This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft File: ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json) Hash identifier: qQMSBA6X4wXWP159Z9YjQTTY0WELpDE0iNaYZYd2sMs= Subject key identifier: D5:93:32:05:A2:89:98:D3:13:FB:DE:D1:45:38:55:EA:1B:08:51:5E Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92 Certificate issuer: /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92 Certificate serial: 019AF209086B10066587D24469F20481496C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 05:01:09 +0000 Manifest this update: Sat 06 Dec 2025 05:01:09 +0000 Manifest next update: Sun 07 Dec 2025 05:01:09 +0000 Files and hashes: 1: U0b6gboi64n531Jc6zyEuav6vyg.roa (hash: PZafjNuKkOPJe0JHguIOtwXHpUoa+ViotM7w88t40Yc=) 2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: nFPkdJXQjwbY8J5xAsxoyG1gRBQ7bxbRhzhTT1Y0uYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:08:6b:10:06:65:87:d2:44:69:f2:04:81:49:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92 Validity Not Before: Dec 6 05:01:09 2025 GMT Not After : Dec 7 05:01:09 2025 GMT Subject: CN=d5933205a28998d313fbded1453855ea1b08515e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:97:57:30:09:3a:49:0c:b7:9d:61:d7:ad:8e: 56:9b:3c:5a:dd:cd:d9:23:cb:ae:1e:59:19:b3:9f: 99:d5:e3:98:e6:a9:8a:35:a8:11:0a:71:e9:97:e0: f6:60:98:6a:97:97:21:8d:6d:ca:45:bd:87:39:82: cb:36:01:26:79:41:73:c6:8e:f8:26:f4:c9:0f:51: 52:e2:ac:d0:3a:55:ca:10:03:53:fc:d5:da:27:28: 86:e1:59:2b:43:5b:6a:c6:8d:51:94:dc:65:81:27: 38:73:c8:4c:d5:85:f5:a9:a4:db:d0:ca:86:6f:ed: 59:0a:f0:f4:4d:92:ea:f7:3c:f9:17:3e:71:fd:e9: 6f:03:7a:42:38:14:68:9a:56:6b:a3:30:bb:f4:b7: 9e:e6:80:2a:c8:20:f8:be:df:de:69:8a:8c:4d:2c: 27:7c:a7:13:9f:77:bf:14:b7:33:39:b7:c9:1d:94: c7:3b:b7:80:b7:26:e6:76:15:87:2f:7d:01:99:b2: 32:62:06:82:d6:e1:1a:f0:38:79:da:99:7b:33:b6: 11:29:95:ce:d2:1c:86:cf:98:60:47:b2:70:25:63: 22:5a:66:5b:74:0e:90:4a:79:91:d7:98:88:5b:8d: 06:b8:a2:26:cd:11:00:12:87:c5:d0:34:45:4f:f4: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:93:32:05:A2:89:98:D3:13:FB:DE:D1:45:38:55:EA:1B:08:51:5E X509v3 Authority Key Identifier: keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:46:26:61:aa:aa:e1:d0:2a:e1:d9:52:50:c5:06:59:9a:f3: be:26:7e:e8:6c:a6:4f:66:f5:6c:40:e8:86:d5:11:cc:c7:7d: bc:da:e8:dd:15:86:34:54:55:bd:3d:6a:24:0a:e0:a9:56:aa: 75:4b:58:e3:35:e8:88:11:12:ae:7c:d1:55:57:c3:69:19:50: 41:47:7a:6f:02:c7:f3:bd:de:d1:41:27:2b:55:aa:fe:d3:de: f9:17:44:dc:54:89:e1:b4:0f:2b:63:ef:a6:f8:4e:0f:d3:38: 1c:16:eb:2b:6d:6e:56:7c:89:15:23:2a:fd:82:48:73:fe:b0: b5:9d:9e:e8:bb:84:f7:34:4d:6b:fd:90:b3:63:ba:e1:33:b1: 96:d5:35:bc:f8:6b:13:54:6b:42:78:0b:61:22:26:52:3d:b8: dc:d6:62:e9:ca:eb:11:b6:d8:2a:1d:18:c0:60:9b:fd:c5:04: 7f:9a:51:22:17:fd:2e:13:d8:8a:c5:b9:6a:17:ad:ba:61:8e: 2e:d9:84:14:40:d2:5b:d7:09:14:7c:4e:20:84:31:8e:19:1a: b4:4d:dd:9a:b6:14:fe:5a:5f:d9:77:ae:0c:ba:5e:3c:12:dd: ea:e2:d2:9e:22:5f:9b:6e:9c:44:16:7a:f0:11:b6:f5:87:f7: 09:43:c6:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQhrEAZlh9JEafIEgUlsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MDNmMjU4ZDQ3YmVjYzJjYjRiNGZjNTcyYjIyOWIyZTY0 YjZiOTIwHhcNMjUxMjA2MDUwMTA5WhcNMjUxMjA3MDUwMTA5WjAzMTEwLwYDVQQD EyhkNTkzMzIwNWEyODk5OGQzMTNmYmRlZDE0NTM4NTVlYTFiMDg1MTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJdXMAk6SQy3nWHXrY5Wmzxa3c3Z I8uuHlkZs5+Z1eOY5qmKNagRCnHpl+D2YJhql5chjW3KRb2HOYLLNgEmeUFzxo74 JvTJD1FS4qzQOlXKEANT/NXaJyiG4VkrQ1tqxo1RlNxlgSc4c8hM1YX1qaTb0MqG b+1ZCvD0TZLq9zz5Fz5x/elvA3pCOBRomlZrozC79Lee5oAqyCD4vt/eaYqMTSwn fKcTn3e/FLczObfJHZTHO7eAtybmdhWHL30BmbIyYgaC1uEa8Dh52pl7M7YRKZXO 0hyGz5hgR7JwJWMiWmZbdA6QSnmR15iIW40GuKImzREAEofF0DRFT/S46wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWTMgWiiZjTE/ve0UU4VeobCFFeMB8GA1UdIwQY MBaAFGcD8ljUe+zCy0tPxXKyKbLmS2uSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWndQeVdOUjc3TUxMUzBfRmNySXBzdVpMYTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYTA3Y2ItZjZjMC00OWJhLWE3ZDEt MWIwMTQ1MzM0N2RhLzEvWndQeVdOUjc3TUxMUzBfRmNySXBzdVpMYTVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yYTA3Y2ItZjZjMC00OWJhLWE3ZDEtMWIwMTQ1MzM0N2Rh LzEvWndQeVdOUjc3TUxMUzBfRmNySXBzdVpMYTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA30YmYaqq 4dAq4dlSUMUGWZrzviZ+6GymT2b1bEDohtURzMd9vNro3RWGNFRVvT1qJArgqVaq dUtY4zXoiBESrnzRVVfDaRlQQUd6bwLH873e0UEnK1Wq/tPe+RdE3FSJ4bQPK2Pv pvhOD9M4HBbrK21uVnyJFSMq/YJIc/6wtZ2e6LuE9zRNa/2Qs2O64TOxltU1vPhr E1RrQngLYSImUj243NZi6crrEbbYKh0YwGCb/cUEf5pRIhf9LhPYisW5ahetumGO LtmEFEDSW9cJFHxOIIQxjhkatE3dmrYU/lpf2XeuDLpePBLd6uLSniJfm26cRBZ6 8BG29Yf3CUPGtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:17:37 2025 by rpki-client