This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json) Hash identifier: NqZbIKOCaed3k1L8z6ZaZp12Ux6woHf+1++P5j3zqhc= Subject key identifier: F4:06:3E:89:23:E1:DA:5F:FB:AF:C0:60:DE:5D:C4:34:5A:36:F7:F2 Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Certificate serial: 019AF19AA4529528A4A32E9CE38853C88641 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft Manifest number: 1163 Signing time: Sat 06 Dec 2025 03:00:34 +0000 Manifest this update: Sat 06 Dec 2025 03:00:34 +0000 Manifest next update: Sun 07 Dec 2025 03:00:34 +0000 Files and hashes: 1: 2YkU-KlvlcIh_M7FIIm73x5dHfA.roa (hash: SdTWFWGh+2RmhNZYbN14E4xNqRJjMV5KacVktQgyXJs=) 2: KyqWoLebligEUftYhU_Bgu-0Lts.roa (hash: VENXedlneKxldlXl7e/RQWS7U/FplQnliLqOvQVsbvA=) 3: YhHxsxNH4RP_FfePdq8SlQdgZyg.roa (hash: K3fGfKE/dBh+cdQFHO8biNnAdH/Glpbr/rysigKy5PI=) 4: jFc_wlQoiHbPyXbisyroWRENeu0.roa (hash: ITqThjHQNWEDIzaupfeF4coOz5rZPmtce8EoNUCuRBY=) 5: lCJmZzkmjXSr7FEoBdA3ylq1U04.roa (hash: STzWF0AEDLQ8FI+DmmWhhzxn4hvpubeIokmYgyoJVoQ=) 6: ubyCwlbzRZL2KOZ8mPfUrz1r_jE.roa (hash: N6l9QQBfT9lRXE69A3z5oJoeQofQ/m4QO9akh+rSPFY=) 7: zVdth24X5nqjsfHBDas52yk14is.crl (hash: 04EfBGIKa7yY+xo8Sl3WU6z/YU8GHhZoOcwglYP1SNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a4:52:95:28:a4:a3:2e:9c:e3:88:53:c8:86:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Validity Not Before: Dec 6 03:00:34 2025 GMT Not After : Dec 7 03:00:34 2025 GMT Subject: CN=f4063e8923e1da5ffbafc060de5dc4345a36f7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d8:10:46:1e:0d:71:40:ca:d4:e8:95:29:c4: 2e:88:a2:e4:e6:03:6d:c6:1f:27:83:ac:b5:02:f9: 5b:e7:5e:76:1f:a9:80:a6:9b:3a:42:e3:36:d2:ae: e1:0a:e7:b6:26:b9:80:7d:05:ac:db:2d:d1:63:eb: d3:23:f9:08:65:a2:d2:68:cd:6c:17:b5:08:8c:57: 2a:aa:1d:d4:67:52:64:a6:cb:bf:b4:03:1c:3b:a5: 09:88:cf:4e:79:9c:08:31:c6:84:11:c3:7a:47:8c: f4:be:80:cd:26:b0:8c:6c:f2:de:45:dc:41:dd:77: 0e:cb:de:6e:ad:6d:43:2f:2a:f7:1f:1a:51:a6:08: af:5d:9d:72:77:90:40:be:fa:b7:2a:bd:b8:f6:c6: c6:ff:1d:2d:f3:91:70:df:3e:f2:13:ec:67:be:a9: 22:56:a9:6f:18:31:38:44:9d:ed:f7:76:aa:04:49: a2:87:02:d0:f5:ea:48:7d:92:82:1b:07:2e:b6:80: ca:3d:77:01:7f:d4:97:bf:f1:74:46:a4:a4:ec:fa: 35:d4:51:c3:8a:fe:68:42:09:9d:fb:88:48:fd:5a: b4:91:96:29:25:a9:76:6d:c2:fe:a6:5e:5c:86:58: 7b:19:5c:50:6a:35:cc:28:ef:0e:b3:0f:ef:22:a2: 6c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:06:3E:89:23:E1:DA:5F:FB:AF:C0:60:DE:5D:C4:34:5A:36:F7:F2 