This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json) Hash identifier: cYQeFd/Rw3yVNNn1iFjWXzsbQetNHErlP4z2ssdiMXg= Subject key identifier: 5E:82:9A:50:28:3A:C5:8D:47:F4:4C:59:34:3D:A9:12:92:FC:5F:51 Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b Certificate serial: 019AF208B577D2EA31A58F2FE33F10D4FBFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft Manifest number: 04B8 Signing time: Sat 06 Dec 2025 05:00:48 +0000 Manifest this update: Sat 06 Dec 2025 05:00:48 +0000 Manifest next update: Sun 07 Dec 2025 05:00:48 +0000 Files and hashes: 1: 9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa (hash: yFMJTSvXNN5G3iWxcUQycJKuWi+/CwtiHhA9xSKG2JY=) 2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: kQE4H0lrK/1rMrjVQMxEgoIKdF/G+z3w2HaDr7sr4Rg=) 3: uJJnjUiM_NZxiukKj0SMAuEZu9s.roa (hash: rKuDWrBp0PYOBRz7NFxaGHHnL+VoADNHakfLXL6TQaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b5:77:d2:ea:31:a5:8f:2f:e3:3f:10:d4:fb:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b Validity Not Before: Dec 6 05:00:48 2025 GMT Not After : Dec 7 05:00:48 2025 GMT Subject: CN=5e829a50283ac58d47f44c59343da91292fc5f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5d:c0:d6:51:c3:1f:82:2f:82:cd:d8:9a:74: d0:18:15:51:be:14:df:a2:e3:df:00:78:0d:1f:fc: 58:37:99:de:24:c4:6f:af:18:34:ba:39:62:b6:51: e6:6b:4b:27:35:12:28:5b:86:23:18:08:cc:98:41: ab:95:74:96:60:58:30:90:e9:31:c4:af:14:ee:d7: f7:a7:75:19:27:5c:23:2d:8f:ee:b3:f1:a1:0e:ae: 67:4e:c8:55:5d:59:58:ee:64:e0:8f:8e:32:8d:ee: 79:db:b2:d1:c3:62:b2:ab:aa:0c:15:fe:e3:37:76: c3:ec:2b:ec:d4:09:8b:8a:1f:f4:88:5e:c7:b3:ac: 0b:9e:cf:4b:4a:e9:88:f5:bf:35:35:31:dc:05:e1: ab:69:17:b4:bb:8d:40:9c:01:80:69:52:83:e4:51: 98:de:7c:16:ef:ce:82:82:7b:64:dc:22:42:78:c8: c3:74:e5:4b:d0:1b:69:d8:76:2f:8b:49:6a:21:82: 34:46:cf:12:f7:db:16:2e:ca:a1:6d:80:52:90:32: fe:25:c9:2f:53:e4:d8:6b:18:eb:d5:3d:fe:57:41: d7:fb:f1:1e:76:5b:63:65:b3:9a:da:91:05:5f:ee: 31:1a:21:1d:7d:4d:3b:b1:d3:25:1a:a1:fb:f5:4c: 80:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:82:9A:50:28:3A:C5:8D:47:F4:4C:59:34:3D:A9:12:92:FC:5F:51 X509v3 Authority Key Identifier: keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ef:0a:16:8b:8b:13:2f:eb:e4:f4:02:b9:f1:86:cc:1a:0f: 4e:9c:16:dd:b6:92:b3:0d:77:04:ad:61:f8:1f:15:b2:51:51: 8b:2d:e7:bd:77:d1:b8:13:e6:19:ed:eb:fe:e4:95:f6:31:56: de:44:20:48:6d:f2:05:2c:8e:21:f9:d5:ae:df:6f:28:37:44: 3c:85:d9:cb:93:65:d1:54:5d:95:4e:f3:30:b1:6f:53:44:e0: a5:29:eb:e7:73:29:eb:c9:d1:9f:5c:1a:0d:2e:9a:99:50:b0: 28:4f:c0:61:1f:10:fb:3a:0e:e8:54:04:03:b7:76:af:16:4c: 6c:77:a0:bc:07:04:17:99:df:ce:3d:f7:51:d2:9b:3b:d1:28: 03:a7:2b:4d:5f:d2:5c:15:bb:3c:a5:b5:10:10:7b:a5:8b:b3: 9b:ff:b2:c3:fd:45:ab:28:0f:e8:dc:e1:4f:1a:59:df:7c:34: f3:87:0e:8e:e4:99:d3:63:43:4f:b4:f1:16:22:e0:f8:fc:4d: 7a:83:b0:5c:58:7c:56:f1:5c:0c:1b:9e:94:e4:93:d5:20:15: c7:17:58:26:96:e8:c3:3b:bb:9a:05:a9:47:1e:3f:45:08:f4: 37:dc:09:36:24:01:2c:41:29:b3:63:2c:fb:bb:b1:ac:5a:0d: e3:42:7c:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLV30uoxpY8v4z8Q1Pv6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NTljZjM0ZDRjZmM1OTY0MDg2MmQxZTRiNzlkNDhkOWU0 ZDhlN2IwHhcNMjUxMjA2MDUwMDQ4WhcNMjUxMjA3MDUwMDQ4WjAzMTEwLwYDVQQD Eyg1ZTgyOWE1MDI4M2FjNThkNDdmNDRjNTkzNDNkYTkxMjkyZmM1ZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll3A1lHDH4Ivgs3YmnTQGBVRvhTf ouPfAHgNH/xYN5neJMRvrxg0ujlitlHma0snNRIoW4YjGAjMmEGrlXSWYFgwkOkx xK8U7tf3p3UZJ1wjLY/us/GhDq5nTshVXVlY7mTgj44yje5527LRw2Kyq6oMFf7j N3bD7Cvs1AmLih/0iF7Hs6wLns9LSumI9b81NTHcBeGraRe0u41AnAGAaVKD5FGY 3nwW786Cgntk3CJCeMjDdOVL0Btp2HYvi0lqIYI0Rs8S99sWLsqhbYBSkDL+Jckv U+TYaxjr1T3+V0HX+/EedltjZbOa2pEFX+4xGiEdfU07sdMlGqH79UyAXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6CmlAoOsWNR/RMWTQ9qRKS/F9RMB8GA1UdIwQY MBaAFGVZzzTUz8WWQIYtHkt51I2eTY57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAt MTM0MWRlOGFiZTUxLzEvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAtMTM0MWRlOGFiZTUx LzEvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+8KFouL Ey/r5PQCufGGzBoPTpwW3baSsw13BK1h+B8VslFRiy3nvXfRuBPmGe3r/uSV9jFW 3kQgSG3yBSyOIfnVrt9vKDdEPIXZy5Nl0VRdlU7zMLFvU0TgpSnr53Mp68nRn1wa DS6amVCwKE/AYR8Q+zoO6FQEA7d2rxZMbHegvAcEF5nfzj33UdKbO9EoA6crTV/S XBW7PKW1EBB7pYuzm/+yw/1FqygP6NzhTxpZ33w084cOjuSZ02NDT7TxFiLg+PxN eoOwXFh8VvFcDBuelOST1SAVxxdYJpbowzu7mgWpRx4/RQj0N9wJNiQBLEEps2Ms +7uxrFoN40J8PA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:41 2025 by rpki-client