This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json) Hash identifier: gmG/N8vp0RTIn5uLhLGGznrTqGOkZeM212YotQ/rkE8= Subject key identifier: 7C:07:27:FA:F5:7E:19:CE:DF:5A:F9:6F:F9:42:66:3F:82:80:C2:48 Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Certificate serial: 019B72C7B4F46D05F11B51C432D95893B6A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft Manifest number: 17A9 Signing time: Wed 31 Dec 2025 05:00:49 +0000 Manifest this update: Wed 31 Dec 2025 05:00:49 +0000 Manifest next update: Thu 01 Jan 2026 05:00:49 +0000 Files and hashes: 1: 5iOaoXB5nkYwr8tIgFWyVnXEhjk.roa (hash: 75KyluwEydMP2XQT86kr0piX0sxxFkty1yXB3kElNns=) 2: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: 3yby/cHVRJdnHW7y/vUkdLFa/3M2IdOHZXcJAqr1xiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:c7:b4:f4:6d:05:f1:1b:51:c4:32:d9:58:93:b6:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Validity Not Before: Dec 31 05:00:49 2025 GMT Not After : Jan 1 05:00:49 2026 GMT Subject: CN=7c0727faf57e19cedf5af96ff942663f8280c248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:d7:75:bf:f6:fe:27:60:90:23:cf:ec:82: 1d:21:85:c6:5b:65:62:65:8f:8d:ca:ad:fa:2b:81: 11:0b:0e:23:90:db:a9:41:ad:f8:c1:3f:a7:09:64: 61:10:47:d7:32:9c:ce:d6:0c:76:b9:9e:b9:34:7c: e9:cf:c2:8b:76:2c:15:fb:ad:f8:cb:8a:43:75:03: 16:dd:4d:c7:10:d0:c3:cb:78:3e:ba:c0:26:be:56: 14:c6:53:c2:5e:b2:5a:8e:9f:aa:74:4f:6c:ac:87: 20:c3:0b:fa:98:4d:0f:cd:09:a6:b6:b4:db:26:75: 5e:f6:07:7c:39:fa:0c:7a:17:f2:56:e8:23:4c:26: 02:cb:c3:9b:9d:cc:c1:93:2c:de:34:e6:4c:32:46: d4:07:4b:9c:69:9c:09:3e:11:20:d8:49:7a:4d:b5: e8:39:c0:62:74:0e:89:fd:56:e7:91:48:b7:72:14: 87:ae:fc:88:92:06:84:90:c5:a8:8c:7f:bf:55:15: 70:02:42:4a:c2:d2:a7:f0:f2:84:65:6f:fa:b0:f8: 4f:2d:b2:b7:bf:7d:2f:27:98:a5:c9:6f:c3:27:79: 9b:5c:17:19:d3:e9:30:3e:40:43:a9:4c:24:b8:44: b4:7b:15:e0:d4:36:8b:4d:4a:be:e9:32:1d:ea:50: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:07:27:FA:F5:7E:19:CE:DF:5A:F9:6F:F9:42:66:3F:82:80:C2:48 X509v3 Authority Key Identifier: keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:82:5b:0b:1d:11:17:49:86:1f:59:bd:f5:9d:67:9d:7f:64: 4b:11:d7:fc:b8:b1:22:86:b4:b2:3f:0d:10:70:04:ac:43:5d: 5e:a4:37:db:a4:61:cd:98:e2:98:39:aa:c9:27:fa:48:46:ea: 98:bb:55:71:eb:2e:23:49:30:10:bd:7d:d0:7b:af:0e:60:c8: b6:58:ab:d9:13:ba:28:9a:96:2a:03:12:5d:8f:24:ca:75:3a: 58:85:d1:1b:de:7f:d7:9e:bd:b2:fa:2a:b2:6a:6d:2c:48:e2: 57:2d:7c:33:8e:97:c8:72:03:58:49:ab:37:42:9a:f5:9d:bc: c6:cb:db:1a:66:94:b3:1d:6c:b1:e6:aa:f6:92:4a:b5:d3:38: a7:bc:bb:ef:f3:ef:7f:da:79:f3:15:f3:6c:4d:53:91:64:ec: 4e:d3:e5:5b:55:8d:f9:f6:72:4f:77:2d:62:f3:07:4e:23:86: c0:48:b0:70:af:6d:24:5b:97:f4:32:9e:48:30:8e:26:f8:39: f0:6d:54:5b:3e:c3:c9:c6:d6:05:dc:d6:b8:93:79:bf:81:24: 34:3b:fc:08:68:ff:5a:94:17:3a:83:7a:1e:59:8a:6d:27:83: 2d:7d:1f:39:c1:5e:83:5f:34:65:bd:58:da:7a:26:fd:eb:5d: 13:db:85:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyx7T0bQXxG1HEMtlYk7ahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZGYzNzlmYWFmMjEwYTcwMzZkYWMwNWRlNmI1NzcyZGJl NGRkNmMwHhcNMjUxMjMxMDUwMDQ5WhcNMjYwMTAxMDUwMDQ5WjAzMTEwLwYDVQQD Eyg3YzA3MjdmYWY1N2UxOWNlZGY1YWY5NmZmOTQyNjYzZjgyODBjMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHjXdb/2/idgkCPP7IIdIYXGW2Vi ZY+Nyq36K4ERCw4jkNupQa34wT+nCWRhEEfXMpzO1gx2uZ65NHzpz8KLdiwV+634 y4pDdQMW3U3HENDDy3g+usAmvlYUxlPCXrJajp+qdE9srIcgwwv6mE0PzQmmtrTb JnVe9gd8OfoMehfyVugjTCYCy8ObnczBkyzeNOZMMkbUB0ucaZwJPhEg2El6TbXo OcBidA6J/VbnkUi3chSHrvyIkgaEkMWojH+/VRVwAkJKwtKn8PKEZW/6sPhPLbK3 v30vJ5ilyW/DJ3mbXBcZ0+kwPkBDqUwkuES0exXg1DaLTUq+6TId6lACmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwHJ/r1fhnO31r5b/lCZj+CgMJIMB8GA1UdIwQY MBaAFGXfN5+q8hCnA22sBd5rV3Lb5N1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgt MDc2Yzg4Yjg4MDJmLzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgtMDc2Yzg4Yjg4MDJm LzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioJbCx0R F0mGH1m99Z1nnX9kSxHX/LixIoa0sj8NEHAErENdXqQ326RhzZjimDmqySf6SEbq mLtVcesuI0kwEL190HuvDmDItlir2RO6KJqWKgMSXY8kynU6WIXRG95/1569svoq smptLEjiVy18M46XyHIDWEmrN0Ka9Z28xsvbGmaUsx1sseaq9pJKtdM4p7y77/Pv f9p58xXzbE1TkWTsTtPlW1WN+fZyT3ctYvMHTiOGwEiwcK9tJFuX9DKeSDCOJvg5 8G1UWz7DycbWBdzWuJN5v4EkNDv8CGj/WpQXOoN6HlmKbSeDLX0fOcFeg180Zb1Y 2nom/etdE9uFng== -----END CERTIFICATE-----Generated at Wed Dec 31 07:18:39 2025 by rpki-client