This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json) Hash identifier: Glr2JPh/zly6+rJf0uQIK6JjdsZvrJWJ1FoIfIGOBnQ= Subject key identifier: F9:06:E0:56:8B:E3:DF:17:27:4D:93:4A:A1:04:E7:EE:7D:8D:56:F6 Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e Certificate serial: 019AF31C651C743DC3971114386D9DD3C2BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:55 +0000 Manifest this update: Sat 06 Dec 2025 10:01:55 +0000 Manifest next update: Sun 07 Dec 2025 10:01:55 +0000 Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=) 2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: FOPRLP8hmkk+RNUpBhiI0uel2fgVQUileJOwhz3t2m4=) 3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:65:1c:74:3d:c3:97:11:14:38:6d:9d:d3:c2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e Validity Not Before: Dec 6 10:01:55 2025 GMT Not After : Dec 7 10:01:55 2025 GMT Subject: CN=f906e0568be3df17274d934aa104e7ee7d8d56f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d3:ff:5e:34:9c:c1:df:be:8d:33:09:ad:99: 83:cb:90:36:68:8e:8f:d7:f3:04:f8:22:d9:30:6e: 6f:a6:24:bc:5f:e9:42:c2:f4:85:fb:66:8b:09:49: 19:d3:19:38:07:b2:32:e8:40:49:a8:df:13:24:b2: 11:92:35:92:22:01:e3:7e:cc:6e:bb:e0:42:44:47: f7:ec:e7:92:95:3c:95:14:2a:94:92:01:c4:0d:40: 7f:e7:07:f5:14:c0:94:0b:d3:e6:d6:1e:d9:30:ff: 13:e7:23:0e:b8:2d:3e:d4:50:fd:47:b3:5a:9d:0c: 4f:9d:ea:02:83:b5:30:c0:21:f4:1f:eb:6a:59:e7: 55:c6:b7:86:a1:c8:f3:0a:ab:85:c3:0c:fe:d0:fc: f4:6b:4d:e3:b2:f5:a4:99:fa:3e:89:c5:5b:e7:d4: c4:e7:3e:14:02:71:d3:d2:03:e8:d3:f4:9d:ef:64: c7:93:2f:01:20:d7:28:62:89:a8:23:b2:57:a1:c3: d4:9f:00:f5:12:4b:c5:e8:97:95:e3:ab:32:71:22: 65:00:15:02:ff:76:28:df:d4:d5:f7:b6:3b:ab:70: b2:06:9a:03:f3:97:fe:d8:fd:8e:e3:3d:7b:65:43: 7b:33:46:64:89:2e:4f:63:ab:b0:97:f8:d7:52:2a: 31:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:06:E0:56:8B:E3:DF:17:27:4D:93:4A:A1:04:E7:EE:7D:8D:56:F6 X509v3 Authority Key Identifier: keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:01:e9:de:af:0d:c2:41:d8:1f:6f:5a:2c:e1:95:93:9b:13: ae:0b:f7:f6:bf:f7:82:6f:af:bc:60:62:28:74:75:8a:a6:ca: ea:4f:65:bd:8c:84:94:80:93:17:c6:73:af:dd:c7:78:11:12: 86:48:c7:f9:15:16:7f:eb:b2:ff:f5:0a:2e:ec:de:68:01:a0: 33:ef:e2:e3:63:e3:ac:da:8d:64:c4:97:79:96:df:91:7b:1f: 53:5c:b0:4a:49:3c:3b:0a:f4:71:0a:a6:9e:7d:f4:88:0a:cf: 2c:c4:9d:99:f7:73:84:48:08:ca:75:98:2b:8f:a3:3a:d5:74: 58:b9:81:df:8d:ba:7f:c1:4f:1e:2b:ee:07:cf:89:45:1d:1f: 58:7d:b2:ee:ba:05:d9:d9:d7:ae:95:e2:c9:b3:d5:d9:8b:1d: 50:13:18:a4:53:5d:8d:ac:f8:73:6a:3e:fc:1f:b1:13:9d:98: 6a:0f:a9:a1:42:47:1c:ab:75:b8:56:36:dc:73:97:a1:c0:9f: 8c:2a:4a:a1:d4:c2:5d:53:a2:12:be:22:1a:0d:73:34:30:b8: ed:5d:a5:7b:ec:d2:b4:1a:63:2b:fd:21:d0:04:3d:59:b5:ef: 4d:42:2e:5b:a6:1e:7d:d1:b0:dc:6b:c9:f6:d8:d2:30:83:ba: 00:96:9a:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGUcdD3DlxEUOG2d08K+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Mzk1ZDZhMWEyODg4ZDljMzU2ZWVkMzI3ODllNjI3ZDIz ZDUxNmUwHhcNMjUxMjA2MTAwMTU1WhcNMjUxMjA3MTAwMTU1WjAzMTEwLwYDVQQD EyhmOTA2ZTA1NjhiZTNkZjE3Mjc0ZDkzNGFhMTA0ZTdlZTdkOGQ1NmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNP/XjScwd++jTMJrZmDy5A2aI6P 1/ME+CLZMG5vpiS8X+lCwvSF+2aLCUkZ0xk4B7Iy6EBJqN8TJLIRkjWSIgHjfsxu u+BCREf37OeSlTyVFCqUkgHEDUB/5wf1FMCUC9Pm1h7ZMP8T5yMOuC0+1FD9R7Na nQxPneoCg7UwwCH0H+tqWedVxreGocjzCquFwwz+0Pz0a03jsvWkmfo+icVb59TE 5z4UAnHT0gPo0/Sd72THky8BINcoYomoI7JXocPUnwD1EkvF6JeV46sycSJlABUC /3Yo39TV97Y7q3CyBpoD85f+2P2O4z17ZUN7M0ZkiS5PY6uwl/jXUioxbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkG4FaL498XJ02TSqEE5+59jVb2MB8GA1UdIwQY MBaAFGQ5XWoaKIjZw1bu0yeJ5ifSPVFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYt OGQ4MzU5NDhlODc5LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYtOGQ4MzU5NDhlODc5 LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQHp3q8N wkHYH29aLOGVk5sTrgv39r/3gm+vvGBiKHR1iqbK6k9lvYyElICTF8Zzr93HeBES hkjH+RUWf+uy//UKLuzeaAGgM+/i42PjrNqNZMSXeZbfkXsfU1ywSkk8Owr0cQqm nn30iArPLMSdmfdzhEgIynWYK4+jOtV0WLmB3426f8FPHivuB8+JRR0fWH2y7roF 2dnXrpXiybPV2YsdUBMYpFNdjaz4c2o+/B+xE52Yag+poUJHHKt1uFY23HOXocCf jCpKodTCXVOiEr4iGg1zNDC47V2le+zStBpjK/0h0AQ9WbXvTUIuW6YefdGw3GvJ 9tjSMIO6AJaa1A== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:07 2025 by rpki-client