This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json) Hash identifier: 5LNpYuLB1tB+Y0OXFq6E0KOG7IInBSx47qHY/b93pQQ= Subject key identifier: DC:58:89:01:2C:86:97:F6:10:F0:AD:FF:99:6B:DA:92:96:29:DE:6C Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb Certificate serial: 019AF50AC25CBEC3024FF7FC45F620B9C91B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:01:54 +0000 Manifest this update: Sat 06 Dec 2025 19:01:54 +0000 Manifest next update: Sun 07 Dec 2025 19:01:54 +0000 Files and hashes: 1: XmInGKZQVpi4yiOnRct1YYYqWiE.roa (hash: R86EgdaEJJTkg9AcxCYcJUrFnlotYJxO2Dz2JbHzD6o=) 2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: VBk0zmA7kSeUad/OQkWnetfWIh3cddCUVTQl0st+Yp8=) 3: quUKUBb4zZe6-7AC8l87cCVH0H0.roa (hash: GrPFGNPKw3mudZK+q8bDj+RCkl+C4u9ag/IOaEBEaJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:c2:5c:be:c3:02:4f:f7:fc:45:f6:20:b9:c9:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb Validity Not Before: Dec 6 19:01:54 2025 GMT Not After : Dec 7 19:01:54 2025 GMT Subject: CN=dc5889012c8697f610f0adff996bda929629de6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:cc:ed:00:bb:c3:55:57:58:60:a9:01:d4: 33:fa:39:fa:39:9d:34:16:03:f2:98:f0:0c:7d:c2: 21:46:1d:49:1b:e8:f5:bb:df:88:2e:b2:aa:20:0a: 01:41:b1:be:fd:48:a4:d6:19:fb:29:df:67:01:5b: ab:6d:99:22:45:ac:95:a3:ee:1a:97:74:3b:22:39: c3:7d:ae:09:74:49:9b:f7:0d:a4:95:f3:81:14:b0: b8:20:6a:fe:51:13:34:fc:3a:28:2d:99:45:d4:33: f4:95:bd:62:05:5f:9a:bb:c3:59:af:de:84:3e:f9: 3a:87:a3:53:39:e0:c3:50:48:66:23:4f:2c:9c:de: f0:ad:d5:30:e0:85:dd:0c:49:04:80:6b:56:c7:52: e4:03:61:87:ba:da:e4:41:2c:c0:af:bd:83:63:5c: f8:f5:c0:6b:a5:7d:ee:f5:85:a4:37:54:08:9f:a1: bd:af:9c:94:f4:a2:df:a0:8e:ac:e6:a1:c1:40:a6: a0:22:ed:81:96:92:d7:39:36:5f:3b:3c:c1:70:11: 06:e1:f0:af:b9:7e:e6:32:66:b2:0e:3b:a9:39:33: f5:46:41:9e:38:47:bb:68:2a:93:f5:a9:33:9d:ae: 7f:29:63:61:8d:a9:2e:58:ab:62:2d:64:2d:d9:11: 91:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:58:89:01:2C:86:97:F6:10:F0:AD:FF:99:6B:DA:92:96:29:DE:6C X509v3 Authority Key Identifier: keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:50:02:d1:13:0b:7d:6c:d6:be:bb:88:76:d2:8d:ee:6c:89: 0d:b9:08:31:61:6d:59:f4:c6:64:19:ee:1b:db:bb:bd:ee:87: ed:86:e3:06:a8:1d:b6:b7:82:12:8d:bb:60:cd:66:f5:bc:99: d5:8d:2d:65:24:3d:7d:73:5d:66:a1:81:84:fb:ad:22:7a:96: 60:55:fe:a9:6c:10:20:fa:a5:37:f9:53:76:20:f1:e0:24:84: fb:70:3f:99:17:5c:c6:b8:99:c0:90:c8:6a:80:0b:fe:a6:1e: e7:57:1e:b0:94:20:20:7d:e9:ec:93:5a:47:36:f8:57:36:83: c0:a2:19:38:0f:fb:e9:e4:aa:4c:72:6d:aa:6c:ad:a1:38:9e: 9a:b4:a8:c2:15:69:97:18:c4:a2:1c:11:89:b1:44:a9:25:d4: dc:d9:ae:73:90:22:32:40:d9:fd:08:6d:7b:19:da:cd:fc:e9: 46:fd:c1:7e:44:52:0c:cf:3a:b9:39:a5:c0:7d:9e:b4:d1:2e: ee:e2:fe:63:25:8a:ca:fb:f0:2b:9d:54:cb:80:22:e4:e8:4a: 72:f3:8f:96:43:25:fc:a5:b1:83:82:fc:2c:4d:fe:a1:3e:29: d3:95:74:9b:d9:92:f6:53:ed:6b:3b:88:d9:55:d0:b8:e3:db: 56:58:75:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CsJcvsMCT/f8RfYguckbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWYzMWFkYWM2NjM4NTViM2RkZDE5MzFjNDRjZjgwNjRk NmE2ZWIwHhcNMjUxMjA2MTkwMTU0WhcNMjUxMjA3MTkwMTU0WjAzMTEwLwYDVQQD EyhkYzU4ODkwMTJjODY5N2Y2MTBmMGFkZmY5OTZiZGE5Mjk2MjlkZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVLM7QC7w1VXWGCpAdQz+jn6OZ00 FgPymPAMfcIhRh1JG+j1u9+ILrKqIAoBQbG+/Uik1hn7Kd9nAVurbZkiRayVo+4a l3Q7IjnDfa4JdEmb9w2klfOBFLC4IGr+URM0/DooLZlF1DP0lb1iBV+au8NZr96E Pvk6h6NTOeDDUEhmI08snN7wrdUw4IXdDEkEgGtWx1LkA2GHutrkQSzAr72DY1z4 9cBrpX3u9YWkN1QIn6G9r5yU9KLfoI6s5qHBQKagIu2BlpLXOTZfOzzBcBEG4fCv uX7mMmayDjupOTP1RkGeOEe7aCqT9akzna5/KWNhjakuWKtiLWQt2RGRQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxYiQEshpf2EPCt/5lr2pKWKd5sMB8GA1UdIwQY MBaAFGbvMa2sZjhVs93RkxxEz4Bk1qbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUt ZGIwZGNjMDhmNDUyLzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUtZGIwZGNjMDhmNDUy LzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlAC0RML fWzWvruIdtKN7myJDbkIMWFtWfTGZBnuG9u7ve6H7YbjBqgdtreCEo27YM1m9byZ 1Y0tZSQ9fXNdZqGBhPutInqWYFX+qWwQIPqlN/lTdiDx4CSE+3A/mRdcxriZwJDI aoAL/qYe51cesJQgIH3p7JNaRzb4VzaDwKIZOA/76eSqTHJtqmytoTiemrSowhVp lxjEohwRibFEqSXU3Nmuc5AiMkDZ/QhtexnazfzpRv3BfkRSDM86uTmlwH2etNEu 7uL+YyWKyvvwK51Uy4Ai5OhKcvOPlkMl/KWxg4L8LE3+oT4p05V0m9mS9lPtazuI 2VXQuOPbVlh1nw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:12:10 2025 by rpki-client