This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json) Hash identifier: yqtakwdixOEOlloQR6vMeIRKINq4BtL/jhG6IXv0cds= Subject key identifier: EF:3A:CE:55:B9:1A:F9:6A:B8:DC:3F:B4:CE:9B:36:4C:28:61:4F:22 Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a Certificate serial: 019B3B6BEA67E600A660A6E2623FA0E16B7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft Manifest number: 1446 Signing time: Sat 20 Dec 2025 11:01:26 +0000 Manifest this update: Sat 20 Dec 2025 11:01:26 +0000 Manifest next update: Sun 21 Dec 2025 11:01:26 +0000 Files and hashes: 1: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: XX+bYhR0aJUCDlMbskTUDMYyFH86s9JUQfhJ8i2Y2O0=) 2: cD0i6eXUEb95MRC9zt2P-QsR-zI.roa (hash: bwRfJD4nIDDz+Ohj/YcPEu2i5IBHAbvcA7uyG/Ew8EE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:ea:67:e6:00:a6:60:a6:e2:62:3f:a0:e1:6b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a Validity Not Before: Dec 20 11:01:26 2025 GMT Not After : Dec 21 11:01:26 2025 GMT Subject: CN=ef3ace55b91af96ab8dc3fb4ce9b364c28614f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1f:f4:05:84:73:df:9d:23:eb:eb:85:30:78: 2f:ad:b9:36:51:ba:78:6c:4d:51:25:8f:8e:a4:58: 4c:26:67:89:9b:ce:5a:1b:2f:97:7f:5f:15:c1:3c: 2e:fc:cf:51:57:9e:83:d0:18:8c:b8:e9:99:b9:73: f5:7c:1c:fb:86:0c:0b:10:11:15:c8:0e:25:29:4e: e9:4a:c4:f4:04:22:3f:27:cc:68:9f:b5:f8:1d:a9: f5:6e:84:5b:88:e8:3c:13:7b:59:2c:03:3a:1a:8f: 72:3a:3c:84:8e:1f:de:c6:0a:28:33:c1:49:03:4d: 94:c2:8f:a4:d0:15:32:92:20:b2:98:8f:e3:30:3c: 9c:6c:51:a0:3b:48:30:52:fa:48:ab:ae:b5:76:df: 58:28:92:de:91:33:73:6f:c8:50:dc:e3:55:97:8d: 50:d4:d1:ab:f2:30:5c:d1:c2:02:d8:23:b3:a2:bf: 40:0e:13:16:8c:4c:9e:a0:b2:a5:14:73:87:6f:0d: d3:35:8a:b3:14:af:1f:fe:4d:05:38:2f:19:c7:77: a2:db:b1:4a:7f:e6:a3:2f:d5:2b:02:d5:57:76:d1: d2:2a:51:9c:81:e9:50:63:2a:0b:8e:03:4b:bb:77: 0e:56:ff:d7:73:23:e5:b7:29:58:69:e9:18:cc:43: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3A:CE:55:B9:1A:F9:6A:B8:DC:3F:B4:CE:9B:36:4C:28:61:4F:22 X509v3 Authority Key Identifier: keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:34:e6:25:9c:0c:9c:63:bf:bd:27:10:79:64:7c:65:09:6b: 1c:b1:58:3e:71:1b:76:9d:14:a8:8e:8e:a6:9e:76:e5:20:4a: c1:b1:59:38:74:ef:7b:b0:b1:f7:09:c3:e2:db:d3:de:a0:1a: 42:85:45:06:63:66:cc:69:56:cd:47:cd:ff:69:76:c6:4b:62: 6b:99:97:f7:68:fe:3d:77:38:c1:9f:c7:8d:42:44:ad:10:32: 7a:15:bd:f3:cf:55:8f:a2:68:33:94:c7:ad:2b:2a:a8:c1:11: 0a:49:0d:d6:78:7f:ec:d0:5d:02:47:36:f5:a5:1e:df:ba:15: 73:32:c7:ce:47:95:33:46:2c:4a:5a:56:13:b5:5f:46:a0:05: fa:f3:4d:4e:92:67:38:49:7c:68:48:f0:75:a3:c1:f6:61:c5: d3:75:b4:30:24:2e:9b:fe:22:c5:99:58:6c:9c:c4:0a:22:a2: f4:6c:a9:18:60:a2:8b:0e:ca:a2:ca:0c:ad:3d:6d:8e:35:a4: 58:a8:1e:12:a2:f9:d3:f6:de:d2:7a:8c:4a:a5:42:d4:9d:7f: 94:d4:ef:b5:bb:a7:0d:1c:da:e1:a7:28:5a:2f:36:31:c7:f9: 28:ac:4f:a5:4d:a0:39:de:59:a3:48:fc:b1:37:86:c9:ff:40: 22:db:21:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a+pn5gCmYKbiYj+g4Wt7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZDY2MzI5NTc2YzljMDFiM2NkODI4NWY0YjU0YjAxNzBk OGMzOWEwHhcNMjUxMjIwMTEwMTI2WhcNMjUxMjIxMTEwMTI2WjAzMTEwLwYDVQQD EyhlZjNhY2U1NWI5MWFmOTZhYjhkYzNmYjRjZTliMzY0YzI4NjE0ZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h/0BYRz350j6+uFMHgvrbk2Ubp4 bE1RJY+OpFhMJmeJm85aGy+Xf18VwTwu/M9RV56D0BiMuOmZuXP1fBz7hgwLEBEV yA4lKU7pSsT0BCI/J8xon7X4Han1boRbiOg8E3tZLAM6Go9yOjyEjh/exgooM8FJ A02Uwo+k0BUykiCymI/jMDycbFGgO0gwUvpIq661dt9YKJLekTNzb8hQ3ONVl41Q 1NGr8jBc0cIC2COzor9ADhMWjEyeoLKlFHOHbw3TNYqzFK8f/k0FOC8Zx3ei27FK f+ajL9UrAtVXdtHSKlGcgelQYyoLjgNLu3cOVv/XcyPltylYaekYzEOgIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO86zlW5GvlquNw/tM6bNkwoYU8iMB8GA1UdIwQY MBaAFGXWYylXbJwBs82ChfS1SwFw2MOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgt MWU2NjUwNTEzMWNhLzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgtMWU2NjUwNTEzMWNh LzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzTmJZwM nGO/vScQeWR8ZQlrHLFYPnEbdp0UqI6Opp525SBKwbFZOHTve7Cx9wnD4tvT3qAa QoVFBmNmzGlWzUfN/2l2xktia5mX92j+PXc4wZ/HjUJErRAyehW9889Vj6JoM5TH rSsqqMERCkkN1nh/7NBdAkc29aUe37oVczLHzkeVM0YsSlpWE7VfRqAF+vNNTpJn OEl8aEjwdaPB9mHF03W0MCQum/4ixZlYbJzECiKi9GypGGCiiw7KosoMrT1tjjWk WKgeEqL50/be0nqMSqVC1J1/lNTvtbunDRza4acoWi82Mcf5KKxPpU2gOd5Zo0j8 sTeGyf9AItsh4g== -----END CERTIFICATE-----Generated at Sat Dec 20 18:12:27 2025 by rpki-client