This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft File: ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json) Hash identifier: geeoAxFJ63YdyXPBhOOnis1WPpng9Uv1GRT7uvaXujs= Subject key identifier: D5:61:31:2E:B5:B7:F5:DD:F6:6F:31:4A:DC:E4:85:F3:A9:91:8C:D1 Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05 Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705 Certificate serial: 019AF12D2B8E9A3D2AA9E815490E1E3D0BC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft Manifest number: 0CB4 Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: LsPOYMRIkwCviikK1SggYlQsE6c.roa (hash: C4ntpCFi4UgQNTh+MTX375uysoH85gdlFAEV6hZ2Gtw=) 2: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: WkfOMqhraEgiRaBEGoPb73uydK5rZwhkPEPLjmAod/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2b:8e:9a:3d:2a:a9:e8:15:49:0e:1e:3d:0b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705 Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=d561312eb5b7f5ddf66f314adce485f3a9918cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:a0:87:d9:a2:63:87:8b:3d:e5:11:ca:cd: cb:6e:05:7b:51:60:e2:7a:b8:de:d7:60:11:41:a3: e9:72:49:b7:3c:61:3d:99:75:9a:c1:47:64:11:31: 41:e2:1f:ca:cb:67:f2:cc:da:27:2d:5a:7c:ef:04: c0:cd:1e:57:88:f6:78:47:b2:ff:fb:c3:18:ff:ae: d8:e3:5f:20:b1:4d:26:de:30:56:f8:d1:5c:0f:f1: 83:4a:cf:8a:4a:21:29:36:01:73:92:0e:29:1e:e2: d4:61:d4:60:da:fa:69:48:89:2c:c2:99:a0:54:80: 22:9a:d6:b4:6e:2f:04:c4:39:d6:73:32:ad:86:ec: d0:12:c7:1b:28:b1:c3:5b:e2:63:f4:a9:ad:96:46: 66:02:b1:bb:3c:87:4b:7c:8e:ae:9c:c7:cf:0d:25: 68:c0:bb:e4:ec:55:a3:99:f3:8e:0b:7f:fa:77:f9: 20:ae:d5:90:71:e0:3c:06:92:6d:4e:87:ad:45:c0: 3a:8e:81:a5:27:6a:a2:04:73:2c:4d:04:cc:37:c1: df:61:6d:68:5c:04:00:c8:8e:d7:2c:8b:e9:39:76: 11:ac:64:b6:10:df:8e:b9:fc:fb:2c:e7:cb:78:44: e7:44:65:bf:2c:d5:c0:af:5e:0e:cd:8f:d7:18:13: 33:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:61:31:2E:B5:B7:F5:DD:F6:6F:31:4A:DC:E4:85:F3:A9:91:8C:D1 X509v3 Authority Key Identifier: keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:78:0c:77:17:a6:13:92:1f:e0:92:3d:ee:73:f1:77:5c:be: 8e:d2:12:b2:c3:0d:8f:c0:4a:89:e9:b5:51:3e:33:a4:13:5c: ab:52:d5:eb:89:8d:4f:63:2e:6a:93:43:0b:38:9f:82:1e:71: 6b:d5:67:46:c1:ad:ab:56:65:b2:36:a5:86:71:b5:94:2b:84: 32:3f:29:78:b8:57:bd:19:82:95:e2:81:df:b3:37:3a:e2:8b: 42:ba:dc:ff:62:a4:bf:99:75:69:05:7d:54:bf:db:cf:c0:07: 68:6b:2b:77:c8:9e:e0:db:43:00:b7:ea:18:54:25:8c:d6:10: d5:12:ca:fe:0b:7e:88:28:c7:c7:94:4b:2e:dc:ce:60:4a:b5: 44:af:b5:0c:28:65:18:20:8a:f4:01:ef:06:db:b4:fd:10:33: e9:64:0c:d0:32:c6:e4:08:5e:f8:90:2e:b6:88:93:8c:bc:99: c6:c7:40:4b:16:47:bd:4f:7e:b9:2d:6a:f4:3f:92:d7:cf:fb: 90:1a:42:47:e2:b8:98:23:c6:b0:43:11:f3:62:af:1b:f3:9b: 99:6e:aa:27:c6:f1:15:83:65:a6:21:8f:24:e6:4c:37:3d:c8: f7:a2:b2:b9:60:08:42:5a:78:ca:e8:3a:a9:38:82:40:bc:75: 40:59:5c:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSuOmj0qqegVSQ4ePQvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MjVkOGI3ZjE5ZTJmYjc1Y2I3Zjk1Nzg5ZDkxMThmNmIx Yjk3MDUwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD EyhkNTYxMzEyZWI1YjdmNWRkZjY2ZjMxNGFkY2U0ODVmM2E5OTE4Y2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tigh9miY4eLPeURys3LbgV7UWDi erje12ARQaPpckm3PGE9mXWawUdkETFB4h/Ky2fyzNonLVp87wTAzR5XiPZ4R7L/ +8MY/67Y418gsU0m3jBW+NFcD/GDSs+KSiEpNgFzkg4pHuLUYdRg2vppSIkswpmg VIAimta0bi8ExDnWczKthuzQEscbKLHDW+Jj9KmtlkZmArG7PIdLfI6unMfPDSVo wLvk7FWjmfOOC3/6d/kgrtWQceA8BpJtToetRcA6joGlJ2qiBHMsTQTMN8HfYW1o XAQAyI7XLIvpOXYRrGS2EN+Oufz7LOfLeETnRGW/LNXAr14OzY/XGBMzNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVhMS61t/Xd9m8xStzkhfOpkYzRMB8GA1UdIwQY MBaAFGUl2Lfxni+3XLf5V4nZEY9rG5cFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jYWEzODUtYjJhNS00MzIzLWFkYzUt NDY2MDNkZTgwNWVjLzEvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jYWEzODUtYjJhNS00MzIzLWFkYzUtNDY2MDNkZTgwNWVj LzEvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABngMdxem E5If4JI97nPxd1y+jtISssMNj8BKiem1UT4zpBNcq1LV64mNT2MuapNDCzifgh5x a9VnRsGtq1ZlsjalhnG1lCuEMj8peLhXvRmCleKB37M3OuKLQrrc/2Kkv5l1aQV9 VL/bz8AHaGsrd8ie4NtDALfqGFQljNYQ1RLK/gt+iCjHx5RLLtzOYEq1RK+1DChl GCCK9AHvBtu0/RAz6WQM0DLG5Ahe+JAutoiTjLyZxsdASxZHvU9+uS1q9D+S18/7 kBpCR+K4mCPGsEMR82KvG/ObmW6qJ8bxFYNlpiGPJOZMNz3I96KyuWAIQlp4yug6 qTiCQLx1QFlcXw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:46 2025 by rpki-client