This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft File: ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json) Hash identifier: rN3ihq+CXUbbfKr7q/Qe5KVJGvP7FZhGdKuW9NZqRAs= Subject key identifier: 8A:54:97:50:65:67:1B:6E:A4:77:F0:98:0E:98:8E:4A:C6:E0:6A:B1 Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a Certificate serial: 019AF42E1C6444B2CDAFEB21ACD64E8E7585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft Manifest number: 0F56 Signing time: Sat 06 Dec 2025 15:00:53 +0000 Manifest this update: Sat 06 Dec 2025 15:00:53 +0000 Manifest next update: Sun 07 Dec 2025 15:00:53 +0000 Files and hashes: 1: EQLAmwce-4qvK6GmwcFTOhIRkwQ.roa (hash: JsjgQjAnTuCMbWUsyWPVoy0ThBVMbRkRSyV5BIOaYsk=) 2: VBFGSZe25hk515GWxj1O9wYFsPI.roa (hash: cO/lLoWMHsASPsdz4OnLCXsIfZY9ylovdO0mqXRc+eM=) 3: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: 9Xysc18CZpUM8kLvAgQ5p1fU/P4mnY/wa7H1in91iLc=) 4: t_lJAzfvjWKMyLKQMrioEk5d_0w.roa (hash: wl26VQmURsOv+pvsAOIbkvKehkFtkmgC21ZsAlFMTv4=) 5: wqvUrg3ytAmyescNq7O97CA45e8.roa (hash: e+ouxKVrzJBnu8qX3QbAYldaZ2LWrtwIg9cy15dfuBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:1c:64:44:b2:cd:af:eb:21:ac:d6:4e:8e:75:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a Validity Not Before: Dec 6 15:00:53 2025 GMT Not After : Dec 7 15:00:53 2025 GMT Subject: CN=8a54975065671b6ea477f0980e988e4ac6e06ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:22:68:dc:86:df:77:3b:52:78:b1:cd:ff:a5: 55:15:38:a5:91:8d:c4:d5:4c:7e:95:ae:8a:63:07: d2:40:e9:85:c6:2d:2f:33:49:2a:54:be:41:70:69: 23:1c:78:e8:9a:93:ef:dc:2e:a6:33:ce:73:65:10: 54:ee:08:38:17:f6:70:30:88:88:2d:99:85:bd:78: e3:4c:d2:72:dd:64:a4:4f:62:0b:ff:32:ff:e1:aa: c2:65:ae:af:ee:5a:79:a8:09:c5:7b:51:19:9d:97: d5:3f:13:68:ea:8c:09:8e:a1:e9:f5:31:65:ca:36: 15:18:48:d1:b1:5d:0a:dc:30:34:dc:fa:02:f8:12: bd:d3:0c:c6:ba:f8:b7:06:ce:70:d1:7d:c3:c9:fa: 04:17:e1:e1:da:0f:56:3d:30:c8:87:a1:eb:8f:4a: eb:2d:d4:03:a0:a0:5b:06:8f:1b:99:86:54:6f:a9: db:58:8e:a7:16:5c:10:0f:4c:79:19:db:93:89:b1: 1b:c1:51:55:cf:02:0f:71:08:08:0d:1b:62:46:2e: 14:f4:60:8f:dc:08:68:13:5c:bb:f2:03:3e:b2:e5: 43:14:39:df:80:0f:c3:bf:f2:ad:5a:1a:18:6e:00: b4:42:bc:f1:be:d2:ee:2e:66:78:4d:04:7e:b6:d2: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:54:97:50:65:67:1B:6E:A4:77:F0:98:0E:98:8E:4A:C6:E0:6A:B1 