This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft File: zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json) Hash identifier: SggL3lEV1OmMkuOvc/6Or0cFB5pwtTsHShTl5D04Z5U= Subject key identifier: 3B:A8:10:7A:0A:14:37:09:00:A8:4C:11:8A:10:60:FB:D0:E9:CD:DB Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32 Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832 Certificate serial: 019AF19A967ABF871A9DEA8D42434E62FA9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft Manifest number: 0316 Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: ckBMIFhsxRrJd8g3723Ngrkob0E.roa (hash: 2+AxiQZG50JBBA5rPTQbIhRHNAnVw7yeAiKa0FFBttM=) 2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: EQGX1GK4Bw/7mTNbLgVn3K5uFy8O8G/D0qLV+M9GIOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:96:7a:bf:87:1a:9d:ea:8d:42:43:4e:62:fa:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832 Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=3ba8107a0a14370900a84c118a1060fbd0e9cddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:26:23:47:fb:e2:27:8d:59:fe:cd:dc:75: 51:84:67:c5:87:95:0b:b4:3c:10:0c:b2:32:2f:c3: 60:b6:fc:12:14:6e:f8:68:bd:55:2f:b1:42:55:f8: e9:6a:86:1f:d0:f8:9d:3e:f6:5c:37:75:ad:1b:0d: d4:31:22:78:21:33:5a:37:f4:0d:d2:a2:dd:6f:24: 2c:4e:e9:c2:75:34:6a:cd:14:4f:20:f5:75:fa:e7: ec:2d:d9:b8:6c:40:66:bf:66:40:e2:22:1a:4a:e1: 4c:f7:7a:b2:eb:0e:cc:4d:f5:04:db:aa:e7:64:ba: fd:10:47:49:da:f8:2b:a0:a5:5c:ad:e3:57:a5:9e: e3:fd:20:2a:e5:7c:78:bd:84:25:ef:7e:2d:f8:b7: ba:12:85:6f:92:91:87:3c:91:cd:d6:c5:c8:92:cc: b2:f5:c0:21:9f:e3:3e:72:16:80:b0:1d:29:0d:e8: 41:77:64:4f:3a:ea:fe:cb:9d:c4:d4:9a:5e:c9:6a: df:6c:bb:3d:cf:a5:cd:4c:3e:dc:d0:11:3f:cd:da: 4d:44:ae:6f:e5:36:0e:4f:a6:f1:99:53:f6:6b:7e: 44:b6:b3:c2:a6:7f:11:c5:29:6b:4d:bb:4d:45:3e: ba:65:39:1e:b3:26:b1:72:43:f6:d8:f2:ba:7d:7f: 26:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A8:10:7A:0A:14:37:09:00:A8:4C:11:8A:10:60:FB:D0:E9:CD:DB X509v3 Authority Key Identifier: keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:26:f1:85:d9:35:7a:93:e9:aa:14:05:8e:2c:58:38:b2:ea: bd:de:4b:d0:9d:56:af:5e:db:6f:46:65:45:13:b5:63:3e:c9: d0:60:24:73:ed:f9:83:34:48:82:08:26:dc:51:0f:02:36:20: 5f:a2:88:2f:69:38:86:b2:59:dc:8c:72:05:7f:3b:d4:c0:5a: 6d:4c:1c:84:59:46:db:6a:37:3f:cb:97:74:0d:d7:a8:72:8e: 63:f6:20:92:10:40:61:97:48:f7:b8:6e:42:e8:89:5c:26:c3: 05:61:47:15:67:c8:72:42:59:7a:26:5b:7c:c1:78:86:ec:56: 1d:f1:30:4e:ad:92:8e:b4:34:6d:d4:69:8a:ca:55:78:18:77: 99:5b:a5:9f:a7:b4:16:4d:c0:9f:e6:69:a2:57:06:2a:e5:17: 3f:10:49:47:1d:b6:66:61:d7:d3:7d:39:63:4a:01:c0:3c:27: 8a:7a:38:1f:08:51:9a:2e:ef:49:88:85:a0:0e:41:02:4f:dc: b7:34:55:66:46:b4:cc:96:4e:50:0e:45:c6:c2:64:6a:05:38: 62:9f:54:8f:13:76:6a:31:e6:10:cf:ac:66:d0:8a:a1:67:05: e8:fd:b8:84:0d:6c:b4:44:16:ac:74:77:26:e5:f7:3c:03:1f: a7:6f:4e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpZ6v4caneqNQkNOYvqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDJkYzRmMzhmOTZiNmQ0Nzc5Njk4OGVjZGRmMGM2ZDBj NGU4MzIwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD EygzYmE4MTA3YTBhMTQzNzA5MDBhODRjMTE4YTEwNjBmYmQwZTljZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs70mI0f74ieNWf7N3HVRhGfFh5UL tDwQDLIyL8NgtvwSFG74aL1VL7FCVfjpaoYf0PidPvZcN3WtGw3UMSJ4ITNaN/QN 0qLdbyQsTunCdTRqzRRPIPV1+ufsLdm4bEBmv2ZA4iIaSuFM93qy6w7MTfUE26rn ZLr9EEdJ2vgroKVcreNXpZ7j/SAq5Xx4vYQl734t+Le6EoVvkpGHPJHN1sXIksyy 9cAhn+M+chaAsB0pDehBd2RPOur+y53E1JpeyWrfbLs9z6XNTD7c0BE/zdpNRK5v 5TYOT6bxmVP2a35EtrPCpn8RxSlrTbtNRT66ZTkesyaxckP22PK6fX8mbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuoEHoKFDcJAKhMEYoQYPvQ6c3bMB8GA1UdIwQY MBaAFMzS3E84+WttR3lpiOzd8MbQxOgyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YTJlNWYtOWJiOS00M2E0LWI0NTIt NDYwYzg5YjM5MmIzLzEvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni82YTJlNWYtOWJiOS00M2E0LWI0NTItNDYwYzg5YjM5MmIz LzEvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSbxhdk1 epPpqhQFjixYOLLqvd5L0J1Wr17bb0ZlRRO1Yz7J0GAkc+35gzRIgggm3FEPAjYg X6KIL2k4hrJZ3IxyBX871MBabUwchFlG22o3P8uXdA3XqHKOY/YgkhBAYZdI97hu QuiJXCbDBWFHFWfIckJZeiZbfMF4huxWHfEwTq2SjrQ0bdRpispVeBh3mVuln6e0 Fk3An+ZpolcGKuUXPxBJRx22ZmHX0305Y0oBwDwnino4HwhRmi7vSYiFoA5BAk/c tzRVZka0zJZOUA5FxsJkagU4Yp9UjxN2ajHmEM+sZtCKoWcF6P24hA1stEQWrHR3 JuX3PAMfp29ONg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:55 2025 by rpki-client