This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft File: ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json) Hash identifier: oHZ+HaZFbq5QAg8NtJ+nmhUBuAdXq8jIAinokkwFwds= Subject key identifier: A7:26:F9:32:2E:81:1F:E8:0C:C1:83:BC:72:53:C1:22:02:F2:CE:FC Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92 Certificate issuer: /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92 Certificate serial: 019B2BF8DE1EA3FE45FB06B762C3471CBC2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft Manifest number: 1711 Signing time: Wed 17 Dec 2025 11:01:28 +0000 Manifest this update: Wed 17 Dec 2025 11:01:28 +0000 Manifest next update: Thu 18 Dec 2025 11:01:28 +0000 Files and hashes: 1: U0b6gboi64n531Jc6zyEuav6vyg.roa (hash: PZafjNuKkOPJe0JHguIOtwXHpUoa+ViotM7w88t40Yc=) 2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: O8DYLi0LCyDDNIL+1vyd1yInjXIfGfkCvEJWqNi58MQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:de:1e:a3:fe:45:fb:06:b7:62:c3:47:1c:bc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92 Validity Not Before: Dec 17 11:01:28 2025 GMT Not After : Dec 18 11:01:28 2025 GMT Subject: CN=a726f9322e811fe80cc183bc7253c12202f2cefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:aa:c9:12:c1:d5:ca:e0:cb:5b:a1:87:6b:94: 86:18:5c:49:a8:f5:47:40:81:f9:39:ea:1c:20:39: 41:bd:61:1c:41:ae:23:2e:a3:8a:07:f2:93:85:a5: bb:1a:1c:b7:0c:a4:54:b1:bf:b2:36:0b:ad:40:52: fa:0a:09:67:9e:78:b2:a5:30:ff:52:fb:0d:ac:ee: b2:07:07:1b:7a:d4:09:58:8e:66:2f:ac:bf:b7:ae: ba:45:f2:da:8a:69:66:95:7d:3b:51:2c:ff:e6:fb: 09:fd:6f:b7:c9:43:75:b3:dc:f7:fc:df:96:f9:a2: 0b:6d:5d:61:35:09:fd:84:56:41:ad:d2:5d:9e:70: 50:19:07:0e:79:fe:1e:ac:d7:5d:fa:be:99:97:64: c9:7b:9c:86:8c:0e:09:a5:ff:e1:eb:ca:ce:23:fe: 1c:24:bc:c7:37:0d:98:28:58:c1:44:80:92:b5:76: f0:a8:29:d1:ae:e6:36:e0:9e:3b:bd:6b:6a:1f:3a: 72:d0:7e:e4:0e:44:fb:c4:d4:66:7a:a7:b0:c2:18: 91:c7:93:77:0d:27:0b:d2:c4:27:a5:54:1d:a8:5a: 01:1b:56:ef:86:88:ee:01:fc:c4:3a:b0:69:87:b3: a2:29:5d:05:52:df:43:65:11:d9:27:25:1a:c4:a8: 86:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:26:F9:32:2E:81:1F:E8:0C:C1:83:BC:72:53:C1:22:02:F2:CE:FC X509v3 Authority Key Identifier: keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2f:80:54:ab:a2:09:2a:46:7f:4f:a2:18:29:e3:9c:b9:0c: e4:46:5e:82:2a:9e:03:57:ad:ec:27:e3:d1:4a:3f:0e:06:92: 90:ba:6f:68:cf:71:50:2c:d5:89:dc:e2:8d:43:75:99:38:35: 60:45:78:98:75:cc:a1:92:ef:04:c5:15:40:14:0c:38:33:9d: e5:f5:31:4c:a7:fc:fb:45:ee:3f:9c:de:2a:79:03:b1:5b:c3: 83:97:25:0f:3e:d9:71:a0:19:41:7c:ba:e4:33:6c:fb:f9:3a: b9:4a:4b:fd:5d:57:d0:74:2b:94:df:1d:fa:34:3f:bd:92:77: 15:43:ab:1a:61:07:43:11:19:df:a2:3b:32:8a:37:5b:5c:64: d2:96:fd:e0:cb:9b:19:17:e2:e1:b0:37:23:b4:ed:77:16:2e: 2c:22:07:49:c1:a6:52:3d:7e:fe:7c:80:60:c7:06:f8:a2:30: 49:9f:ab:f9:e5:19:a7:5f:6a:f3:78:0f:18:3c:eb:a2:28:30: 6e:f4:27:8a:54:59:20:57:4f:be:b0:32:e3:73:3f:e3:73:76: 3d:0f:f1:1f:da:ce:b7:3f:a3:cf:5f:73:e7:c9:8a:9f:4e:45: 7c:d5:40:a4:90:6e:1c:da:ce:cb:3f:53:d6:f4:59:1f:2e:60: d3:36:f7:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+N4eo/5F+wa3YsNHHLwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MDNmMjU4ZDQ3YmVjYzJjYjRiNGZjNTcyYjIyOWIyZTY0 YjZiOTIwHhcNMjUxMjE3MTEwMTI4WhcNMjUxMjE4MTEwMTI4WjAzMTEwLwYDVQQD EyhhNzI2ZjkzMjJlODExZmU4MGNjMTgzYmM3MjUzYzEyMjAyZjJjZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qrJEsHVyuDLW6GHa5SGGFxJqPVH QIH5OeocIDlBvWEcQa4jLqOKB/KThaW7Ghy3DKRUsb+yNgutQFL6CglnnniypTD/ UvsNrO6yBwcbetQJWI5mL6y/t666RfLaimlmlX07USz/5vsJ/W+3yUN1s9z3/N+W +aILbV1hNQn9hFZBrdJdnnBQGQcOef4erNdd+r6Zl2TJe5yGjA4Jpf/h68rOI/4c JLzHNw2YKFjBRICStXbwqCnRruY24J47vWtqHzpy0H7kDkT7xNRmeqewwhiRx5N3 DScL0sQnpVQdqFoBG1bvhojuAfzEOrBph7OiKV0FUt9DZRHZJyUaxKiGxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcm+TIugR/oDMGDvHJTwSIC8s78MB8GA1UdIwQY MBaAFGcD8ljUe+zCy0tPxXKyKbLmS2uSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWndQeVdOUjc3TUxMUzBfRmNySXBzdVpMYTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYTA3Y2ItZjZjMC00OWJhLWE3ZDEt MWIwMTQ1MzM0N2RhLzEvWndQeVdOUjc3TUxMUzBfRmNySXBzdVpMYTVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yYTA3Y2ItZjZjMC00OWJhLWE3ZDEtMWIwMTQ1MzM0N2Rh LzEvWndQeVdOUjc3TUxMUzBfRmNySXBzdVpMYTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQC+AVKui CSpGf0+iGCnjnLkM5EZegiqeA1et7Cfj0Uo/DgaSkLpvaM9xUCzVidzijUN1mTg1 YEV4mHXMoZLvBMUVQBQMODOd5fUxTKf8+0XuP5zeKnkDsVvDg5clDz7ZcaAZQXy6 5DNs+/k6uUpL/V1X0HQrlN8d+jQ/vZJ3FUOrGmEHQxEZ36I7Moo3W1xk0pb94Mub GRfi4bA3I7TtdxYuLCIHScGmUj1+/nyAYMcG+KIwSZ+r+eUZp19q83gPGDzroigw bvQnilRZIFdPvrAy43M/43N2PQ/xH9rOtz+jz19z58mKn05FfNVApJBuHNrOyz9T 1vRZHy5g0zb3nw== -----END CERTIFICATE-----Generated at Wed Dec 17 17:44:44 2025 by rpki-client