This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json) Hash identifier: gufKURWNhMI7gDVzFdIIqw6Y3S9GdWCtYir6P0uj2sA= Subject key identifier: C7:71:46:6D:39:59:09:96:7F:83:F4:86:7C:2E:5F:B3:E9:F5:30:AF Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a Certificate serial: 019B48F021D688DEEF15486D97D19D846E65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft Manifest number: 144D Signing time: Tue 23 Dec 2025 02:00:55 +0000 Manifest this update: Tue 23 Dec 2025 02:00:55 +0000 Manifest next update: Wed 24 Dec 2025 02:00:55 +0000 Files and hashes: 1: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: nloDiGXfCwaihr4uwmwy8sFgjYdjPGS4StklDV7puvQ=) 2: cD0i6eXUEb95MRC9zt2P-QsR-zI.roa (hash: bwRfJD4nIDDz+Ohj/YcPEu2i5IBHAbvcA7uyG/Ew8EE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:21:d6:88:de:ef:15:48:6d:97:d1:9d:84:6e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a Validity Not Before: Dec 23 02:00:55 2025 GMT Not After : Dec 24 02:00:55 2025 GMT Subject: CN=c771466d395909967f83f4867c2e5fb3e9f530af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:7f:42:51:cb:df:73:a1:60:96:92:de:1f: 7f:94:5c:e4:62:09:31:74:9c:f7:12:6f:9c:94:d0: b3:5e:47:3e:e2:e5:8c:d8:8a:0c:fe:b7:e0:28:e0: b2:76:8f:a5:4c:7e:54:78:bd:31:46:dc:f9:49:32: bf:14:0a:87:07:7c:4d:e8:d6:e6:f2:05:9b:c5:48: 18:f8:1c:65:42:cd:19:9b:5d:a3:50:e7:93:a6:f6: f3:94:b0:d6:a1:c6:22:8f:83:ed:6a:07:32:3e:c5: 8b:4c:81:78:7c:64:1e:28:e6:38:1d:d5:03:4d:3b: ba:ca:06:6a:bf:43:9a:ea:87:fc:e6:ec:96:e9:1e: 82:47:c0:1a:84:73:10:47:06:7d:1f:31:66:6a:06: 3a:da:86:15:49:1a:63:8a:aa:98:3a:f0:db:32:67: 7f:69:67:a3:32:bb:21:05:12:2a:0c:4d:7b:78:38: 39:96:bb:01:b7:57:2a:f5:00:10:b1:9f:69:bd:96: 9f:66:5a:19:69:7f:0c:40:d3:88:de:54:d2:ae:29: fb:c6:59:2a:ab:0d:88:58:db:dd:4c:30:1f:5b:5b: 05:24:a4:25:43:2d:38:4a:4c:c6:31:e6:88:8b:89: 23:e7:f4:36:78:ee:9f:6a:8c:e0:fc:92:fc:65:2a: 8a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:71:46:6D:39:59:09:96:7F:83:F4:86:7C:2E:5F:B3:E9:F5:30:AF X509v3 Authority Key Identifier: keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b6:25:a4:20:6c:ef:c9:7e:6d:cc:b6:02:97:5b:0d:73:69: a3:6d:90:68:74:b8:ee:76:5a:9e:cc:c8:56:81:66:48:69:a5: b6:f7:93:53:ee:c6:c0:36:d0:5b:4e:6a:eb:ef:d0:61:83:38: fc:ac:1d:f9:01:06:02:66:f7:c6:75:27:51:63:00:3f:df:9c: bc:1f:58:88:6e:c4:f3:ac:2b:e6:8b:85:fe:f8:e7:b8:f1:98: 70:f8:2d:1e:ac:cc:3a:eb:9f:76:74:aa:3c:47:3c:2a:fa:d2: da:3b:db:58:df:41:a6:f3:48:06:99:4f:e9:98:b0:13:93:e6: 8f:c6:09:e0:62:eb:b8:0f:9e:37:0b:ca:6e:9c:da:7f:dd:c2: f5:19:45:cb:24:8d:15:01:37:65:1f:62:74:ba:01:3b:b6:35: f1:55:24:e5:b0:22:7e:35:7d:7b:34:41:c9:d3:b6:33:56:8b: c1:89:26:61:b0:6f:bb:df:08:b4:f8:d2:c9:af:2f:6e:ee:9a: cb:29:fb:f3:7b:d4:33:07:5c:04:20:b8:30:60:34:3d:50:3e: df:08:fe:ee:00:d4:82:e7:71:66:ac:99:9d:ee:dc:46:ec:70: 6f:a0:8c:19:53:bd:b4:e5:e4:64:62:da:68:16:ae:ce:db:98: 25:c4:db:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8CHWiN7vFUhtl9GdhG5lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZDY2MzI5NTc2YzljMDFiM2NkODI4NWY0YjU0YjAxNzBk OGMzOWEwHhcNMjUxMjIzMDIwMDU1WhcNMjUxMjI0MDIwMDU1WjAzMTEwLwYDVQQD EyhjNzcxNDY2ZDM5NTkwOTk2N2Y4M2Y0ODY3YzJlNWZiM2U5ZjUzMGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp5/QlHL33OhYJaS3h9/lFzkYgkx dJz3Em+clNCzXkc+4uWM2IoM/rfgKOCydo+lTH5UeL0xRtz5STK/FAqHB3xN6Nbm 8gWbxUgY+BxlQs0Zm12jUOeTpvbzlLDWocYij4PtagcyPsWLTIF4fGQeKOY4HdUD TTu6ygZqv0Oa6of85uyW6R6CR8AahHMQRwZ9HzFmagY62oYVSRpjiqqYOvDbMmd/ aWejMrshBRIqDE17eDg5lrsBt1cq9QAQsZ9pvZafZloZaX8MQNOI3lTSrin7xlkq qw2IWNvdTDAfW1sFJKQlQy04SkzGMeaIi4kj5/Q2eO6faozg/JL8ZSqKGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdxRm05WQmWf4P0hnwuX7Pp9TCvMB8GA1UdIwQY MBaAFGXWYylXbJwBs82ChfS1SwFw2MOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgt MWU2NjUwNTEzMWNhLzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgtMWU2NjUwNTEzMWNh LzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7YlpCBs 78l+bcy2ApdbDXNpo22QaHS47nZanszIVoFmSGmltveTU+7GwDbQW05q6+/QYYM4 /Kwd+QEGAmb3xnUnUWMAP9+cvB9YiG7E86wr5ouF/vjnuPGYcPgtHqzMOuufdnSq PEc8KvrS2jvbWN9BpvNIBplP6ZiwE5Pmj8YJ4GLruA+eNwvKbpzaf93C9RlFyySN FQE3ZR9idLoBO7Y18VUk5bAifjV9ezRBydO2M1aLwYkmYbBvu98ItPjSya8vbu6a yyn783vUMwdcBCC4MGA0PVA+3wj+7gDUgudxZqyZne7cRuxwb6CMGVO9tOXkZGLa aBauztuYJcTbvA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:45:44 2025 by rpki-client