This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft File: ZlBwd85_MPwGht0JNKiZl98x6Ew.mft (raw, json) Hash identifier: gDClwHfHfftdsVMI5LFtL7aE6M4ELoRCOyWb96FyTaw= Subject key identifier: 75:E7:9E:0A:F2:50:66:57:26:80:4B:5B:69:09:B9:D2:12:D3:D7:CB Authority key identifier: 66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C Certificate issuer: /CN=66507077ce7f30fc0686dd0934a89997df31e84c Certificate serial: 019AF509F03810F892CB27B8C13D9A46C615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft Manifest number: 02E5 Signing time: Sat 06 Dec 2025 19:01:00 +0000 Manifest this update: Sat 06 Dec 2025 19:01:00 +0000 Manifest next update: Sun 07 Dec 2025 19:01:00 +0000 Files and hashes: 1: CMAN4bcbFlE2ovL3BXKdvH4eTII.roa (hash: ZzFaJfQBLQmJT0k4QbFN8QUiuOCXpP8XehevhIAFTKY=) 2: ZlBwd85_MPwGht0JNKiZl98x6Ew.crl (hash: KdPw1vz1tELyJNFOwtbiPQYh1EM+rGNLjE7rN5E4nDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:f0:38:10:f8:92:cb:27:b8:c1:3d:9a:46:c6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66507077ce7f30fc0686dd0934a89997df31e84c Validity Not Before: Dec 6 19:01:00 2025 GMT Not After : Dec 7 19:01:00 2025 GMT Subject: CN=75e79e0af250665726804b5b6909b9d212d3d7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:00:a1:75:9a:7f:fc:76:93:4a:b5:50:28:29: 17:b4:0e:d4:dd:59:60:eb:c5:b1:e9:ae:1a:bc:71: c4:8a:75:5f:84:b0:91:d9:d1:8b:8f:d9:ea:b9:07: e5:24:63:32:81:cc:aa:c7:e9:63:a8:50:cc:e8:d8: 70:37:1a:e1:8c:ad:3f:40:67:d0:42:50:ba:33:e1: 28:9f:31:3e:7e:e0:d4:a8:4f:7a:e7:69:ef:39:e3: c8:c2:31:c3:b0:1d:6d:4d:8a:a4:80:65:7a:76:9b: 3c:cb:32:14:76:86:79:55:18:9a:0a:cd:14:d9:66: a8:a4:3c:da:a6:93:d1:b1:bb:c0:d0:ad:cf:72:08: 73:80:9f:18:9f:d8:8a:ad:6b:71:06:b1:4d:55:f4: a4:3d:48:a2:67:03:0e:3d:7b:04:dc:ec:17:c7:60: c5:b9:06:3d:9b:67:d0:71:c2:1d:a2:87:3a:a3:bf: c3:69:c5:22:1d:ba:90:31:cc:bc:4e:9c:68:53:fd: ce:09:29:7a:d0:eb:9a:10:5d:0e:53:8b:ed:11:e0: 5f:03:91:8c:08:58:06:fc:90:7a:37:8b:c3:62:ab: ce:2c:77:a2:df:82:e8:3c:d7:d1:14:6e:b2:19:36: 91:33:9c:40:85:38:21:7e:6c:98:e4:b5:b1:56:75: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E7:9E:0A:F2:50:66:57:26:80:4B:5B:69:09:B9:D2:12:D3:D7:CB X509v3 Authority Key Identifier: keyid:66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c2:3d:26:be:8f:33:79:b3:29:28:f7:52:7f:4e:1b:05:a7: e5:ad:3f:18:86:99:fb:b5:f9:a7:bf:68:75:f4:f4:88:43:39: 93:93:25:c5:34:81:c3:ed:5b:41:98:3e:6b:4f:98:02:aa:70: e3:4f:5a:48:59:c9:ac:3c:5e:96:b9:51:cf:2a:d8:c8:53:5f: de:e4:0e:ba:42:ea:d3:3a:24:2a:2b:11:ce:e5:96:28:42:8f: 66:46:e5:e9:72:d5:c5:1b:9a:0f:c5:c8:a4:d3:cc:9c:fc:e5: 6c:02:f5:f5:b7:0c:1c:ed:95:24:92:47:65:a6:15:6f:b6:ac: 5f:cb:27:01:cf:70:06:27:0b:1d:77:8c:8a:36:84:84:3d:ca: 41:ea:bb:ef:ec:75:6a:f8:9d:77:b2:17:c8:d9:d9:57:b2:f3: 62:61:2a:c4:33:e7:b6:aa:bb:25:b2:cd:cc:03:2b:c1:69:3c: 44:b6:5e:f5:a8:07:0b:16:f8:9b:31:c6:dd:cd:46:66:6e:5e: 94:de:ba:03:70:6b:b2:2c:b0:6a:a1:2a:ee:4f:cb:dc:19:34: ef:5c:00:9d:47:77:80:ba:85:47:61:0d:43:bf:2a:b0:8f:06: 1d:de:19:50:c3:59:23:e5:86:4d:32:a2:9c:37:a4:16:7e:8b: 2f:c3:ad:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CfA4EPiSyye4wT2aRsYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NTA3MDc3Y2U3ZjMwZmMwNjg2ZGQwOTM0YTg5OTk3ZGYz MWU4NGMwHhcNMjUxMjA2MTkwMTAwWhcNMjUxMjA3MTkwMTAwWjAzMTEwLwYDVQQD Eyg3NWU3OWUwYWYyNTA2NjU3MjY4MDRiNWI2OTA5YjlkMjEyZDNkN2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQChdZp//HaTSrVQKCkXtA7U3Vlg 68Wx6a4avHHEinVfhLCR2dGLj9nquQflJGMygcyqx+ljqFDM6NhwNxrhjK0/QGfQ QlC6M+EonzE+fuDUqE9652nvOePIwjHDsB1tTYqkgGV6dps8yzIUdoZ5VRiaCs0U 2WaopDzappPRsbvA0K3PcghzgJ8Yn9iKrWtxBrFNVfSkPUiiZwMOPXsE3OwXx2DF uQY9m2fQccIdooc6o7/DacUiHbqQMcy8TpxoU/3OCSl60OuaEF0OU4vtEeBfA5GM CFgG/JB6N4vDYqvOLHei34LoPNfRFG6yGTaRM5xAhTghfmyY5LWxVnWGVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXnngryUGZXJoBLW2kJudIS09fLMB8GA1UdIwQY MBaAFGZQcHfOfzD8BobdCTSomZffMehMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hMzYzNjUtODU1Mi00YTk3LThiZmEt Y2NhZjQ0ZDQxNjQ4LzEvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hMzYzNjUtODU1Mi00YTk3LThiZmEtY2NhZjQ0ZDQxNjQ4 LzEvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccI9Jr6P M3mzKSj3Un9OGwWn5a0/GIaZ+7X5p79odfT0iEM5k5MlxTSBw+1bQZg+a0+YAqpw 409aSFnJrDxelrlRzyrYyFNf3uQOukLq0zokKisRzuWWKEKPZkbl6XLVxRuaD8XI pNPMnPzlbAL19bcMHO2VJJJHZaYVb7asX8snAc9wBicLHXeMijaEhD3KQeq77+x1 avidd7IXyNnZV7LzYmEqxDPntqq7JbLNzAMrwWk8RLZe9agHCxb4mzHG3c1GZm5e lN66A3BrsiywaqEq7k/L3Bk071wAnUd3gLqFR2ENQ78qsI8GHd4ZUMNZI+WGTTKi nDekFn6LL8Otrg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:29 2025 by rpki-client