This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json) Hash identifier: OE3f5orDPw0vu/3YXegxQVC8WfmMhPzRB6ypEGayzuc= Subject key identifier: 59:E6:8D:DD:67:9C:5F:58:DE:0D:B8:27:0D:E8:C1:5C:C4:3D:24:77 Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88 Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988 Certificate serial: 019AF31BA4B99BB56523C8C151D15B1803BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:06 +0000 Manifest this update: Sat 06 Dec 2025 10:01:06 +0000 Manifest next update: Sun 07 Dec 2025 10:01:06 +0000 Files and hashes: 1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: NLF4bPrTuqxNXDtYud3o+81kce3ylIOpENJPW8XfgQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a4:b9:9b:b5:65:23:c8:c1:51:d1:5b:18:03:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988 Validity Not Before: Dec 6 10:01:06 2025 GMT Not After : Dec 7 10:01:06 2025 GMT Subject: CN=59e68ddd679c5f58de0db8270de8c15cc43d2477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9d:79:60:41:d2:f3:a9:27:ee:c2:ba:fd:c6: b7:ee:3b:4e:61:06:f1:68:2f:da:cc:96:05:49:76: 91:31:87:12:14:5b:bd:ae:97:c6:69:84:e7:75:65: 9d:c2:c6:c6:08:a0:dd:85:14:5f:bb:fb:c6:9e:cd: 49:c2:ea:29:e4:8e:57:a3:d4:06:a2:70:be:42:db: c8:87:04:08:eb:61:d1:cc:ab:18:4b:4b:36:94:03: bc:3e:f8:0d:79:92:ca:83:eb:e7:d4:2b:9f:52:2d: 9c:3b:0a:bf:dc:78:89:23:d7:cc:fb:96:08:0b:2d: f0:6d:25:06:32:17:59:25:f1:82:0f:5a:be:f8:36: d6:04:be:7b:05:f0:24:f8:e6:54:b3:11:6e:c4:f8: 74:71:d8:57:25:e2:85:a8:1b:d2:76:ea:34:ea:33: c1:99:66:19:d9:68:b4:76:2d:32:d1:6b:1d:d2:5f: 89:20:f5:d1:2c:12:eb:02:4d:5e:b2:93:bc:1c:ec: 9d:70:a9:93:05:40:cf:7a:4c:75:b3:c8:75:a7:d7: ab:10:0e:88:9a:c7:ff:e5:48:92:63:93:bd:fb:43: 63:32:38:b0:f0:5f:aa:fc:b0:26:69:68:9e:b2:2a: ad:ab:75:d1:e8:6b:5b:11:8a:ca:4d:77:c4:5f:df: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E6:8D:DD:67:9C:5F:58:DE:0D:B8:27:0D:E8:C1:5C:C4:3D:24:77 X509v3 Authority Key Identifier: keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:43:2e:99:ac:a7:6e:dc:2e:96:94:73:1d:b3:54:1e:02:bd: 77:d4:bb:65:bf:6a:02:20:34:36:e0:ca:75:c5:b7:42:ea:91: b9:c0:e2:be:89:05:61:b8:27:b8:40:45:3e:fb:67:34:41:78: 09:a2:64:26:4f:3e:b3:96:80:b9:db:42:5f:cf:ab:70:1b:f3: 37:4e:f8:50:d6:3d:a5:a1:c4:36:3a:d4:22:41:48:77:2b:16: cb:d5:3b:a0:d7:09:02:b3:ae:32:88:5e:13:ad:8c:41:0c:5f: 9e:00:2f:6a:d3:7c:76:65:b2:84:46:ba:64:7e:3e:fa:d4:7c: ad:99:0a:ce:1e:4b:86:a6:bb:2c:ef:8b:83:96:1b:95:2d:7b: 22:c4:c7:63:7a:c6:ab:1a:5c:59:1f:d0:15:e6:5f:37:1a:d4: b8:39:92:e3:69:46:3c:69:25:a3:96:dc:69:4b:82:dc:14:c0: 0a:37:13:35:01:4b:58:d2:f0:42:72:f1:ba:5b:71:a9:3d:98: a3:68:32:06:c9:9c:dc:48:e4:09:18:40:fd:18:f3:59:80:5b: 84:48:e7:74:d8:ce:21:67:de:f5:86:b3:38:4e:6a:50:e7:cd: ed:45:5b:e3:a0:9c:7b:47:b5:ce:6d:96:5f:2f:aa:d3:2b:4b: 2a:6c:d5:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6S5m7VlI8jBUdFbGAO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNzczMDE4ODNiZTBkMjFhYmQ5YzZjYzBiZDc1MDBhN2Fi NDc5ODgwHhcNMjUxMjA2MTAwMTA2WhcNMjUxMjA3MTAwMTA2WjAzMTEwLwYDVQQD Eyg1OWU2OGRkZDY3OWM1ZjU4ZGUwZGI4MjcwZGU4YzE1Y2M0M2QyNDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ15YEHS86kn7sK6/ca37jtOYQbx aC/azJYFSXaRMYcSFFu9rpfGaYTndWWdwsbGCKDdhRRfu/vGns1Jwuop5I5Xo9QG onC+QtvIhwQI62HRzKsYS0s2lAO8PvgNeZLKg+vn1CufUi2cOwq/3HiJI9fM+5YI Cy3wbSUGMhdZJfGCD1q++DbWBL57BfAk+OZUsxFuxPh0cdhXJeKFqBvSduo06jPB mWYZ2Wi0di0y0Wsd0l+JIPXRLBLrAk1espO8HOydcKmTBUDPekx1s8h1p9erEA6I msf/5UiSY5O9+0NjMjiw8F+q/LAmaWiesiqtq3XR6GtbEYrKTXfEX99XQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnmjd1nnF9Y3g24Jw3owVzEPSR3MB8GA1UdIwQY MBaAFM93MBiDvg0hq9nGzAvXUAp6tHmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81ZjQyY2EtZTk3NC00ZWYwLTk2ZGYt OGZkNjA4NTNjZGUwLzEvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS81ZjQyY2EtZTk3NC00ZWYwLTk2ZGYtOGZkNjA4NTNjZGUw LzEvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEMumayn btwulpRzHbNUHgK9d9S7Zb9qAiA0NuDKdcW3QuqRucDivokFYbgnuEBFPvtnNEF4 CaJkJk8+s5aAudtCX8+rcBvzN074UNY9paHENjrUIkFIdysWy9U7oNcJArOuMohe E62MQQxfngAvatN8dmWyhEa6ZH4++tR8rZkKzh5Lhqa7LO+Lg5YblS17IsTHY3rG qxpcWR/QFeZfNxrUuDmS42lGPGklo5bcaUuC3BTACjcTNQFLWNLwQnLxultxqT2Y o2gyBsmc3EjkCRhA/RjzWYBbhEjndNjOIWfe9YazOE5qUOfN7UVb46Cce0e1zm2W Xy+q0ytLKmzVBA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:43:54 2025 by rpki-client