This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft File: ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json) Hash identifier: S/Tz7Fhp693AQSzZOEXe7ymp1Wvf+eno/+ghPn2MT60= Subject key identifier: F7:18:FA:4A:E0:22:89:B1:97:79:2B:88:7F:07:01:62:69:53:D8:25 Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb Certificate serial: 019AF38968B0BD084D7A58BCE63B63E8E424 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:00:59 +0000 Manifest this update: Sat 06 Dec 2025 12:00:59 +0000 Manifest next update: Sun 07 Dec 2025 12:00:59 +0000 Files and hashes: 1: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: R4oIizTxfYKsWWncnWOppv5kgyi9WZeW5ZGBc4GHhv4=) 2: hN0z1_4mmxKbkIk8CqnnvzNahto.roa (hash: AI7qbHiXXWxj2c6Gw1e/W0ArXAzLidVM4yaZJ83W98E=) 3: loQfbpMkrF-8FHm8l3OiW-eTM6E.roa (hash: u9sgxZASXDE+M+FEbB4vnXmXUh6Lo2WySjfXfmuOY70=) 4: vyP9hbS_76ZrupwSMef0B1pOVPk.roa (hash: f7AZEySBA5XegD3mdK9pluMntAOS8jT+L60Mq8N3IVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:68:b0:bd:08:4d:7a:58:bc:e6:3b:63:e8:e4:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb Validity Not Before: Dec 6 12:00:59 2025 GMT Not After : Dec 7 12:00:59 2025 GMT Subject: CN=f718fa4ae02289b197792b887f0701626953d825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bd:5c:2a:2b:f3:84:64:10:51:97:9a:1d:11: d9:a5:77:9b:12:9a:88:04:cc:01:8c:e9:d2:a1:c3: 71:cc:a7:67:2e:e0:2c:2e:42:7c:d3:95:f3:8e:ba: 50:e3:38:c9:1b:cc:f6:5c:22:64:f4:f9:00:dd:3b: 60:62:4c:d9:de:a1:d9:2b:cc:63:ca:f0:4a:9a:7d: 04:d5:19:ab:ce:63:54:72:d7:a3:3a:54:bf:e0:b7: fc:12:bd:b8:ab:97:7a:04:20:e6:3d:0c:22:61:0e: 44:46:93:27:ba:8d:bf:61:03:97:38:55:a2:c3:d0: 5f:bc:44:19:37:e5:42:77:18:5e:ed:fc:c9:57:f9: 01:f2:87:4d:b6:ac:b4:a9:b5:cb:c0:c7:2b:c3:97: 2e:f4:04:35:1c:c5:c9:97:09:90:a8:62:ce:7a:fa: de:41:fc:2e:ec:8d:ed:fe:3b:65:12:14:05:aa:a9: eb:1a:88:f3:c4:96:62:59:68:4e:da:c6:ec:97:58: 8a:d2:05:be:4f:6e:21:dd:24:05:14:57:76:35:db: 35:7c:55:1e:9d:64:ca:52:01:fd:16:39:62:df:2b: 75:1c:10:36:e2:43:47:cd:4e:83:65:da:69:9a:38: fc:0b:1a:dc:ea:74:f0:cb:9b:9b:e3:26:1f:32:be: 08:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:18:FA:4A:E0:22:89:B1:97:79:2B:88:7F:07:01:62:69:53:D8:25 X509v3 Authority Key Identifier: keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:c0:b8:34:b7:04:2d:d8:ef:1d:5d:76:7a:87:d9:2c:06:b4: 71:ac:eb:4a:1a:81:06:65:81:c1:fa:6d:fb:a3:15:46:5c:59: 08:19:a9:3b:f6:3b:00:50:df:4b:bd:ac:72:9f:e9:e2:66:27: 62:20:07:a4:8a:20:00:0c:51:51:df:fe:ee:5f:1e:6d:dc:f8: 09:34:75:e9:d8:87:a0:fd:3d:5d:81:85:58:9d:c2:a4:a1:12: 74:cc:18:5d:0b:a1:ef:57:ef:46:5d:87:29:cb:9b:18:08:bf: 4b:69:dc:14:88:03:8b:ac:14:1a:cc:30:7c:99:19:2b:50:84: b5:50:de:a5:f2:20:79:5b:c2:f0:b8:d3:2c:f3:70:05:c8:6d: 27:5d:11:36:5c:cd:65:91:28:07:30:2d:25:d8:28:35:df:06: d5:76:5b:dc:24:06:b6:a7:15:27:08:5c:fa:2c:3c:e7:d0:d3: dc:20:18:38:59:14:5a:f4:64:f1:bd:a5:7d:36:3c:81:06:d3: 57:05:bc:00:2f:e8:9d:eb:1d:cc:93:96:f0:14:a6:a1:0f:cc: 8a:52:61:a7:c1:25:0a:ca:77:5b:99:bc:0c:8b:5a:c5:99:7e: e0:a4:38:4d:86:2a:0e:24:ab:34:15:c3:22:7a:85:cf:1d:08: 31:d4:80:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWiwvQhNeli85jtj6OQkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OWE2Yjk3NWVhZmQyY2U1MTQ2ODcyMzgxNDM1NWY1NmM1 NWJhZmIwHhcNMjUxMjA2MTIwMDU5WhcNMjUxMjA3MTIwMDU5WjAzMTEwLwYDVQQD EyhmNzE4ZmE0YWUwMjI4OWIxOTc3OTJiODg3ZjA3MDE2MjY5NTNkODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA271cKivzhGQQUZeaHRHZpXebEpqI BMwBjOnSocNxzKdnLuAsLkJ805XzjrpQ4zjJG8z2XCJk9PkA3TtgYkzZ3qHZK8xj yvBKmn0E1RmrzmNUctejOlS/4Lf8Er24q5d6BCDmPQwiYQ5ERpMnuo2/YQOXOFWi w9BfvEQZN+VCdxhe7fzJV/kB8odNtqy0qbXLwMcrw5cu9AQ1HMXJlwmQqGLOevre Qfwu7I3t/jtlEhQFqqnrGojzxJZiWWhO2sbsl1iK0gW+T24h3SQFFFd2Nds1fFUe nWTKUgH9Fjli3yt1HBA24kNHzU6DZdppmjj8Cxrc6nTwy5ub4yYfMr4IlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcY+krgIomxl3kriH8HAWJpU9glMB8GA1UdIwQY MBaAFGWaa5der9LOUUaHI4FDVfVsVbr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQt ZWZmM2NkY2JkMDBhLzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQtZWZmM2NkY2JkMDBh LzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMC4NLcE LdjvHV12eofZLAa0cazrShqBBmWBwfpt+6MVRlxZCBmpO/Y7AFDfS72scp/p4mYn YiAHpIogAAxRUd/+7l8ebdz4CTR16diHoP09XYGFWJ3CpKESdMwYXQuh71fvRl2H KcubGAi/S2ncFIgDi6wUGswwfJkZK1CEtVDepfIgeVvC8LjTLPNwBchtJ10RNlzN ZZEoBzAtJdgoNd8G1XZb3CQGtqcVJwhc+iw859DT3CAYOFkUWvRk8b2lfTY8gQbT VwW8AC/onesdzJOW8BSmoQ/MilJhp8ElCsp3W5m8DItaxZl+4KQ4TYYqDiSrNBXD InqFzx0IMdSAlw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:38 2025 by rpki-client