This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft File: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft (raw, json) Hash identifier: YzkoEsOc3rWHRauTWuP9+uDGJe5YgO9ILxJKNzdj60s= Subject key identifier: 07:21:12:7A:B2:7A:61:00:F2:1B:29:EC:51:6E:36:29:EF:8B:11:85 Authority key identifier: 66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04 Certificate issuer: /CN=6694f5b0fab5fed2df9535e2a9c029f187d55404 Certificate serial: 019AF464EC07AA624C1E2AC84531759CB20F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft Manifest number: 0882 Signing time: Sat 06 Dec 2025 16:00:45 +0000 Manifest this update: Sat 06 Dec 2025 16:00:45 +0000 Manifest next update: Sun 07 Dec 2025 16:00:45 +0000 Files and hashes: 1: 1s99Tw3afz1xnVyZeR8lNzEPEk8.roa (hash: b6Tn8In4pLbU3Aif4BcpGyzCXnOKH3eVjkyvFPcCx0s=) 2: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl (hash: BhgTEtCG6TCFr2TaRaAGWgS7zqtIeL8kJQU/f4a1X/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:ec:07:aa:62:4c:1e:2a:c8:45:31:75:9c:b2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6694f5b0fab5fed2df9535e2a9c029f187d55404 Validity Not Before: Dec 6 16:00:45 2025 GMT Not After : Dec 7 16:00:45 2025 GMT Subject: CN=0721127ab27a6100f21b29ec516e3629ef8b1185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:8c:ad:ed:ce:89:aa:bd:13:12:f9:8b:08: 38:28:bf:52:85:98:f8:94:6e:54:cb:33:73:07:5f: d5:62:b7:fd:78:91:76:9a:4d:80:dc:3d:7e:bc:2e: 1c:9b:16:b8:04:7b:fa:4a:b6:43:fb:9f:3b:14:10: a8:bc:03:58:6e:45:ca:d5:d3:08:c5:eb:5f:44:29: b0:29:27:90:18:f5:23:2d:3f:4f:00:15:49:4b:7f: de:14:0a:0a:e1:97:fc:0e:45:49:8e:e8:b1:33:88: b9:4c:13:8d:2d:25:4f:e6:84:28:08:0f:30:f5:0e: 03:7b:6d:e1:2a:7d:3a:76:20:55:dd:93:6f:03:5d: d4:de:68:a1:a4:ee:82:67:d3:a4:a8:54:c2:77:f6: 72:c2:24:d3:20:54:da:50:59:4f:99:12:2a:7b:16: aa:a7:54:e3:3d:bb:f2:11:7e:cc:68:6a:cc:ba:ea: 6f:4b:a3:f3:a8:4d:c7:e9:49:fa:31:b6:7a:c8:ca: d9:38:49:5b:83:b8:1c:33:4a:bf:f1:33:4a:d2:9a: 8d:2d:c4:06:eb:48:48:75:d6:4b:c6:d6:bb:da:e2: 17:20:a7:b0:23:54:24:1c:dd:2f:87:4a:0f:80:97: f4:66:1b:c4:26:37:16:2e:6d:a3:40:0c:9a:36:0d: ba:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:21:12:7A:B2:7A:61:00:F2:1B:29:EC:51:6E:36:29:EF:8B:11:85 X509v3 Authority Key Identifier: keyid:66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:54:54:c2:f6:42:8b:5a:b2:ee:d5:18:69:51:40:ff:83:19: 