This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json) Hash identifier: kZlcVIHAJ5NV0E63ugpI8hu2kWTaI8R+QH6ws/o2CSw= Subject key identifier: 64:C3:80:F2:C1:34:5F:38:07:73:8D:AE:F6:81:CE:DD:5D:C1:6B:A0 Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af Certificate serial: 019B0E928BDF1718C6486D73FC5B5C158887 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 18:00:43 +0000 Manifest this update: Thu 11 Dec 2025 18:00:43 +0000 Manifest next update: Fri 12 Dec 2025 18:00:43 +0000 Files and hashes: 1: 2gXpcecRRCZij4ZXTFv5wgCwpoc.roa (hash: XTp2a7d9Z4/ce0bBWK6Hs10N2L5hCV8LpzUzoDu0gs0=) 2: 6UlZFNCUrDjb89rguKwpyS9qT0g.roa (hash: D/Hmsl6tGFB+vz20t6vs0y0e3hMtr6xcd6Lxa8Hmltk=) 3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: wSDOBeMUuDB6Q17TzFAZm2V26qH/J66Ju7Oye7+Aofk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:8b:df:17:18:c6:48:6d:73:fc:5b:5c:15:88:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af Validity Not Before: Dec 11 18:00:43 2025 GMT Not After : Dec 12 18:00:43 2025 GMT Subject: CN=64c380f2c1345f3807738daef681cedd5dc16ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d3:1b:ae:aa:41:92:1f:a6:7f:e0:82:22:be: 55:6c:db:13:36:6a:af:bb:ba:80:e1:e4:ad:56:bf: f8:d4:71:bf:16:92:55:17:c4:4d:82:af:95:5d:ff: 8d:6f:2d:42:9a:cf:ba:5c:d5:e6:ef:37:88:93:75: 00:7e:73:be:5c:6a:fb:97:6a:80:be:8f:3f:1d:a9: 46:db:fa:4e:ee:0f:63:38:17:6f:ed:91:80:17:b5: 26:1f:41:8b:97:f0:ea:04:69:b6:bd:86:dd:da:5a: 58:79:51:65:89:5d:d9:8d:1f:e9:1f:19:fc:d7:ec: ed:19:0c:ca:63:d1:c3:d0:59:66:00:df:4a:3d:e5: e0:33:11:43:7f:76:dd:19:ed:f5:4d:86:5f:50:6d: cd:9f:ae:63:3d:4c:fe:0e:53:56:0e:55:9e:5c:64: b3:d2:99:af:e2:05:5a:3e:3b:ea:21:d1:d8:9b:4a: 75:3f:e2:c0:7a:7e:48:03:6b:8c:e0:4b:4e:7a:c6: 45:57:ca:bc:6d:03:12:ab:c6:f3:86:83:ec:0f:69: 14:39:68:8b:3b:2a:d6:a3:7d:26:10:c3:58:a9:10: 51:bf:1c:73:94:78:f5:06:85:39:81:56:7d:c9:3e: 6d:bc:d2:dd:49:20:b0:3d:69:dd:58:c4:86:30:6c: 2f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C3:80:F2:C1:34:5F:38:07:73:8D:AE:F6:81:CE:DD:5D:C1:6B:A0 X509v3 Authority Key Identifier: keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:70:7f:63:81:72:06:2d:96:a0:5c:84:39:dd:16:a5:46:72: 0f:8b:b6:e5:1c:9c:dd:38:31:11:1d:17:94:91:5b:2f:ce:b2: b6:71:4a:7d:f0:72:5d:20:9c:6a:bc:61:87:d5:9a:04:75:6e: 4a:1d:f2:69:19:b0:d6:8c:45:51:e6:7c:e6:26:62:44:f4:5e: a8:b9:71:84:6b:07:db:20:fe:ad:36:5e:0d:d4:ac:68:67:e4: 2d:3a:67:0d:a9:ef:78:7a:8d:22:f0:08:de:b2:9d:a5:01:12: 7d:7c:ad:be:22:d5:5d:8f:da:00:2a:c4:4b:96:ae:3c:ca:5f: bd:9b:26:a6:c4:34:a3:32:e0:4a:d7:3f:4a:1d:4d:f5:10:16: 1f:99:b8:76:af:3d:3f:11:be:28:ab:00:f3:8b:47:31:04:95: 0c:28:17:69:d6:06:84:e6:0a:39:0c:b1:35:8a:35:bb:84:90: 08:69:45:11:9e:48:f0:b2:9c:e0:c9:83:54:80:61:a4:e9:7a: 82:88:e8:32:57:2a:38:6f:07:64:b4:3f:ef:23:79:34:91:63: 6d:b1:39:fb:32:d7:9e:b2:17:f4:76:84:3c:35:0f:17:96:a7: 00:cd:6f:db:4b:03:c6:ee:3d:22:8e:ce:b7:e3:c1:13:23:61: f6:20:13:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkovfFxjGSG1z/FtcFYiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMzllNmJlNDBkODAxMjg4OTZjY2QxMzFmNjVhNTVhZDk4 YTQwYWYwHhcNMjUxMjExMTgwMDQzWhcNMjUxMjEyMTgwMDQzWjAzMTEwLwYDVQQD Eyg2NGMzODBmMmMxMzQ1ZjM4MDc3MzhkYWVmNjgxY2VkZDVkYzE2YmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdMbrqpBkh+mf+CCIr5VbNsTNmqv u7qA4eStVr/41HG/FpJVF8RNgq+VXf+Nby1Cms+6XNXm7zeIk3UAfnO+XGr7l2qA vo8/HalG2/pO7g9jOBdv7ZGAF7UmH0GLl/DqBGm2vYbd2lpYeVFliV3ZjR/pHxn8 1+ztGQzKY9HD0FlmAN9KPeXgMxFDf3bdGe31TYZfUG3Nn65jPUz+DlNWDlWeXGSz 0pmv4gVaPjvqIdHYm0p1P+LAen5IA2uM4EtOesZFV8q8bQMSq8bzhoPsD2kUOWiL OyrWo30mEMNYqRBRvxxzlHj1BoU5gVZ9yT5tvNLdSSCwPWndWMSGMGwv8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTDgPLBNF84B3ONrvaBzt1dwWugMB8GA1UdIwQY MBaAFMw55r5A2AEoiWzNEx9lpVrZikCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYt NjA5ZDhmNTY1ZmZjLzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYtNjA5ZDhmNTY1ZmZj LzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXB/Y4Fy Bi2WoFyEOd0WpUZyD4u25Ryc3TgxER0XlJFbL86ytnFKffByXSCcarxhh9WaBHVu Sh3yaRmw1oxFUeZ85iZiRPReqLlxhGsH2yD+rTZeDdSsaGfkLTpnDanveHqNIvAI 3rKdpQESfXytviLVXY/aACrES5auPMpfvZsmpsQ0ozLgStc/Sh1N9RAWH5m4dq89 PxG+KKsA84tHMQSVDCgXadYGhOYKOQyxNYo1u4SQCGlFEZ5I8LKc4MmDVIBhpOl6 gojoMlcqOG8HZLQ/7yN5NJFjbbE5+zLXnrIX9HaEPDUPF5anAM1v20sDxu49Io7O t+PBEyNh9iATCw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:00 2025 by rpki-client