This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json) Hash identifier: aroi74/CdtXfLBLEdYKkl+dwifMIhxGzTDEfMjfA2tE= Subject key identifier: 31:EC:B2:61:D0:25:C2:EA:F7:E0:BC:35:30:DB:6D:B1:A8:A0:5E:FC Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b Certificate serial: 019B172866A9C3F5D585BC8F0959F6F265C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft Manifest number: 0710 Signing time: Sat 13 Dec 2025 10:01:22 +0000 Manifest this update: Sat 13 Dec 2025 10:01:22 +0000 Manifest next update: Sun 14 Dec 2025 10:01:22 +0000 Files and hashes: 1: ZhxwMRHWErqoZg_Itz4BRM1Zy1g.roa (hash: pA1I1yaFQSWAdVvtp/IDWYB864SqtxE1eJEw16TKrNs=) 2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: hbRWtelOn5vt4uvyNfvpyHlbraqp5psuUd054f35sFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 10:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:28:66:a9:c3:f5:d5:85:bc:8f:09:59:f6:f2:65:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b Validity Not Before: Dec 13 10:01:22 2025 GMT Not After : Dec 14 10:01:22 2025 GMT Subject: CN=31ecb261d025c2eaf7e0bc3530db6db1a8a05efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:bd:ea:47:8e:93:64:01:af:f9:09:d4:61: fc:7d:00:60:a0:9b:73:e2:7b:75:2f:30:37:46:d2: cf:3c:62:7f:f3:b2:a4:55:e5:19:2e:40:d4:f5:98: 6a:35:70:1a:3c:e0:5a:13:d3:a3:63:ea:e6:f3:69: 8e:96:21:ac:05:f6:6d:4e:3d:33:47:4f:b9:8f:da: c6:5e:96:99:28:83:50:41:a9:da:c9:a3:a8:76:c1: c6:91:a4:da:53:8a:ad:a4:e2:e8:48:61:92:26:74: b8:8e:c5:37:b7:3f:7c:d0:6e:22:65:c8:a6:13:50: 21:0f:81:76:ec:83:da:f8:26:c6:30:6b:92:1a:19: 2a:ea:64:89:46:e5:ca:1b:03:9d:4b:63:01:a9:3b: 74:93:d0:46:b7:fb:d1:13:91:10:37:23:f1:a9:db: 6d:d7:19:28:48:4b:10:d2:93:6d:7d:72:43:c1:bb: 1d:7e:f2:e0:66:18:e5:f7:fe:57:ff:57:5c:6a:c8: a8:ee:bd:f5:90:a9:43:da:f3:3b:64:86:1e:2f:59: 01:1b:0e:cc:c2:7d:c4:7d:12:0c:42:ef:83:c1:29: d1:eb:a6:33:fc:12:be:03:19:ab:67:0a:7d:91:1f: 17:66:9b:04:bf:60:9b:07:20:aa:b4:ca:ae:64:cb: 39:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EC:B2:61:D0:25:C2:EA:F7:E0:BC:35:30:DB:6D:B1:A8:A0:5E:FC X509v3 Authority Key Identifier: keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:1c:ba:5d:2c:fe:2f:ff:21:62:b9:9a:64:10:b0:8e:9e:32: 21:c9:5a:bd:9e:e4:86:2f:1b:92:53:63:e3:77:ff:f1:c2:43: 39:cd:5a:0b:24:b8:2a:8c:6a:80:f7:ac:39:4f:1a:44:32:3f: eb:99:bd:a9:d8:1b:4d:a5:c4:f2:b3:af:69:1e:3e:44:cd:67: 4e:9f:f7:d9:3d:6f:7c:f7:5b:a5:de:37:d5:d1:1a:6d:9a:33: 0d:f1:d1:ae:e0:14:32:15:59:71:c5:2d:8e:fc:d8:c1:08:58: 65:9a:45:52:16:6c:d9:05:97:25:a1:c9:32:eb:61:c7:81:f0: c5:4a:96:7b:12:65:1c:73:bf:4d:28:49:c4:e8:4a:60:cd:83: 25:8d:07:a5:84:8c:99:31:1f:79:98:39:bb:1d:8d:cc:d3:3b: b6:9e:e2:a1:ad:bc:b1:f6:5b:ec:d8:53:fc:26:60:6f:02:1f: f9:e8:ec:f4:20:8e:44:3a:f2:bc:72:a8:69:9e:e9:33:3b:d4: 39:a4:11:7a:ff:d5:40:70:0b:f2:aa:8c:52:ba:ed:33:0e:f6: 8e:b1:f5:be:67:cb:bd:dc:9e:eb:ce:55:fe:92:ee:af:5c:9f: 97:1d:a2:32:a9:8a:b4:5d:cb:95:36:66:ad:d0:ba:f6:26:22: 49:1c:86:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXKGapw/XVhbyPCVn28mXDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NWUxN2MwOGFjZGM3N2U5NDRiMjgzOTUwOGYxZmQ3MTFl OGU5N2IwHhcNMjUxMjEzMTAwMTIyWhcNMjUxMjE0MTAwMTIyWjAzMTEwLwYDVQQD EygzMWVjYjI2MWQwMjVjMmVhZjdlMGJjMzUzMGRiNmRiMWE4YTA1ZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ696keOk2QBr/kJ1GH8fQBgoJtz 4nt1LzA3RtLPPGJ/87KkVeUZLkDU9ZhqNXAaPOBaE9OjY+rm82mOliGsBfZtTj0z R0+5j9rGXpaZKINQQanayaOodsHGkaTaU4qtpOLoSGGSJnS4jsU3tz980G4iZcim E1AhD4F27IPa+CbGMGuSGhkq6mSJRuXKGwOdS2MBqTt0k9BGt/vRE5EQNyPxqdtt 1xkoSEsQ0pNtfXJDwbsdfvLgZhjl9/5X/1dcasio7r31kKlD2vM7ZIYeL1kBGw7M wn3EfRIMQu+DwSnR66Yz/BK+AxmrZwp9kR8XZpsEv2CbByCqtMquZMs5EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHssmHQJcLq9+C8NTDbbbGooF78MB8GA1UdIwQY MBaAFGZeF8CKzcd+lEsoOVCPH9cR6Ol7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTIt MDBjZWViNmE0MTRmLzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTItMDBjZWViNmE0MTRm LzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRy6XSz+ L/8hYrmaZBCwjp4yIclavZ7khi8bklNj43f/8cJDOc1aCyS4KoxqgPesOU8aRDI/ 65m9qdgbTaXE8rOvaR4+RM1nTp/32T1vfPdbpd431dEabZozDfHRruAUMhVZccUt jvzYwQhYZZpFUhZs2QWXJaHJMuthx4HwxUqWexJlHHO/TShJxOhKYM2DJY0HpYSM mTEfeZg5ux2NzNM7tp7ioa28sfZb7NhT/CZgbwIf+ejs9CCORDryvHKoaZ7pMzvU OaQRev/VQHAL8qqMUrrtMw72jrH1vmfLvdye685V/pLur1yflx2iMqmKtF3LlTZm rdC69iYiSRyGew== -----END CERTIFICATE-----Generated at Sat Dec 13 14:55:22 2025 by rpki-client