This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft File: zTzXxNyVyz4NTocD7wFAT-CnB4A.mft (raw, json) Hash identifier: xf2rFaZfkdSu2wei0Jt90YKZbhvpBYN4f/5fZlLm4+4= Subject key identifier: 11:9C:7C:BD:77:AB:24:19:12:E3:4A:B3:F2:57:4D:BC:BF:D0:DB:69 Authority key identifier: CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80 Certificate issuer: /CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780 Certificate serial: 019AF31C7EA6081255F1984D0F8EA739A4C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft Manifest number: 071A Signing time: Sat 06 Dec 2025 10:02:02 +0000 Manifest this update: Sat 06 Dec 2025 10:02:02 +0000 Manifest next update: Sun 07 Dec 2025 10:02:02 +0000 Files and hashes: 1: kXpu7lVaQ9ZKyQqNGsFeLghZlmk.roa (hash: 5AG9No2Gmu6sX+Z3CUtVryFAua3rZfXlsvQoqxyaRko=) 2: zTzXxNyVyz4NTocD7wFAT-CnB4A.crl (hash: 7OG6j4SISapFZ0jFlEljof+CNuxhyXcGdJm0UC5Laro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:7e:a6:08:12:55:f1:98:4d:0f:8e:a7:39:a4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780 Validity Not Before: Dec 6 10:02:02 2025 GMT Not After : Dec 7 10:02:02 2025 GMT Subject: CN=119c7cbd77ab241912e34ab3f2574dbcbfd0db69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:75:43:ab:ca:21:e4:3e:85:3a:15:50:9c:79: 68:f7:dc:6e:2c:7b:63:a9:d3:e7:8c:01:be:82:98: 54:d1:a7:01:c8:53:e4:fb:ff:4d:70:bc:3f:41:fb: 17:4e:de:5c:1d:f2:ee:42:e6:0c:5b:d6:e3:6a:d6: dc:e2:b0:89:c5:be:20:52:9c:e0:75:e1:b6:37:87: dc:2f:55:78:41:8e:37:3b:98:1a:ca:e0:76:37:e7: ae:8f:6f:4d:9e:ef:20:b5:3f:b0:a3:80:f5:1f:a8: 01:09:91:ac:9b:dc:70:61:2f:95:ec:96:38:0d:d7: c3:51:e6:d8:51:a5:fb:27:b1:79:4e:74:07:56:ab: ea:68:da:bd:4a:4d:18:c1:73:05:b3:e2:4b:95:4b: 1d:9f:d3:b5:6b:1b:9e:c5:0e:94:14:cd:ed:b2:80: d5:b8:87:cd:ef:20:94:17:e4:d2:a2:de:22:08:bc: e6:a1:b1:97:06:e8:e8:26:57:53:74:e0:39:18:cb: 53:83:7f:55:82:81:80:b5:c9:82:7a:b2:fe:2b:d5: b5:67:de:5b:5f:1c:ca:38:ad:01:b6:ef:07:13:8d: 44:f4:bf:46:46:23:9a:6e:11:5a:83:c0:15:ec:20: c1:7c:06:36:1c:a7:a3:eb:21:39:42:ab:39:ad:ea: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9C:7C:BD:77:AB:24:19:12:E3:4A:B3:F2:57:4D:BC:BF:D0:DB:69 X509v3 Authority Key Identifier: keyid:CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c7:eb:79:9f:c0:25:24:35:d7:c9:60:0a:c4:bf:0a:83:98: ce:c9:29:d1:b1:bf:0f:87:64:19:43:90:d7:a6:15:d3:9d:4e: