This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: Qsr1uBFtQ7/Nd/1Li+gZgWlmAqkQ7TuRyHYdMvhs1KE= Subject key identifier: 06:8C:3B:A6:F6:70:23:7E:C1:59:73:F7:FD:47:4F:96:B1:A3:BC:6D Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019AF1D1F2B9A68E6578E9094883984E971A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 0255 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: 2d84iaAy9peqMc8uPtiQJUVpqhA.roa (hash: XonhU7MQtuyMxgxQYBP6Y8GxbPwqjebSF5A8W+e+9Dk=) 2: 7dhCE4YFHCUjlqkpkZY7lO72jeU.roa (hash: U8fxbXZIOaigGsLrKkx21Oe8R/4CGL6VvmyMHjpBRGE=) 3: EzmgW5SIzKZhd3gcqi5vbAQspRs.roa (hash: 9GSjRSh1NRSv4vNrPQJMwH5N/rEwdp6boN/thonioHA=) 4: OWURZZQfXBLCjrMIo9lI7C6_8rU.roa (hash: mhkt0q1UgZZPM01b3Aszei1MJkXP1Fj7gDNO1ZQ7Zg0=) 5: Oi5y3oR-zAeDQVQqnqlub4mxZBY.roa (hash: wiW5g0XVDHNy1QPGb/8FJ3EhNGUt4wPgRz1ROLxdqCE=) 6: SWb9dWC7dX_rwlK0omJMc3wlDks.roa (hash: LsnTgIHVTvCHjZWRXF28FLY3Qh1KmfRKmu1wsQo8XRo=) 7: Vkn5Fjc1blCjW36pRVzcI2dLeRM.roa (hash: b4zxuu0+PWf6Y2gL35zDWaLiEcfMZ+LL8pUvtmTR45E=) 8: VtA0sYtoBS8bGZyWtELDxZdV15w.roa (hash: qr5xc7yY1HYHlnNGTTUy5XqyOe3bNLkhXLhBpl8oti4=) 9: XqFMryLIw1x1QzwoXKE2TA0QsD8.roa (hash: 4jdqgSKXalwNBkWrPQkzkWpgRaMNA4FVpS3FsC5tqMU=) 10: YzR4bVvYuilSAsgyIIG5IHRToDw.roa (hash: aeoTN5jE2adPRR+yahq8zhU6/6Zb1ls1gStL9w3wSCY=) 11: lcQi5Bm9eFSfTGrvmV8ciQpCrmk.roa (hash: RYrQUk3+RUhAVWqgU4UejdbJ0Pp8G4DFGkckRr+4ALw=) 12: nK63OUw5HovdmnJOU8TA3IOqFXc.roa (hash: At6fl1NEh3tU3v5PbKWMv3k4BjWoFVeGE3Mdg5kqGAA=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: g7ebNH4RjuSGiU4N3pJ0Qoi5Tbmvnzy1u/RnpBmptrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f2:b9:a6:8e:65:78:e9:09:48:83:98:4e:97:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=068c3ba6f670237ec15973f7fd474f96b1a3bc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:7f:ff:b8:a3:7c:91:a4:d3:ae:02:a0:39: c0:6d:f9:19:1f:36:04:ad:d4:e9:f6:93:a4:22:26: d4:b0:05:93:16:00:32:ff:db:60:b6:63:b0:36:ce: 60:ed:6a:20:69:5e:f2:f3:3b:6e:46:64:63:07:8a: 83:d4:02:d4:d3:ff:44:d8:87:70:18:06:a8:dc:81: ae:c9:fd:d5:20:3f:f4:dd:35:6a:d2:cc:1c:73:7e: ef:b5:d3:e3:77:10:f6:bb:42:5e:52:e4:07:fa:7d: 94:83:a5:3d:64:9e:0a:0a:fd:d3:d5:df:9c:da:5e: 30:5a:23:0d:d5:fa:4f:de:b1:bf:5a:d7:f9:25:cc: 99:1c:0a:5b:31:f8:62:4d:80:2f:e4:7c:33:5a:1e: 7a:00:77:ee:c9:df:fd:80:8a:47:27:76:90:0e:62: 6a:58:db:a8:c5:bc:d6:fa:8b:6b:71:92:38:a9:62: 