This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json) Hash identifier: 2j/UvLwvXft+eKV+qxDygobFK7NYI1QOWodzYX1UiJY= Subject key identifier: B5:CB:D0:54:9F:43:45:57:8C:8E:B2:85:C7:3D:5C:86:D0:83:CC:BB Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e Certificate serial: 019B34C5E2C36221142D392E16655486256F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 04:02:22 +0000 Manifest this update: Fri 19 Dec 2025 04:02:22 +0000 Manifest next update: Sat 20 Dec 2025 04:02:22 +0000 Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=) 2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: 9tshJmox3rOPPjaN366hQvZgfH9Jds6vl3LueLu44iU=) 3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:e2:c3:62:21:14:2d:39:2e:16:65:54:86:25:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e Validity Not Before: Dec 19 04:02:22 2025 GMT Not After : Dec 20 04:02:22 2025 GMT Subject: CN=b5cbd0549f4345578c8eb285c73d5c86d083ccbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:80:e3:08:30:42:8a:79:53:17:0f:1a:a0: 96:d4:b8:20:78:6b:da:c7:c4:66:92:85:76:ef:b7: 9a:d1:b7:4d:86:fb:af:b1:c6:29:4b:12:0c:94:45: fa:b7:c6:fd:be:11:41:d7:6f:54:95:40:16:95:2a: e1:e3:40:a8:9d:e2:eb:f8:7e:35:32:05:b2:36:83: d2:22:cb:d0:d2:eb:13:cf:01:02:18:de:d1:a2:eb: ba:2d:9d:e1:8b:68:74:32:df:5d:04:2a:62:ec:2c: 36:6d:63:54:32:e2:63:ac:41:03:a8:0d:0a:88:89: fd:ea:31:42:de:c6:e1:12:f1:f0:2f:9b:75:fd:df: ab:c0:03:12:54:4b:ff:43:da:6c:97:19:19:47:cd: 51:7e:9c:aa:44:ed:1e:86:5a:d0:51:e2:a1:7e:49: f6:d8:a8:57:cf:d1:51:56:00:bc:66:6b:99:12:4b: 8e:96:53:86:fb:cc:d9:ec:6c:94:18:0a:68:a7:01: 9b:14:4f:29:d4:09:1d:9d:50:87:79:ed:50:30:86: 2e:4c:0a:a9:f5:a7:65:06:74:32:3f:cb:de:46:aa: 92:d1:46:00:6e:d3:14:f0:e0:0b:d1:bf:66:7f:2f: dc:9d:7f:80:4e:6d:81:fa:86:f7:b3:c5:9a:bc:bf: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CB:D0:54:9F:43:45:57:8C:8E:B2:85:C7:3D:5C:86:D0:83:CC:BB X509v3 Authority Key Identifier: keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a3:ed:63:1d:fb:be:16:97:b4:f8:53:dc:83:53:88:ba:5a: 74:fc:31:3e:3c:f0:4b:2d:d8:f7:27:0e:ef:77:d9:5d:41:e6: 6e:b6:e7:0a:f2:a5:3e:d5:9d:78:dd:58:ee:64:28:9c:c1:76: 3b:d2:cd:9d:59:19:b4:18:e6:56:2c:a9:18:a4:09:ed:b5:dc: b5:20:e5:17:ac:e1:d6:98:8c:4f:24:2f:c8:b1:16:08:ce:73: 7d:59:e0:18:6a:b5:93:72:d3:9a:31:ab:01:45:dc:93:1a:f3: e0:4b:2c:21:44:0c:ff:98:de:31:6c:f2:ef:cd:6d:6e:e0:e7: 77:00:e2:30:4a:b8:5e:3f:c4:19:03:a7:64:76:44:41:12:90: ff:14:cf:78:fa:cc:4a:14:04:52:b0:74:4b:8a:07:9e:b2:c4: 68:3e:cf:09:29:90:0b:cd:25:89:d4:74:f0:06:ba:81:fe:ae: 1a:a4:06:53:eb:ab:d8:85:61:93:55:77:73:51:71:48:c9:7b: b7:18:33:2e:c9:31:71:c9:47:b5:e0:6c:bf:72:fa:4a:96:d6: 03:4f:ae:a1:8b:95:8b:1f:90:b8:48:01:a0:dd:c8:f7:8a:61: 6d:75:3f:c2:b8:88:9f:2b:40:9e:9c:15:8d:84:fb:4b:5a:6f: 03:22:cf:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xeLDYiEULTkuFmVUhiVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Mzk1ZDZhMWEyODg4ZDljMzU2ZWVkMzI3ODllNjI3ZDIz ZDUxNmUwHhcNMjUxMjE5MDQwMjIyWhcNMjUxMjIwMDQwMjIyWjAzMTEwLwYDVQQD EyhiNWNiZDA1NDlmNDM0NTU3OGM4ZWIyODVjNzNkNWM4NmQwODNjY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzKA4wgwQop5UxcPGqCW1LggeGva x8RmkoV277ea0bdNhvuvscYpSxIMlEX6t8b9vhFB129UlUAWlSrh40ConeLr+H41 MgWyNoPSIsvQ0usTzwECGN7Rouu6LZ3hi2h0Mt9dBCpi7Cw2bWNUMuJjrEEDqA0K iIn96jFC3sbhEvHwL5t1/d+rwAMSVEv/Q9pslxkZR81RfpyqRO0ehlrQUeKhfkn2 2KhXz9FRVgC8ZmuZEkuOllOG+8zZ7GyUGApopwGbFE8p1AkdnVCHee1QMIYuTAqp 9adlBnQyP8veRqqS0UYAbtMU8OAL0b9mfy/cnX+ATm2B+ob3s8WavL9nCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXL0FSfQ0VXjI6yhcc9XIbQg8y7MB8GA1UdIwQY MBaAFGQ5XWoaKIjZw1bu0yeJ5ifSPVFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYt OGQ4MzU5NDhlODc5LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYtOGQ4MzU5NDhlODc5 LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6PtYx37 vhaXtPhT3INTiLpadPwxPjzwSy3Y9ycO73fZXUHmbrbnCvKlPtWdeN1Y7mQonMF2 O9LNnVkZtBjmViypGKQJ7bXctSDlF6zh1piMTyQvyLEWCM5zfVngGGq1k3LTmjGr AUXckxrz4EssIUQM/5jeMWzy781tbuDndwDiMEq4Xj/EGQOnZHZEQRKQ/xTPePrM ShQEUrB0S4oHnrLEaD7PCSmQC80lidR08Aa6gf6uGqQGU+ur2IVhk1V3c1FxSMl7 txgzLskxcclHteBsv3L6SpbWA0+uoYuVix+QuEgBoN3I94phbXU/wriInytAnpwV jYT7S1pvAyLPZw== -----END CERTIFICATE-----Generated at Fri Dec 19 11:37:02 2025 by rpki-client