:20:58:8C:B6:E9:85:28:01 X509v3 Authority Key Identifier: keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:5c:86:a9:f3:50:05:d5:8e:08:3f:fd:d4:06:87:5c:64:5e: b1:51:cf:70:9b:fb:25:d0:46:3c:e8:02:ef:f2:fd:ca:05:f3: a1:48:b7:d6:29:23:08:e5:c6:3f:26:69:b2:da:43:e9:ab:75: 09:05:1b:cf:e5:d7:22:75:d5:aa:de:29:92:2e:3b:2d:95:42: 97:3d:80:e1:d2:ad:70:b6:d9:23:cd:fd:1a:06:98:b1:0a:2f: 74:e8:31:fc:2c:38:75:c9:cb:15:93:fe:02:b3:2e:9d:5c:d0: 6b:de:5d:9e:e9:08:b2:54:09:f1:e9:54:d8:0c:29:de:20:a1: 21:f6:dd:9e:3b:d5:ec:44:1b:17:1a:90:24:47:30:40:10:cd: 3c:3f:7a:5d:b9:0b:c3:33:eb:7e:be:5c:f4:f3:11:de:42:f6: bf:a2:55:20:f3:06:14:a0:3b:87:9e:d9:eb:81:0b:bd:63:68: b4:ae:50:38:ff:e6:f0:72:2b:30:b5:16:bf:12:db:19:7d:33: 94:bc:20:26:4d:6a:1a:a6:c5:76:bb:4c:7a:f1:86:6c:e2:c1: e7:0a:28:ec:3e:c1:d7:ef:ab:b7:64:c1:eb:08:a6:f9:97:6d: 24:ec:5a:5b:3f:e1:b8:41:15:3a:ce:0b:b5:8c:54:55:8c:7d: 5a:08:63:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C6Bt4tzYnYQp3ljFPNxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MzFlOTYwY2QwNjEwMzliM2IyN2ZkMjVkNDE2MDc3MWM0 OThiYWIwHhcNMjUxMjA2MTkwMjUwWhcNMjUxMjA3MTkwMjUwWjAzMTEwLwYDVQQD Eyg1ZWRkZmQwNmU5MDIzMmFjOWYwM2MyYzEyMDU4OGNiNmU5ODUyODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0onHAZVt7AAyAJnneVtwy7O8VrRP T2VWqHT60molJFG6SMhQmYKaqSeDHWTLowhZhiSXTQ/dr1Tqt065/2f6bcWSSpod h9IhE/pvyX7+pj6l4tQeBZnsnTeyTWpC/j3m553hIzo/Mkv2/qqnRxefWa94YSmD pyWBVHH4+2j0ccqvdeubGeD6ekOksACUUsO3JSYoXO0OKSPKRYJtqBNhygKO9ApW GmXGX6h8KcO17u9hQFuQiSuEL4IlMXrFkXPHcXU2coWMXSQ7G5AHd7al3xvJb/Nv puJdqpDQj4Y/I7bLLi8P4BH7D0cPv4lP7ugrWkEhFwkFNOHcWlE/fflSHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7d/QbpAjKsnwPCwSBYjLbphSgBMB8GA1UdIwQY MBaAFGQx6WDNBhA5s7J/0l1BYHccSYurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZmQ5MzEtOWYyMi00OWYzLWJlNTct ZTlkYWY3OWViNzVlLzEvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi80ZmQ5MzEtOWYyMi00OWYzLWJlNTctZTlkYWY3OWViNzVl LzEvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1yGqfNQ BdWOCD/91AaHXGResVHPcJv7JdBGPOgC7/L9ygXzoUi31ikjCOXGPyZpstpD6at1 CQUbz+XXInXVqt4pki47LZVClz2A4dKtcLbZI839GgaYsQovdOgx/Cw4dcnLFZP+ ArMunVzQa95dnukIslQJ8elU2Awp3iChIfbdnjvV7EQbFxqQJEcwQBDNPD96XbkL wzPrfr5c9PMR3kL2v6JVIPMGFKA7h57Z64ELvWNotK5QOP/m8HIrMLUWvxLbGX0z lLwgJk1qGqbFdrtMevGGbOLB5woo7D7B1++rt2TB6wim+ZdtJOxaWz/huEEVOs4L tYxUVYx9WghjfA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:08 2025 by rpki-client