This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json) Hash identifier: HL+6jcyqwR15r6jcTiY7orZ89sZKeawpm9POw0FH1IQ= Subject key identifier: 52:E8:4F:08:93:87:44:2D:A6:81:9B:93:F6:16:5B:2D:B4:FF:CF:A4 Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e Certificate serial: 019B3C7F73C5CEB6BD665B8B1CFB5B723D60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 16:02:24 +0000 Manifest this update: Sat 20 Dec 2025 16:02:24 +0000 Manifest next update: Sun 21 Dec 2025 16:02:24 +0000 Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=) 2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: nUemsm4DCbSp3KTOE/eVrgePLQK7WsSYCaVstvFDhvk=) 3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:73:c5:ce:b6:bd:66:5b:8b:1c:fb:5b:72:3d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e Validity Not Before: Dec 20 16:02:24 2025 GMT Not After : Dec 21 16:02:24 2025 GMT Subject: CN=52e84f089387442da6819b93f6165b2db4ffcfa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:68:f6:70:3d:74:55:7e:77:0e:af:ac:92:87: 6f:59:d9:50:76:c4:00:c7:ef:da:83:20:e1:3e:b3: c6:15:4b:49:1e:27:81:c4:be:ce:c3:55:1f:d9:77: 9e:9f:ba:17:05:bb:bb:fc:81:d2:7a:b8:75:c0:ce: 2a:e9:22:3d:59:98:28:68:a0:01:5d:62:2f:cd:9c: ef:f2:b1:2d:71:56:de:5f:76:ce:02:94:57:4d:84: 2b:0b:6a:bb:a3:6f:5a:74:5c:99:a7:0c:e2:68:c2: cc:2c:69:b1:d5:73:1b:b7:7d:61:30:8c:81:1d:80: c3:6a:49:36:21:a6:31:75:af:6a:70:c8:fd:ee:c4: 18:f4:2b:f1:b3:9e:de:f3:0d:61:8e:b6:ae:f5:e0: 96:dd:66:77:9f:28:17:e8:8e:5a:99:1b:d9:1a:13: 36:7f:83:3c:7f:f9:28:0b:ef:be:3f:e3:b9:06:9f: 2e:36:9b:c0:13:9d:e1:0d:6c:59:07:3a:7a:b6:23: 06:d8:3e:d5:39:f7:1a:4b:c3:77:90:78:25:1b:df: a7:f0:c8:9a:92:2f:bb:1f:e0:31:b9:d0:ca:cc:e7: 6a:dd:51:92:1c:e1:ec:24:ab:22:35:a7:85:6f:af: 74:c4:4c:0b:f2:0a:b8:b9:aa:ef:71:60:1b:b3:1f: f2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E8:4F:08:93:87:44:2D:A6:81:9B:93:F6:16:5B:2D:B4:FF:CF:A4 X509v3 Authority Key Identifier: keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:eb:74:2e:5d:eb:eb:c0:b2:f2:40:fa:74:14:2f:39:84:6f: a3:79:99:05:50:c2:1a:89:e3:a1:03:68:f0:f1:8d:c0:e0:b4: 89:20:24:42:7e:09:63:3f:79:24:89:62:a0:18:c4:ce:0a:56: 39:93:2f:ad:52:17:bb:af:93:a8:4c:83:fa:45:f9:2b:fb:b3: 65:4a:3c:a5:42:e4:57:3d:43:23:d8:6b:ad:f4:8c:03:bb:47: 2e:db:2c:75:37:e2:a6:7e:16:df:d4:4b:07:b2:7c:2e:7e:2a: 1e:3c:9e:07:9e:57:5a:11:f8:e4:42:b3:11:21:22:cf:c1:55: ba:55:0a:d1:71:0f:2e:bb:41:fb:72:88:2a:d0:c8:0b:eb:ae: ff:f7:ce:4f:da:ef:76:a9:81:f0:3a:16:84:5d:70:bc:df:d6: 0b:96:b2:5a:3e:9e:f6:c4:3a:3d:99:7f:1e:f2:71:37:06:2f: c2:4c:f5:66:69:57:97:96:b2:0d:a7:6b:a3:f1:90:a9:a1:84: f4:da:66:6f:78:5f:90:2d:9c:1e:67:d1:09:1a:4d:d2:4c:7c: f2:a2:2e:b6:44:96:d7:66:e3:fa:3d:dd:42:39:d5:a2:aa:88: a3:c7:01:20:f8:30:d9:b7:7e:cd:13:7a:31:7d:e9:e3:ff:bc: 81:5b:cd:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f3PFzra9ZluLHPtbcj1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Mzk1ZDZhMWEyODg4ZDljMzU2ZWVkMzI3ODllNjI3ZDIz ZDUxNmUwHhcNMjUxMjIwMTYwMjI0WhcNMjUxMjIxMTYwMjI0WjAzMTEwLwYDVQQD Eyg1MmU4NGYwODkzODc0NDJkYTY4MTliOTNmNjE2NWIyZGI0ZmZjZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmj2cD10VX53Dq+skodvWdlQdsQA x+/agyDhPrPGFUtJHieBxL7Ow1Uf2Xeen7oXBbu7/IHSerh1wM4q6SI9WZgoaKAB XWIvzZzv8rEtcVbeX3bOApRXTYQrC2q7o29adFyZpwziaMLMLGmx1XMbt31hMIyB HYDDakk2IaYxda9qcMj97sQY9Cvxs57e8w1hjrau9eCW3WZ3nygX6I5amRvZGhM2 f4M8f/koC+++P+O5Bp8uNpvAE53hDWxZBzp6tiMG2D7VOfcaS8N3kHglG9+n8Mia ki+7H+AxudDKzOdq3VGSHOHsJKsiNaeFb690xEwL8gq4uarvcWAbsx/ycwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLoTwiTh0QtpoGbk/YWWy20/8+kMB8GA1UdIwQY MBaAFGQ5XWoaKIjZw1bu0yeJ5ifSPVFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYt OGQ4MzU5NDhlODc5LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYtOGQ4MzU5NDhlODc5 LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPet0Ll3r 68Cy8kD6dBQvOYRvo3mZBVDCGonjoQNo8PGNwOC0iSAkQn4JYz95JIlioBjEzgpW OZMvrVIXu6+TqEyD+kX5K/uzZUo8pULkVz1DI9hrrfSMA7tHLtssdTfipn4W39RL B7J8Ln4qHjyeB55XWhH45EKzESEiz8FVulUK0XEPLrtB+3KIKtDIC+uu//fOT9rv dqmB8DoWhF1wvN/WC5ayWj6e9sQ6PZl/HvJxNwYvwkz1ZmlXl5ayDadro/GQqaGE 9Npmb3hfkC2cHmfRCRpN0kx88qIutkSW12bj+j3dQjnVoqqIo8cBIPgw2bd+zRN6 MX3p4/+8gVvNNg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:56:54 2025 by rpki-client