This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft File: zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json) Hash identifier: tBhpYRo7OYeVyZ1Hl17rT48Rf88B4QS14aoidWWYEEU= Subject key identifier: D3:E5:93:99:B2:7D:94:32:DB:E5:61:02:88:E3:96:8F:86:30:41:B5 Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd Certificate serial: 019AF389C1E2F68968FD4938487402442314 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft Manifest number: 0EF3 Signing time: Sat 06 Dec 2025 12:01:22 +0000 Manifest this update: Sat 06 Dec 2025 12:01:22 +0000 Manifest next update: Sun 07 Dec 2025 12:01:22 +0000 Files and hashes: 1: TvLjh2HZ_d_rU4Q7CUAOZ93ZHYk.roa (hash: UVHQPQPEMrt8FraIptsGKJQLRzbjMltNPf+IrL/aqn4=) 2: _51jX_RgZUWiVEK-S_q11tdiAsw.roa (hash: ojYxEEbJ9SvKIYoya6or2Wh9tzHv7tWRka6iaB4zigM=) 3: bvBCOOZR_53uuydhAIJbHOE_y50.roa (hash: O8HiOtyZpJTxAkEZvvlqiB0vlYICj10yBc68YG6rua0=) 4: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: tnuoOqfsSbgZDSKQlxWVwGuK8fc3pN8WwMJP+W0ZdjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:c1:e2:f6:89:68:fd:49:38:48:74:02:44:23:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd Validity Not Before: Dec 6 12:01:22 2025 GMT Not After : Dec 7 12:01:22 2025 GMT Subject: CN=d3e59399b27d9432dbe5610288e3968f863041b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d2:cc:88:a4:0e:96:be:67:4b:ac:8f:93:a2: 47:65:bb:c2:1f:b0:5d:6c:48:a5:d7:13:de:e5:99: c1:df:cd:8f:33:50:e4:77:5c:11:eb:d2:8c:d6:22: 96:bf:0d:3e:20:52:db:6d:2f:8f:3e:88:c9:73:64: 4e:81:1f:30:a9:43:65:7d:b0:c2:2c:9a:cc:9e:a1: 6f:b3:df:08:74:ba:fe:e6:81:60:e6:58:ff:d9:4a: 99:ef:4d:ec:ec:35:41:7d:e9:f2:3a:90:b6:e8:e0: 5c:9e:68:62:8f:a4:0a:ea:96:2a:0c:fa:ce:89:b5: 4e:66:0a:e0:04:93:74:8d:3b:96:dc:fa:13:4b:f2: 18:13:20:9f:e3:92:d4:96:04:a8:c8:81:5c:da:d2: ec:8d:f8:84:93:71:03:47:ef:6a:b0:0c:c1:45:91: 16:6b:ea:64:1a:45:98:0f:a2:49:99:6c:92:f7:ba: 95:fb:c1:00:8f:d4:f3:98:06:73:af:e9:df:62:1a: 9d:f2:ba:77:88:e6:13:5a:16:cf:8a:e5:68:99:20: 66:19:59:a9:24:08:cd:ca:77:f1:3c:54:a4:77:79: 45:92:62:5a:36:a1:57:46:ff:0e:c4:f0:90:bc:f8: 56:ce:9e:18:73:52:09:36:c8:87:30:16:28:50:bb: d1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E5:93:99:B2:7D:94:32:DB:E5:61:02:88:E3:96:8F:86:30:41:B5 X509v3 Authority Key Identifier: keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:91:e4:d1:60:f7:f2:eb:47:d9:de:e3:e4:5e:46:a0:e1:09: 00:42:54:de:0e:db:04:59:96:b4:99:08:77:95:7a:2d:a0:85: 49:0c:72:5f:59:8e:5d:96:77:5b:15:35:33:8e:65:73:86:72: bc:97:0f:78:83:8b:a7:a0:dc:11:ae:a0:53:78:98:0d:e7:a7: 9a:30:94:ab:b9:6e:7c:a2:2a:00:34:b9:99:d9:93:2e:21:a3: 5e:52:f5:43:81:c8:a4:aa:bf:f7:ad:8f:d6:9e:46:1c:ef:82: 07:52:e0:7c:60:b9:dd:58:c9:be:72:f8:b0:39:cc:3a:bd:04: ac:19:e5:94:24:1f:b4:e7:8f:9b:33:a7:c7:e9:3b:7b:ec:e1: 67:6d:e5:b4:fb:26:19:5c:f2:cb:ec:99:48:58:4f:25:cc:2b: 71:b8:c0:6a:eb:d9:67:43:5a:fa:00:44:e3:4b:39:ec:14:da: 47:d3:86:7d:42:97:71:74:5d:e3:9c:e5:d0:60:d8:f6:16:af: a0:03:d8:bd:10:d0:d1:09:b8:d3:c3:d9:db:30:b3:9b:5c:75: 3f:e7:e6:7b:7a:fd:73:b1:5e:62:ee:53:31:72:06:a3:71:59: 78:49:d3:15:e8:9a:6e:1b:84:d4:9c:0b:a9:ce:99:14:be:9b: f9:b4:a8:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzicHi9olo/Uk4SHQCRCMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZGI2ZjEwMDMwZTI3NmY4MzE2Mjc2ZjQwYjNkNGE0MTg0 ZDk0ZGQwHhcNMjUxMjA2MTIwMTIyWhcNMjUxMjA3MTIwMTIyWjAzMTEwLwYDVQQD EyhkM2U1OTM5OWIyN2Q5NDMyZGJlNTYxMDI4OGUzOTY4Zjg2MzA0MWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49LMiKQOlr5nS6yPk6JHZbvCH7Bd bEil1xPe5ZnB382PM1Dkd1wR69KM1iKWvw0+IFLbbS+PPojJc2ROgR8wqUNlfbDC LJrMnqFvs98IdLr+5oFg5lj/2UqZ703s7DVBfenyOpC26OBcnmhij6QK6pYqDPrO ibVOZgrgBJN0jTuW3PoTS/IYEyCf45LUlgSoyIFc2tLsjfiEk3EDR+9qsAzBRZEW a+pkGkWYD6JJmWyS97qV+8EAj9TzmAZzr+nfYhqd8rp3iOYTWhbPiuVomSBmGVmp JAjNynfxPFSkd3lFkmJaNqFXRv8OxPCQvPhWzp4Yc1IJNsiHMBYoULvR4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPlk5myfZQy2+VhAojjlo+GMEG1MB8GA1UdIwQY MBaAFM3bbxADDidvgxYnb0Cz1KQYTZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2Ut ODBiMmQyNWJmOWM4LzEvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2UtODBiMmQyNWJmOWM4 LzEvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpHk0WD3 8utH2d7j5F5GoOEJAEJU3g7bBFmWtJkId5V6LaCFSQxyX1mOXZZ3WxU1M45lc4Zy vJcPeIOLp6DcEa6gU3iYDeenmjCUq7lufKIqADS5mdmTLiGjXlL1Q4HIpKq/962P 1p5GHO+CB1LgfGC53VjJvnL4sDnMOr0ErBnllCQftOePmzOnx+k7e+zhZ23ltPsm GVzyy+yZSFhPJcwrcbjAauvZZ0Na+gBE40s57BTaR9OGfUKXcXRd45zl0GDY9hav oAPYvRDQ0Qm408PZ2zCzm1x1P+fme3r9c7FeYu5TMXIGo3FZeEnTFeiabhuE1JwL qc6ZFL6b+bSoHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:45:55 2025 by rpki-client