This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft File: zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json) Hash identifier: 6HIfVilg1ZOw8Yj3kdivaIQqu1pCBTdp9HXB+hEUW50= Subject key identifier: 99:A9:46:E6:74:77:04:B0:F7:68:CC:9A:7B:14:FF:EE:10:B9:92:3F Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8 Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8 Certificate serial: 019AF1D20174C0BCACE6401DB4983D22E53E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft Manifest number: 105D Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: O1GYVhxFS0M7H20Hoh1Atb3eLaE.roa (hash: tCVke6K7TW9gUgASV8dTundK+jeF3bulXbwfPaxFtHY=) 2: SWAth1mKD6FwJVqaJWtV6D-F51Y.roa (hash: REJDhZOwFyr4wdpkCheBE0DhoqN625ViwDnudBYPico=) 3: Sc-FyfdVDPaQqHGz-GI3fsuN6cM.roa (hash: zSZi5viNxy6Qez2EVg97kMrTwqojW2kb2exfumMpwjg=) 4: hkuhpnMVVYRgPxAr-LQ10OakoTI.roa (hash: oAtibnQ6KN2VeS7D1IHVgfHz1J3VS/wtW0fPG2i0OP0=) 5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: PKT1rPa07/d9Nj535zfddGO6GPmduMdR5nHPPotyNMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:01:74:c0:bc:ac:e6:40:1d:b4:98:3d:22:e5:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8 Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=99a946e6747704b0f768cc9a7b14ffee10b9923f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6e:45:c0:07:66:14:4b:75:d4:43:72:d2:f0: 29:0e:32:96:2f:44:c4:02:96:1b:da:33:7e:47:b8: 70:e5:5f:19:1a:dd:b2:67:22:51:d7:bf:7a:55:a3: b1:cf:ff:97:03:d2:40:2f:fc:99:b1:38:eb:de:7c: 38:8b:0f:58:44:dd:0f:e9:39:fe:80:b9:e6:54:14: f5:a1:57:35:a6:c6:b6:53:ef:0e:c0:99:ed:24:2b: 32:76:9f:e3:83:90:c6:39:47:34:93:a2:7c:35:36: 5b:e1:a3:ab:8f:c1:1d:98:c1:75:ad:ed:6a:06:cc: ee:54:26:d6:0d:45:98:24:e9:68:b4:b9:71:d9:5d: d3:a7:41:0c:9c:87:55:2b:c3:00:fe:33:8d:70:d3: 03:9f:d0:3c:29:ec:9e:1b:db:d5:16:14:97:60:79: 7d:3d:9e:b0:f8:a5:23:0c:41:a8:b3:b9:85:2d:88: 81:2b:87:86:02:c4:a4:7a:c0:a0:04:3b:a0:6a:85: 7d:66:01:55:9a:58:f4:f0:e1:69:a0:8d:bb:da:8c: 2b:2d:86:4f:75:88:89:aa:7b:16:5a:34:5d:a9:4b: bb:27:36:51:f2:9c:52:1d:82:ec:93:80:87:88:32: e9:78:34:8f:b3:7b:c9:c5:96:eb:31:b7:ae:38:a6: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A9:46:E6:74:77:04:B0:F7:68:CC:9A:7B:14:FF:EE:10:B9:92:3F X509v3 Authority Key Identifier: keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:76:25:b7:46:16:52:4c:ab:ac:f4:e1:da:44:cb:48:69:20: d3:99:93:2a:29:c8:1b:5c:7c:2c:1b:35:ae:e0:2a:49:db:32: e3:44:60:db:b5:c9:68:91:63:69:71:8d:43:2f:b0:39:c1:99: 5f:ca:92:b5:d7:69:9d:71:f9:27:5b:7e:cb:78:6a:08:2c:a5: c6:c9:5e:8c:20:39:67:92:04:2a:29:fe:ff:0a:3e:9d:a0:7a: 44:0e:41:48:48:4b:fd:da:57:fc:e8:f5:fb:b1:00:64:f4:dc: 0a:4e:44:94:d9:a4:b4:ad:0b:4e:09:01:65:bc:a4:dc:e5:e5: 58:15:37:aa:1d:c6:fe:fd:7a:cd:1e:68:1d:08:f3:ca:ce:27: c6:8e:85:33:de:98:6e:4f:0b:cc:4a:d8:da:43:e8:e5:ca:a4: 74:18:68:a2:c8:ef:b8:1a:db:a4:8f:57:81:05:3e:22:16:fc: c9:1d:3f:6b:59:ec:6f:b1:f1:09:df:0c:8b:ae:2d:66:ae:ea: 7c:b6:38:39:d0:54:d1:2b:13:02:03:fd:8a:c6:62:cd:4c:06: 52:0f:59:f2:e6:f9:c5:c1:af:87:33:48:68:03:25:33:ba:37: 36:a1:26:80:5e:09:55:e9:58:dd:85:aa:13:43:13:32:91:c8: 6e:1c:94:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gF0wLys5kAdtJg9IuU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjhmN2EzOTFiN2IxNjQ5ZWQ0OTAzNDgyZDNlOTMxZWQz NGUzZDgwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD Eyg5OWE5NDZlNjc0NzcwNGIwZjc2OGNjOWE3YjE0ZmZlZTEwYjk5MjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG5FwAdmFEt11ENy0vApDjKWL0TE ApYb2jN+R7hw5V8ZGt2yZyJR1796VaOxz/+XA9JAL/yZsTjr3nw4iw9YRN0P6Tn+ gLnmVBT1oVc1psa2U+8OwJntJCsydp/jg5DGOUc0k6J8NTZb4aOrj8EdmMF1re1q BszuVCbWDUWYJOlotLlx2V3Tp0EMnIdVK8MA/jONcNMDn9A8KeyeG9vVFhSXYHl9 PZ6w+KUjDEGos7mFLYiBK4eGAsSkesCgBDugaoV9ZgFVmlj08OFpoI272owrLYZP dYiJqnsWWjRdqUu7JzZR8pxSHYLsk4CHiDLpeDSPs3vJxZbrMbeuOKYHAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmpRuZ0dwSw92jMmnsU/+4QuZI/MB8GA1UdIwQY MBaAFM1o96ORt7FkntSQNILT6THtNOPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQt MTY3M2FkOGM0MDEyLzEveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQtMTY3M2FkOGM0MDEy LzEveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3Ylt0YW UkyrrPTh2kTLSGkg05mTKinIG1x8LBs1ruAqSdsy40Rg27XJaJFjaXGNQy+wOcGZ X8qStddpnXH5J1t+y3hqCCylxslejCA5Z5IEKin+/wo+naB6RA5BSEhL/dpX/Oj1 +7EAZPTcCk5ElNmktK0LTgkBZbyk3OXlWBU3qh3G/v16zR5oHQjzys4nxo6FM96Y bk8LzErY2kPo5cqkdBhoosjvuBrbpI9XgQU+Ihb8yR0/a1nsb7HxCd8Mi64tZq7q fLY4OdBU0SsTAgP9isZizUwGUg9Z8ub5xcGvhzNIaAMlM7o3NqEmgF4JVelY3YWq E0MTMpHIbhyU9A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:55 2025 by rpki-client