f7:4d:01:d2:cf:84:75:d1:91:6f:84:23:94:3b:28:18:7c:ac: 45:15:03:31:00:d2:5f:f5:0c:db:41:12:9a:1d:e4:1f:49:d1: 91:5a:2d:ea:b2:fe:74:85:f2:54:cb:ea:fc:b7:e8:0c:d6:10: 8d:2b:3b:7b:95:97:9f:b4:14:a1:ad:28:ad:42:bb:43:72:c7: d8:91:89:47:b4:f7:63:86:63:05:11:9a:24:3f:08:8b:22:89: e4:6d:de:11:8b:2f:84:d5:e5:67:9a:5b:c8:ab:4d:7f:8e:a3: 16:c0:69:46:86:dc:b0:8f:90:09:61:44:fa:16:dd:f2:7b:19: 67:4f:05:a3:80:f9:c9:ca:5d:8b:95:25:22:28:97:75:a3:45: 1a:71:68:93:91:eb:0d:16:c1:ae:13:d5:04:fb:50:67:17:13: cc:4e:33:d2:d3:6a:40:c2:a0:88:3e:92:0e:26:5e:97:0d:07: e5:59:6c:04:ec:8b:47:7b:f3:1b:2f:b1:88:d2:63:dd:d3:35: 1f:3b:74:f3:8b:f5:b8:f7:c9:24:08:78:34:ac:57:bc:df:6e: 26:bb:60:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHH6mCBJV8ZhND46nOaTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkM2NkN2M0ZGM5NWNiM2UwZDRlODcwM2VmMDE0MDRmZTBh NzA3ODAwHhcNMjUxMjA2MTAwMjAyWhcNMjUxMjA3MTAwMjAyWjAzMTEwLwYDVQQD EygxMTljN2NiZDc3YWIyNDE5MTJlMzRhYjNmMjU3NGRiY2JmZDBkYjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63VDq8oh5D6FOhVQnHlo99xuLHtj qdPnjAG+gphU0acByFPk+/9NcLw/QfsXTt5cHfLuQuYMW9bjatbc4rCJxb4gUpzg deG2N4fcL1V4QY43O5gayuB2N+euj29Nnu8gtT+wo4D1H6gBCZGsm9xwYS+V7JY4 DdfDUebYUaX7J7F5TnQHVqvqaNq9Sk0YwXMFs+JLlUsdn9O1axuexQ6UFM3tsoDV uIfN7yCUF+TSot4iCLzmobGXBujoJldTdOA5GMtTg39VgoGAtcmCerL+K9W1Z95b XxzKOK0Btu8HE41E9L9GRiOabhFag8AV7CDBfAY2HKej6yE5Qqs5rer6AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGcfL13qyQZEuNKs/JXTby/0NtpMB8GA1UdIwQY MBaAFM0818Tclcs+DU6HA+8BQE/gpweAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelR6WHhOeVZ5ejROVG9jRDd3RkFULUNuQjRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81NzE5Y2MtZTgzZS00MzNkLTgwZDUt ZmYyNmE5ODgzMzE0LzEvelR6WHhOeVZ5ejROVG9jRDd3RkFULUNuQjRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS81NzE5Y2MtZTgzZS00MzNkLTgwZDUtZmYyNmE5ODgzMzE0 LzEvelR6WHhOeVZ5ejROVG9jRDd3RkFULUNuQjRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksfreZ/A JSQ118lgCsS/CoOYzskp0bG/D4dkGUOQ16YV051O900B0s+EddGRb4QjlDsoGHys RRUDMQDSX/UM20ESmh3kH0nRkVot6rL+dIXyVMvq/LfoDNYQjSs7e5WXn7QUoa0o rUK7Q3LH2JGJR7T3Y4ZjBRGaJD8IiyKJ5G3eEYsvhNXlZ5pbyKtNf46jFsBpRobc sI+QCWFE+hbd8nsZZ08Fo4D5ycpdi5UlIiiXdaNFGnFok5HrDRbBrhPVBPtQZxcT zE4z0tNqQMKgiD6SDiZelw0H5VlsBOyLR3vzGy+xiNJj3dM1Hzt084v1uPfJJAh4 NKxXvN9uJrtg6g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:18:47 2025 by rpki-client