This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft File: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft (raw, json) Hash identifier: XX0XYvFVDOn0xBS/k7fLPVtumYkuRD+ZqAxiK0AbwwU= Subject key identifier: 0A:E1:B0:DA:41:5B:A6:D5:23:D0:3B:B2:36:EF:F2:84:6E:4F:62:44 Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40 Certificate issuer: /CN=719e59b5017bfe634411949eff2d70ba0a07c540 Certificate serial: 019AE6A90DDCEB4A5AF58E4CA0BC99609E53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft Manifest number: 0D0E Signing time: Thu 04 Dec 2025 00:00:30 +0000 Manifest this update: Thu 04 Dec 2025 00:00:30 +0000 Manifest next update: Fri 05 Dec 2025 00:00:30 +0000 Files and hashes: 1: NznO4CxJJ6L0xLB6PTLKpB7weFM.roa (hash: cSE4XxBXPFFORCEl811D1OzY3o/1e0FebNC7EW5YkMk=) 2: cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl (hash: fAYorUxKDSmz1WCOmzRz+Dijb08n6WsiPJ564MfMTY0=) 3: hVV7bHBD-mLe_PCozGrmTHxovsM.roa (hash: YI06CwugD4QjZYDajA4+sFtJ0/JL/QvZ5A+ius2+OkM=) 4: i_ZSP4msxm1SkHkJA_HtKWJPNjY.roa (hash: XTx/K5oWGL66kYYSkjQ0rxGrZ4iJ40KRc43mQ3O3oXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:a9:0d:dc:eb:4a:5a:f5:8e:4c:a0:bc:99:60:9e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540 Validity Not Before: Dec 4 00:00:30 2025 GMT Not After : Dec 5 00:00:30 2025 GMT Subject: CN=0ae1b0da415ba6d523d03bb236eff2846e4f6244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:41:c4:4c:23:dc:a0:a1:49:71:72:ae:4a:eb: 7b:82:bf:71:f6:50:72:87:cb:e2:ee:cd:e5:f1:7c: a2:b4:6c:6e:d6:8c:b9:f5:f9:c2:8a:fd:ec:ff:a9: 93:f5:c7:85:18:bf:31:fc:54:ce:7b:3b:d9:dd:3f: 5b:12:90:79:f2:24:a0:b0:b0:be:b1:19:c1:de:6c: 15:ad:dd:c8:d4:76:06:94:e3:a0:aa:75:60:5c:69: 83:96:b8:fb:a4:d2:be:6d:fe:75:10:a7:a7:2d:f0: d7:43:f8:eb:a5:22:a7:76:83:54:09:14:54:3b:3d: c8:12:56:fd:0e:73:72:ec:e3:5a:28:b5:f4:2f:c4: a0:c2:a1:ed:ab:f0:76:c1:ee:e6:20:3b:43:4b:c9: ba:db:03:08:2a:17:85:c2:6e:95:b3:b5:d4:5c:21: 3c:de:de:56:71:3e:98:65:5a:43:c6:91:c2:bb:18: f8:7d:45:86:5a:f4:5b:0e:b4:0e:8b:f7:f6:82:88: 07:35:0f:c3:68:a3:0f:27:8b:71:6b:ca:bf:37:8a: c8:fd:e5:b1:46:ae:b8:7b:41:0b:a4:f9:9c:f4:df: 1e:7f:04:72:fb:16:ac:32:5b:57:95:1f:fa:93:df: 97:d7:d5:08:b6:ce:71:c1:df:30:1c:73:bf:0e:20: 6b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E1:B0:DA:41:5B:A6:D5:23:D0:3B:B2:36:EF:F2:84:6E:4F:62:44 X509v3 