81:b8:de:e9:05:b0:84:4f:d7:f6:7b:ad:71:cf:17: d5:0a:6c:01:21:f4:ca:b5:40:c8:ac:1f:70:5b:d6: a8:67:b2:f0:f8:a3:d3:6e:16:24:c6:b6:9d:4a:b8: 82:97:24:58:2c:34:ee:df:e6:6a:b4:86:7d:8b:4d: 3e:ed:08:b4:a3:cc:22:9d:40:85:c0:a3:96:1e:30: a1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8C:3B:A6:F6:70:23:7E:C1:59:73:F7:FD:47:4F:96:B1:A3:BC:6D X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:87:12:8a:bc:02:fb:96:e8:00:fc:14:35:d9:1d:7b:f6:0a: 50:25:6d:6f:06:d6:39:4c:cb:93:11:80:4b:85:a6:be:ef:c7: a2:2f:4c:90:ea:c0:2e:6b:0a:2d:93:72:84:82:4b:86:0e:90: b8:a9:f0:ba:e9:5b:9d:a3:f4:ec:76:19:01:78:e0:76:9c:00: a1:5e:43:d0:1f:3e:b6:b2:a9:6f:3b:a6:9b:42:14:f6:4f:01: b0:e4:a7:85:4d:8c:aa:6f:eb:85:fd:40:1c:55:fa:31:b6:c7: f6:fa:49:bf:76:f3:59:f3:2f:30:d0:af:ec:d6:7c:0c:a1:c8: 44:a0:72:7a:0e:e1:ee:f2:80:74:14:72:41:ea:5a:44:14:7e: e4:9c:ac:40:3c:d0:92:5e:6c:20:9b:bb:22:38:f0:b2:c7:dc: 2a:c1:7d:23:5b:63:d3:6f:54:89:03:f0:97:fb:81:5b:04:54: 70:b0:16:9b:4b:3c:0f:fb:42:59:80:46:cf:4d:28:d9:67:72: 3b:c0:46:e1:84:d5:8a:20:c6:54:f4:4a:0a:b3:e5:c6:33:e5: ac:14:71:bc:09:d2:6a:76:4a:75:ad:21:d6:4f:0b:d9:e0:b4: 76:3d:ef:d5:43:43:b2:2f:e4:36:86:c3:e5:d8:9f:a3:bb:11: 88:b1:cc:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fK5po5leOkJSIOYTpcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD EygwNjhjM2JhNmY2NzAyMzdlYzE1OTczZjdmZDQ3NGY5NmIxYTNiYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBh//7ijfJGk064CoDnAbfkZHzYE rdTp9pOkIibUsAWTFgAy/9tgtmOwNs5g7WogaV7y8ztuRmRjB4qD1ALU0/9E2Idw GAao3IGuyf3VID/03TVq0swcc37vtdPjdxD2u0JeUuQH+n2Ug6U9ZJ4KCv3T1d+c 2l4wWiMN1fpP3rG/Wtf5JcyZHApbMfhiTYAv5HwzWh56AHfuyd/9gIpHJ3aQDmJq WNuoxbzW+otrcZI4qWKBuN7pBbCET9f2e61xzxfVCmwBIfTKtUDIrB9wW9aoZ7Lw +KPTbhYkxradSriClyRYLDTu3+ZqtIZ9i00+7Qi0o8winUCFwKOWHjCh4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaMO6b2cCN+wVlz9/1HT5axo7xtMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYcSirwC +5boAPwUNdkde/YKUCVtbwbWOUzLkxGAS4Wmvu/Hoi9MkOrALmsKLZNyhIJLhg6Q uKnwuulbnaP07HYZAXjgdpwAoV5D0B8+trKpbzumm0IU9k8BsOSnhU2Mqm/rhf1A HFX6MbbH9vpJv3bzWfMvMNCv7NZ8DKHIRKByeg7h7vKAdBRyQepaRBR+5JysQDzQ kl5sIJu7IjjwssfcKsF9I1tj029UiQPwl/uBWwRUcLAWm0s8D/tCWYBGz00o2Wdy O8BG4YTViiDGVPRKCrPlxjPlrBRxvAnSanZKda0h1k8L2eC0dj3v1UNDsi/kNobD 5difo7sRiLHMFA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:53 2025 by rpki-client