This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json) Hash identifier: RvFa8Ko7XMnsDf+SCwaoLf0Y/HwTeu96BUo7UjBVJcQ= Subject key identifier: 1D:87:90:26:44:CD:2A:0F:C1:67:24:04:0C:A4:EF:1B:3D:E6:1B:81 Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a Certificate serial: 019AF35229976041D6637213995C51427A41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft Manifest number: 0E4A Signing time: Sat 06 Dec 2025 11:00:39 +0000 Manifest this update: Sat 06 Dec 2025 11:00:39 +0000 Manifest next update: Sun 07 Dec 2025 11:00:39 +0000 Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=) 2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=) 3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: Iw7tCXhkMP1avpVHoQJBA57sdEwbOkTOxsUpaKpDH8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:29:97:60:41:d6:63:72:13:99:5c:51:42:7a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a Validity Not Before: Dec 6 11:00:39 2025 GMT Not After : Dec 7 11:00:39 2025 GMT Subject: CN=1d87902644cd2a0fc16724040ca4ef1b3de61b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0d:28:d9:f6:ad:0d:f0:6b:85:39:c4:b9:fd: e5:e7:a8:18:55:d3:ba:b3:d0:d8:27:cc:ad:31:dc: ab:12:cb:aa:5a:df:ef:a7:75:63:4b:f6:2a:9b:4b: 15:7c:a9:24:ac:1b:6b:31:2c:68:1f:90:b4:6b:d9: 9e:61:eb:03:51:58:1b:ad:32:1d:be:60:a9:29:6f: a5:b8:1f:dc:d9:cc:bd:6a:9c:e5:87:80:47:fa:e7: de:db:fc:49:3b:ff:8e:a3:2b:cc:d2:95:64:93:78: 01:b6:92:fe:c8:ac:34:29:e5:95:e5:d4:ab:b5:cc: 47:ff:1e:59:18:08:8e:27:de:1b:0e:9c:5e:6b:c8: ca:f7:30:fa:d9:94:39:6a:59:99:17:d8:f9:b7:b1: f8:f4:61:ec:36:e5:ca:7f:ae:74:46:86:30:89:a8: 94:42:e0:a0:08:b8:e0:2c:71:36:aa:c8:48:7a:c7: d4:bf:e5:6e:32:09:9d:8b:a5:a4:2e:d7:d3:1b:dc: fe:8d:ca:d9:ef:c4:a1:a9:4e:b2:b5:4a:d0:98:8e: 54:56:19:39:dc:b6:59:7a:40:12:32:26:04:58:c5: c3:d7:92:06:03:30:fc:81:7e:b7:66:01:fe:d9:d9: 40:5b:af:ab:c1:c7:3a:91:a8:08:ba:de:f5:59:1a: 91:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:87:90:26:44:CD:2A:0F:C1:67:24:04:0C:A4:EF:1B:3D:E6:1B:81 X509v3 Authority Key Identifier: keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:07:6e:8a:9a:17:1d:b7:37:70:b8:fa:e4:63:9e:f6:4c:25: 78:c8:02:bb:9c:a2:a0:22:2d:3a:0d:ea:ac:0f:cf:23:5d:0f: 75:69:b7:e5:63:16:9c:9c:01:77:0b:a1:10:98:c1:2d:1f:32: 6a:f5:9e:d0:18:c2:9c:ce:be:5f:ff:60:b0:36:bb:be:1d:59: 25:87:7f:f5:bd:d7:6a:d4:20:f3:d9:3b:c5:8a:2e:3f:06:84: 6d:85:e5:e1:e8:c2:0f:e4:0e:a5:3d:17:5c:0f:f6:bc:83:88: ef:9a:12:f8:f7:f8:6e:bf:1a:8e:24:9c:dc:96:e7:01:76:ed: a4:35:a6:96:81:8f:ad:9a:ca:0c:90:a8:d4:4e:00:74:7b:87: 40:90:78:27:e9:d7:58:49:63:e4:ec:99:8e:ca:a0:b6:c4:0e: b3:24:6d:7a:5b:c8:fa:3d:10:69:9b:a5:89:dc:5e:16:4f:09: 6c:70:f6:35:fb:98:ef:41:ab:fe:5b:42:77:b0:13:03:36:d4: a9:45:42:51:d9:4d:5e:86:19:fe:a0:8a:45:4d:5f:ea:8e:07: f8:04:dd:58:a9:79:ac:dd:82:ef:92:f4:98:0a:8c:59:8c:e6: 7c:d5:5c:80:41:fa:b7:ad:2c:a0:ad:17:fa:78:a7:5b:e9:14: 04:bb:15:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUimXYEHWY3ITmVxRQnpBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYjc1MzQxNTAwODA3YTk3NTBhOGNmNTViZjRlNDVmZjAz ZjMxMmEwHhcNMjUxMjA2MTEwMDM5WhcNMjUxMjA3MTEwMDM5WjAzMTEwLwYDVQQD EygxZDg3OTAyNjQ0Y2QyYTBmYzE2NzI0MDQwY2E0ZWYxYjNkZTYxYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w0o2fatDfBrhTnEuf3l56gYVdO6 s9DYJ8ytMdyrEsuqWt/vp3VjS/Yqm0sVfKkkrBtrMSxoH5C0a9meYesDUVgbrTId vmCpKW+luB/c2cy9apzlh4BH+ufe2/xJO/+OoyvM0pVkk3gBtpL+yKw0KeWV5dSr tcxH/x5ZGAiOJ94bDpxea8jK9zD62ZQ5almZF9j5t7H49GHsNuXKf650RoYwiaiU QuCgCLjgLHE2qshIesfUv+VuMgmdi6WkLtfTG9z+jcrZ78ShqU6ytUrQmI5UVhk5 3LZZekASMiYEWMXD15IGAzD8gX63ZgH+2dlAW6+rwcc6kagIut71WRqRgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2HkCZEzSoPwWckBAyk7xs95huBMB8GA1UdIwQY MBaAFMy3U0FQCAepdQqM9Vv05F/wPzEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUt YTk5YTIxMDE1OTM3LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUtYTk5YTIxMDE1OTM3 LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQduipoX Hbc3cLj65GOe9kwleMgCu5yioCItOg3qrA/PI10PdWm35WMWnJwBdwuhEJjBLR8y avWe0BjCnM6+X/9gsDa7vh1ZJYd/9b3XatQg89k7xYouPwaEbYXl4ejCD+QOpT0X XA/2vIOI75oS+Pf4br8ajiSc3JbnAXbtpDWmloGPrZrKDJCo1E4AdHuHQJB4J+nX WElj5OyZjsqgtsQOsyRtelvI+j0QaZulidxeFk8JbHD2NfuY70Gr/ltCd7ATAzbU qUVCUdlNXoYZ/qCKRU1f6o4H+ATdWKl5rN2C75L0mAqMWYzmfNVcgEH6t60soK0X +ninW+kUBLsVAA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:44:54 2025 by rpki-client