This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft File: zVW0Jf7PefCeB0stbzphbHtoVwA.mft (raw, json) Hash identifier: cWLi0cQkDXPWkwgawpachPZFgAMJJDfSELQjLDY9xNQ= Subject key identifier: 93:C5:3E:AE:FD:91:B9:2A:0D:EB:88:49:F3:9C:52:65:A6:9A:56:C6 Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00 Certificate issuer: /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700 Certificate serial: 019B1C8584C29AE0C697874C2419DD070C45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft Manifest number: 14B5 Signing time: Sun 14 Dec 2025 11:01:10 +0000 Manifest this update: Sun 14 Dec 2025 11:01:10 +0000 Manifest next update: Mon 15 Dec 2025 11:01:10 +0000 Files and hashes: 1: EpL6n7YsTJUyCIMDB2XXj1UETF0.roa (hash: 0aITT3j5lY16SRph4DUvA4Lnw1Z/zDWpJihg1Nz305o=) 2: zVW0Jf7PefCeB0stbzphbHtoVwA.crl (hash: vrgINm7UxXieWu/dDPeNwqQWluD2G2CR8XoqwneWoDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:84:c2:9a:e0:c6:97:87:4c:24:19:dd:07:0c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700 Validity Not Before: Dec 14 11:01:10 2025 GMT Not After : Dec 15 11:01:10 2025 GMT Subject: CN=93c53eaefd91b92a0deb8849f39c5265a69a56c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a2:fb:61:71:ec:4f:ac:85:15:85:9a:a8:a2: c8:21:6f:f0:1a:d8:34:21:1e:53:38:6e:a3:08:7a: ca:6d:e3:70:ba:6a:e7:d1:2f:f8:90:7a:60:cf:bc: 3d:fc:9e:55:a8:88:ff:71:49:2e:01:08:0e:4c:da: 1f:7c:8e:84:07:8d:9e:6e:c3:bb:cd:85:cc:15:aa: d6:7a:4e:15:cf:19:5f:bd:01:92:85:6c:51:96:e3: a4:b3:ec:a1:92:78:6b:ea:47:50:1f:09:ac:e5:14: c0:cf:7c:ba:d9:cf:68:8c:41:6f:a1:80:83:a1:dd: 4d:fb:af:00:2f:e6:de:9e:00:d1:e1:d6:23:c5:e7: f4:85:28:53:68:bd:72:9d:90:54:04:1b:81:d9:a8: bf:17:23:7b:33:c3:70:19:a8:0a:e9:fb:25:ac:31: f1:86:ad:4e:00:30:73:17:c0:f4:a4:01:21:29:20: bc:71:0d:19:6f:87:d9:35:f5:d8:de:7c:80:44:e3: 73:27:0d:f6:47:5d:77:ea:ae:f3:e2:c4:fa:1b:72: f5:6b:d9:2b:55:44:cf:9b:1c:9b:67:ed:d8:2a:b1: 9f:e4:4f:97:e8:bd:06:44:83:d3:a8:bd:4e:56:09: 6b:91:e1:0f:6a:5c:61:f9:32:ba:61:db:2a:e0:09: 2e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C5:3E:AE:FD:91:B9:2A:0D:EB:88:49:F3:9C:52:65:A6:9A:56:C6 X509v3 Authority Key Identifier: keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:79:f8:6e:6b:d6:51:b7:23:c2:01:7d:67:2a:40:b2:4c:6e: 4e:ef:fb:e4:c3:46:65:cb:d7:6b:25:48:b7:f2:ca:f8:cb:c3: 