This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft File: rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json) Hash identifier: V/O9uMRDmxoC3Hdi0JK/NJ7UHIuesaJy8QP2egMOxBs= Subject key identifier: D5:DC:D7:36:B9:2D:D0:99:B7:A3:34:C8:9C:A8:74:A8:8A:28:88:FD Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Certificate serial: 019B0DEDC3C2FDCA902B84C708BB001BDC66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft Manifest number: 1443 Signing time: Thu 11 Dec 2025 15:00:44 +0000 Manifest this update: Thu 11 Dec 2025 15:00:44 +0000 Manifest next update: Fri 12 Dec 2025 15:00:44 +0000 Files and hashes: 1: BF1bDepTrbKLANgNAxAuU4DpJj8.roa (hash: NVRWLfzQET9uM2U7kiX4t5MiOcl02yBYC6pVmP2/SUk=) 2: KjCkzUvZKYNWeQf2zi9Nm-JvqSQ.roa (hash: xUB/m7Q6H3DaFEVeyIG7vRKsPq1kqSbSavs4m7VW+5g=) 3: apwK_C2jLXYtjM1_rywqkSP6SXM.roa (hash: Brus3GnJlwWOcIOQznlG1EIg3MnsNQ8Kg3KCHt4fQYM=) 4: m7HwybdiPGFWv-KxpiFIAeDc2hA.roa (hash: qaCqJ2OehDpyBjrRuAzdPAOS4B3DtTV2bEBs1eCR7UY=) 5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: udIilmLoa3EzFZALoDPTagI+F87y5phmBKOVlLxBy2I=) 6: wserKdrEjvEaiB1L0as5xEScHOo.roa (hash: p6zeLIjpAjhjz53tHHHfbEf0nj4XjPM97zZUxXWhby4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:ed:c3:c2:fd:ca:90:2b:84:c7:08:bb:00:1b:dc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Validity Not Before: Dec 11 15:00:44 2025 GMT Not After : Dec 12 15:00:44 2025 GMT Subject: CN=d5dcd736b92dd099b7a334c89ca874a88a2888fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:24:01:d7:3e:3c:e8:e5:f4:bf:b3:59:82:5b: 79:17:f2:e9:bd:cc:5b:6d:e4:23:60:a9:52:01:bc: 58:d2:9d:08:10:8e:df:74:ec:b1:98:c5:cd:a4:40: 40:c5:d1:18:55:42:1d:94:29:ed:86:3d:4b:95:4f: 35:cf:50:a8:a6:99:8c:d6:d4:85:54:21:14:a2:c0: ab:5f:60:53:82:b9:d8:17:5f:8d:e6:75:70:f0:57: 06:80:b3:22:aa:8b:d8:b2:7f:64:12:55:78:0b:a6: 91:54:6d:f8:4a:96:18:cb:dd:88:4e:ab:ba:8c:2c: c5:4f:d7:85:d2:3c:46:8b:3c:06:0a:1c:02:0c:ef: 3d:f2:b7:cf:ac:ed:49:bd:9c:5d:dd:09:fa:d3:62: 0c:25:a3:ea:94:9f:31:28:7d:20:b9:29:5b:13:32: a0:21:18:8c:de:2c:96:40:5f:a7:be:14:16:f3:56: ad:6a:17:7f:43:6a:37:90:f6:39:70:56:f2:94:56: 21:7c:15:5a:ee:e3:56:f9:de:5d:14:43:16:7c:d5: ee:f9:5a:27:cf:2c:9e:ab:8b:49:64:c9:89:74:5b: 46:ec:34:ea:ae:d0:03:9e:f2:48:43:c4:e5:8d:21: e0:3b:17:5f:85:be:26:14:6f:01:50:04:f3:8b:e8: 01:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DC:D7:36:B9:2D:D0:99:B7:A3:34:C8:9C:A8:74:A8:8A:28:88:FD X509v3 Authority Key Identifier: keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:59:24:26:df:99:01:d3:b7:af:92:7a:20:ff:ad:d7:a9:77: d3:ad:83:73:7e:ce:6d:4e:34:d5:1a:2c:0b:cb:d2:8e:fd:28: ae:c8:31:f2:b3:1d:b2:1e:d7:22:02:2a:a5:bd:1e:11:a9:78: 7f:a7:45:cc:a5:28:a1:dd:a9:fe:18:6b:52:b0:ca:88:5b:51: a3:3c:71:05:d0:a1:85:1d:3f:d7:fb:5c:1a:75:1b:07:14:48: 56:3c:23:36:31:49:39:71:d2:b0:36:32:5f:6d:38:bb:aa:1d: ff:e2:5d:21:14:8d:72:ae:a6:2c:c5:58:af:b8:84:e2:43:e7: 61:eb:8b:7b:f2:b1:8a:83:e8:33:cd:46:de:93:60:52:42:63: 1c:c7:59:09:a2:83:cb:cd:ad:88:03:e1:64:99:a7:c6:04:70: cc:5a:14:cd:d4:3e:89:07:61:9e:96:3b:06:b9:5d:a7:3f:b7: 1f:48:91:be:07:c2:16:51:e6:1d:66:1b:eb:ca:4f:ba:e3:51: a7:8f:3c:37:7a:f9:c6:1c:33:bb:61:cd:12:b2:0e:6e:8d:fa: 42:3b:d2:3e:b1:3b:31:02:9b:17:bf:1b:ca:a1:37:e0:fa:66: 0c:7e:8a:bb:d8:76:67:75:3e:72:0a:17:49:22:e9:5e:51:7b: ce:cf:a8:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsN7cPC/cqQK4THCLsAG9xmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj NWZlYzIwHhcNMjUxMjExMTUwMDQ0WhcNMjUxMjEyMTUwMDQ0WjAzMTEwLwYDVQQD EyhkNWRjZDczNmI5MmRkMDk5YjdhMzM0Yzg5Y2E4NzRhODhhMjg4OGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiQB1z486OX0v7NZglt5F/Lpvcxb beQjYKlSAbxY0p0IEI7fdOyxmMXNpEBAxdEYVUIdlCnthj1LlU81z1CoppmM1tSF VCEUosCrX2BTgrnYF1+N5nVw8FcGgLMiqovYsn9kElV4C6aRVG34SpYYy92ITqu6 jCzFT9eF0jxGizwGChwCDO898rfPrO1JvZxd3Qn602IMJaPqlJ8xKH0guSlbEzKg IRiM3iyWQF+nvhQW81atahd/Q2o3kPY5cFbylFYhfBVa7uNW+d5dFEMWfNXu+Von zyyeq4tJZMmJdFtG7DTqrtADnvJIQ8TljSHgOxdfhb4mFG8BUATzi+gBpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXc1za5LdCZt6M0yJyodKiKKIj9MB8GA1UdIwQY MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt YTNhMTNlM2E3ZDgwLzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVkkJt+Z AdO3r5J6IP+t16l3062Dc37ObU401RosC8vSjv0orsgx8rMdsh7XIgIqpb0eEal4 f6dFzKUood2p/hhrUrDKiFtRozxxBdChhR0/1/tcGnUbBxRIVjwjNjFJOXHSsDYy X204u6od/+JdIRSNcq6mLMVYr7iE4kPnYeuLe/KxioPoM81G3pNgUkJjHMdZCaKD y82tiAPhZJmnxgRwzFoUzdQ+iQdhnpY7Brldpz+3H0iRvgfCFlHmHWYb68pPuuNR p488N3r5xhwzu2HNErIObo36QjvSPrE7MQKbF78byqE34PpmDH6Ku9h2Z3U+cgoX SSLpXlF7zs+ojg== -----END CERTIFICATE-----Generated at Thu Dec 11 19:19:47 2025 by rpki-client