This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json) Hash identifier: 4m5yJhjjaFBeBVWVav9A8gXSWuLl4Wg3C+pFN+Mr2z0= Subject key identifier: 26:3B:8F:04:F0:F7:CE:70:58:90:39:DD:BB:D4:3E:95:6C:99:DA:3C Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e Certificate serial: 019AF6F8A58AF76BB7B40DD7663692000E98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft Manifest number: 1624 Signing time: Sun 07 Dec 2025 04:01:21 +0000 Manifest this update: Sun 07 Dec 2025 04:01:21 +0000 Manifest next update: Mon 08 Dec 2025 04:01:21 +0000 Files and hashes: 1: AuI1_5gu81vs3cIDXIzNbaWND-I.roa (hash: lsSEgLcY/ack618oc/9NRlphXCxEIj/Wq+gUEc772OI=) 2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: ki8+BXk1AQoRZkNaxvZosGcCPlDr97uu69y2g1YbcmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:a5:8a:f7:6b:b7:b4:0d:d7:66:36:92:00:0e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e Validity Not Before: Dec 7 04:01:21 2025 GMT Not After : Dec 8 04:01:21 2025 GMT Subject: CN=263b8f04f0f7ce70589039ddbbd43e956c99da3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a3:d3:cf:e5:fe:ca:7f:a3:7e:43:90:0d:86: 58:64:a9:b1:21:fe:62:98:e1:48:19:5e:dd:7e:1b: fe:e5:e4:4b:d2:d3:85:86:63:1e:ec:29:95:db:3f: d0:0b:d2:94:9b:21:12:3f:59:e2:21:72:ad:ec:0f: 13:bf:4d:a0:ff:b5:5b:5a:db:bc:89:51:cb:fb:9c: 73:91:b3:c6:ab:80:6a:b6:71:ad:e0:cb:33:e9:b2: 4f:b0:4e:51:b5:3a:86:f3:63:8d:d1:63:ed:4d:90: 2a:79:a8:54:e4:1e:d9:b7:94:90:5a:d7:6b:3d:e9: 39:47:c2:73:82:8d:e8:4d:f9:98:e4:9f:e5:12:4f: 32:96:de:e5:f3:be:1c:ce:e6:36:c9:2d:df:0e:54: 00:35:ba:65:9c:a0:65:d7:5a:0f:35:9c:56:ed:bc: 6a:ba:7c:20:34:ff:78:c9:f9:f8:17:a4:c3:bf:a5: 1d:6e:01:03:6a:6a:df:ab:ae:89:a6:5c:20:c4:fc: 84:f7:36:db:24:61:a4:cd:ae:5f:ef:77:cd:78:5f: 04:c2:0b:52:3d:49:33:ff:10:28:62:d9:db:b8:76: 8e:f1:7e:85:09:54:9f:ab:44:10:a4:5e:62:20:a9: 3e:57:f7:38:a6:27:30:2a:6f:60:10:d6:af:27:14: dd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3B:8F:04:F0:F7:CE:70:58:90:39:DD:BB:D4:3E:95:6C:99:DA:3C X509v3 Authority Key Identifier: keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f3:71:b2:9c:09:b1:25:24:b3:f5:1c:72:b8:3d:1f:62:08: e1:d2:4b:cf:2c:e8:95:c3:68:8b:c1:91:64:0c:7b:9d:1d:9c: 00:ec:b3:e7:86:c3:f6:8a:91:68:77:ca:b5:d1:cb:42:da:fb: 9d:fd:35:82:8c:5d:73:9c:89:77:f8:67:b3:10:12:ad:41:6c: af:f7:b3:55:f3:42:72:c9:d1:c1:d8:8a:ef:cd:56:76:fb:96: b3:cd:7d:d1:c3:bd:8a:34:01:9a:12:d4:2f:f2:02:c5:14:f2: 69:ad:f3:cc:e1:9f:18:0c:de:e4:a5:2a:92:af:3d:81:d4:ab: d6:fb:2e:ce:d5:29:b2:bb:a1:54:7b:3e:0d:46:b3:7a:3b:08: 31:9d:30:0a:7d:87:54:d4:30:74:5c:48:ba:89:f7:ab:0f:58: 24:4c:50:e7:4b:88:1c:81:de:be:58:c0:25:c4:e8:70:cf:c4: 33:d9:20:92:dd:32:b2:c0:17:8a:02:42:0d:f6:da:f2:e8:88: ae:02:00:e7:22:d7:39:0f:d4:58:11:45:a5:b3:be:fe:9d:62: 29:db:f0:b6:46:4d:7c:8a:ae:5e:6a:a7:d1:0c:02:fd:74:01: 8c:3e:4f:18:ca:9d:b6:1a:e5:76:2e:3d:41:ef:b2:79:e2:76: ac:f1:e9:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+KWK92u3tA3XZjaSAA6YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YWI1MWU4ZTU4Y2MxNGVkOWNiMzU3MzFhZjFkMDExZGJl MmUxMmUwHhcNMjUxMjA3MDQwMTIxWhcNMjUxMjA4MDQwMTIxWjAzMTEwLwYDVQQD EygyNjNiOGYwNGYwZjdjZTcwNTg5MDM5ZGRiYmQ0M2U5NTZjOTlkYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6PTz+X+yn+jfkOQDYZYZKmxIf5i mOFIGV7dfhv+5eRL0tOFhmMe7CmV2z/QC9KUmyESP1niIXKt7A8Tv02g/7VbWtu8 iVHL+5xzkbPGq4BqtnGt4Msz6bJPsE5RtTqG82ON0WPtTZAqeahU5B7Zt5SQWtdr Pek5R8Jzgo3oTfmY5J/lEk8ylt7l874czuY2yS3fDlQANbplnKBl11oPNZxW7bxq unwgNP94yfn4F6TDv6UdbgEDamrfq66JplwgxPyE9zbbJGGkza5f73fNeF8EwgtS PUkz/xAoYtnbuHaO8X6FCVSfq0QQpF5iIKk+V/c4picwKm9gENavJxTdZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCY7jwTw985wWJA53bvUPpVsmdo8MB8GA1UdIwQY MBaAFGWrUejljMFO2cs1cxrx0BHb4uEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jZWZmMWEtZWM2Ni00ZDQ1LWJhOWYt NDg4YTIyMjk5Y2ExLzEvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9jZWZmMWEtZWM2Ni00ZDQ1LWJhOWYtNDg4YTIyMjk5Y2Ex LzEvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/NxspwJ sSUks/Uccrg9H2II4dJLzyzolcNoi8GRZAx7nR2cAOyz54bD9oqRaHfKtdHLQtr7 nf01goxdc5yJd/hnsxASrUFsr/ezVfNCcsnRwdiK781WdvuWs8190cO9ijQBmhLU L/ICxRTyaa3zzOGfGAze5KUqkq89gdSr1vsuztUpsruhVHs+DUazejsIMZ0wCn2H VNQwdFxIuon3qw9YJExQ50uIHIHevljAJcTocM/EM9kgkt0yssAXigJCDfba8uiI rgIA5yLXOQ/UWBFFpbO+/p1iKdvwtkZNfIquXmqn0QwC/XQBjD5PGMqdthrldi49 Qe+yeeJ2rPHpjw== -----END CERTIFICATE-----Generated at Sun Dec 7 05:40:28 2025 by rpki-client