Authority Key Identifier: keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e7:f2:f3:8e:ac:7e:ed:d4:6d:c0:4c:96:fd:24:27:00:c7: f9:6f:6b:79:9a:3c:28:3f:47:72:ea:b4:71:41:29:55:68:a2: 0f:1f:70:dd:ef:4f:41:b1:73:7f:a9:4f:44:f8:d9:e1:37:f4: 45:b2:20:71:df:71:ab:58:72:bc:f5:d8:73:a5:7d:34:50:52: 92:09:91:f7:2e:d1:25:bc:54:72:a6:ec:22:4b:48:7e:04:63: 96:fb:ad:e6:b9:26:95:d9:c7:a1:13:28:58:72:33:70:a1:79: 59:6f:6f:d9:71:15:54:bc:f2:57:2a:63:89:e1:c7:ff:00:de: 3d:44:06:98:c9:7a:42:68:f2:ee:46:d7:aa:b7:1b:05:39:45: 33:b9:0a:3a:97:f1:d0:6f:aa:c0:3f:4f:dc:e2:2a:01:53:26: 39:68:d0:84:ac:74:6a:8c:a8:ad:c2:7d:41:e2:d5:45:4a:34: 7a:a7:3e:8b:39:15:df:84:5b:c3:77:b6:3c:be:f1:74:6b:32: ae:c4:c2:34:97:8b:cc:ba:90:37:48:e2:a0:04:ce:e3:c7:7c: e1:04:1b:7b:f6:95:1e:2e:d2:d6:14:f9:47:be:eb:bd:d2:7a: 81:c5:6d:4c:ba:3c:12:26:a6:2c:74:f3:d4:c7:8e:59:49:9d: e2:c0:0e:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrmqQ3c60pa9Y5MoLyZYJ5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOWU1OWI1MDE3YmZlNjM0NDExOTQ5ZWZmMmQ3MGJhMGEw N2M1NDAwHhcNMjUxMjA0MDAwMDMwWhcNMjUxMjA1MDAwMDMwWjAzMTEwLwYDVQQD EygwYWUxYjBkYTQxNWJhNmQ1MjNkMDNiYjIzNmVmZjI4NDZlNGY2MjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EHETCPcoKFJcXKuSut7gr9x9lBy h8vi7s3l8XyitGxu1oy59fnCiv3s/6mT9ceFGL8x/FTOezvZ3T9bEpB58iSgsLC+ sRnB3mwVrd3I1HYGlOOgqnVgXGmDlrj7pNK+bf51EKenLfDXQ/jrpSKndoNUCRRU Oz3IElb9DnNy7ONaKLX0L8SgwqHtq/B2we7mIDtDS8m62wMIKheFwm6Vs7XUXCE8 3t5WcT6YZVpDxpHCuxj4fUWGWvRbDrQOi/f2gogHNQ/DaKMPJ4txa8q/N4rI/eWx Rq64e0ELpPmc9N8efwRy+xasMltXlR/6k9+X19UIts5xwd8wHHO/DiBrjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArhsNpBW6bVI9A7sjbv8oRuT2JEMB8GA1UdIwQY MBaAFHGeWbUBe/5jRBGUnv8tcLoKB8VAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEt ZjQ2ZjlkNjc0ZjZjLzEvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEtZjQ2ZjlkNjc0ZjZj LzEvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYufy846s fu3UbcBMlv0kJwDH+W9reZo8KD9Hcuq0cUEpVWiiDx9w3e9PQbFzf6lPRPjZ4Tf0 RbIgcd9xq1hyvPXYc6V9NFBSkgmR9y7RJbxUcqbsIktIfgRjlvut5rkmldnHoRMo WHIzcKF5WW9v2XEVVLzyVypjieHH/wDePUQGmMl6Qmjy7kbXqrcbBTlFM7kKOpfx 0G+qwD9P3OIqAVMmOWjQhKx0aoyorcJ9QeLVRUo0eqc+izkV34Rbw3e2PL7xdGsy rsTCNJeLzLqQN0jioATO48d84QQbe/aVHi7S1hT5R77rvdJ6gcVtTLo8EiamLHTz 1MeOWUmd4sAO0A== -----END CERTIFICATE-----Generated at Thu Dec 4 08:29:54 2025 by rpki-client