This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: eOuGPav7dO6UlkV/ZHEkaoDhq6F1jZbGOiNgYplNwMI= Subject key identifier: 95:06:38:EA:C9:48:FA:2A:70:45:14:9C:BF:3D:FD:3B:FB:17:64:49 Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 019AF19AD9967A1B6215407093A2D34FDC73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 10D1 Signing time: Sat 06 Dec 2025 03:00:48 +0000 Manifest this update: Sat 06 Dec 2025 03:00:48 +0000 Manifest next update: Sun 07 Dec 2025 03:00:48 +0000 Files and hashes: 1: 0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa (hash: uWfrAsGA9zSBFRUppF4EGIbGfP7a2y+0eTMFReV79oU=) 2: 1-EH3zz14aNQaNvLk-kA5ObugP0M.roa (hash: AInhS8QzIu5+kTFM1AzSru0PxsCBAqGzcKM2yjycOYo=) 3: 1syEB_XNZhCqsIS16W8qNr-bnBE.roa (hash: Kwo3+iE1f0eCzsl7wTJPqBDN/PDvgx+vvxkKumcR6DI=) 4: 4nM4rBv9VVZiBpLQiIbQsg6NSx0.roa (hash: pcYAXIo8mN5119CAEJXDu1uZ7LPPD2vqAMHmgIZuOWM=) 5: R31VLBewgiodlHNc96NZMod-BMs.roa (hash: L1tzfKdGbqAYKzdHCS4ryKzvNcfxJIW6KvE4rua2XQw=) 6: T1D9x5sZuRac2c7oz4I264aKmE4.roa (hash: VNf45yATZxYkt7RFt2PCJKaQr4WutYjzNtIvrBF3RC8=) 7: aI-_oTt6aFi0rGtdpFFsZSUUhnk.roa (hash: ZpzPh7grr/BmAU1ND5+d/vIuS1VNGFc3sngZPWDtPBs=) 8: bZEbJRPxJReKy0hDBZERdUhjkh4.roa (hash: ni6mlIsteCmNwnZ8kh9b0fdcHAIWv53ytgA7gDmdlvE=) 9: dNAWbsFoIAa7vbufcHS0hoyCsWg.roa (hash: wscCbu3aT6nDlnhH6Y0eApXWMaH2Q/Fw0Qs8zp46iAc=) 10: qZSZRgV-vJBf_xQykzfiics3mkU.roa (hash: dWHqzEvTKVEmGqupQR8c601UkkKIg6uw+FC0NrVnCvY=) 11: qiz-f9e8_qagVo454Qf-usEmhyI.roa (hash: 0k1gLPvcIoWvEOFBnscDSuywq30yMwZrPLJ7ynVOwEs=) 12: uSWhGb7yh0hnhYBmE-uLSzu4Rns.roa (hash: K+cvStncEiJXwD+zki81oVh+wXS7gjez2aJZSXM9/64=) 13: y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa (hash: ZW4XWeHDbmOrkzP6lKA3E8FtGyPFeQqM41Y/X1LGTZg=) 14: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: vfiyNUzdp8iVC0HGZpsqg01hjZ8Lod77kshnxM77M4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d9:96:7a:1b:62:15:40:70:93:a2:d3:4f:dc:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Dec 6 03:00:48 2025 GMT Not After : Dec 7 03:00:48 2025 GMT Subject: CN=950638eac948fa2a7045149cbf3dfd3bfb176449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:fe:09:79:c2:bb:cb:6d:49:ba:a1:9c:16: 4e:2c:40:b1:d6:06:d3:6a:be:fe:32:3b:48:39:7c: 0a:51:41:42:cc:12:34:09:eb:af:57:6a:29:0c:22: 4b:f0:fa:d8:cd:86:84:9e:3d:5b:7e:39:19:7d:d2: ff:5f:e4:49:fc:8e:d1:ec:65:4b:ad:e2:dd:23:a3: 5a:2e:48:5f:53:3b:2c:65:21:4b:9b:05:a4:fc:bc: aa:d6:c9:54:20:54:1a:9c:61:3c:20:42:61:75:dd: 99:7a:15:8e:14:2a:64:06:e2:5b:71:15:2a:f4:f0: 9c:bd:63:6f:9c:8d:00:43:a5:9b:a7:c3:7d:e6:72: a5:31:a0:3b:7e:aa:32:77:7c:01:3d:58:9b:a7:c8: 19:54:7c:b8:b0:32:27:b3:b6:40:89:a8:50:60:8e: 9b:e2:bb:66:9c:f4:5a:5c:5e:08:b7:6d:36:de:61: 5e:17:b2:d5:25:3a:9a:09:a8:6a:f6:da:cf:bb:f2: c9:ce:90:de:27:7c:35:1e:61:9a:b8:bd:b3:39:b9: 6c:0d:1d:b2:f3:21:f4:5f:74:f3:84:4b:14:c5:f0: a2:c6:61:75:8e:ad:8f:15:7e:a3:4e:ce:7f:a6:2d: 5a:d3:29:0e:a9:21:cf:8e:83:59:37:5f:de:a1:7f: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:06:38:EA:C9:48:FA:2A:70:45:14:9C:BF:3D:FD:3B:FB:17:64:49 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:80:7c:6a:c8:12:bd:21:7f:5f:ba:72:4a:f8:28:d4:36:74: 20:58:9f:7a:9a:61:d2:04:72:8f:4f:e2:94:a4:c4:fb:b5:b6: 95:a1:31:24:dc:db:34:bb:78:90:59:b0:cb:cc:8b:fa:ef:3e: 1b:af:8d:60:1f:cc:c7:50:7d:98:c2:62:dd:de:05:aa:78:58: 9b:11:23:e2:81:64:da:02:90:2a:8b:11:95:f3:70:3a:41:d3: a8:0f:96:64:12:82:2d:06:8c:35:1c:3e:f8:81:75:0e:56:9b: e5:bd:ee:9f:09:1b:e7:ab:03:24:f5:cb:5d:cf:53:a8:51:b7: bd:40:57:d0:1d:6f:d4:72:1e:27:2d:c5:a0:17:fa:c2:28:68: 98:44:5b:33:32:bf:85:16:c4:9d:9e:00:b4:3e:02:ad:15:71: ac:90:50:47:29:21:9f:11:d4:97:7b:c9:8d:3a:7f:85:a8:98: 34:a9:cb:85:c5:45:e6:01:f7:b7:42:10:06:ac:4f:cf:fd:31: 1e:31:ca:53:18:e4:26:8b:16:8f:d7:94:60:37:2c:fe:61:a5: ba:c7:cf:e2:74:a6:8d:1d:a1:9a:58:c6:de:b3:f9:6c:5a:77: cc:b1:b8:3e:e5:70:f7:a2:fe:52:90:bc:37:19:90:9d:ab:76: c2:99:db:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtmWehtiFUBwk6LTT9xzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjUxMjA2MDMwMDQ4WhcNMjUxMjA3MDMwMDQ4WjAzMTEwLwYDVQQD Eyg5NTA2MzhlYWM5NDhmYTJhNzA0NTE0OWNiZjNkZmQzYmZiMTc2NDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgb+CXnCu8ttSbqhnBZOLECx1gbT ar7+MjtIOXwKUUFCzBI0CeuvV2opDCJL8PrYzYaEnj1bfjkZfdL/X+RJ/I7R7GVL reLdI6NaLkhfUzssZSFLmwWk/Lyq1slUIFQanGE8IEJhdd2ZehWOFCpkBuJbcRUq 9PCcvWNvnI0AQ6Wbp8N95nKlMaA7fqoyd3wBPVibp8gZVHy4sDIns7ZAiahQYI6b 4rtmnPRaXF4It2023mFeF7LVJTqaCahq9trPu/LJzpDeJ3w1HmGauL2zOblsDR2y 8yH0X3TzhEsUxfCixmF1jq2PFX6jTs5/pi1a0ykOqSHPjoNZN1/eoX9ouQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUGOOrJSPoqcEUUnL89/Tv7F2RJMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIB8asgS vSF/X7pySvgo1DZ0IFifepph0gRyj0/ilKTE+7W2laExJNzbNLt4kFmwy8yL+u8+ G6+NYB/Mx1B9mMJi3d4FqnhYmxEj4oFk2gKQKosRlfNwOkHTqA+WZBKCLQaMNRw+ +IF1Dlab5b3unwkb56sDJPXLXc9TqFG3vUBX0B1v1HIeJy3FoBf6wihomERbMzK/ hRbEnZ4AtD4CrRVxrJBQRykhnxHUl3vJjTp/haiYNKnLhcVF5gH3t0IQBqxPz/0x HjHKUxjkJosWj9eUYDcs/mGlusfP4nSmjR2hmljG3rP5bFp3zLG4PuVw96L+UpC8 NxmQnat2wpnbWg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:59 2025 by rpki-client