X509v3 Authority Key Identifier: keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f0:fa:0c:a4:05:f3:bc:65:e3:b4:3d:fd:e0:cf:f4:30:d5: af:d5:7d:95:76:23:be:42:81:75:47:c7:58:21:11:b7:b8:00: c5:94:5a:cd:6a:e1:5f:87:0e:ec:c2:d9:97:4a:9e:63:e4:26: 97:ba:e9:78:b8:65:12:d9:c2:c9:a1:1f:11:b8:e9:9f:e5:87: 59:a9:ed:c0:e1:d6:bf:84:85:cc:6e:48:e9:aa:ab:72:e0:39: 58:54:8f:5e:d2:90:0f:bd:0d:69:2e:dc:83:fa:1f:d1:ef:3a: d1:e6:25:85:38:22:b9:0d:6c:d1:c3:3c:bf:9e:88:c6:6e:78: 48:1d:53:af:71:f1:94:f3:3f:0b:ef:44:d1:cc:56:41:d7:93: ce:3c:41:25:0b:3a:e8:af:a3:bb:71:5d:6e:b7:59:b3:e5:4b: eb:62:bd:65:96:37:f4:a9:76:73:f0:76:4f:dc:7f:34:54:55: 2e:51:20:73:d6:b4:dc:49:e9:50:71:8a:40:ea:60:b1:7b:b7: 26:31:09:4f:36:d9:b2:b8:67:01:a0:48:43:ad:b1:01:bc:6a: 47:2f:1f:cb:3c:d2:99:08:11:26:94:8c:e3:1e:52:af:2c:65: d9:11:5f:24:7e:95:b6:3d:89:80:ac:c4:67:03:04:31:16:1a: 1a:26:7f:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LhxkRLLNr+shrNZOjnWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OWMzNTY2MzMzODhlOWJkODk3ZDAwMGEzZjM4YmMxZTU0 NmVmNGEwHhcNMjUxMjA2MTUwMDUzWhcNMjUxMjA3MTUwMDUzWjAzMTEwLwYDVQQD Eyg4YTU0OTc1MDY1NjcxYjZlYTQ3N2YwOTgwZTk4OGU0YWM2ZTA2YWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CJo3IbfdztSeLHN/6VVFTilkY3E 1Ux+la6KYwfSQOmFxi0vM0kqVL5BcGkjHHjompPv3C6mM85zZRBU7gg4F/ZwMIiI LZmFvXjjTNJy3WSkT2IL/zL/4arCZa6v7lp5qAnFe1EZnZfVPxNo6owJjqHp9TFl yjYVGEjRsV0K3DA03PoC+BK90wzGuvi3Bs5w0X3DyfoEF+Hh2g9WPTDIh6Hrj0rr LdQDoKBbBo8bmYZUb6nbWI6nFlwQD0x5GduTibEbwVFVzwIPcQgIDRtiRi4U9GCP 3AhoE1y78gM+suVDFDnfgA/Dv/KtWhoYbgC0QrzxvtLuLmZ4TQR+ttLTjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpUl1BlZxtupHfwmA6YjkrG4GqxMB8GA1UdIwQY MBaAFGWcNWYzOI6b2JfQAKPzi8HlRu9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt M2M3ZTRmOTNlNDJiLzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi LzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvD6DKQF 87xl47Q9/eDP9DDVr9V9lXYjvkKBdUfHWCERt7gAxZRazWrhX4cO7MLZl0qeY+Qm l7rpeLhlEtnCyaEfEbjpn+WHWantwOHWv4SFzG5I6aqrcuA5WFSPXtKQD70NaS7c g/of0e860eYlhTgiuQ1s0cM8v56Ixm54SB1Tr3HxlPM/C+9E0cxWQdeTzjxBJQs6 6K+ju3FdbrdZs+VL62K9ZZY39Kl2c/B2T9x/NFRVLlEgc9a03EnpUHGKQOpgsXu3 JjEJTzbZsrhnAaBIQ62xAbxqRy8fyzzSmQgRJpSM4x5Sryxl2RFfJH6Vtj2JgKzE ZwMEMRYaGiZ/2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 23:15:18 2025 by rpki-client