6f:38:c7:20:bd:0a:60:4e:f6:36:6d:f0:1e:0e:f3:2d:a4:67: 78:ce:22:2f:cc:10:31:60:d6:62:a1:01:c1:49:17:82:5a:51: cd:c7:0d:57:8a:f6:18:51:8b:4f:ed:9d:ae:63:04:c1:56:09: aa:7c:19:9f:3e:25:40:c6:8a:1f:bc:83:a6:b0:e0:fe:73:bb: 1b:2b:9f:fe:47:54:ea:0f:76:19:de:e3:c3:18:27:5f:01:c1: 17:d9:07:be:5d:f5:9a:68:7f:17:cf:f4:0e:ad:d8:f0:6c:b9: 6b:24:6f:88:95:d0:2e:53:d0:99:b3:6f:28:6b:07:af:59:2c: bc:46:ce:d5:8b:4f:49:04:07:b8:ad:55:a8:0a:b0:b2:71:76: 3f:3a:ed:1f:5e:07:a2:f7:46:d9:27:74:dc:7b:61:76:22:f8: ca:1c:e4:0d:9d:be:73:5d:ea:31:aa:be:ae:2f:54:15:fa:fd: f8:62:7b:8b:b5:5b:85:bc:1c:6a:38:61:0c:f4:10:78:22:2f: 78:d9:24:d1:92:94:3c:18:6a:33:91:dd:9e:15:66:37:75:75: 18:9c:35:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschYTCmuDGl4dMJBndBwxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNTViNDI1ZmVjZjc5ZjA5ZTA3NGIyZDZmM2E2MTZjN2I2 ODU3MDAwHhcNMjUxMjE0MTEwMTEwWhcNMjUxMjE1MTEwMTEwWjAzMTEwLwYDVQQD Eyg5M2M1M2VhZWZkOTFiOTJhMGRlYjg4NDlmMzljNTI2NWE2OWE1NmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKL7YXHsT6yFFYWaqKLIIW/wGtg0 IR5TOG6jCHrKbeNwumrn0S/4kHpgz7w9/J5VqIj/cUkuAQgOTNoffI6EB42ebsO7 zYXMFarWek4VzxlfvQGShWxRluOks+yhknhr6kdQHwms5RTAz3y62c9ojEFvoYCD od1N+68AL+bengDR4dYjxef0hShTaL1ynZBUBBuB2ai/FyN7M8NwGagK6fslrDHx hq1OADBzF8D0pAEhKSC8cQ0Zb4fZNfXY3nyARONzJw32R1136q7z4sT6G3L1a9kr VUTPmxybZ+3YKrGf5E+X6L0GRIPTqL1OVglrkeEPalxh+TK6Ydsq4AkutwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPFPq79kbkqDeuISfOcUmWmmlbGMB8GA1UdIwQY MBaAFM1VtCX+z3nwngdLLW86YWx7aFcAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZXMEpmN1BlZkNlQjBzdGJ6cGhiSHRvVndBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hMDU2MTctZTgwOC00YWVkLWJlMjYt Yjg3MjM1YjRkNzYzLzEvelZXMEpmN1BlZkNlQjBzdGJ6cGhiSHRvVndBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hMDU2MTctZTgwOC00YWVkLWJlMjYtYjg3MjM1YjRkNzYz LzEvelZXMEpmN1BlZkNlQjBzdGJ6cGhiSHRvVndBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3n4bmvW UbcjwgF9ZypAskxuTu/75MNGZcvXayVIt/LK+MvDbzjHIL0KYE72Nm3wHg7zLaRn eM4iL8wQMWDWYqEBwUkXglpRzccNV4r2GFGLT+2drmMEwVYJqnwZnz4lQMaKH7yD prDg/nO7Gyuf/kdU6g92Gd7jwxgnXwHBF9kHvl31mmh/F8/0Dq3Y8Gy5ayRviJXQ LlPQmbNvKGsHr1ksvEbO1YtPSQQHuK1VqAqwsnF2PzrtH14HovdG2Sd03HthdiL4 yhzkDZ2+c13qMaq+ri9UFfr9+GJ7i7VbhbwcajhhDPQQeCIveNkk0ZKUPBhqM5Hd nhVmN3V1GJw1wA== -----END CERTIFICATE-----Generated at Sun Dec 14 13:48:19 2025 by rpki-client