This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft File: ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json) Hash identifier: VAr0Cepnlbsv7S2vuLehTbCDdqCmbDiybDYkg9O6AD4= Subject key identifier: 11:02:5D:5D:A9:A6:F8:53:2A:B6:17:EA:81:1D:24:19:3F:BA:D5:11 Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c Certificate serial: 019AF2AD7BB216D82B276B283BEABF6E0A02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft Manifest number: 1770 Signing time: Sat 06 Dec 2025 08:00:46 +0000 Manifest this update: Sat 06 Dec 2025 08:00:46 +0000 Manifest next update: Sun 07 Dec 2025 08:00:46 +0000 Files and hashes: 1: 1-aRCdRBpKSBpGR4v9msgat9V61M.roa (hash: BYs6ku3Xn4FdJ9wa1nH/1VswjYO1JqNKzo75omWp/nM=) 2: BKrQXqfrcTeiKgHXj86E48D-w8g.roa (hash: L26jc+T0fl1hv7R2zWx4ljKg9N/dLOL1UCp15HLrhrY=) 3: Pl-xLYhjY5YlhNM49xs9QKMtfBU.roa (hash: UmyMwMyNw8j81M3/HKdHg6H50eTkm3sFnC7O9PysISQ=) 4: Smd34xeFUEeunOCrNaNvyPItMW4.roa (hash: tLjLkBtCoEO7JoIBI3BKAYDHLRl3QBXXfkRn3x13Z0I=) 5: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: UdeDF9XjrW1qnWnf98ixXok5vdfJutZoL6PVXL+kB9w=) 6: iI9-w7tHXxNtTl_I4COghj0uNew.roa (hash: b/PEDW5ud97u67vxZ3rzQUfyJtK+SNRKCKr9PKh3cqQ=) 7: q_SHJ5IyXsykFgek4t_KsFaEQ5U.roa (hash: A4mKYpa62e2fZARPUeUv3pe7BMEESkmU9sbUJFjOPCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7b:b2:16:d8:2b:27:6b:28:3b:ea:bf:6e:0a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c Validity Not Before: Dec 6 08:00:46 2025 GMT Not After : Dec 7 08:00:46 2025 GMT Subject: CN=11025d5da9a6f8532ab617ea811d24193fbad511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:65:4d:45:b0:f8:35:68:ee:83:12:f3:c6: d4:ac:71:3a:56:8f:4f:1e:e6:6f:e1:ee:3e:c0:81: 30:14:db:62:71:e9:c6:c9:97:cf:35:a6:9c:22:70: ba:48:c2:b7:25:6b:b4:41:c9:4e:27:f0:35:42:9c: 55:56:b2:53:cd:9b:16:85:85:e8:2e:74:d4:fd:0a: 0d:ee:46:ce:5b:ea:e8:e7:57:14:4c:64:f8:30:44: 06:00:94:7f:ad:1b:97:d8:51:81:e7:07:82:4b:c7: d0:ae:78:ce:10:24:36:cd:4e:ba:c5:9e:6b:0a:23: 3f:be:73:2c:1f:d4:71:00:60:b1:8f:b4:50:2e:77: 4b:54:f1:5b:99:9c:bf:ae:08:5d:2e:42:7a:bd:9e: 09:78:ad:35:cd:6c:84:43:04:03:73:30:b4:02:f4: 0e:6f:74:ec:c2:04:b7:86:95:ed:d9:c8:6d:ab:d4: cc:33:87:0a:c5:4d:69:d1:b8:02:82:cf:5f:76:0d: ab:b2:ba:dc:10:8b:28:0a:9b:ec:be:ba:ef:99:7a: e3:11:de:81:ae:0e:8b:9d:cd:68:1a:84:b3:33:76: b3:c3:e2:26:e7:b9:62:78:ff:1a:b3:f2:17:44:3b: 7d:97:49:d8:cf:3b:14:02:f5:bc:94:53:50:de:d5: 