This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json) Hash identifier: hOHBi0lhLziQBOVhaXgVXa1oKJ1VOKLpbcRP+CvC/28= Subject key identifier: 29:75:CB:19:A4:65:9B:A0:77:0A:7D:67:0F:59:3D:10:F1:9B:5B:35 Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Certificate serial: 019AF164442018AED76E74808A9324229294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 02:01:11 +0000 Manifest this update: Sat 06 Dec 2025 02:01:11 +0000 Manifest next update: Sun 07 Dec 2025 02:01:11 +0000 Files and hashes: 1: 5iOaoXB5nkYwr8tIgFWyVnXEhjk.roa (hash: 75KyluwEydMP2XQT86kr0piX0sxxFkty1yXB3kElNns=) 2: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: DOaVxtZN6xgaAaXpnifJUwkPxz8WiT9jyj+/U8NVlfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:44:20:18:ae:d7:6e:74:80:8a:93:24:22:92:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Validity Not Before: Dec 6 02:01:11 2025 GMT Not After : Dec 7 02:01:11 2025 GMT Subject: CN=2975cb19a4659ba0770a7d670f593d10f19b5b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:df:0d:70:76:d3:e5:f5:5f:bb:7c:d5:2b: 2c:7d:c2:be:10:bf:64:dd:1c:a6:48:67:36:f3:24: 9f:52:f8:53:29:a9:5c:b3:7a:ca:a9:31:b1:54:ac: 2b:a1:26:75:79:06:2a:25:ec:a3:4e:9f:46:6b:d5: 01:7a:21:f7:4e:51:f1:b1:c3:7c:46:d1:31:db:70: ea:01:f7:66:f6:15:1d:59:2f:25:5e:cf:50:53:ba: 2b:17:9e:56:38:2d:65:9a:64:30:e3:25:e3:f3:2c: f4:1a:b0:6f:12:8c:6a:15:48:dd:8e:47:6d:f9:f5: 37:bf:c9:6b:e7:46:c3:83:b7:0c:2c:0f:90:c5:23: 3e:0d:b1:bd:af:63:37:c8:3e:06:b8:39:35:47:1f: ad:48:f7:76:99:51:f1:2c:02:d4:78:80:90:76:2c: ac:e4:6c:03:d2:9d:96:c4:dc:11:a2:6e:af:d3:dd: 81:3b:39:f2:b7:1b:3d:c2:55:e4:ed:71:fe:15:0d: 05:c5:54:2f:71:84:8c:1b:ac:79:1a:8c:26:62:4b: d5:cf:a1:a2:30:79:78:43:69:e2:a2:0a:c8:33:35: bb:65:a3:d1:5c:22:dc:7e:7d:e2:ab:85:a0:77:86: 48:a8:c4:45:06:42:95:2a:43:4f:2e:f1:d6:e5:a3: ba:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:75:CB:19:A4:65:9B:A0:77:0A:7D:67:0F:59:3D:10:F1:9B:5B:35 X509v3 Authority Key Identifier: keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f4:5a:59:f7:a6:6e:56:30:f3:64:15:b8:12:50:5e:5c:e0: 0f:ac:b2:39:f5:77:7b:94:71:bf:5a:92:dd:32:17:18:80:62: a6:82:44:e4:8f:aa:4f:e4:03:52:34:92:ae:5d:6b:51:72:cb: 91:be:33:18:99:da:b5:6e:8b:17:9d:00:a5:fd:81:c4:2a:a8: 5c:f4:f7:e6:3f:c9:16:ba:96:39:68:8a:02:08:cc:67:c9:ed: e5:f9:0c:d8:71:35:91:f9:80:07:19:8a:e3:9a:df:59:74:96: 91:8b:44:b6:f0:1e:76:0c:48:19:f8:eb:e0:43:41:38:df:5c: 1c:46:d8:0d:82:05:14:74:d9:c4:b3:fb:86:fa:9f:fe:e3:11: f2:6b:63:46:35:d2:a9:62:14:f4:af:eb:1d:17:ea:84:f2:bc: 26:6a:ca:40:ae:e9:32:fa:e1:6e:e3:a4:7b:43:a6:64:1a:4b: 43:43:19:27:81:f4:03:6b:d2:25:b7:c5:87:b9:f8:e9:32:60: 9c:fc:7f:33:4b:f3:60:88:72:7b:d7:64:7c:de:51:94:b9:5e: 7e:84:ae:ef:f8:e1:59:25:7f:3c:c6:d7:eb:01:b8:a5:84:de: 6e:24:63:a5:36:dd:79:bd:36:f6:3f:3e:90:dc:ca:11:47:39: 59:c4:67:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEQgGK7XbnSAipMkIpKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZGYzNzlmYWFmMjEwYTcwMzZkYWMwNWRlNmI1NzcyZGJl NGRkNmMwHhcNMjUxMjA2MDIwMTExWhcNMjUxMjA3MDIwMTExWjAzMTEwLwYDVQQD EygyOTc1Y2IxOWE0NjU5YmEwNzcwYTdkNjcwZjU5M2QxMGYxOWI1YjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCbfDXB20+X1X7t81SssfcK+EL9k 3RymSGc28ySfUvhTKalcs3rKqTGxVKwroSZ1eQYqJeyjTp9Ga9UBeiH3TlHxscN8 RtEx23DqAfdm9hUdWS8lXs9QU7orF55WOC1lmmQw4yXj8yz0GrBvEoxqFUjdjkdt +fU3v8lr50bDg7cMLA+QxSM+DbG9r2M3yD4GuDk1Rx+tSPd2mVHxLALUeICQdiys 5GwD0p2WxNwRom6v092BOznytxs9wlXk7XH+FQ0FxVQvcYSMG6x5GowmYkvVz6Gi MHl4Q2niogrIMzW7ZaPRXCLcfn3iq4Wgd4ZIqMRFBkKVKkNPLvHW5aO6yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCl1yxmkZZugdwp9Zw9ZPRDxm1s1MB8GA1UdIwQY MBaAFGXfN5+q8hCnA22sBd5rV3Lb5N1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgt MDc2Yzg4Yjg4MDJmLzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgtMDc2Yzg4Yjg4MDJm LzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfRaWfem blYw82QVuBJQXlzgD6yyOfV3e5Rxv1qS3TIXGIBipoJE5I+qT+QDUjSSrl1rUXLL kb4zGJnatW6LF50Apf2BxCqoXPT35j/JFrqWOWiKAgjMZ8nt5fkM2HE1kfmABxmK 45rfWXSWkYtEtvAedgxIGfjr4ENBON9cHEbYDYIFFHTZxLP7hvqf/uMR8mtjRjXS qWIU9K/rHRfqhPK8JmrKQK7pMvrhbuOke0OmZBpLQ0MZJ4H0A2vSJbfFh7n46TJg nPx/M0vzYIhye9dkfN5RlLlefoSu7/jhWSV/PMbX6wG4pYTebiRjpTbdeb029j8+ kNzKEUc5WcRnCA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:25 2025 by rpki-client