This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft File: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft (raw, json) Hash identifier: t324tk4vqNlRg9EY7b0hDIe5/Qz5NcTnd30kGdPSrx0= Subject key identifier: 58:0A:6F:C2:61:0D:6B:DA:F7:62:1B:F1:AA:FE:C4:A1:31:8B:E8:88 Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22 Certificate issuer: /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822 Certificate serial: 019AF19AFDBBDDAEB2A3E3C1DBB70F3C02D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft Manifest number: 135E Signing time: Sat 06 Dec 2025 03:00:57 +0000 Manifest this update: Sat 06 Dec 2025 03:00:57 +0000 Manifest next update: Sun 07 Dec 2025 03:00:57 +0000 Files and hashes: 1: YINjBgqke9O6MEFg3LsttnUbivA.roa (hash: FiVOsjs04yLCv34Ov+9Fkl+VTtf648KKXDA45deG6fU=) 2: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl (hash: SgkMn9cBpOJcztLO6ZCkPsVpS0jtlJe4y14Injs0Sx8=) 3: a48ohAuzOYw-D3deAcBdgdbuYdE.roa (hash: s6C2UNG19Y9Btn3B7Z6k8U1vX9nGyhjdM6XWlgIHyig=) 4: tGlHaeP9l4PIJg0VnS_cNRO7zcQ.roa (hash: OUc0RlEHBoBsIR+K/PErkMIbX3pRL0dEZfaQuWCuRDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:fd:bb:dd:ae:b2:a3:e3:c1:db:b7:0f:3c:02:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822 Validity Not Before: Dec 6 03:00:57 2025 GMT Not After : Dec 7 03:00:57 2025 GMT Subject: CN=580a6fc2610d6bdaf7621bf1aafec4a1318be888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:d3:fb:1c:ae:c0:01:8b:86:1b:fd:f3:dc: a2:c0:7f:d1:05:7c:e4:a1:d9:1e:f3:7f:36:71:5c: 12:fb:06:f8:de:a9:8b:c7:0b:31:b3:73:b9:34:18: 64:bc:bc:a2:e9:58:73:64:0b:49:30:35:f3:af:ca: ea:35:18:44:ab:52:b0:33:fb:05:24:a2:13:cb:37: 99:7a:6f:fd:64:d3:4f:75:69:b1:e7:85:66:df:ae: b1:f5:26:a6:3c:a7:1c:d5:f2:bb:3e:7a:93:28:37: d9:f1:2c:c4:84:e7:0e:8d:81:b2:ff:37:a8:bd:26: d3:06:a9:73:22:1e:09:e7:0b:4d:70:14:0a:08:bd: 53:55:76:ae:bb:bf:20:ed:85:44:6e:92:85:1b:c7: 99:22:2c:b0:78:04:c2:09:c0:f0:e7:6c:91:cd:a7: b6:e9:b8:f4:07:44:50:6c:28:b8:91:c7:ec:a7:ef: ab:06:ea:f1:de:bd:f4:c1:07:44:26:b2:6c:b9:d8: a8:6a:75:d8:9e:68:27:a3:84:37:42:ff:74:97:5e: 08:5d:b4:e1:03:75:ff:8a:8e:d7:60:dd:1b:20:2a: 93:55:fd:61:d6:58:23:c8:76:cc:39:4c:e9:69:af: ac:e8:e8:b6:e6:1c:9c:d8:d1:f1:09:d3:f4:1e:2f: 21:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0A:6F:C2:61:0D:6B:DA:F7:62:1B:F1:AA:FE:C4:A1:31:8B:E8:88 X509v3 Authority Key Identifier: keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:16:b9:4b:55:e4:2a:08:29:3b:ec:5b:91:8d:4b:d2:fb:af: 39:f5:9f:cc:0d:c4:4b:87:ae:96:c8:ae:2b:22:f5:0f:19:21: 29:fd:a3:aa:7c:0c:a5:79:52:b1:1a:a2:63:0d:df:69:40:24: 12:05:af:ac:43:a0:73:95:76:ca:11:90:00:96:dd:a5:e8:08: b8:ac:32:49:b3:9f:bf:4e:81:8e:23:0e:2f:1f:c5:e5:d3:b9: 94:fc:62:3a:e9:d1:b5:16:ad:5e:e9:99:06:75:aa:be:9e:e0: f0:c0:72:d1:31:5c:e0:38:62:69:dd:74:b1:67:f2:72:9b:c4: cd:d3:7d:5b:1f:b3:30:11:ac:6f:ce:dd:11:1a:20:b5:3c:4e: bf:62:00:51:24:5b:8b:07:8a:3e:22:9a:09:ae:0d:b6:ec:39: ae:78:5b:b8:dc:3c:6b:6b:fc:e9:34:83:08:28:91:17:aa:e1: ec:82:d0:a2:38:74:78:a7:b9:bd:5a:48:2d:57:c5:86:da:f9: 7b:b3:53:45:cf:b5:10:fb:82:06:56:d1:6e:08:c3:68:5a:9f: 2d:6a:6b:da:86:39:86:2b:07:9c:6c:ec:be:01:06:81:b5:db: 34:c8:90:72:56:22:a2:5a:c1:26:81:cf:e1:86:fe:cd:0d:b9: 02:aa:94:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv273a6yo+PB27cPPALTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ODljMzk5NWUyNDYxZDVhNTJmZDRmMTAwMDc4MmY5OWE0 ZDQ4MjIwHhcNMjUxMjA2MDMwMDU3WhcNMjUxMjA3MDMwMDU3WjAzMTEwLwYDVQQD Eyg1ODBhNmZjMjYxMGQ2YmRhZjc2MjFiZjFhYWZlYzRhMTMxOGJlODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdfT+xyuwAGLhhv989yiwH/RBXzk odke8382cVwS+wb43qmLxwsxs3O5NBhkvLyi6VhzZAtJMDXzr8rqNRhEq1KwM/sF JKITyzeZem/9ZNNPdWmx54Vm366x9SamPKcc1fK7PnqTKDfZ8SzEhOcOjYGy/zeo vSbTBqlzIh4J5wtNcBQKCL1TVXauu78g7YVEbpKFG8eZIiyweATCCcDw52yRzae2 6bj0B0RQbCi4kcfsp++rBurx3r30wQdEJrJsudioanXYnmgno4Q3Qv90l14IXbTh A3X/io7XYN0bICqTVf1h1lgjyHbMOUzpaa+s6Oi25hyc2NHxCdP0Hi8hUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgKb8JhDWva92Ib8ar+xKExi+iIMB8GA1UdIwQY MBaAFGaJw5leJGHVpS/U8QAHgvmaTUgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMt NDFlYWExZmRlMTFiLzEvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMtNDFlYWExZmRlMTFi LzEvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXha5S1Xk KggpO+xbkY1L0vuvOfWfzA3ES4eulsiuKyL1DxkhKf2jqnwMpXlSsRqiYw3faUAk EgWvrEOgc5V2yhGQAJbdpegIuKwySbOfv06BjiMOLx/F5dO5lPxiOunRtRatXumZ BnWqvp7g8MBy0TFc4Dhiad10sWfycpvEzdN9Wx+zMBGsb87dERogtTxOv2IAUSRb iweKPiKaCa4Ntuw5rnhbuNw8a2v86TSDCCiRF6rh7ILQojh0eKe5vVpILVfFhtr5 e7NTRc+1EPuCBlbRbgjDaFqfLWpr2oY5hisHnGzsvgEGgbXbNMiQclYiolrBJoHP 4Yb+zQ25AqqUsg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:53 2025 by rpki-client