This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json) Hash identifier: JfbfT2KF/eWQE9hjT7wa00fJtaNnB3MkUYpvejR2y00= Subject key identifier: 5D:5D:9D:92:65:AD:EB:AE:F7:D8:F2:1F:F2:D2:D8:D6:00:50:60:23 Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f Certificate serial: 019AF209119F2172AAA63BF4E30441B8C593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: KB39bYqIMJokJ-KK1JHEqLNlJ44.roa (hash: phEsVyJYnJtq6yuZEFal91oSzWP2tqwsWq5VAN0UDT0=) 2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: CXvEAvRqev7J4dSF+HasWeEX5YhpAIdy4zK5wLQNBbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:11:9f:21:72:aa:a6:3b:f4:e3:04:41:b8:c5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=5d5d9d9265adebaef7d8f21ff2d2d8d600506023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:86:ca:35:2c:9d:e6:7a:e6:f1:85:e7:94: ac:af:68:4f:b0:24:9c:a3:e4:50:b8:32:49:6f:2e: 45:aa:0e:6f:a4:d8:38:c6:36:a9:d6:7d:f2:ae:43: b3:ef:c1:8d:17:b6:64:b5:7e:0b:7a:82:8b:30:3d: db:db:52:37:99:b6:92:34:53:2a:14:2d:99:40:36: f3:77:74:e2:48:7b:b2:28:d4:de:b2:28:89:a3:dd: 63:70:55:6d:5e:c0:e4:8b:c1:db:d9:88:bc:aa:b3: ff:cb:57:2a:ce:62:0b:0a:2c:2a:16:c1:36:39:8a: fd:8d:62:8f:ef:80:f8:64:7d:09:81:54:4c:c5:be: 88:a2:8e:62:2f:9b:65:d2:49:a4:1a:6f:59:4a:6c: 58:6b:7a:4a:ef:3a:da:9a:c2:8e:ee:75:60:60:ef: fe:06:03:9b:ee:42:ac:e8:52:d5:05:98:5b:a4:61: 33:50:df:82:14:6d:c3:26:df:94:1c:ba:66:f7:84: 33:23:0c:7e:3b:0a:94:c0:a7:84:59:c3:1b:f4:bc: b0:80:71:09:e0:b6:a1:1b:04:03:06:10:57:2d:58: d9:ea:19:23:73:97:63:a8:12:98:f5:e1:b3:67:39: ea:9a:d9:4f:d6:b1:e9:93:0c:09:8a:86:f0:a9:00: 41:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5D:9D:92:65:AD:EB:AE:F7:D8:F2:1F:F2:D2:D8:D6:00:50:60:23 X509v3 Authority Key Identifier: keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:96:9b:63:bc:c7:3c:d9:b6:ba:a9:63:98:0e:3f:42:90:9a: a4:48:2f:70:97:9b:9d:50:27:d4:45:2a:ec:b4:8e:31:ca:68: fd:0a:cb:4a:06:34:39:ba:f3:b7:e5:0c:39:4f:54:d2:3d:20: 5d:4c:4e:c1:3c:0b:9a:36:55:06:99:14:4a:5c:2e:cf:bc:54: 00:2f:66:5c:3b:3e:a9:37:c4:5d:5c:15:78:d1:dc:41:a0:26: e8:63:b8:90:99:7f:ba:24:3b:9a:75:8b:35:a5:92:05:bf:06: 73:4e:53:81:48:ed:6c:5b:01:a4:31:54:1b:8c:87:6d:1f:9f: bd:4b:b6:33:b9:eb:08:2e:52:dc:56:ca:4c:13:43:e7:4a:2f: ad:75:13:e9:8a:3a:a5:c9:4f:e9:3a:c2:7f:c4:c0:11:04:77: f2:d1:81:8f:1c:01:8a:96:fb:e6:b2:01:3b:81:dc:f8:6a:c5: 50:de:47:b2:dd:28:b1:62:b8:6d:1a:25:b0:00:d8:c4:ab:5c: c1:fc:0b:3a:17:64:9e:2c:39:6d:bc:f1:ca:3a:86:be:be:a4: 8e:c9:f8:df:4e:4c:3f:64:d1:d1:36:06:99:f0:eb:8a:7f:8e: 5b:81:c0:3c:d0:3b:14:a1:19:a7:b1:b1:d4:51:5c:e3:44:fb: 22:ad:df:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRGfIXKqpjv04wRBuMWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YmQ4MmJhMTg4MWFkNjRmNTI0ZTMzZWNlMTJhZGE0YjNi NWQ1N2YwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD Eyg1ZDVkOWQ5MjY1YWRlYmFlZjdkOGYyMWZmMmQyZDhkNjAwNTA2MDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZyGyjUsneZ65vGF55Ssr2hPsCSc o+RQuDJJby5Fqg5vpNg4xjap1n3yrkOz78GNF7ZktX4LeoKLMD3b21I3mbaSNFMq FC2ZQDbzd3TiSHuyKNTesiiJo91jcFVtXsDki8Hb2Yi8qrP/y1cqzmILCiwqFsE2 OYr9jWKP74D4ZH0JgVRMxb6Ioo5iL5tl0kmkGm9ZSmxYa3pK7zramsKO7nVgYO/+ BgOb7kKs6FLVBZhbpGEzUN+CFG3DJt+UHLpm94QzIwx+OwqUwKeEWcMb9LywgHEJ 4LahGwQDBhBXLVjZ6hkjc5djqBKY9eGzZznqmtlP1rHpkwwJiobwqQBBHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1dnZJlreuu99jyH/LS2NYAUGAjMB8GA1UdIwQY MBaAFGa9groYga1k9STjPs4SraSztdV/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnIyQ3VoaUJyV1QxSk9NLXpoS3RwTE8xMVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lMWUyYTctZmQ5Ni00Y2YxLTgyYzMt YmEyYjkwZDQ5NTQ3LzEvWnIyQ3VoaUJyV1QxSk9NLXpoS3RwTE8xMVg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lMWUyYTctZmQ5Ni00Y2YxLTgyYzMtYmEyYjkwZDQ5NTQ3 LzEvWnIyQ3VoaUJyV1QxSk9NLXpoS3RwTE8xMVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZabY7zH PNm2uqljmA4/QpCapEgvcJebnVAn1EUq7LSOMcpo/QrLSgY0Obrzt+UMOU9U0j0g XUxOwTwLmjZVBpkUSlwuz7xUAC9mXDs+qTfEXVwVeNHcQaAm6GO4kJl/uiQ7mnWL NaWSBb8Gc05TgUjtbFsBpDFUG4yHbR+fvUu2M7nrCC5S3FbKTBND50ovrXUT6Yo6 pclP6TrCf8TAEQR38tGBjxwBipb75rIBO4Hc+GrFUN5Hst0osWK4bRolsADYxKtc wfwLOhdkniw5bbzxyjqGvr6kjsn4305MP2TR0TYGmfDrin+OW4HAPNA7FKEZp7Gx 1FFc40T7Iq3fBA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:43 2025 by rpki-client