This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft File: ZD2vEi46h6yqb9tiw1olKhmaWNk.mft (raw, json) Hash identifier: LtKul8G/j8OvWW9HKWbM6eXt5ezkxPQvMAN5HTvbN/I= Subject key identifier: 07:BD:7E:4E:DD:BE:F9:57:99:6E:66:37:18:52:58:D5:2E:99:2A:72 Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9 Certificate issuer: /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9 Certificate serial: 019B46CAE6451FE176DA17571C22C4941141 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft Manifest number: 0F10 Signing time: Mon 22 Dec 2025 16:01:00 +0000 Manifest this update: Mon 22 Dec 2025 16:01:00 +0000 Manifest next update: Tue 23 Dec 2025 16:01:00 +0000 Files and hashes: 1: 5y54voFpQemaWdhJdL3R6I-ZfdY.roa (hash: 0q0hdM7ItmEN9aXgu0xUxeLxjebZjyz7UrwOiAMpRFI=) 2: ZD2vEi46h6yqb9tiw1olKhmaWNk.crl (hash: XT5K681/bQ768XHuCKfl3jD/Ocd82x+Dn4AU9C+xUcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:e6:45:1f:e1:76:da:17:57:1c:22:c4:94:11:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9 Validity Not Before: Dec 22 16:01:00 2025 GMT Not After : Dec 23 16:01:00 2025 GMT Subject: CN=07bd7e4eddbef957996e6637185258d52e992a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:96:f1:1d:c7:34:65:70:2c:5b:a9:ff:6d: 4d:37:b9:e5:47:6f:7d:bf:57:5e:27:3e:b1:40:cf: 05:36:0b:0c:59:1e:2d:b8:66:50:bb:86:9d:21:4d: db:55:a0:75:cc:db:2d:0a:f5:99:f4:15:fd:41:2a: dd:b0:b6:72:af:4e:4e:46:45:ba:c6:e5:e5:3c:84: bf:dd:15:d0:06:7d:9a:7a:dc:fc:f6:f0:79:1d:43: 9a:77:f5:76:99:e2:0b:86:e3:af:c2:8a:5b:41:8c: b3:37:82:b1:07:5e:9a:50:6d:47:be:67:2a:01:56: 85:c2:2c:8d:11:54:84:6a:fd:af:1f:7e:84:92:d4: 70:3a:7b:61:88:c9:e1:b6:be:e2:27:63:d7:2a:5d: 57:1f:ef:c0:77:09:46:4a:71:1a:ac:aa:d4:af:0c: a3:40:59:a7:48:ee:04:62:9f:0e:d5:0c:d4:4c:8a: c0:b0:f4:07:81:17:93:fd:07:7e:2b:cc:a7:e8:5d: 6f:cc:66:81:09:cd:22:0d:e5:57:62:4f:7d:74:37: 18:eb:d8:8d:8f:16:5c:2b:79:91:65:b7:dd:22:c3: 9e:ec:67:72:16:6b:f6:a5:76:2f:da:e2:86:48:45: d3:96:79:c2:ee:ae:9c:f2:e6:8e:4b:1f:07:69:d4: bf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BD:7E:4E:DD:BE:F9:57:99:6E:66:37:18:52:58:D5:2E:99:2A:72 X509v3 Authority Key Identifier: keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:4f:d2:16:b3:82:3c:6f:dc:c7:8d:a4:88:0d:c3:17:24:8b: 61:f5:ad:d7:29:b2:88:95:a2:f2:ab:ec:87:64:f2:73:81:52: 9f:20:39:47:20:c7:f1:da:49:6b:a1:09:c2:ae:63:61:74:2f: 3e:e6:bb:80:f5:8d:49:20:cf:1f:cd:25:66:01:63:87:75:8d: 16:0f:6c:c2:f1:55:e4:fc:31:4b:53:a4:2a:10:0f:07:01:75: d3:7d:1e:df:57:8f:9e:9c:be:8a:94:e8:ab:aa:0e:a6:3a:df: 28:b2:f4:9c:4f:99:2d:23:9e:4e:9f:73:47:3e:fe:b5:ff:4c: b9:33:15:79:88:7c:e0:c1:64:68:29:c6:67:80:04:bb:18:e2: 18:e7:0d:62:58:bf:dd:83:60:02:70:8f:60:4a:43:48:4a:87: 81:8e:34:9c:52:97:cb:30:7a:79:cd:ab:80:a9:de:46:24:7c: 07:97:ff:66:a7:bd:a9:f8:36:7b:4c:bf:07:24:87:d7:f4:47: 1e:1a:92:68:68:44:af:68:1b:d9:0c:90:1d:f7:c1:40:a0:15: 02:de:d1:54:5a:3d:f5:57:34:32:a4:dc:ec:77:c1:50:c7:9b: 8b:c4:38:e2:bf:33:b4:86:ae:07:31:58:06:89:9a:5d:8c:ac: c2:fa:2b:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyuZFH+F22hdXHCLElBFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0M2RhZjEyMmUzYTg3YWNhYTZmZGI2MmMzNWEyNTJhMTk5 YTU4ZDkwHhcNMjUxMjIyMTYwMTAwWhcNMjUxMjIzMTYwMTAwWjAzMTEwLwYDVQQD EygwN2JkN2U0ZWRkYmVmOTU3OTk2ZTY2MzcxODUyNThkNTJlOTkyYTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQOW8R3HNGVwLFup/21NN7nlR299 v1deJz6xQM8FNgsMWR4tuGZQu4adIU3bVaB1zNstCvWZ9BX9QSrdsLZyr05ORkW6 xuXlPIS/3RXQBn2aetz89vB5HUOad/V2meILhuOvwopbQYyzN4KxB16aUG1Hvmcq AVaFwiyNEVSEav2vH36EktRwOnthiMnhtr7iJ2PXKl1XH+/AdwlGSnEarKrUrwyj QFmnSO4EYp8O1QzUTIrAsPQHgReT/Qd+K8yn6F1vzGaBCc0iDeVXYk99dDcY69iN jxZcK3mRZbfdIsOe7GdyFmv2pXYv2uKGSEXTlnnC7q6c8uaOSx8HadS/EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAe9fk7dvvlXmW5mNxhSWNUumSpyMB8GA1UdIwQY MBaAFGQ9rxIuOoesqm/bYsNaJSoZmljZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lZDNkNGEtNzA0Zi00YWE0LTgyMWYt ZGNkNWU5NDc4MDg0LzEvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9lZDNkNGEtNzA0Zi00YWE0LTgyMWYtZGNkNWU5NDc4MDg0 LzEvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhU/SFrOC PG/cx42kiA3DFySLYfWt1ymyiJWi8qvsh2Tyc4FSnyA5RyDH8dpJa6EJwq5jYXQv Pua7gPWNSSDPH80lZgFjh3WNFg9swvFV5PwxS1OkKhAPBwF1030e31ePnpy+ipTo q6oOpjrfKLL0nE+ZLSOeTp9zRz7+tf9MuTMVeYh84MFkaCnGZ4AEuxjiGOcNYli/ 3YNgAnCPYEpDSEqHgY40nFKXyzB6ec2rgKneRiR8B5f/Zqe9qfg2e0y/BySH1/RH HhqSaGhEr2gb2QyQHffBQKAVAt7RVFo99Vc0MqTc7HfBUMebi8Q44r8ztIauBzFY BomaXYyswvorqA== -----END CERTIFICATE-----Generated at Mon Dec 22 22:59:56 2025 by rpki-client