This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft File: zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json) Hash identifier: OgPaHlEv2weSwlatYOimuXDdthIPOlZ2rX7QX63vSIk= Subject key identifier: 49:88:19:37:19:1D:40:C1:ED:64:6C:14:05:98:D8:CC:63:D7:0E:ED Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd Certificate serial: 019B21E2F2A5B0AA096CB8CC02A27EB80A09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft Manifest number: 0F0B Signing time: Mon 15 Dec 2025 12:01:19 +0000 Manifest this update: Mon 15 Dec 2025 12:01:19 +0000 Manifest next update: Tue 16 Dec 2025 12:01:19 +0000 Files and hashes: 1: TvLjh2HZ_d_rU4Q7CUAOZ93ZHYk.roa (hash: UVHQPQPEMrt8FraIptsGKJQLRzbjMltNPf+IrL/aqn4=) 2: _51jX_RgZUWiVEK-S_q11tdiAsw.roa (hash: ojYxEEbJ9SvKIYoya6or2Wh9tzHv7tWRka6iaB4zigM=) 3: bvBCOOZR_53uuydhAIJbHOE_y50.roa (hash: O8HiOtyZpJTxAkEZvvlqiB0vlYICj10yBc68YG6rua0=) 4: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: EkDt+tw9xlUw8OKA5m6rzjQdhz9Uh6ZIH+NpTTARuTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:f2:a5:b0:aa:09:6c:b8:cc:02:a2:7e:b8:0a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd Validity Not Before: Dec 15 12:01:19 2025 GMT Not After : Dec 16 12:01:19 2025 GMT Subject: CN=49881937191d40c1ed646c140598d8cc63d70eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e7:66:91:b2:5b:4e:64:a0:39:b5:e1:df:6a: 39:a8:8e:2f:ea:04:68:fb:ba:72:8e:05:cf:10:0d: 83:a9:16:40:21:9f:a4:30:c2:19:dd:c5:f7:3b:ff: 91:4f:28:d6:67:46:bc:b6:da:31:cb:eb:39:60:55: 72:68:6c:3e:8c:09:d3:17:e0:a9:cd:1f:09:9b:7c: f4:4d:43:d8:f7:ab:e4:c2:92:c6:1d:8b:5d:b2:bf: 7f:1d:f7:ab:9b:31:b6:60:c3:aa:ca:9e:6d:3d:05: c3:d3:ef:5d:f3:ad:e0:b4:70:02:4e:7d:65:ef:08: 7d:e4:9d:e1:4d:ac:cb:ac:c3:4b:10:24:76:95:92: d2:4a:98:61:6a:86:34:9a:22:e4:ca:39:d4:fb:22: 09:ed:c8:f1:5e:18:82:03:7c:c5:75:55:0c:c3:53: dc:9f:ad:74:e8:28:68:b9:5a:8f:f6:c8:56:25:be: 21:3e:d7:2d:ac:d6:32:36:46:ba:47:fc:81:8f:6f: f2:b4:20:60:ab:a5:74:d1:be:95:a9:5d:56:10:a7: 68:0e:71:34:d0:7f:80:a2:6e:66:e1:09:ba:a4:76: 9c:c5:ca:bf:d8:14:1a:d2:8f:81:62:d9:d0:63:f9: 03:4a:fe:f6:d4:41:86:a9:c2:64:ea:c3:c9:eb:c3: a7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:88:19:37:19:1D:40:C1:ED:64:6C:14:05:98:D8:CC:63:D7:0E:ED X509v3 Authority Key Identifier: keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:29:5b:8c:8b:bf:f5:a9:97:9b:04:bf:51:1e:8d:5d:b4:05: 57:87:cf:a1:d4:df:27:38:bc:56:77:d1:01:1f:3b:1d:cd:bf: 6d:42:0e:ec:80:be:1a:aa:2d:85:b7:da:5d:9c:cf:a2:30:c4: 4c:bb:8a:61:7e:d6:28:26:0f:18:91:22:e1:2a:56:70:bb:1f: 80:27:94:04:5c:22:3b:b0:dd:11:b1:06:1a:cc:98:02:19:75: fa:30:ac:d8:5e:dd:5b:cf:95:0d:e7:6a:16:4a:b4:5e:a8:eb: c8:1a:8f:e9:43:01:8b:b3:3e:e3:36:53:79:ec:36:6d:55:8c: ba:44:a2:af:bd:93:31:47:c3:7f:8a:de:5e:7c:a6:38:5f:36: a5:2e:fc:b5:4f:c5:0b:0b:ba:51:da:23:46:23:dd:57:68:7f: 57:f9:05:a7:0d:f8:0e:73:13:23:c5:0e:00:34:3a:0e:b5:69: 98:80:78:f2:c9:90:62:13:e4:e5:23:68:c0:d0:59:18:ff:93: b0:12:b5:6c:05:47:01:d5:5b:dc:91:b7:89:76:a6:a3:be:34: 4d:93:1a:7e:0f:5b:66:4c:fb:6e:18:aa:6a:1c:50:da:7f:9d: 0b:4f:50:12:ab:1f:37:b9:ba:73:38:5f:d4:1b:84:84:1b:d1: d5:64:d3:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4vKlsKoJbLjMAqJ+uAoJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZGI2ZjEwMDMwZTI3NmY4MzE2Mjc2ZjQwYjNkNGE0MTg0 ZDk0ZGQwHhcNMjUxMjE1MTIwMTE5WhcNMjUxMjE2MTIwMTE5WjAzMTEwLwYDVQQD Eyg0OTg4MTkzNzE5MWQ0MGMxZWQ2NDZjMTQwNTk4ZDhjYzYzZDcwZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOdmkbJbTmSgObXh32o5qI4v6gRo +7pyjgXPEA2DqRZAIZ+kMMIZ3cX3O/+RTyjWZ0a8ttoxy+s5YFVyaGw+jAnTF+Cp zR8Jm3z0TUPY96vkwpLGHYtdsr9/HfermzG2YMOqyp5tPQXD0+9d863gtHACTn1l 7wh95J3hTazLrMNLECR2lZLSSphhaoY0miLkyjnU+yIJ7cjxXhiCA3zFdVUMw1Pc n6106ChouVqP9shWJb4hPtctrNYyNka6R/yBj2/ytCBgq6V00b6VqV1WEKdoDnE0 0H+Aom5m4Qm6pHacxcq/2BQa0o+BYtnQY/kDSv721EGGqcJk6sPJ68OnrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmIGTcZHUDB7WRsFAWY2Mxj1w7tMB8GA1UdIwQY MBaAFM3bbxADDidvgxYnb0Cz1KQYTZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2Ut ODBiMmQyNWJmOWM4LzEvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2UtODBiMmQyNWJmOWM4 LzEvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiilbjIu/ 9amXmwS/UR6NXbQFV4fPodTfJzi8VnfRAR87Hc2/bUIO7IC+GqothbfaXZzPojDE TLuKYX7WKCYPGJEi4SpWcLsfgCeUBFwiO7DdEbEGGsyYAhl1+jCs2F7dW8+VDedq Fkq0XqjryBqP6UMBi7M+4zZTeew2bVWMukSir72TMUfDf4reXnymOF82pS78tU/F Cwu6UdojRiPdV2h/V/kFpw34DnMTI8UOADQ6DrVpmIB48smQYhPk5SNowNBZGP+T sBK1bAVHAdVb3JG3iXamo740TZMafg9bZkz7bhiqahxQ2n+dC09QEqsfN7m6czhf 1BuEhBvR1WTTuw== -----END CERTIFICATE-----Generated at Mon Dec 15 15:28:39 2025 by rpki-client