9e:28:e9:c6:10:f1:48:a0:c6:7b:a3:5a:22:4a:3b:3b:46:84: 3e:0e:db:ac:28:46:c8:1f:9c:d4:dd:f6:4e:a2:25:0d:67:1a: 85:79:d0:77:70:bb:f0:b2:e1:5e:aa:f6:b7:c2:b5:e3:9f:41: 83:f5:99:6b:7a:e8:36:7f:38:dc:fb:c2:23:51:75:37:55:82: 82:6b:39:9a:04:0b:15:b0:1f:0f:70:ec:21:c1:20:77:0c:ec: 76:db:bc:bc:d7:a5:b4:3d:a0:e8:11:28:56:7b:dd:da:71:21: d5:45:f9:d0:c5:dd:87:d6:aa:bc:b3:1a:b2:2a:3b:86:51:74: 35:63:05:cf:5c:11:59:9d:7f:75:f6:3c:ae:73:bd:44:70:6f: af:8c:36:02:20:e8:60:b9:d5:7f:f2:bb:2b:3f:6c:f4:0a:0d: 1e:0f:24:2d:68:d2:7d:17:17:e7:47:19:c2:6b:00:5b:6e:ce: 62:4b:b4:ae:69:b3:6d:ec:7d:f0:7b:a9:e4:78:77:eb:46:c5: 9f:95:36:89:39:a9:2e:58:57:48:ec:3e:90:64:1e:5e:5a:1d: 94:8f:fd:03:34:70:6d:d8:5b:24:35:9d:ca:b7:75:ca:b7:c6: 45:13:d0:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZOwHqmJMHirIRTF1nLIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTRmNWIwZmFiNWZlZDJkZjk1MzVlMmE5YzAyOWYxODdk NTU0MDQwHhcNMjUxMjA2MTYwMDQ1WhcNMjUxMjA3MTYwMDQ1WjAzMTEwLwYDVQQD EygwNzIxMTI3YWIyN2E2MTAwZjIxYjI5ZWM1MTZlMzYyOWVmOGIxMTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYmMre3Oiaq9ExL5iwg4KL9ShZj4 lG5UyzNzB1/VYrf9eJF2mk2A3D1+vC4cmxa4BHv6SrZD+587FBCovANYbkXK1dMI xetfRCmwKSeQGPUjLT9PABVJS3/eFAoK4Zf8DkVJjuixM4i5TBONLSVP5oQoCA8w 9Q4De23hKn06diBV3ZNvA13U3mihpO6CZ9OkqFTCd/ZywiTTIFTaUFlPmRIqexaq p1TjPbvyEX7MaGrMuupvS6PzqE3H6Un6MbZ6yMrZOElbg7gcM0q/8TNK0pqNLcQG 60hIddZLxta72uIXIKewI1QkHN0vh0oPgJf0ZhvEJjcWLm2jQAyaNg26/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAchEnqyemEA8hsp7FFuNinvixGFMB8GA1UdIwQY MBaAFGaU9bD6tf7S35U14qnAKfGH1VQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBUMXNQcTFfdExmbFRYaXFjQXA4WWZWVkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YmYzMGQtNjllYi00MWE0LWE5MGQt MjFiOWYxMmQyMmYzLzEvWnBUMXNQcTFfdExmbFRYaXFjQXA4WWZWVkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81YmYzMGQtNjllYi00MWE0LWE5MGQtMjFiOWYxMmQyMmYz LzEvWnBUMXNQcTFfdExmbFRYaXFjQXA4WWZWVkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelRUwvZC i1qy7tUYaVFA/4MZnijpxhDxSKDGe6NaIko7O0aEPg7brChGyB+c1N32TqIlDWca hXnQd3C78LLhXqr2t8K1459Bg/WZa3roNn843PvCI1F1N1WCgms5mgQLFbAfD3Ds IcEgdwzsdtu8vNeltD2g6BEoVnvd2nEh1UX50MXdh9aqvLMasio7hlF0NWMFz1wR WZ1/dfY8rnO9RHBvr4w2AiDoYLnVf/K7Kz9s9AoNHg8kLWjSfRcX50cZwmsAW27O Yku0rmmzbex98Hup5Hh360bFn5U2iTmpLlhXSOw+kGQeXlodlI/9AzRwbdhbJDWd yrd1yrfGRRPQeA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:50:32 2025 by rpki-client