This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft File: rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json) Hash identifier: 2pm7o3ByG3tsd5Ti/QuTkpSlcmWIwlpvy7kW7uw0f0I= Subject key identifier: F6:2F:CE:F6:AE:DF:FB:2E:0E:1C:76:4A:A0:AB:CF:DE:8C:5A:E5:40 Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Certificate serial: 019AF2E4486D081850DDCC83405026927326 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft Manifest number: 1435 Signing time: Sat 06 Dec 2025 09:00:38 +0000 Manifest this update: Sat 06 Dec 2025 09:00:38 +0000 Manifest next update: Sun 07 Dec 2025 09:00:38 +0000 Files and hashes: 1: BF1bDepTrbKLANgNAxAuU4DpJj8.roa (hash: NVRWLfzQET9uM2U7kiX4t5MiOcl02yBYC6pVmP2/SUk=) 2: KjCkzUvZKYNWeQf2zi9Nm-JvqSQ.roa (hash: xUB/m7Q6H3DaFEVeyIG7vRKsPq1kqSbSavs4m7VW+5g=) 3: apwK_C2jLXYtjM1_rywqkSP6SXM.roa (hash: Brus3GnJlwWOcIOQznlG1EIg3MnsNQ8Kg3KCHt4fQYM=) 4: m7HwybdiPGFWv-KxpiFIAeDc2hA.roa (hash: qaCqJ2OehDpyBjrRuAzdPAOS4B3DtTV2bEBs1eCR7UY=) 5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: 1cgKWesTs92JBVigEDjPgf71ke+AdKDmyxbo6zH3weg=) 6: wserKdrEjvEaiB1L0as5xEScHOo.roa (hash: p6zeLIjpAjhjz53tHHHfbEf0nj4XjPM97zZUxXWhby4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:48:6d:08:18:50:dd:cc:83:40:50:26:92:73:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Validity Not Before: Dec 6 09:00:38 2025 GMT Not After : Dec 7 09:00:38 2025 GMT Subject: CN=f62fcef6aedffb2e0e1c764aa0abcfde8c5ae540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:47:77:b1:45:71:f5:f0:70:66:11:e4:0b: 57:79:9d:c7:e4:b9:d2:ff:1a:ca:f2:7e:75:c9:20: 0a:9a:51:c5:f8:2d:2f:d0:fe:8c:ff:db:0a:c8:ba: 4e:98:89:d6:78:3d:74:7b:f5:f4:3d:23:df:6e:7d: 52:36:de:1f:fa:e8:d2:3d:cf:6f:65:78:90:d6:c2: 69:5e:37:15:73:ff:64:6a:05:68:45:1f:b6:36:4f: dc:41:4c:a7:93:ee:0f:1e:a5:be:66:98:c1:2b:c5: 8a:a5:2d:01:33:1f:d0:a6:b3:3a:62:f7:c0:71:af: 91:07:a4:c2:94:c9:4e:45:ac:0d:29:6a:f7:67:dd: 2b:cd:d5:8a:eb:4d:60:03:27:06:84:fd:39:65:30: 3e:e0:dd:fe:c8:5d:bf:4a:63:a2:ac:30:84:e1:5e: cc:3b:18:dc:44:69:49:0f:5c:a3:9f:6f:f5:0b:3d: 23:b2:a7:27:fa:42:f5:a4:64:90:6d:f4:68:90:ca: 57:2f:a0:c4:b6:ef:02:7a:d5:cd:e8:17:ea:08:68: b1:b8:6d:46:71:7e:02:10:77:65:08:bd:1d:05:89: c4:44:84:7b:63:cf:3d:17:4a:49:7f:71:b6:73:c2: 75:75:fe:67:d0:66:a9:98:bd:34:56:f9:b9:80:1f: 15:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2F:CE:F6:AE:DF:FB:2E:0E:1C:76:4A:A0:AB:CF:DE:8C:5A:E5:40 X509v3 Authority Key Identifier: keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:3a:ef:54:ac:ed:f6:48:5f:e4:50:b4:83:b4:83:27:e7:20: dc:89:96:86:0e:8f:de:d5:58:c9:e1:cc:4b:91:60:cb:3f:57: 19:dc:00:96:5b:94:c7:1a:f2:30:f7:28:72:f9:a6:b8:87:a8: 96:08:49:61:e4:9d:31:c7:04:67:51:98:59:54:59:77:5a:17: ca:86:9c:8e:e8:61:69:c7:e3:b3:e1:b9:f1:9b:36:26:d5:f9: 24:a5:81:b1:dc:f3:77:73:0a:92:50:37:e6:52:52:33:97:32: 08:3c:12:dd:fd:35:37:92:69:28:f9:84:27:73:51:f8:98:6d: f9:42:fa:4f:1c:07:35:62:1e:31:36:e6:fb:6f:d0:cb:df:9d: 30:ad:a3:c1:9d:f4:6e:d3:b1:d6:4b:70:89:ac:bf:22:8e:6c: 5e:53:0b:da:a1:51:81:ce:af:14:8d:c9:f2:b5:25:41:fe:b7: 9e:eb:62:e7:ce:e3:04:5c:f7:48:ea:49:ce:fa:7a:20:ba:c7: a9:63:35:be:5b:13:95:73:03:f0:88:a5:cc:3b:bc:ed:ae:c7: f9:8e:c0:0d:88:29:06:c9:ea:9f:3e:21:09:01:71:ca:d9:f4: cd:10:ef:f6:88:e7:24:34:9e:cb:eb:07:2a:ef:51:61:cb:f6: 31:cf:e1:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EhtCBhQ3cyDQFAmknMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj NWZlYzIwHhcNMjUxMjA2MDkwMDM4WhcNMjUxMjA3MDkwMDM4WjAzMTEwLwYDVQQD EyhmNjJmY2VmNmFlZGZmYjJlMGUxYzc2NGFhMGFiY2ZkZThjNWFlNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoRHd7FFcfXwcGYR5AtXeZ3H5LnS /xrK8n51ySAKmlHF+C0v0P6M/9sKyLpOmInWeD10e/X0PSPfbn1SNt4f+ujSPc9v ZXiQ1sJpXjcVc/9kagVoRR+2Nk/cQUynk+4PHqW+ZpjBK8WKpS0BMx/QprM6YvfA ca+RB6TClMlORawNKWr3Z90rzdWK601gAycGhP05ZTA+4N3+yF2/SmOirDCE4V7M OxjcRGlJD1yjn2/1Cz0jsqcn+kL1pGSQbfRokMpXL6DEtu8CetXN6BfqCGixuG1G cX4CEHdlCL0dBYnERIR7Y889F0pJf3G2c8J1df5n0GapmL00Vvm5gB8VQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYvzvau3/suDhx2SqCrz96MWuVAMB8GA1UdIwQY MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt YTNhMTNlM2E3ZDgwLzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTrvVKzt 9khf5FC0g7SDJ+cg3ImWhg6P3tVYyeHMS5Fgyz9XGdwAlluUxxryMPcocvmmuIeo lghJYeSdMccEZ1GYWVRZd1oXyoacjuhhacfjs+G58Zs2JtX5JKWBsdzzd3MKklA3 5lJSM5cyCDwS3f01N5JpKPmEJ3NR+Jht+UL6TxwHNWIeMTbm+2/Qy9+dMK2jwZ30 btOx1ktwiay/Io5sXlML2qFRgc6vFI3J8rUlQf63nuti587jBFz3SOpJzvp6ILrH qWM1vlsTlXMD8IilzDu87a7H+Y7ADYgpBsnqnz4hCQFxytn0zRDv9ojnJDSey+sH Ku9RYcv2Mc/h9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:31:25 2025 by rpki-client