This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft File: zaiOm3q14yGxs_lXqboZdt1CW8M.mft (raw, json) Hash identifier: qzl7+nq5SwCm6o1wz3+b4EnJzjvPtjpm0DNqE0DUUd0= Subject key identifier: 5C:4C:AA:CA:8B:EC:16:6B:C5:06:1D:D4:95:42:DF:42:25:85:8D:4B Authority key identifier: CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3 Certificate issuer: /CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3 Certificate serial: 019B3BD9C22C6F5F08E7878A442B96F33346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft Manifest number: 04F3 Signing time: Sat 20 Dec 2025 13:01:25 +0000 Manifest this update: Sat 20 Dec 2025 13:01:25 +0000 Manifest next update: Sun 21 Dec 2025 13:01:25 +0000 Files and hashes: 1: fgM561fL_3Rx-_1J5CJxxdceK50.roa (hash: nwniELmnb3/CT2nQQZ1hAp6RF9PN9bCFIt9tpx0KqDk=) 2: zaiOm3q14yGxs_lXqboZdt1CW8M.crl (hash: NJgrYgLZoRUd9j3+32qobwwf8WE9PManrKeAm4EpRSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:c2:2c:6f:5f:08:e7:87:8a:44:2b:96:f3:33:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3 Validity Not Before: Dec 20 13:01:25 2025 GMT Not After : Dec 21 13:01:25 2025 GMT Subject: CN=5c4caaca8bec166bc5061dd49542df4225858d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:16:1e:61:50:e6:bf:d7:47:f2:ce:d7:ab:a9: 6a:54:64:83:b5:52:72:94:8f:89:1e:51:d3:c3:54: 50:0c:b8:ee:48:e7:aa:19:99:ee:8a:a2:84:e9:37: cd:91:f2:bf:1b:15:77:19:73:2a:27:3a:0c:d7:a1: cd:5d:ad:be:cc:85:3d:6f:b8:cd:0b:1e:4e:14:35: 90:d1:83:ef:19:c0:77:bf:d4:8e:72:45:08:12:86: de:8f:c7:43:95:c0:a7:85:6b:df:9d:58:21:8b:34: b9:71:5f:ec:29:1f:ac:a4:f7:83:46:40:4e:9d:94: db:23:5b:b6:54:a5:b0:11:51:39:50:40:fd:0f:03: 7f:dd:ea:9b:6d:7b:73:14:61:ab:0a:a3:6c:35:54: ac:4a:15:0a:7b:f8:d7:8d:46:fe:5c:ac:e0:73:51: aa:47:ad:91:ee:b5:62:38:0c:39:39:93:30:f9:e1: 78:16:f4:f1:37:a1:b3:e6:3e:7a:e6:64:30:d1:28: 46:12:8e:d6:31:1e:14:39:06:01:65:33:ec:d5:ca: 21:07:e9:7a:1c:23:3d:e3:a3:5c:64:d4:ac:6f:d4: 03:a0:7c:24:d7:a9:06:f0:93:87:c9:92:d1:a2:a4: 7b:2d:a9:aa:5e:57:1d:da:78:bc:95:b0:b5:99:af: 5a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4C:AA:CA:8B:EC:16:6B:C5:06:1D:D4:95:42:DF:42:25:85:8D:4B X509v3 Authority Key Identifier: keyid:CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3a:3d:1e:eb:d6:07:6e:a9:11:76:86:24:a3:64:95:dc:be: 7d:30:44:08:98:4a:f0:98:79:53:cb:f3:67:3f:8c:2e:53:4c: ce:f7:c4:2b:0f:4b:94:6f:73:97:ab:1b:05:1d:d5:bf:16:c8: 2a:26:6c:0a:0e:bb:69:0a:5a:5e:71:73:df:91:5c:bf:4f:89: 1f:da:46:23:4d:a7:ab:ce:a9:8a:d0:a1:ce:f6:da:a5:bc:f3: 57:e3:08:6a:46:f1:62:28:48:d0:f8:16:28:71:39:61:d6:fd: c5:21:5d:f7:24:f0:45:42:a3:ea:8e:11:8d:04:77:4e:46:91: fd:f2:e6:45:2c:8c:f5:db:72:3d:af:13:e4:21:bb:99:29:9a: 8c:d5:0c:b0:22:99:df:ee:9c:02:26:00:46:e8:ce:92:fa:1d: 1a:f4:02:80:83:0c:6d:4c:15:d2:fb:14:72:3d:7a:8d:7e:29: 3f:6e:d1:ff:d7:cf:7d:4a:5c:75:6c:40:b0:a9:96:3b:b8:8a: 7e:ec:f4:04:c9:d3:ed:f2:d5:39:b9:40:c3:8f:50:43:53:ff: b7:dd:f0:18:88:8f:ee:4a:2a:72:c0:ff:5b:aa:f7:a1:db:13: 7e:9d:6b:1d:b1:0a:e2:5c:c8:4e:9d:b8:9d:46:eb:4b:4a:e8: 45:89:b5:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72cIsb18I54eKRCuW8zNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYTg4ZTliN2FiNWUzMjFiMWIzZjk1N2E5YmExOTc2ZGQ0 MjViYzMwHhcNMjUxMjIwMTMwMTI1WhcNMjUxMjIxMTMwMTI1WjAzMTEwLwYDVQQD Eyg1YzRjYWFjYThiZWMxNjZiYzUwNjFkZDQ5NTQyZGY0MjI1ODU4ZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxYeYVDmv9dH8s7Xq6lqVGSDtVJy lI+JHlHTw1RQDLjuSOeqGZnuiqKE6TfNkfK/GxV3GXMqJzoM16HNXa2+zIU9b7jN Cx5OFDWQ0YPvGcB3v9SOckUIEobej8dDlcCnhWvfnVghizS5cV/sKR+spPeDRkBO nZTbI1u2VKWwEVE5UED9DwN/3eqbbXtzFGGrCqNsNVSsShUKe/jXjUb+XKzgc1Gq R62R7rViOAw5OZMw+eF4FvTxN6Gz5j565mQw0ShGEo7WMR4UOQYBZTPs1cohB+l6 HCM946NcZNSsb9QDoHwk16kG8JOHyZLRoqR7LamqXlcd2ni8lbC1ma9a1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxMqsqL7BZrxQYd1JVC30IlhY1LMB8GA1UdIwQY MBaAFM2ojpt6teMhsbP5V6m6GXbdQlvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFpT20zcTE0eUd4c19sWHFib1pkdDFDVzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mYWYxZTMtM2JiZC00Nzg4LWJkZjQt MWM4NmU3ZDBmNzg0LzEvemFpT20zcTE0eUd4c19sWHFib1pkdDFDVzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mYWYxZTMtM2JiZC00Nzg4LWJkZjQtMWM4NmU3ZDBmNzg0 LzEvemFpT20zcTE0eUd4c19sWHFib1pkdDFDVzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizo9HuvW B26pEXaGJKNkldy+fTBECJhK8Jh5U8vzZz+MLlNMzvfEKw9LlG9zl6sbBR3VvxbI KiZsCg67aQpaXnFz35Fcv0+JH9pGI02nq86pitChzvbapbzzV+MIakbxYihI0PgW KHE5Ydb9xSFd9yTwRUKj6o4RjQR3TkaR/fLmRSyM9dtyPa8T5CG7mSmajNUMsCKZ 3+6cAiYARujOkvodGvQCgIMMbUwV0vsUcj16jX4pP27R/9fPfUpcdWxAsKmWO7iK fuz0BMnT7fLVOblAw49QQ1P/t93wGIiP7koqcsD/W6r3odsTfp1rHbEK4lzITp24 nUbrS0roRYm1Qw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:00:54 2025 by rpki-client