This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft File: zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json) Hash identifier: 6ZSMGf31KVDuaAPJLJUb4zbKn5ZTjx5oDpZvQtKzBfk= Subject key identifier: EE:1A:72:00:B2:78:D1:DE:79:D1:E7:2C:55:31:73:E8:8D:BE:0E:BD Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e Certificate serial: 019AF276F0F65EE04AD76469D7ED0865D720 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:01:12 +0000 Manifest this update: Sat 06 Dec 2025 07:01:12 +0000 Manifest next update: Sun 07 Dec 2025 07:01:12 +0000 Files and hashes: 1: 4bVZoUiCbJaTBG7aA0p9xBgeM94.roa (hash: MzCfFVB6xbhIQC2ta/MEsIETvDrpIdsUhLGtVjRSeig=) 2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: W/XMckBvtircBjcIyD6dz9B1umbnYnSMurPSmwiBelU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f0:f6:5e:e0:4a:d7:64:69:d7:ed:08:65:d7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e Validity Not Before: Dec 6 07:01:12 2025 GMT Not After : Dec 7 07:01:12 2025 GMT Subject: CN=ee1a7200b278d1de79d1e72c553173e88dbe0ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:00:b3:6a:0e:95:c2:f5:5e:9f:ba:91:2b: 39:ac:dd:56:fa:f1:29:19:f8:70:f8:99:fa:e5:b4: 70:61:95:4b:7f:36:f4:70:9d:81:86:72:10:17:ed: 58:f5:07:68:62:23:ba:6c:f8:e7:6e:55:c8:d6:f1: 65:0e:5c:34:e2:d3:89:50:5b:c2:66:a9:fe:c4:95: 73:10:30:29:cf:32:3b:95:41:65:a3:7b:80:37:7e: d8:ad:09:1d:f9:f0:d8:2c:b2:6b:a6:82:85:11:53: d0:2c:94:3c:4c:fb:6e:90:28:f1:4c:89:1e:71:fa: 18:2a:de:84:fd:16:86:32:65:25:58:eb:33:ee:88: 65:9c:69:1c:82:c3:4c:80:79:e6:ee:34:d8:47:e5: 3d:2a:d4:74:8d:ee:86:65:c9:60:5b:4a:a6:c5:3a: 8a:5a:24:08:36:26:d6:8b:46:bb:2d:8d:26:75:db: 94:21:39:ea:87:80:97:bd:8d:d7:4a:a6:34:f4:19: 30:1f:68:be:9f:ba:54:f6:a8:21:ab:80:1a:58:51: 65:1f:57:d4:2e:be:60:49:f4:a8:d7:cc:0f:47:4d: db:19:8e:fb:3e:5d:30:e7:ac:43:35:39:b2:eb:09: 03:b9:0e:e5:d2:ea:f9:23:b3:48:58:40:f9:b2:08: 02:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1A:72:00:B2:78:D1:DE:79:D1:E7:2C:55:31:73:E8:8D:BE:0E:BD X509v3 Authority Key Identifier: keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:46:8f:5c:9b:e6:ca:a3:21:69:34:f4:5e:64:c9:8a:e7:5e: 4d:b4:bd:30:36:8f:af:f2:76:52:42:e7:7e:11:10:45:b7:26: 08:74:6b:fd:8a:bc:cb:49:d7:65:e2:78:69:9b:f4:20:0e:62: 30:ce:56:05:52:da:4f:e8:d4:65:0c:0a:dc:0b:ec:ef:69:68: 55:0b:09:f0:fd:ae:a6:3b:50:6b:9c:3f:24:18:34:dc:03:7f: 81:f6:5f:38:01:78:18:78:e6:3e:90:57:f2:d9:47:ca:97:61: 79:da:ae:7f:d7:24:60:66:16:1c:de:66:e7:d8:c1:5f:96:c6: 12:61:c5:87:36:68:04:d8:c9:f1:1b:d0:8d:be:17:12:f1:01: 4c:40:2e:f2:82:a8:ae:6a:35:9c:e8:93:e2:b2:f4:16:0d:8c: 3e:19:e6:b1:ce:b3:90:53:7a:4d:c7:40:7c:3d:b7:b6:dc:44: 0e:35:d2:0a:a2:df:53:f1:22:e6:3e:18:71:7e:95:63:ef:8f: 8e:33:64:a9:ef:91:28:da:df:73:51:e0:cf:57:57:c1:5f:51: b8:0d:43:d4:ed:97:d7:5b:20:12:36:e5:5b:ab:24:8d:38:3d: e4:43:8e:99:fb:fb:9b:26:8e:af:94:9e:8c:2d:e3:c2:b9:b6: f9:52:a1:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvD2XuBK12Rp1+0IZdcgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMjY5NDgyYmEyNjFiODgwMDU2MDhlYzUwYjdiOTA5ZDNm M2ZkNGUwHhcNMjUxMjA2MDcwMTEyWhcNMjUxMjA3MDcwMTEyWjAzMTEwLwYDVQQD EyhlZTFhNzIwMGIyNzhkMWRlNzlkMWU3MmM1NTMxNzNlODhkYmUwZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+MAs2oOlcL1Xp+6kSs5rN1W+vEp Gfhw+Jn65bRwYZVLfzb0cJ2BhnIQF+1Y9QdoYiO6bPjnblXI1vFlDlw04tOJUFvC Zqn+xJVzEDApzzI7lUFlo3uAN37YrQkd+fDYLLJrpoKFEVPQLJQ8TPtukCjxTIke cfoYKt6E/RaGMmUlWOsz7ohlnGkcgsNMgHnm7jTYR+U9KtR0je6GZclgW0qmxTqK WiQINibWi0a7LY0mdduUITnqh4CXvY3XSqY09BkwH2i+n7pU9qghq4AaWFFlH1fU Lr5gSfSo18wPR03bGY77Pl0w56xDNTmy6wkDuQ7l0ur5I7NIWED5sggCrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4acgCyeNHeedHnLFUxc+iNvg69MB8GA1UdIwQY MBaAFM0mlIK6JhuIAFYI7FC3uQnT8/1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelNhVWdyb21HNGdBVmdqc1VMZTVDZFB6X1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZDE5YWQtNzNmNi00NTBiLWI5N2Mt MmJlMjVmOWQ1ZWQyLzEvelNhVWdyb21HNGdBVmdqc1VMZTVDZFB6X1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8xZDE5YWQtNzNmNi00NTBiLWI5N2MtMmJlMjVmOWQ1ZWQy LzEvelNhVWdyb21HNGdBVmdqc1VMZTVDZFB6X1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxEaPXJvm yqMhaTT0XmTJiudeTbS9MDaPr/J2UkLnfhEQRbcmCHRr/Yq8y0nXZeJ4aZv0IA5i MM5WBVLaT+jUZQwK3Avs72loVQsJ8P2upjtQa5w/JBg03AN/gfZfOAF4GHjmPpBX 8tlHypdhedquf9ckYGYWHN5m59jBX5bGEmHFhzZoBNjJ8RvQjb4XEvEBTEAu8oKo rmo1nOiT4rL0Fg2MPhnmsc6zkFN6TcdAfD23ttxEDjXSCqLfU/Ei5j4YcX6VY++P jjNkqe+RKNrfc1Hgz1dXwV9RuA1D1O2X11sgEjblW6skjTg95EOOmfv7myaOr5Se jC3jwrm2+VKhPA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:00 2025 by rpki-client