This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft (raw, json) Hash identifier: EJApor/NkwAFOBKeh3xTmk/8qQptnAPdmS8Pr1BOV3A= Subject key identifier: 59:67:4F:7B:DA:4F:17:08:F4:85:2F:EC:EF:80:42:45:C7:B9:5C:92 Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4 Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4 Certificate serial: 019AF50AD93D286F4DB5EE850695F6162186 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft Manifest number: 0176 Signing time: Sat 06 Dec 2025 19:01:59 +0000 Manifest this update: Sat 06 Dec 2025 19:01:59 +0000 Manifest next update: Sun 07 Dec 2025 19:01:59 +0000 Files and hashes: 1: t5nV1PoAdO-HNQcriDtT0k19Y0k.roa (hash: ktgVwZj6sz4wVJV68ItMtiZ3hfrl5O5Cl3g1dZAV0fs=) 2: zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl (hash: vXvDMV3rp0J226dkS9yVIyRfBckHYf6lCksJLFcOFZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:d9:3d:28:6f:4d:b5:ee:85:06:95:f6:16:21:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4 Validity Not Before: Dec 6 19:01:59 2025 GMT Not After : Dec 7 19:01:59 2025 GMT Subject: CN=59674f7bda4f1708f4852fecef804245c7b95c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d2:38:cf:8c:fc:5c:24:6b:39:b5:2b:d7:d6: fe:a4:2f:7c:2e:5d:79:9b:6c:3d:fe:3b:4e:71:9f: d4:4b:fd:98:16:77:ed:06:a5:6e:a5:3e:93:0a:e6: d4:62:6e:be:5d:3f:64:65:2b:e6:6c:56:ee:9d:1c: 82:a0:51:44:47:a5:54:f1:60:b2:c4:d9:00:83:74: fc:c3:5a:fd:4c:ae:5f:7e:87:e0:98:a1:b1:af:0a: d0:2c:3d:f7:e5:d4:0b:24:76:f8:bf:d7:3d:7a:03: 49:01:16:42:f1:fe:f8:b1:22:31:ac:f5:14:9b:5a: f9:8e:83:3b:f8:5b:a7:b7:76:d5:36:f1:2e:d6:94: 9f:74:c8:80:a9:47:8a:28:d2:3e:5a:83:66:2a:62: 6c:d9:32:3e:2a:9c:c0:e8:5a:78:7a:c5:58:91:a2: 5f:64:75:81:14:f4:e4:bc:9f:97:d8:b5:6c:b5:38: fd:66:f5:69:8a:c3:c0:15:c1:ff:63:3e:7f:9b:d4: c1:aa:91:f4:5a:ec:10:60:f3:0b:94:0c:32:3d:fe: 85:d4:b7:7d:be:75:6a:ef:9f:79:37:63:5a:6c:fb: b5:d0:12:02:b0:f8:3d:51:2e:29:1d:82:3c:1d:7c: 0b:eb:be:b7:ce:3b:5d:ef:a8:47:79:b4:4b:25:57: 9d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:67:4F:7B:DA:4F:17:08:F4:85:2F:EC:EF:80:42:45:C7:B9:5C:92 X509v3 Authority Key Identifier: keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:61:a0:85:e8:a8:97:b5:af:72:d3:8e:bf:9c:94:1a:a6:3b: bc:e7:85:7c:6f:98:87:69:19:ab:9b:12:5f:0e:d3:22:93:5b: 95:de:a0:90:6e:bd:19:ee:b5:12:b8:a4:0c:99:7f:f1:ed:98: 1a:2c:4d:74:a1:08:35:7a:03:e5:f6:c6:a8:2c:b3:cc:14:17: a0:5d:fd:28:c8:d4:7a:7f:b9:d4:5c:c5:0b:13:28:21:39:15: ce:82:e9:33:31:a4:85:48:f9:d9:10:fa:e6:5d:39:f6:a2:fd: 2e:d7:f4:a4:cc:ea:38:80:d9:5c:0b:91:e8:1d:fc:87:81:98: cc:d0:08:e8:30:76:f2:6f:65:fe:70:08:a2:11:42:b4:f9:d6: d5:95:a0:05:c8:a7:7f:9f:59:d3:c6:a6:27:83:43:2e:27:6d: 14:44:ab:ef:07:2f:ca:40:21:e6:d7:0d:5a:2e:8f:49:34:01: 31:a9:0c:62:23:b4:c4:8c:42:ba:64:63:eb:d0:48:e7:1f:a8: cb:e4:e4:ab:9d:69:03:a2:1d:d3:0f:b5:01:37:8f:12:4b:12: 62:65:53:28:85:86:b8:e9:4c:21:ea:d6:89:06:48:d9:8a:39: 93:c0:3a:67:55:c3:ce:b0:59:97:82:cd:ab:3c:19:3f:7f:27: 53:ed:1d:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ctk9KG9Nte6FBpX2FiGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjhlZmQzZTMxNjZlODFhYWNmMTU4MGUyZjBiOTRkYTI5 YjNkYjQwHhcNMjUxMjA2MTkwMTU5WhcNMjUxMjA3MTkwMTU5WjAzMTEwLwYDVQQD Eyg1OTY3NGY3YmRhNGYxNzA4ZjQ4NTJmZWNlZjgwNDI0NWM3Yjk1YzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59I4z4z8XCRrObUr19b+pC98Ll15 m2w9/jtOcZ/US/2YFnftBqVupT6TCubUYm6+XT9kZSvmbFbunRyCoFFER6VU8WCy xNkAg3T8w1r9TK5ffofgmKGxrwrQLD335dQLJHb4v9c9egNJARZC8f74sSIxrPUU m1r5joM7+Funt3bVNvEu1pSfdMiAqUeKKNI+WoNmKmJs2TI+KpzA6Fp4esVYkaJf ZHWBFPTkvJ+X2LVstTj9ZvVpisPAFcH/Yz5/m9TBqpH0WuwQYPMLlAwyPf6F1Ld9 vnVq7595N2NabPu10BICsPg9US4pHYI8HXwL6763zjtd76hHebRLJVeddQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlnT3vaTxcI9IUv7O+AQkXHuVySMB8GA1UdIwQY MBaAFM3479PjFm6Bqs8VgOLwuU2imz20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZqdjAtTVdib0dxenhXQTR2QzVUYUtiUGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84NmMxNzAtMjA2Ny00MGVlLTg5MjMt YTAzYWQ1Mjk5OTdjLzEvemZqdjAtTVdib0dxenhXQTR2QzVUYUtiUGJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84NmMxNzAtMjA2Ny00MGVlLTg5MjMtYTAzYWQ1Mjk5OTdj LzEvemZqdjAtTVdib0dxenhXQTR2QzVUYUtiUGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGGgheio l7WvctOOv5yUGqY7vOeFfG+Yh2kZq5sSXw7TIpNbld6gkG69Ge61ErikDJl/8e2Y GixNdKEINXoD5fbGqCyzzBQXoF39KMjUen+51FzFCxMoITkVzoLpMzGkhUj52RD6 5l059qL9Ltf0pMzqOIDZXAuR6B38h4GYzNAI6DB28m9l/nAIohFCtPnW1ZWgBcin f59Z08amJ4NDLidtFESr7wcvykAh5tcNWi6PSTQBMakMYiO0xIxCumRj69BI5x+o y+Tkq51pA6Id0w+1ATePEksSYmVTKIWGuOlMIerWiQZI2Yo5k8A6Z1XDzrBZl4LN qzwZP38nU+0d7Q== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:35 2025 by rpki-client