X509v3 Authority Key Identifier: keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3d:5a:38:62:2b:df:57:44:b7:23:ea:f3:b6:97:3e:94:cc: 0d:4c:c6:4e:7b:cb:86:75:fc:d0:3a:9f:8d:bd:b8:a4:09:b1: 17:8f:3e:ba:95:31:cc:43:39:8b:95:31:0e:47:c1:d0:b9:46: eb:e8:2a:16:5d:f0:5c:24:8c:d3:5b:0b:6f:fb:0e:95:85:9c: f3:6c:d3:30:c1:cc:48:af:29:0b:52:24:bf:b6:51:bb:a5:bc: 03:cd:05:dc:49:46:8c:38:22:de:6c:df:72:70:62:c3:0a:70: c2:9d:f7:3a:be:d7:7f:cd:57:6f:27:c7:7b:ba:71:01:3a:da: 62:51:43:63:d9:53:88:e9:1e:19:20:50:02:a9:53:81:a2:37: 48:40:e9:47:dc:52:81:16:cd:09:2a:20:81:13:5d:06:03:8f: f6:03:5e:8e:41:b9:33:ca:c4:e5:26:11:2c:d6:e5:7d:14:57: 0a:2d:6b:a7:96:9d:e0:78:58:98:ba:31:52:85:c5:de:22:19: 25:b8:da:c2:59:e6:0a:61:14:3a:be:25:c6:32:fd:6c:56:8f: 96:bc:8f:cf:c9:27:15:57:0b:ab:88:cd:b3:45:23:eb:6c:06: e3:1d:ad:c7:13:28:40:cf:8d:99:25:ff:91:e1:b0:db:27:4d: 05:34:d7:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqRSlSikoy6c44hTyIZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNTc2ZDg3NmUxN2U2N2FhM2IxZjFjMTBkYWIzOWRiMjkz NWUyMmIwHhcNMjUxMjA2MDMwMDM0WhcNMjUxMjA3MDMwMDM0WjAzMTEwLwYDVQQD EyhmNDA2M2U4OTIzZTFkYTVmZmJhZmMwNjBkZTVkYzQzNDVhMzZmN2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49gQRh4NcUDK1OiVKcQuiKLk5gNt xh8ng6y1Avlb5152H6mApps6QuM20q7hCue2JrmAfQWs2y3RY+vTI/kIZaLSaM1s F7UIjFcqqh3UZ1Jkpsu/tAMcO6UJiM9OeZwIMcaEEcN6R4z0voDNJrCMbPLeRdxB 3XcOy95urW1DLyr3HxpRpgivXZ1yd5BAvvq3Kr249sbG/x0t85Fw3z7yE+xnvqki VqlvGDE4RJ3t93aqBEmihwLQ9epIfZKCGwcutoDKPXcBf9SXv/F0RqSk7Po11FHD iv5oQgmd+4hI/Vq0kZYpJal2bcL+pl5chlh7GVxQajXMKO8Osw/vIqJsowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQGPokj4dpf+6/AYN5dxDRaNvfyMB8GA1UdIwQY MBaAFM1XbYduF+Z6o7HxwQ2rOdspNeIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMt MWE4MGEyZjdkN2VhLzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMtMWE4MGEyZjdkN2Vh LzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfj1aOGIr 31dEtyPq87aXPpTMDUzGTnvLhnX80Dqfjb24pAmxF48+upUxzEM5i5UxDkfB0LlG 6+gqFl3wXCSM01sLb/sOlYWc82zTMMHMSK8pC1Ikv7ZRu6W8A80F3ElGjDgi3mzf cnBiwwpwwp33Or7Xf81XbyfHe7pxATraYlFDY9lTiOkeGSBQAqlTgaI3SEDpR9xS gRbNCSoggRNdBgOP9gNejkG5M8rE5SYRLNblfRRXCi1rp5ad4HhYmLoxUoXF3iIZ JbjawlnmCmEUOr4lxjL9bFaPlryPz8knFVcLq4jNs0Uj62wG4x2txxMoQM+NmSX/ keGw2ydNBTTXOA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:47 2025 by rpki-client