This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft File: zS0l92kTYIeMus6YWJC59e_PfZU.mft (raw, json) Hash identifier: x7EsXk7uEZSOjxXzhGyknqtIq4ZJ7UlbCyv1ddqILIU= Subject key identifier: 80:5D:23:CA:C4:49:86:B9:E1:F6:37:E6:DA:58:11:05:D4:9F:3A:17 Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95 Certificate issuer: /CN=cd2d25f7691360878cbace985890b9f5efcf7d95 Certificate serial: 019AF49BAD1BF451F55BB3B16904CF89B703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft Manifest number: 16B9 Signing time: Sat 06 Dec 2025 17:00:34 +0000 Manifest this update: Sat 06 Dec 2025 17:00:34 +0000 Manifest next update: Sun 07 Dec 2025 17:00:34 +0000 Files and hashes: 1: lUKZFEQR5YFLyzQjNbMEJSbndmc.roa (hash: Ev1zfRFSrBx+hG5oLqV3IujShWJmSxI4j5cxDJLVNpw=) 2: zS0l92kTYIeMus6YWJC59e_PfZU.crl (hash: 5xgosISt8Sw02TA59NMUmYgXq3q+w21/O5go7EEGYKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ad:1b:f4:51:f5:5b:b3:b1:69:04:cf:89:b7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95 Validity Not Before: Dec 6 17:00:34 2025 GMT Not After : Dec 7 17:00:34 2025 GMT Subject: CN=805d23cac44986b9e1f637e6da581105d49f3a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:08:dd:39:e6:ea:56:61:9e:f1:3e:fc:8c:f1: 20:54:aa:06:01:2d:8e:9a:2f:a4:e6:03:d9:e4:bd: bd:92:51:3a:d8:81:19:19:da:59:22:e3:5d:66:2d: d6:ae:9c:01:09:09:5d:52:c4:0c:8d:cc:4b:8c:4a: 25:e4:86:63:84:1b:f0:e7:eb:04:a0:1f:3a:42:d0: 47:97:4a:bd:5a:e9:a6:ee:29:b4:8e:49:e9:3f:e6: 9f:0a:50:78:6d:4d:9a:1c:21:25:40:cb:22:ed:ec: 2e:0f:a3:d5:8f:09:c9:c1:61:1c:97:8a:c0:fc:58: 92:54:10:da:4c:29:d1:7c:5c:88:a6:45:fb:6b:f4: a3:06:e6:d8:2d:0b:fb:d2:ff:dd:5a:d2:27:ef:24: 1f:dd:76:19:51:89:d1:7e:3e:2c:53:6f:3c:83:f2: 12:20:a3:ac:88:83:4f:52:30:b9:89:8b:1c:7c:85: cc:26:80:ba:5c:1e:c0:2f:94:f4:da:fd:4d:bd:93: 8b:58:f5:b7:0e:2d:9c:a5:df:32:ab:a8:c6:24:b7: 58:ff:82:9a:14:ab:b2:aa:11:9b:ec:15:6b:db:50: 54:88:4c:61:7f:29:51:e1:21:49:87:fe:40:28:d1: d3:97:c5:55:c4:5f:7b:6b:19:c2:dc:9d:6c:51:38: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5D:23:CA:C4:49:86:B9:E1:F6:37:E6:DA:58:11:05:D4:9F:3A:17 X509v3 Authority Key Identifier: keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:02:93:3f:55:4f:97:ed:f2:cd:8d:9b:9c:11:1e:27:6b:bd: 91:d0:ff:cc:b0:96:b1:3d:4a:66:ff:1c:46:db:aa:fd:e0:fc: 14:25:da:a5:36:31:f1:83:59:48:e8:8d:8e:8a:a5:73:f4:be: 4a:2d:0f:da:d5:7d:dd:62:8e:f1:fb:4c:9d:ac:c6:88:04:0e: b6:eb:da:c2:e2:bb:8f:86:01:f7:59:66:17:07:97:0e:ef:41: b5:cc:a4:b3:dc:37:41:4b:75:73:3a:11:a2:b0:e2:04:65:61: a2:11:37:99:6d:76:ba:97:89:81:1c:18:e6:b3:00:f9:9c:14: a4:5b:d9:5e:ef:81:89:4f:65:e9:52:ba:ef:57:50:ca:c9:21: 9e:c0:d8:1d:a0:f7:0f:1d:e0:b6:9d:39:b7:eb:61:ff:d0:d6: 2d:38:99:5b:55:6e:c2:78:52:f5:c2:00:73:eb:b7:69:72:42: f1:7c:8e:bb:c3:a7:41:5d:1f:fa:a6:9e:dd:fa:ea:cd:ef:3b: c7:db:78:22:d0:7e:c3:33:4b:1c:16:a0:79:5c:fc:d9:db:10: f3:2f:d5:c8:b4:61:7c:fc:5a:6c:71:ea:c3:13:0e:e3:d2:d0: 2d:a8:86:1d:aa:ce:50:8f:dc:d8:11:8a:77:ea:8b:45:78:35: 07:a9:dc:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m60b9FH1W7OxaQTPibcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMmQyNWY3NjkxMzYwODc4Y2JhY2U5ODU4OTBiOWY1ZWZj ZjdkOTUwHhcNMjUxMjA2MTcwMDM0WhcNMjUxMjA3MTcwMDM0WjAzMTEwLwYDVQQD Eyg4MDVkMjNjYWM0NDk4NmI5ZTFmNjM3ZTZkYTU4MTEwNWQ0OWYzYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwjdOebqVmGe8T78jPEgVKoGAS2O mi+k5gPZ5L29klE62IEZGdpZIuNdZi3WrpwBCQldUsQMjcxLjEol5IZjhBvw5+sE oB86QtBHl0q9Wumm7im0jknpP+afClB4bU2aHCElQMsi7ewuD6PVjwnJwWEcl4rA /FiSVBDaTCnRfFyIpkX7a/SjBubYLQv70v/dWtIn7yQf3XYZUYnRfj4sU288g/IS IKOsiINPUjC5iYscfIXMJoC6XB7AL5T02v1NvZOLWPW3Di2cpd8yq6jGJLdY/4Ka FKuyqhGb7BVr21BUiExhfylR4SFJh/5AKNHTl8VVxF97axnC3J1sUTj2AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBdI8rESYa54fY35tpYEQXUnzoXMB8GA1UdIwQY MBaAFM0tJfdpE2CHjLrOmFiQufXvz32VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTct NjM2OWIxN2ZmMTc4LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTctNjM2OWIxN2ZmMTc4 LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAKTP1VP l+3yzY2bnBEeJ2u9kdD/zLCWsT1KZv8cRtuq/eD8FCXapTYx8YNZSOiNjoqlc/S+ Si0P2tV93WKO8ftMnazGiAQOtuvawuK7j4YB91lmFweXDu9Btcyks9w3QUt1czoR orDiBGVhohE3mW12upeJgRwY5rMA+ZwUpFvZXu+BiU9l6VK671dQyskhnsDYHaD3 Dx3gtp05t+th/9DWLTiZW1VuwnhS9cIAc+u3aXJC8XyOu8OnQV0f+qae3frqze87 x9t4ItB+wzNLHBageVz82dsQ8y/VyLRhfPxabHHqwxMO49LQLaiGHarOUI/c2BGK d+qLRXg1B6ncXA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:28 2025 by rpki-client