This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft File: zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json) Hash identifier: r7+cyDXBGfy0q3+UmvRoRdt1ZzJ7UxQ/P36wYZYtnOM= Subject key identifier: EA:DB:D6:6C:26:AF:CD:EE:45:91:46:EF:B5:EE:86:B9:BC:ED:81:85 Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c Certificate serial: 019AF4656BB0ECE7B492BD07DB0E2684B575 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft Manifest number: 09EA Signing time: Sat 06 Dec 2025 16:01:18 +0000 Manifest this update: Sat 06 Dec 2025 16:01:18 +0000 Manifest next update: Sun 07 Dec 2025 16:01:18 +0000 Files and hashes: 1: ECAqPGx51Z00QIK2nsNsbPmpugU.roa (hash: HZJH2KP+4GUjxS9EOgilXL7MO2BjwBbNTgaJKakCYf0=) 2: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: YoyKUmITb31YkjF3fPvCHKSMpe14q6YbeMhBsQwAkDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:6b:b0:ec:e7:b4:92:bd:07:db:0e:26:84:b5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c Validity Not Before: Dec 6 16:01:18 2025 GMT Not After : Dec 7 16:01:18 2025 GMT Subject: CN=eadbd66c26afcdee459146efb5ee86b9bced8185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:6e:60:99:43:c3:c2:44:7d:fd:cd:2c:02: c6:94:3d:3e:2d:6f:d0:51:c3:b3:be:18:9d:c1:4d: 5c:1e:a9:0e:6e:ad:95:5b:4a:0f:58:15:cb:5c:13: 8f:f6:18:d4:4b:28:f8:68:2d:ec:df:e7:71:85:83: 7d:fe:3f:9b:60:47:64:e0:a0:8c:9f:26:e3:65:b2: ce:e1:55:f8:e7:7d:5c:fb:1a:53:47:13:bb:c6:a6: a4:5a:36:87:04:49:0e:b2:33:c9:03:19:b1:6d:6f: 82:33:36:be:03:a5:16:8b:ea:3c:95:68:14:1c:6b: a7:d7:fa:84:d9:56:62:22:37:ed:52:35:f5:ff:ab: 69:9b:90:b3:1f:c4:a8:86:4b:dd:29:9d:8d:ab:7d: 2f:ef:59:9e:74:30:62:85:f1:90:54:c3:a3:12:56: 32:08:03:36:6e:ba:14:7d:4d:ec:e7:a8:ae:72:cb: 07:b4:75:63:78:32:f6:1b:d3:cc:7c:ba:ed:34:54: b4:67:ae:de:1e:c3:a9:f3:d9:f8:9b:c2:b1:49:95: 20:49:c2:35:b7:e0:d7:b9:52:d0:3d:25:f3:e1:53: ae:a7:be:b5:28:e0:97:3b:48:1d:d3:b8:3c:8f:c7: 90:25:8b:e4:4b:42:57:8d:af:8d:5f:e3:ef:c7:a0: 87:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DB:D6:6C:26:AF:CD:EE:45:91:46:EF:B5:EE:86:B9:BC:ED:81:85 X509v3 Authority Key Identifier: keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:62:ae:65:4f:6b:5e:16:92:27:f0:9e:46:c6:07:93:47:28: 90:9b:17:95:a3:ab:b0:c0:d3:bb:c8:23:10:f8:28:18:6e:65: c9:d6:95:74:7c:70:86:ed:c6:83:c9:5b:f0:f0:94:4c:42:0f: 6d:f8:8d:7e:64:56:fd:cd:10:8f:d8:8d:70:b9:aa:8e:43:43: e8:97:ed:e1:45:ca:5d:a4:b6:0e:41:ef:ab:08:51:de:17:ae: 58:e5:34:0f:b5:e9:3d:4a:12:f1:52:33:90:47:0a:78:6a:37: 23:f7:95:1b:fa:3f:38:65:fe:09:d7:7c:5f:3c:e6:cd:97:92: b3:db:4b:28:b5:0a:92:cb:ec:4f:1b:03:64:1d:9a:cb:cf:36: e7:76:6f:63:cc:98:63:a1:2c:ab:b0:47:3a:75:6e:98:ab:f6: a7:42:fe:19:6e:f4:d6:8f:51:53:7a:e3:51:df:0c:eb:8d:af: b7:e8:64:35:57:c4:8e:50:74:18:48:11:f5:26:3c:8d:38:b9: d4:14:f6:0b:c0:e9:72:74:f0:96:c1:96:ae:43:5a:56:b5:f0: be:27:2a:50:00:69:93:be:85:9d:32:a5:20:2d:27:2a:42:00: e0:23:b2:02:a1:2b:a0:1e:2e:91:ef:cc:01:58:9c:40:86:04: c1:e5:32:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZWuw7Oe0kr0H2w4mhLV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjYyY2JkNmNmN2U4MDgyMjRmNmNmODcyNWUzNmUyYTk2 NTM1MmMwHhcNMjUxMjA2MTYwMTE4WhcNMjUxMjA3MTYwMTE4WjAzMTEwLwYDVQQD EyhlYWRiZDY2YzI2YWZjZGVlNDU5MTQ2ZWZiNWVlODZiOWJjZWQ4MTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhNuYJlDw8JEff3NLALGlD0+LW/Q UcOzvhidwU1cHqkObq2VW0oPWBXLXBOP9hjUSyj4aC3s3+dxhYN9/j+bYEdk4KCM nybjZbLO4VX4531c+xpTRxO7xqakWjaHBEkOsjPJAxmxbW+CMza+A6UWi+o8lWgU HGun1/qE2VZiIjftUjX1/6tpm5CzH8SohkvdKZ2Nq30v71medDBihfGQVMOjElYy CAM2broUfU3s56iucssHtHVjeDL2G9PMfLrtNFS0Z67eHsOp89n4m8KxSZUgScI1 t+DXuVLQPSXz4VOup761KOCXO0gd07g8j8eQJYvkS0JXja+NX+Pvx6CHrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrb1mwmr83uRZFG77Xuhrm87YGFMB8GA1UdIwQY MBaAFM32LL1s9+gIIk9s+HJeNuKpZTUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUt ODQ5NDE3YWU2MzRkLzEvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUtODQ5NDE3YWU2MzRk LzEvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmKuZU9r XhaSJ/CeRsYHk0cokJsXlaOrsMDTu8gjEPgoGG5lydaVdHxwhu3Gg8lb8PCUTEIP bfiNfmRW/c0Qj9iNcLmqjkND6Jft4UXKXaS2DkHvqwhR3heuWOU0D7XpPUoS8VIz kEcKeGo3I/eVG/o/OGX+Cdd8XzzmzZeSs9tLKLUKksvsTxsDZB2ay88253ZvY8yY Y6Esq7BHOnVumKv2p0L+GW701o9RU3rjUd8M642vt+hkNVfEjlB0GEgR9SY8jTi5 1BT2C8DpcnTwlsGWrkNaVrXwvicqUABpk76FnTKlIC0nKkIA4COyAqEroB4uke/M AVicQIYEweUyrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:58:52 2025 by rpki-client