This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json) Hash identifier: 4iZW1AGC1dr3Ok+i2ZfV1tduWacS0pVT7yzPBYwAnkE= Subject key identifier: 01:41:6A:1F:F1:13:F0:B0:0E:2F:80:28:18:53:60:4B:74:A4:9B:F0 Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95 Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695 Certificate serial: 019AF31B1D359606B9DEA3BF8316C05234F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft Manifest number: 11A2 Signing time: Sat 06 Dec 2025 10:00:31 +0000 Manifest this update: Sat 06 Dec 2025 10:00:31 +0000 Manifest next update: Sun 07 Dec 2025 10:00:31 +0000 Files and hashes: 1: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: gkJhr4rCyefyTNUb8ycI9CGGhoNF8KLRdQ6FWENiqQU=) 2: jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa (hash: LCBAN0N7xGJeaqTX5AAQMXZtcLuwBKPNcwcKiOcd8Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:1d:35:96:06:b9:de:a3:bf:83:16:c0:52:34:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695 Validity Not Before: Dec 6 10:00:31 2025 GMT Not After : Dec 7 10:00:31 2025 GMT Subject: CN=01416a1ff113f0b00e2f80281853604b74a49bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bc:6f:57:b5:7c:de:26:20:a2:51:ff:d7:e3: 91:f5:59:a3:ef:66:bb:d6:88:4f:04:d7:f1:ef:30: 45:4b:73:9b:d4:38:bd:7e:96:2f:27:73:1d:b4:b4: 38:72:74:c6:b9:8a:c2:1d:76:c2:ff:77:43:3c:bf: 6e:87:96:57:b0:c4:3b:bd:0f:d9:39:1e:3c:91:d0: c7:2c:88:d9:8e:c4:ab:bb:85:33:c1:02:94:41:ad: a0:61:44:1e:7b:7e:19:14:f5:10:0f:25:88:67:82: 6b:41:56:8c:e6:74:ac:e9:95:58:d4:ef:8a:9f:07: 96:c6:17:a1:5a:cd:89:6d:a1:71:76:92:b9:46:cb: 6c:d8:8b:cc:df:d7:90:26:ec:73:c3:0d:4b:b9:39: 2f:5f:aa:68:4c:cd:79:7f:47:c3:d3:d3:4d:f8:0b: d3:79:a9:9d:01:6b:f3:b9:9a:a6:d6:b6:ad:3c:a6: 8f:d1:7f:a7:04:fc:ec:8e:eb:b8:35:c8:be:88:22: 27:5c:0b:8e:3d:f4:63:3f:ef:2a:32:b0:c2:4d:65: 1e:08:34:64:c3:40:3f:3f:0e:a7:fb:50:6c:ad:47: ef:5c:ee:fb:64:e6:91:62:4a:51:11:57:ad:ba:66: 9e:66:1b:de:a1:0f:eb:b7:32:5d:ae:6e:30:ae:1a: a8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:41:6A:1F:F1:13:F0:B0:0E:2F:80:28:18:53:60:4B:74:A4:9B:F0 X509v3 Authority Key Identifier: keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2f:cf:60:3b:74:f9:27:af:f2:63:85:64:9c:50:1e:e7:31: 7e:1e:0c:b4:5f:0f:a3:32:fe:ef:fe:89:b8:3f:b5:7c:d5:2a: 31:85:14:6a:22:c1:f3:35:d4:d4:f9:cf:f0:b7:fc:42:04:20: 7c:d3:c4:5f:c6:8e:af:a2:ee:1c:e4:8a:c6:e8:a7:ef:4e:a9: 8c:ec:b8:38:73:e3:b0:92:ac:b5:ec:d1:b3:85:ed:41:90:83: 3b:54:02:c2:79:17:49:f0:64:b8:de:a5:12:63:2f:a6:66:90: fe:99:02:68:49:77:e7:ee:6f:a5:c2:42:13:63:d0:9c:ab:21: 48:8d:a4:af:58:86:3e:11:22:c2:5d:7b:04:6c:14:b5:2b:b1: 22:af:3e:6a:64:f8:2a:ec:0a:19:2a:8f:18:e5:5c:f9:b3:fc: 86:f2:7a:2f:dd:14:46:6a:36:52:b0:1c:6e:6f:61:84:05:36: 36:d2:b6:c7:65:8f:74:5e:cf:51:54:df:54:f7:fc:6c:c5:24: aa:0a:a5:45:91:05:46:6c:f5:73:a8:df:b6:35:43:b0:63:4a: 54:6b:45:93:a9:a3:d7:71:aa:b8:e5:26:69:da:4e:65:b3:ab: df:0f:f1:72:9f:d8:53:60:e7:91:eb:cc:76:ef:f0:1d:1f:8a: 98:92:d6:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGx01lga53qO/gxbAUjT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YWVjODAyNGNhYTEwM2E4NDEyNjk2YzdlNzJmNzc4MDNj ZDg2OTUwHhcNMjUxMjA2MTAwMDMxWhcNMjUxMjA3MTAwMDMxWjAzMTEwLwYDVQQD EygwMTQxNmExZmYxMTNmMGIwMGUyZjgwMjgxODUzNjA0Yjc0YTQ5YmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLxvV7V83iYgolH/1+OR9Vmj72a7 1ohPBNfx7zBFS3Ob1Di9fpYvJ3MdtLQ4cnTGuYrCHXbC/3dDPL9uh5ZXsMQ7vQ/Z OR48kdDHLIjZjsSru4UzwQKUQa2gYUQee34ZFPUQDyWIZ4JrQVaM5nSs6ZVY1O+K nweWxhehWs2JbaFxdpK5Rsts2IvM39eQJuxzww1LuTkvX6poTM15f0fD09NN+AvT eamdAWvzuZqm1ratPKaP0X+nBPzsjuu4Nci+iCInXAuOPfRjP+8qMrDCTWUeCDRk w0A/Pw6n+1BsrUfvXO77ZOaRYkpREVetumaeZhveoQ/rtzJdrm4wrhqoRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFBah/xE/CwDi+AKBhTYEt0pJvwMB8GA1UdIwQY MBaAFGSuyAJMqhA6hBJpbH5y93gDzYaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWks3SUFreXFFRHFFRW1sc2ZuTDNlQVBOaHBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wZjI0ZGQtZWY0YS00ZGJmLWIyMGQt YjAzOWMyNGI5OWNhLzEvWks3SUFreXFFRHFFRW1sc2ZuTDNlQVBOaHBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8wZjI0ZGQtZWY0YS00ZGJmLWIyMGQtYjAzOWMyNGI5OWNh LzEvWks3SUFreXFFRHFFRW1sc2ZuTDNlQVBOaHBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbi/PYDt0 +Sev8mOFZJxQHucxfh4MtF8PozL+7/6JuD+1fNUqMYUUaiLB8zXU1PnP8Lf8QgQg fNPEX8aOr6LuHOSKxuin706pjOy4OHPjsJKstezRs4XtQZCDO1QCwnkXSfBkuN6l EmMvpmaQ/pkCaEl35+5vpcJCE2PQnKshSI2kr1iGPhEiwl17BGwUtSuxIq8+amT4 KuwKGSqPGOVc+bP8hvJ6L90URmo2UrAcbm9hhAU2NtK2x2WPdF7PUVTfVPf8bMUk qgqlRZEFRmz1c6jftjVDsGNKVGtFk6mj13GquOUmadpOZbOr3w/xcp/YU2DnkevM du/wHR+KmJLWCA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:40 2025 by rpki-client