6a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:02:5D:5D:A9:A6:F8:53:2A:B6:17:EA:81:1D:24:19:3F:BA:D5:11 X509v3 Authority Key Identifier: keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0d:5b:d2:3e:a9:0c:95:41:00:db:5b:18:32:ff:9e:a9:6d: d5:de:d2:cf:31:c4:f4:6d:17:7a:98:96:50:19:10:8f:80:14: e3:eb:00:94:f9:b4:c4:22:6c:82:7e:8f:e7:0e:56:ae:fd:1f: d9:6a:c8:e5:ce:16:60:c3:29:fa:1e:e1:2a:4a:7f:d6:89:6d: c3:53:1b:72:05:62:a9:12:09:d6:e3:66:f3:e4:6b:d5:00:88: 9f:51:70:53:5a:c5:f5:25:c6:7e:b0:da:af:29:6f:43:8d:e8: 57:db:3c:f6:17:21:2a:7e:5a:cb:e2:8c:8d:63:dd:ca:cb:87: 8a:09:c5:09:a0:71:fb:04:6e:b6:48:09:a2:4a:8f:c2:06:23: ea:8b:b7:42:5e:ec:a0:ba:36:ab:8e:99:d9:93:8b:f0:b1:e6: fe:58:16:74:9a:24:b1:3f:da:5e:68:e2:3b:bf:6b:dc:94:d6: dc:2b:2a:8b:7d:ef:20:8d:ca:40:41:dc:b7:b5:a7:17:55:06: 97:5d:42:4d:75:fd:c2:89:89:2c:48:cb:57:12:e2:9d:ac:3d: e5:34:39:28:a6:9a:a6:b1:7d:1a:75:98:3b:f8:e3:64:91:01: e3:92:2d:91:21:4a:53:56:2d:ec:74:50:94:98:e5:cf:d1:48: 1d:68:6d:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXuyFtgrJ2soO+q/bgoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjgyMDZlMzMxMWRmMzk0ZjQ4Mzg5YjgxMjJiOTRhYTFm MGIwNWMwHhcNMjUxMjA2MDgwMDQ2WhcNMjUxMjA3MDgwMDQ2WjAzMTEwLwYDVQQD EygxMTAyNWQ1ZGE5YTZmODUzMmFiNjE3ZWE4MTFkMjQxOTNmYmFkNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb1lTUWw+DVo7oMS88bUrHE6Vo9P HuZv4e4+wIEwFNticenGyZfPNaacInC6SMK3JWu0QclOJ/A1QpxVVrJTzZsWhYXo LnTU/QoN7kbOW+ro51cUTGT4MEQGAJR/rRuX2FGB5weCS8fQrnjOECQ2zU66xZ5r CiM/vnMsH9RxAGCxj7RQLndLVPFbmZy/rghdLkJ6vZ4JeK01zWyEQwQDczC0AvQO b3TswgS3hpXt2chtq9TMM4cKxU1p0bgCgs9fdg2rsrrcEIsoCpvsvrrvmXrjEd6B rg6Lnc1oGoSzM3azw+Im57lieP8as/IXRDt9l0nYzzsUAvW8lFNQ3tVqzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBECXV2ppvhTKrYX6oEdJBk/utURMB8GA1UdIwQY MBaAFGb4IG4zEd85T0g4m4EiuUqh8LBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt YmJmZDQ1Yzg0YmVhLzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh LzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATA1b0j6p DJVBANtbGDL/nqlt1d7SzzHE9G0XepiWUBkQj4AU4+sAlPm0xCJsgn6P5w5Wrv0f 2WrI5c4WYMMp+h7hKkp/1oltw1MbcgViqRIJ1uNm8+Rr1QCIn1FwU1rF9SXGfrDa rylvQ43oV9s89hchKn5ay+KMjWPdysuHignFCaBx+wRutkgJokqPwgYj6ou3Ql7s oLo2q46Z2ZOL8LHm/lgWdJoksT/aXmjiO79r3JTW3Csqi33vII3KQEHct7WnF1UG l11CTXX9womJLEjLVxLinaw95TQ5KKaaprF9GnWYO/jjZJEB45ItkSFKU1Yt7HRQ lJjlz9FIHWhttA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:45 2025 by rpki-client