This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft File: Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft (raw, json) Hash identifier: tpxMzO0WKXS2fPNUZkslxKu1hG5Y78yAiJ4TsJbMAfI= Subject key identifier: 15:5B:CD:08:28:05:EC:B8:92:C4:42:91:69:58:7A:C0:AC:03:2D:CE Authority key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F Certificate issuer: /CN=6696fa3fe40cf770851c83adcafafb7a4107678f Certificate serial: 019AF3F76C5AA654F2379DFE2D39862E371A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft Manifest number: 0587 Signing time: Sat 06 Dec 2025 14:01:09 +0000 Manifest this update: Sat 06 Dec 2025 14:01:09 +0000 Manifest next update: Sun 07 Dec 2025 14:01:09 +0000 Files and hashes: 1: Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl (hash: x/89A95tQZhIwRF9xLNWNioYor0TfioQ19qwjiQsypc=) 2: f6tkx1veLJXtyksaflVzc1YMN2w.roa (hash: WlrwpYaQcrfGXKf9ZwidLgROLAib30SWtSAT3qSkZJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:6c:5a:a6:54:f2:37:9d:fe:2d:39:86:2e:37:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6696fa3fe40cf770851c83adcafafb7a4107678f Validity Not Before: Dec 6 14:01:09 2025 GMT Not After : Dec 7 14:01:09 2025 GMT Subject: CN=155bcd082805ecb892c4429169587ac0ac032dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:aa:87:07:be:39:cd:53:29:db:b9:9b:d2:a0: 63:37:a7:a9:c8:96:bd:c1:d2:8e:75:c1:23:eb:df: 5a:73:c7:78:1a:aa:5c:df:45:b6:c2:cc:9f:84:1e: 65:24:1c:83:e2:72:75:60:c0:0a:5e:0d:dc:9d:c8: 5f:73:f2:2a:9b:d5:83:fe:64:b3:0e:0a:cd:12:85: e6:d0:c4:6a:16:98:8c:ad:d5:42:34:5e:1e:81:3f: 80:72:10:17:2b:53:82:de:39:e1:50:55:9c:a2:b7: c9:60:d5:09:b2:d3:57:ed:01:03:5e:6a:19:64:cb: 8b:e8:f8:2a:90:8f:77:9f:77:74:1a:07:e4:30:df: d6:46:84:f4:fc:fc:8f:6d:2a:43:7d:37:8f:5c:7c: 30:bc:0f:e8:1d:9a:eb:26:0d:3d:03:64:f2:32:85: 07:fe:1b:61:61:ab:75:7a:36:43:5e:b2:5a:af:6e: 63:45:8a:33:ec:35:40:ac:cc:36:36:30:7d:e2:06: 76:d7:98:df:f0:f7:10:0e:2c:56:77:39:45:2d:b0: 66:a1:a8:fe:05:f4:a5:51:fe:c5:a3:c3:18:ff:71: a6:99:2a:a3:b6:32:53:8b:bf:d5:8a:42:c1:72:c7: 70:a2:04:a7:c6:c8:40:b5:e2:52:ac:e8:26:99:3b: 54:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5B:CD:08:28:05:EC:B8:92:C4:42:91:69:58:7A:C0:AC:03:2D:CE X509v3 Authority Key Identifier: keyid:66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:73:82:4c:16:ba:0c:5c:d6:9f:3a:f8:cb:9e:3b:68:35:12: 