This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft File: ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json) Hash identifier: n2XYBFQlVJPI28TPmfx5x/MV+DIKqeM6NA09Fw2ZnbI= Subject key identifier: B5:49:49:4C:C8:53:9D:D9:E5:CD:96:29:7C:3D:3F:C4:12:85:73:4B Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea Certificate serial: 019AF23F9300FDB3949588AD3405859EDF47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: 1MBxY-L-G-PezNdSAum2Qznjvvk.roa (hash: WzqdlX3BQAdtrBN0mtz0qnp4BVXNCLlknuqqWLF2nEY=) 2: 64_MTb5KgxHA8ajybrrfkFaqSHo.roa (hash: 3HoEZ5o8a764cMBp72+Je8xSTOL3XWu1W9vfmUxztJY=) 3: NcFH54U_2J6k3O8FG01A4l3YkX4.roa (hash: /kjUMIh5yITP6UOhs7cpgkxUJuo6AlmV12M3gHqX+6U=) 4: QnTqLhMHC9T4AoMjaLap4QpmLDU.roa (hash: 7wNURJNL1VG5jzuYA7SYiM1RdZjO0wnh2b7/W3YMGs8=) 5: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: HmCgdFmCH+kr+P/I/wJC5V5PigyZ5cOe7+Op2VZEiL4=) 6: ZKwCytxQwb2lA8HdN2ItTa-nGFE.roa (hash: YVehp3VlkVUX9qY7Jk5F+8RNoRR+lbS+MAT+mCdr+Tw=) 7: ymZdEzMVegQJBBFPgdqPQzW1-gk.roa (hash: RX7+2wwGNp6bGJxI7GKZlbgjxbbHN4LNuKVuwi5foZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:93:00:fd:b3:94:95:88:ad:34:05:85:9e:df:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=b549494cc8539dd9e5cd96297c3d3fc41285734b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:a2:f2:c3:d5:14:b1:67:3f:92:9d:33:86: 88:ae:97:1c:9e:41:20:34:5e:7f:4d:4e:e5:49:17: 48:40:8e:aa:05:31:5f:65:49:f0:c9:dd:cf:72:36: b4:0c:7f:29:dc:76:be:b8:8b:a6:ce:f4:48:33:49: 94:de:6c:7d:c8:66:6f:cf:02:5f:a0:75:77:c0:f3: 12:11:d3:81:9c:cd:26:24:09:9d:5d:14:79:9c:fa: 11:bb:2e:02:b0:b3:49:85:ab:5d:96:ab:bc:5d:8c: 27:2d:53:06:57:05:1d:1c:af:58:98:ea:a0:90:4e: d6:27:c7:31:e7:a1:c4:0e:fc:8e:5d:d2:89:9e:95: ee:94:99:48:b7:3a:13:14:d6:a8:67:15:23:8d:57: 93:7e:17:7b:a7:74:f4:f9:b6:0d:95:81:f8:88:0d: 9b:df:0e:8d:57:54:5b:ee:a4:3e:41:69:15:44:90: c1:92:e2:48:6f:58:80:33:e1:8e:c7:03:88:d8:7d: 01:64:c2:0e:a8:17:12:59:65:84:ea:6b:56:90:30: d7:ba:24:8c:f8:c3:bd:e6:59:79:86:01:06:80:7d: b5:f7:46:7f:04:94:e0:c8:01:8c:05:93:08:fb:33: 3c:b7:c7:44:0f:ea:02:5e:b4:be:d5:2a:ff:6c:39: 99:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:49:49:4C:C8:53:9D:D9:E5:CD:96:29:7C:3D:3F:C4:12:85:73:4B X509v3 Authority Key Identifier: keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:5f:4a:ee:ca:7a:e3:89:c7:9b:47:62:be:49:ee:ee:d0:8c: 1b:e3:68:3d:bb:97:d6:46:c0:e2:95:6a:33:65:9a:72:99:22: d0:c7:bf:d5:4a:8b:1b:6d:74:f7:97:35:f1:74:af:89:4c:71: 59:44:81:f6:a7:74:dd:2e:64:93:1f:22:fd:04:0e:05:02:21: 3b:b6:e5:de:0c:0f:1c:02:49:7c:ed:5b:f9:fc:3f:44:c3:bb: e1:0f:af:2b:71:f7:0e:4d:a8:fa:ee:5b:0d:00:a4:01:e7:26: ac:86:f6:d4:0b:02:36:bb:ae:62:9c:5e:c3:61:48:a3:9d:c3: 72:5f:a3:f6:68:ac:c5:12:29:78:3f:81:51:52:0e:22:37:fc: 14:1d:12:91:2e:92:51:18:be:72:ed:db:1c:e3:63:86:cd:47: b0:89:f5:b0:a3:e2:64:fe:1e:8e:a4:ba:fd:1c:87:a6:c6:a0: 5c:c4:25:ee:14:7f:b5:95:86:0c:26:1a:ce:93:79:ea:f5:fe: 00:1d:51:c5:17:b3:b4:b9:55:c4:13:78:15:c6:31:0e:f8:01: 5e:a6:b4:3a:62:58:f3:0f:67:5d:a1:97:04:6a:82:8e:17:80: be:0a:4c:8e:07:78:25:ee:5e:37:0f:2b:83:a3:33:3e:c4:77: 0e:8a:26:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5MA/bOUlYitNAWFnt9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0M2UxYmE5MWM1NjlhOGIyMWE2ZDJkNjdmNWRiYmQ2YzA0 ZTQzZWEwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD EyhiNTQ5NDk0Y2M4NTM5ZGQ5ZTVjZDk2Mjk3YzNkM2ZjNDEyODU3MzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoui8sPVFLFnP5KdM4aIrpccnkEg NF5/TU7lSRdIQI6qBTFfZUnwyd3Pcja0DH8p3Ha+uIumzvRIM0mU3mx9yGZvzwJf oHV3wPMSEdOBnM0mJAmdXRR5nPoRuy4CsLNJhatdlqu8XYwnLVMGVwUdHK9YmOqg kE7WJ8cx56HEDvyOXdKJnpXulJlItzoTFNaoZxUjjVeTfhd7p3T0+bYNlYH4iA2b 3w6NV1Rb7qQ+QWkVRJDBkuJIb1iAM+GOxwOI2H0BZMIOqBcSWWWE6mtWkDDXuiSM +MO95ll5hgEGgH2190Z/BJTgyAGMBZMI+zM8t8dED+oCXrS+1Sr/bDmZkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVJSUzIU53Z5c2WKXw9P8QShXNLMB8GA1UdIwQY MBaAFGQ+G6kcVpqLIabS1n9du9bATkPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAt ZmVhMGFmZjM1OWY1LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAtZmVhMGFmZjM1OWY1 LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh19K7sp6 44nHm0divknu7tCMG+NoPbuX1kbA4pVqM2Wacpki0Me/1UqLG21095c18XSviUxx WUSB9qd03S5kkx8i/QQOBQIhO7bl3gwPHAJJfO1b+fw/RMO74Q+vK3H3Dk2o+u5b DQCkAecmrIb21AsCNruuYpxew2FIo53Dcl+j9misxRIpeD+BUVIOIjf8FB0SkS6S URi+cu3bHONjhs1HsIn1sKPiZP4ejqS6/RyHpsagXMQl7hR/tZWGDCYazpN56vX+ AB1RxReztLlVxBN4FcYxDvgBXqa0OmJY8w9nXaGXBGqCjheAvgpMjgd4Je5eNw8r g6MzPsR3DoomAg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:46 2025 by rpki-client