This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft File: zaiOm3q14yGxs_lXqboZdt1CW8M.mft (raw, json) Hash identifier: osN570tL3Jhs64BOrLCdOAf/VU6mt1AIq0ISLSCXFQs= Subject key identifier: 10:10:32:82:87:DE:71:70:0D:1D:60:77:0F:3C:AC:81:95:31:70:EC Authority key identifier: CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3 Certificate issuer: /CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3 Certificate serial: 019AF276DB59F05C9F9F56A790D22B775A9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft Manifest number: 04CD Signing time: Sat 06 Dec 2025 07:01:06 +0000 Manifest this update: Sat 06 Dec 2025 07:01:06 +0000 Manifest next update: Sun 07 Dec 2025 07:01:06 +0000 Files and hashes: 1: fgM561fL_3Rx-_1J5CJxxdceK50.roa (hash: nwniELmnb3/CT2nQQZ1hAp6RF9PN9bCFIt9tpx0KqDk=) 2: zaiOm3q14yGxs_lXqboZdt1CW8M.crl (hash: KvwykFSIpRO549dFYpsy9AHk61tukBb/LVZJ7r/v+0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:db:59:f0:5c:9f:9f:56:a7:90:d2:2b:77:5a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3 Validity Not Before: Dec 6 07:01:06 2025 GMT Not After : Dec 7 07:01:06 2025 GMT Subject: CN=1010328287de71700d1d60770f3cac81953170ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:40:bd:0d:97:c4:b6:dc:78:84:d7:e9:86:69: bb:ea:47:28:fc:80:8d:3a:4b:25:e4:f9:f6:19:32: c2:85:03:31:13:bc:00:cd:ba:f5:48:81:a6:7f:17: 4a:f9:88:7f:aa:6c:4e:31:69:14:ea:b0:51:37:86: 53:3f:a9:55:75:af:fe:3f:57:41:9d:90:16:f8:72: bf:31:d3:0f:d6:f4:79:64:95:9f:bc:0f:74:c5:49: 79:81:e6:54:79:ce:3e:29:f2:51:e5:0a:b7:3c:77: fe:fd:b7:55:da:94:12:0c:c3:63:dd:e0:e1:14:f3: 34:e6:de:f9:f5:ce:a6:bd:52:51:4d:1c:9c:4c:dd: a3:2b:2f:86:cf:8e:46:83:cd:a5:47:87:e1:eb:bb: ef:5d:dc:ee:93:aa:00:4d:0a:14:12:f2:63:7a:70: 64:6e:00:61:42:a1:c7:1f:2c:e7:4a:d3:1c:38:da: 03:60:0d:07:49:48:70:6b:27:99:ae:b2:36:c7:61: 27:eb:a2:47:97:05:25:b6:f9:c8:2f:cf:44:41:37: 72:19:9b:b1:07:d8:6e:58:2b:ac:10:6a:00:73:65: 78:27:e2:9a:fd:12:4a:3a:82:8b:51:3c:ad:6b:e0: a6:7d:85:bc:3b:1a:e9:3e:f7:c2:73:3e:3a:78:78: 9a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:10:32:82:87:DE:71:70:0D:1D:60:77:0F:3C:AC:81:95:31:70:EC X509v3 Authority Key Identifier: keyid:CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:72:e5:b5:da:bf:f1:88:f0:7d:be:1e:27:1b:52:8c:ea:12: 17:ac:cd:e9:82:14:50:93:5f:9b:a9:5b:3c:39:56:63:1e:65: 86:36:e0:07:7e:51:3d:78:d8:32:76:39:5b:86:dc:80:e2:58: d1:38:45:fe:75:91:72:b3:6b:9d:a9:df:66:f7:6b:69:3c:29: 5c:ea:59:32:79:ca:02:d5:e9:70:b9:20:a7:68:7d:57:c0:fa: 39:19:d4:6f:74:df:f8:85:0a:5b:77:1c:df:f9:88:1f:6a:f2: e4:1c:b8:42:28:b7:a6:f7:b4:e9:19:ec:ec:a4:4f:7f:48:e6: 3a:45:5e:25:24:ac:0d:be:86:fe:17:80:a3:bb:3f:ce:b9:32: c0:9f:ce:89:df:ef:62:6e:22:a0:79:7b:ee:89:6a:5a:e9:05: ca:c3:89:d4:85:26:15:ce:d7:fb:20:18:5e:41:83:9d:02:ac: 02:23:4a:cf:fc:dc:7e:e6:b9:af:a7:b1:e2:b0:05:10:41:e1: 89:1a:6c:e1:09:5a:09:38:94:01:46:2d:d5:4d:88:46:70:97: aa:a8:53:cc:d7:0b:94:3f:28:75:24:4e:02:78:88:05:61:4b: 36:a7:e9:9b:73:ba:a7:ba:49:f5:58:37:15:91:9a:c3:3a:ce: 74:5c:ad:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydttZ8Fyfn1ankNIrd1qbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYTg4ZTliN2FiNWUzMjFiMWIzZjk1N2E5YmExOTc2ZGQ0 MjViYzMwHhcNMjUxMjA2MDcwMTA2WhcNMjUxMjA3MDcwMTA2WjAzMTEwLwYDVQQD EygxMDEwMzI4Mjg3ZGU3MTcwMGQxZDYwNzcwZjNjYWM4MTk1MzE3MGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUC9DZfEttx4hNfphmm76kco/ICN Oksl5Pn2GTLChQMxE7wAzbr1SIGmfxdK+Yh/qmxOMWkU6rBRN4ZTP6lVda/+P1dB nZAW+HK/MdMP1vR5ZJWfvA90xUl5geZUec4+KfJR5Qq3PHf+/bdV2pQSDMNj3eDh FPM05t759c6mvVJRTRycTN2jKy+Gz45Gg82lR4fh67vvXdzuk6oATQoUEvJjenBk bgBhQqHHHyznStMcONoDYA0HSUhwayeZrrI2x2En66JHlwUltvnIL89EQTdyGZux B9huWCusEGoAc2V4J+Ka/RJKOoKLUTyta+CmfYW8OxrpPvfCcz46eHiatwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAQMoKH3nFwDR1gdw88rIGVMXDsMB8GA1UdIwQY MBaAFM2ojpt6teMhsbP5V6m6GXbdQlvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFpT20zcTE0eUd4c19sWHFib1pkdDFDVzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mYWYxZTMtM2JiZC00Nzg4LWJkZjQt MWM4NmU3ZDBmNzg0LzEvemFpT20zcTE0eUd4c19sWHFib1pkdDFDVzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mYWYxZTMtM2JiZC00Nzg4LWJkZjQtMWM4NmU3ZDBmNzg0 LzEvemFpT20zcTE0eUd4c19sWHFib1pkdDFDVzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3Lltdq/ 8Yjwfb4eJxtSjOoSF6zN6YIUUJNfm6lbPDlWYx5lhjbgB35RPXjYMnY5W4bcgOJY 0ThF/nWRcrNrnanfZvdraTwpXOpZMnnKAtXpcLkgp2h9V8D6ORnUb3Tf+IUKW3cc 3/mIH2ry5By4Qii3pve06Rns7KRPf0jmOkVeJSSsDb6G/heAo7s/zrkywJ/Oid/v Ym4ioHl77olqWukFysOJ1IUmFc7X+yAYXkGDnQKsAiNKz/zcfua5r6ex4rAFEEHh iRps4QlaCTiUAUYt1U2IRnCXqqhTzNcLlD8odSROAniIBWFLNqfpm3O6p7pJ9Vg3 FZGawzrOdFytBw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:44 2025 by rpki-client