This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json) Hash identifier: gAuj2kolOi7AKTMUJ52QJRMgoDgwRUCinPQccgnIAHY= Subject key identifier: DA:3C:70:B5:E8:12:14:47:74:BD:37:B7:17:D8:4A:FE:C6:A0:26:C7 Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74 Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874 Certificate serial: 019B18A875D5063E488E55D8524434D29C03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft Manifest number: 122B Signing time: Sat 13 Dec 2025 17:00:51 +0000 Manifest this update: Sat 13 Dec 2025 17:00:51 +0000 Manifest next update: Sun 14 Dec 2025 17:00:51 +0000 Files and hashes: 1: sQGDlHpoLDO9MGkxSeBWC8uppqs.roa (hash: 6KgDIkevhFyVfhdKRkIXWLxH6LsOjOgpwNrZ+fmFguE=) 2: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: i14zOvZzDcyqgCjDtsBq4MoQJJfhtVZT5cfB4z4Evtk=) 3: ziOY-6fncsLuQQzVu0Sf6c2Hbmk.roa (hash: AVAQzd3M8IxybV2CUgMzwoAYpnE92DpPd7dWpe04sBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:75:d5:06:3e:48:8e:55:d8:52:44:34:d2:9c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874 Validity Not Before: Dec 13 17:00:51 2025 GMT Not After : Dec 14 17:00:51 2025 GMT Subject: CN=da3c70b5e812144774bd37b717d84afec6a026c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c9:ac:d9:30:c0:a8:a5:34:13:3f:26:6a:cd: 91:3c:d3:fe:93:bb:91:b1:6c:30:11:e9:f3:b3:a6: 75:9c:a4:96:c9:d2:af:9b:85:d6:d1:6d:2b:b6:90: f8:70:59:51:7c:25:06:a4:37:53:10:15:ee:1c:53: 17:81:75:e5:c8:a1:1b:d7:f3:69:7c:c7:46:95:9b: 94:c3:04:fd:b0:c7:7e:a1:f1:a5:49:26:6b:50:ca: 6f:18:a2:f7:7b:5d:55:f0:b0:09:26:7c:8a:01:e6: 72:05:db:ad:80:b8:31:b4:c3:b1:47:9e:32:82:57: 62:ce:f2:ee:00:42:b0:91:0f:5b:f2:36:55:2a:ef: dc:ac:ef:eb:9e:a6:82:47:a2:3d:6e:0a:b6:07:32: 53:8c:5c:95:b7:ac:c1:b9:2c:81:f0:bb:49:06:c6: 6a:bb:22:47:6d:30:a5:b3:a4:00:34:4a:c4:f5:e0: f6:ea:12:09:37:3a:7b:24:b1:85:b2:a9:83:77:d3: bf:3c:79:96:69:9c:53:a9:f8:f7:f3:c8:8a:0c:7c: ff:86:d6:ea:ff:66:2c:b7:77:28:c0:f3:c0:8a:19: 6b:5a:4b:03:57:0e:ab:bd:53:ae:c9:4b:a3:eb:ca: 12:96:b9:86:5e:aa:73:cd:7a:42:70:7b:8d:85:3d: 49:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3C:70:B5:E8:12:14:47:74:BD:37:B7:17:D8:4A:FE:C6:A0:26:C7 X509v3 Authority Key Identifier: keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:37:bc:70:d2:1b:1d:b2:2f:35:ac:78:f0:ad:ed:b0:3f:4e: fb:28:e5:4f:8f:fe:f6:4b:39:81:c0:50:b2:e7:22:ee:ca:c1: 86:60:b1:63:27:ea:24:27:7a:5b:a1:e2:35:5a:85:4d:f5:3b: 6c:af:37:73:ec:86:05:f5:9f:52:78:9e:ea:6d:1e:63:9d:87: aa:e7:dc:d0:f6:f0:94:a6:68:26:fe:66:1c:fd:ea:a7:41:8c: da:67:30:cc:24:05:2b:5a:6d:dc:e8:bb:96:c9:ff:41:b8:f7: 3b:3c:7e:e9:13:13:67:50:a4:05:4f:0d:20:64:9c:22:a9:04: f1:4a:12:8a:c4:4c:bc:d4:32:68:b8:65:b7:b5:42:41:32:09: 69:77:8d:43:1e:41:59:67:6a:93:a7:39:d5:8a:23:a2:38:36: 52:0a:a9:86:ff:7a:03:5a:de:3a:55:86:eb:b4:6b:50:f1:88: ba:8b:51:00:90:ac:96:c0:b0:a5:17:e7:2d:0d:f1:d1:db:57: bc:46:5e:81:d3:e1:38:75:18:2b:54:f3:c2:7d:bc:34:d9:14: 7b:7c:37:46:ff:2b:06:aa:5e:51:74:fb:25:92:0e:fd:aa:e7: 23:07:a4:e9:f0:c9:5d:d4:b9:1f:bb:e7:75:11:d8:06:ce:4f: 63:92:13:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqHXVBj5IjlXYUkQ00pwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWE1MzU5MzVhNGJjNzg2YzFkZDc1YjdmMTA4N2YxM2Yz ZTA4NzQwHhcNMjUxMjEzMTcwMDUxWhcNMjUxMjE0MTcwMDUxWjAzMTEwLwYDVQQD EyhkYTNjNzBiNWU4MTIxNDQ3NzRiZDM3YjcxN2Q4NGFmZWM2YTAyNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcms2TDAqKU0Ez8mas2RPNP+k7uR sWwwEenzs6Z1nKSWydKvm4XW0W0rtpD4cFlRfCUGpDdTEBXuHFMXgXXlyKEb1/Np fMdGlZuUwwT9sMd+ofGlSSZrUMpvGKL3e11V8LAJJnyKAeZyBdutgLgxtMOxR54y gldizvLuAEKwkQ9b8jZVKu/crO/rnqaCR6I9bgq2BzJTjFyVt6zBuSyB8LtJBsZq uyJHbTCls6QANErE9eD26hIJNzp7JLGFsqmDd9O/PHmWaZxTqfj388iKDHz/htbq /2Yst3cowPPAihlrWksDVw6rvVOuyUuj68oSlrmGXqpzzXpCcHuNhT1JDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNo8cLXoEhRHdL03txfYSv7GoCbHMB8GA1UdIwQY MBaAFM1aU1k1pLx4bB3XW38Qh/E/Pgh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iOWFhZDUtY2ZlMi00NDgwLWFjNWUt MDVjMTNmODkwYjljLzEvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iOWFhZDUtY2ZlMi00NDgwLWFjNWUtMDVjMTNmODkwYjlj LzEvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTe8cNIb HbIvNax48K3tsD9O+yjlT4/+9ks5gcBQsuci7srBhmCxYyfqJCd6W6HiNVqFTfU7 bK83c+yGBfWfUnie6m0eY52Hqufc0PbwlKZoJv5mHP3qp0GM2mcwzCQFK1pt3Oi7 lsn/Qbj3Ozx+6RMTZ1CkBU8NIGScIqkE8UoSisRMvNQyaLhlt7VCQTIJaXeNQx5B WWdqk6c51Yojojg2Ugqphv96A1reOlWG67RrUPGIuotRAJCslsCwpRfnLQ3x0dtX vEZegdPhOHUYK1Tzwn28NNkUe3w3Rv8rBqpeUXT7JZIO/arnIwek6fDJXdS5H7vn dRHYBs5PY5ITJg== -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:49 2025 by rpki-client