This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json) Hash identifier: y6hgZ5Nj1WNN88Y/4x9xcFMsSgMOzRQmM7/IqxPfbYU= Subject key identifier: 49:9E:EE:FE:16:0B:E0:8D:8B:AE:8B:64:59:E9:A8:0F:B3:39:D6:27 Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb Certificate serial: 019ACC7D99E64FD29CDF7C508F4371059C09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft Manifest number: 146A Signing time: Fri 28 Nov 2025 22:02:54 +0000 Manifest this update: Fri 28 Nov 2025 22:02:54 +0000 Manifest next update: Sat 29 Nov 2025 22:02:54 +0000 Files and hashes: 1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=) 2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: 4bCTjZHCwS3seqxJFXxEbY/qi3uJsKhE85WD/WCuCCc=) 3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cc:7d:99:e6:4f:d2:9c:df:7c:50:8f:43:71:05:9c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb Validity Not Before: Nov 28 22:02:54 2025 GMT Not After : Nov 29 22:02:54 2025 GMT Subject: CN=499eeefe160be08d8bae8b6459e9a80fb339d627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:a3:18:ab:8b:13:cb:7c:86:67:87:da:17: b9:80:d5:cb:58:23:0d:d3:29:32:e8:ea:09:f2:93: 48:f6:43:42:97:0d:4f:72:e3:80:74:53:ae:a0:3f: 17:dd:1e:c0:9e:02:4e:b3:25:72:50:d4:db:70:15: 6e:7c:da:6e:33:3e:ee:e7:4d:d5:91:4d:ed:31:7f: e0:4b:2f:28:18:8a:e4:3e:88:02:54:01:be:4b:46: 2c:e1:9b:02:65:26:e1:b1:3a:7e:31:5a:d2:51:81: d0:33:5f:3e:2d:71:93:12:66:66:c4:14:ff:c2:de: a1:12:81:54:9b:06:22:0d:5b:23:84:c4:3a:87:85: d6:74:d9:58:36:2f:d3:7e:d2:7c:c8:0f:b2:d4:68: 55:c7:cc:28:8b:6b:1d:47:a1:d2:bd:df:41:5e:5f: 5f:e7:e3:2c:71:94:be:6f:e0:ae:c9:1c:a0:de:57: d2:2f:04:63:d3:6d:9c:cc:20:25:f9:0b:17:41:b5: ba:ac:14:de:fe:f8:d4:70:6f:d7:fb:24:37:e9:bc: 2e:94:a3:e1:55:73:01:2b:15:22:70:ce:f4:09:ba: 1f:26:8e:b3:cc:f4:31:50:09:8f:84:4a:e0:a0:2d: 9a:17:01:c5:ac:41:40:dd:e3:c2:4a:57:d2:4d:eb: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9E:EE:FE:16:0B:E0:8D:8B:AE:8B:64:59:E9:A8:0F:B3:39:D6:27 X509v3 Authority Key Identifier: keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:5f:54:32:7a:d8:00:0e:27:de:99:27:5a:b1:aa:2b:99:cc: 45:39:a5:90:38:99:01:31:2c:6c:3f:fc:f1:25:00:05:6b:09: 5a:17:0a:99:08:07:33:bd:bf:d0:b4:56:ca:bc:df:dc:13:bc: 01:87:50:8f:98:91:da:a7:c0:68:ec:9a:4f:90:d0:f3:32:9f: f2:fe:9b:e9:fd:2a:94:e6:75:84:b9:cf:89:53:f1:82:51:ce: dd:e5:24:5f:62:32:ac:f9:4f:36:64:29:c8:f8:1f:0f:f5:f0: 76:d5:29:84:be:57:f0:4c:27:48:62:58:5c:46:c0:34:ee:d7: ba:6b:73:e1:96:bc:f9:90:84:43:52:17:fd:57:9d:03:8f:10: c1:4e:f3:7b:d7:a5:a4:5b:30:c2:ca:1c:a1:17:75:a2:01:75: bc:7c:e6:1f:b6:73:7c:44:c4:9e:6f:d5:62:92:ba:c2:1e:8b: b7:aa:43:66:6f:e6:70:65:16:77:34:b1:41:46:82:15:d1:88: 9f:5a:91:80:66:a8:63:a1:b5:4f:60:0e:47:da:22:a1:9e:19: fb:72:ae:8b:8b:c3:3d:5a:cb:72:82:f1:47:1a:35:68:62:cb: 60:13:76:8b:46:c7:a5:34:e1:13:f2:3b:a0:f1:14:4e:e1:b0: 8e:3c:e5:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrMfZnmT9Kc33xQj0NxBZwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NWU0ZDdlYThhMzQ3MGM5NzAzZWU3NTUxNDgxYzM2Zjc3 NGZlYmIwHhcNMjUxMTI4MjIwMjU0WhcNMjUxMTI5MjIwMjU0WjAzMTEwLwYDVQQD Eyg0OTllZWVmZTE2MGJlMDhkOGJhZThiNjQ1OWU5YTgwZmIzMzlkNjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq12jGKuLE8t8hmeH2he5gNXLWCMN 0yky6OoJ8pNI9kNClw1PcuOAdFOuoD8X3R7AngJOsyVyUNTbcBVufNpuMz7u503V kU3tMX/gSy8oGIrkPogCVAG+S0Ys4ZsCZSbhsTp+MVrSUYHQM18+LXGTEmZmxBT/ wt6hEoFUmwYiDVsjhMQ6h4XWdNlYNi/TftJ8yA+y1GhVx8woi2sdR6HSvd9BXl9f 5+MscZS+b+CuyRyg3lfSLwRj022czCAl+QsXQbW6rBTe/vjUcG/X+yQ36bwulKPh VXMBKxUicM70CbofJo6zzPQxUAmPhErgoC2aFwHFrEFA3ePCSlfSTeuTQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEme7v4WC+CNi66LZFnpqA+zOdYnMB8GA1UdIwQY MBaAFGZeTX6oo0cMlwPudVFIHDb3dP67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmIt MTYyZWQ2MjRlMjgyLzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmItMTYyZWQ2MjRlMjgy LzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEF9UMnrY AA4n3pknWrGqK5nMRTmlkDiZATEsbD/88SUABWsJWhcKmQgHM72/0LRWyrzf3BO8 AYdQj5iR2qfAaOyaT5DQ8zKf8v6b6f0qlOZ1hLnPiVPxglHO3eUkX2IyrPlPNmQp yPgfD/XwdtUphL5X8EwnSGJYXEbANO7Xumtz4Za8+ZCEQ1IX/VedA48QwU7ze9el pFswwsocoRd1ogF1vHzmH7ZzfETEnm/VYpK6wh6Lt6pDZm/mcGUWdzSxQUaCFdGI n1qRgGaoY6G1T2AOR9oioZ4Z+3Kui4vDPVrLcoLxRxo1aGLLYBN2i0bHpTThE/I7 oPEUTuGwjjzlFQ== -----END CERTIFICATE-----Generated at Fri Nov 28 23:44:21 2025 by rpki-client