This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: b734BJsHYEUqtu+eSBrWC1G/qBC5puTaAvCOHzYILSs= Subject key identifier: 57:BD:0D:F8:6E:4B:6A:64:A7:0D:20:40:2E:69:CA:6E:B5:6F:B1:1F Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019AF12CD48B2B74DD33176507E21C9863B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 176F Signing time: Sat 06 Dec 2025 01:00:38 +0000 Manifest this update: Sat 06 Dec 2025 01:00:38 +0000 Manifest next update: Sun 07 Dec 2025 01:00:38 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 4: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 5: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 6: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 7: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: j9wHWpJ5PyPKY9wX32NpH/QsbkJLNvddoPDrk4axX2A=) 8: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 9: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 10: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 11: ttd53oOqNzSh1Mtdf5yOWTGPq-E.roa (hash: EumygL53WWGsQCEg1Lem1grWf0oIkvDK9ERz5W1pGI8=) 12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d4:8b:2b:74:dd:33:17:65:07:e2:1c:98:63:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Dec 6 01:00:38 2025 GMT Not After : Dec 7 01:00:38 2025 GMT Subject: CN=57bd0df86e4b6a64a70d20402e69ca6eb56fb11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:09:d7:95:9e:20:a5:14:f0:ba:f7:a1:d0: f6:5e:ed:59:7f:78:3c:fb:e0:bb:04:3f:57:d0:0e: 0d:a8:52:69:a2:10:d0:49:10:dc:7d:31:86:7c:d7: 35:bf:ec:e3:1a:19:99:38:54:19:ba:9a:c8:2d:88: 41:aa:24:e6:f3:90:cc:a3:76:41:07:db:cb:54:9e: 6a:20:a5:ee:79:23:ab:c5:68:d6:39:b5:43:dd:f9: cb:3a:e0:a9:3e:9e:43:2d:cd:33:e0:ca:22:4c:85: 4a:b0:f6:8c:77:47:01:ea:e7:48:68:1a:d4:c6:cc: 8e:20:fd:5e:ac:b2:f5:a2:21:9b:5d:1a:22:e4:32: 9b:95:2f:63:07:78:77:45:b0:ab:50:ea:c7:91:c2: a9:ea:40:bf:17:b2:9a:61:f5:e3:72:79:48:44:f4: ae:29:b5:82:b0:a1:6d:6f:e7:36:d7:54:21:e6:94: cd:06:95:a5:e0:4d:88:37:a2:86:b7:91:95:c7:e8: f5:25:c5:8d:94:5b:53:bd:b1:b7:19:73:0f:60:28: 15:83:ed:92:e5:d8:48:5c:1a:a9:ac:dc:fa:96:bd: 6d:dc:65:48:57:67:c9:99:30:28:47:db:bd:54:d7: 07:44:b9:f1:7a:d7:10:de:5e:5b:e8:58:ed:02:7f: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BD:0D:F8:6E:4B:6A:64:A7:0D:20:40:2E:69:CA:6E:B5:6F:B1:1F X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6a:8c:f8:76:2e:41:c3:2f:f4:df:84:e6:9b:70:b4:8d:4b: fc:dc:a6:15:c9:66:60:bb:56:85:6b:97:0c:01:e4:af:44:93: 3f:82:53:10:3c:c9:61:50:dc:3b:21:bb:1e:c4:80:53:74:a3: c2:cc:22:cd:02:3d:35:2b:5e:e4:46:52:ab:d1:20:94:b7:e1: 79:2e:c9:0b:2c:bb:b5:b8:df:37:4b:28:26:cd:7d:81:9f:09: a9:10:92:1c:9e:9b:da:5e:f8:eb:47:0d:1f:bf:2d:15:b9:c8: 45:d7:b5:b6:3e:fd:00:cb:7f:f4:ec:cc:d7:d0:05:d4:1c:a8: b2:33:94:d1:4e:c3:e0:d4:fa:cd:13:2a:56:a8:ed:96:90:c5: a7:d2:33:37:55:de:a0:29:6f:6e:7e:85:03:68:2a:74:13:80: e2:53:d5:90:8c:9c:36:ea:9e:4a:f1:6a:38:bd:db:5b:6e:95: 47:f9:44:f9:9e:e9:d1:be:4b:a2:b0:ae:0c:a0:02:6c:44:fd: 5c:04:97:79:8c:94:50:06:91:f4:11:3f:51:14:5b:54:1b:49: 18:ae:a9:77:de:65:c4:4f:7d:ff:87:06:2b:9e:89:b2:47:3c: 24:a2:e4:cf:75:ef:83:b3:18:e5:a3:56:09:1c:4c:dd:d1:d2: 04:75:ed:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNSLK3TdMxdlB+IcmGO0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUxMjA2MDEwMDM4WhcNMjUxMjA3MDEwMDM4WjAzMTEwLwYDVQQD Eyg1N2JkMGRmODZlNGI2YTY0YTcwZDIwNDAyZTY5Y2E2ZWI1NmZiMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscwJ15WeIKUU8Lr3odD2Xu1Zf3g8 ++C7BD9X0A4NqFJpohDQSRDcfTGGfNc1v+zjGhmZOFQZuprILYhBqiTm85DMo3ZB B9vLVJ5qIKXueSOrxWjWObVD3fnLOuCpPp5DLc0z4MoiTIVKsPaMd0cB6udIaBrU xsyOIP1erLL1oiGbXRoi5DKblS9jB3h3RbCrUOrHkcKp6kC/F7KaYfXjcnlIRPSu KbWCsKFtb+c211Qh5pTNBpWl4E2IN6KGt5GVx+j1JcWNlFtTvbG3GXMPYCgVg+2S 5dhIXBqprNz6lr1t3GVIV2fJmTAoR9u9VNcHRLnxetcQ3l5b6FjtAn8yKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFe9DfhuS2pkpw0gQC5pym61b7EfMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGqM+HYu QcMv9N+E5ptwtI1L/NymFclmYLtWhWuXDAHkr0STP4JTEDzJYVDcOyG7HsSAU3Sj wswizQI9NSte5EZSq9EglLfheS7JCyy7tbjfN0soJs19gZ8JqRCSHJ6b2l7460cN H78tFbnIRde1tj79AMt/9OzM19AF1ByosjOU0U7D4NT6zRMqVqjtlpDFp9IzN1Xe oClvbn6FA2gqdBOA4lPVkIycNuqeSvFqOL3bW26VR/lE+Z7p0b5LorCuDKACbET9 XASXeYyUUAaR9BE/URRbVBtJGK6pd95lxE99/4cGK56Jskc8JKLkz3Xvg7MY5aNW CRxM3dHSBHXtNg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:52 2025 by rpki-client