8a:7d:8e:c9:29:fe:49:08:bf:6c:98:aa:9a:5c:3b:fd:5a:7c: 90:b2:4b:83:61:8f:23:e2:a3:7c:70:61:e7:46:57:50:91:c6: 1e:84:2d:c1:65:14:73:0d:18:af:e2:89:b9:cd:69:bb:36:73: 28:3b:35:26:3e:51:9a:a3:17:75:38:82:ec:4e:d6:1e:94:ee: 3f:57:cf:69:42:5a:79:cc:94:a0:c2:f1:3c:34:e5:80:7c:98: 45:5a:ef:91:5e:dd:fb:dc:15:05:fa:6f:c4:72:60:15:33:5d: f6:39:b1:45:34:2d:d8:ab:28:8b:97:79:33:4c:fe:c4:be:b4: 49:bb:c6:80:03:c4:86:b3:01:f4:c1:9f:e9:77:39:f9:d5:ff: 73:23:bf:81:77:91:67:0c:4b:85:33:46:41:2d:ba:fa:b2:9a: 14:e8:87:6f:e9:93:b4:d9:ca:a3:1b:35:79:17:86:56:5b:6c: e1:a9:4c:10:d1:17:36:ec:7a:1a:25:d0:70:03:9e:3d:2b:da: d6:4c:c4:18:e2:63:4a:60:cb:a7:bc:a6:4c:4a:9c:28:08:eb: 19:36:74:f3:4b:dc:1b:a4:93:a7:a8:2a:af:04:73:36:66:eb: 6c:1e:88:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz92xaplTyN53+LTmGLjcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTZmYTNmZTQwY2Y3NzA4NTFjODNhZGNhZmFmYjdhNDEw NzY3OGYwHhcNMjUxMjA2MTQwMTA5WhcNMjUxMjA3MTQwMTA5WjAzMTEwLwYDVQQD EygxNTViY2QwODI4MDVlY2I4OTJjNDQyOTE2OTU4N2FjMGFjMDMyZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6qHB745zVMp27mb0qBjN6epyJa9 wdKOdcEj699ac8d4Gqpc30W2wsyfhB5lJByD4nJ1YMAKXg3cnchfc/Iqm9WD/mSz DgrNEoXm0MRqFpiMrdVCNF4egT+AchAXK1OC3jnhUFWcorfJYNUJstNX7QEDXmoZ ZMuL6PgqkI93n3d0GgfkMN/WRoT0/PyPbSpDfTePXHwwvA/oHZrrJg09A2TyMoUH /hthYat1ejZDXrJar25jRYoz7DVArMw2NjB94gZ215jf8PcQDixWdzlFLbBmoaj+ BfSlUf7Fo8MY/3GmmSqjtjJTi7/VikLBcsdwogSnxshAteJSrOgmmTtUoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVbzQgoBey4ksRCkWlYesCsAy3OMB8GA1UdIwQY MBaAFGaW+j/kDPdwhRyDrcr6+3pBB2ePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBiNlAtUU05M0NGSElPdHl2cjdla0VIWjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lNjZhZmUtNmUwYi00ZGJkLThkMGQt Y2U2OTE1YjQ3MzZmLzEvWnBiNlAtUU05M0NGSElPdHl2cjdla0VIWjQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lNjZhZmUtNmUwYi00ZGJkLThkMGQtY2U2OTE1YjQ3MzZm LzEvWnBiNlAtUU05M0NGSElPdHl2cjdla0VIWjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXOCTBa6 DFzWnzr4y547aDUSin2OySn+SQi/bJiqmlw7/Vp8kLJLg2GPI+KjfHBh50ZXUJHG HoQtwWUUcw0Yr+KJuc1puzZzKDs1Jj5RmqMXdTiC7E7WHpTuP1fPaUJaecyUoMLx PDTlgHyYRVrvkV7d+9wVBfpvxHJgFTNd9jmxRTQt2Ksoi5d5M0z+xL60SbvGgAPE hrMB9MGf6Xc5+dX/cyO/gXeRZwxLhTNGQS26+rKaFOiHb+mTtNnKoxs1eReGVlts 4alMENEXNux6GiXQcAOePSva1kzEGOJjSmDLp7ymTEqcKAjrGTZ080vcG6STp6gq rwRzNmbrbB6I2g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:43 2025 by rpki-client