This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json) Hash identifier: RX6S7KC6DwhOoxTSL/K8XAYaktgWBd5OZgL/9KlYDIo= Subject key identifier: BF:F1:31:0E:6E:64:52:8A:99:FE:A0:1D:94:66:6A:47:92:41:1F:A9 Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8 Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8 Certificate serial: 019AF31BF4BC9DC72F20906011BCB11240FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 10:01:26 +0000 Manifest this update: Sat 06 Dec 2025 10:01:26 +0000 Manifest next update: Sun 07 Dec 2025 10:01:26 +0000 Files and hashes: 1: Wi8TeX6HlCf6UscTIz-eiQunz20.roa (hash: iC2va1BTrYFKnldJrvaufKukdaOfozas1t65U+xf85Q=) 2: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: hqL2HeksLvFQkD9hSN3P3EhQro+u73rxGdBM/r/k1D4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:f4:bc:9d:c7:2f:20:90:60:11:bc:b1:12:40:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8 Validity Not Before: Dec 6 10:01:26 2025 GMT Not After : Dec 7 10:01:26 2025 GMT Subject: CN=bff1310e6e64528a99fea01d94666a4792411fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:29:9e:64:dd:e1:46:68:9b:76:3a:f7:84:40: 02:2d:6f:66:e1:2a:f1:eb:9a:fa:b2:47:f0:1d:3c: 60:40:e4:77:5e:2a:0e:df:3c:5e:f1:34:9e:2d:13: 98:75:84:3c:2f:3f:4e:3f:0f:92:a2:83:38:70:99: 0e:99:08:24:a2:aa:46:23:eb:99:0d:8d:a7:33:d4: 5e:0a:07:6c:96:fd:96:15:6d:ae:0b:95:34:34:fb: 7e:00:0e:e7:0c:6c:2a:89:60:51:66:44:43:96:18: dd:38:d9:30:ba:74:fc:28:a0:49:f1:43:fe:f4:78: 48:0b:56:d9:be:66:94:cd:a0:a7:74:23:07:a0:76: cd:da:3b:4d:f7:f0:14:61:04:57:2b:02:b9:80:4f: e3:da:3e:9d:cb:f8:0c:d3:3e:42:25:c4:99:5f:7d: 57:75:12:8c:fb:c9:75:38:12:f1:7c:af:06:f0:e3: d7:0d:69:b1:d9:42:af:65:4d:a0:ce:43:03:50:e3: 2e:72:b7:17:7b:5c:73:53:ec:22:40:c3:d0:4e:52: 2a:07:d0:ec:a9:d1:61:dd:53:a7:f8:0b:0a:17:f7: b6:c8:70:2c:b7:18:8d:bb:4a:98:73:47:c8:fe:a9: 55:a6:ea:e0:e9:9d:d8:ae:80:29:78:81:bf:82:e5: 15:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F1:31:0E:6E:64:52:8A:99:FE:A0:1D:94:66:6A:47:92:41:1F:A9 X509v3 Authority Key Identifier: keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:69:2a:82:59:10:15:fb:24:df:c0:f9:f4:4b:79:f4:50:83: 16:ad:89:d7:09:9f:10:99:7c:d4:5d:6d:34:5a:e5:90:75:9e: c5:8b:a4:9b:2c:92:b1:4b:9b:9a:5c:1a:f9:b0:6d:04:c8:e9: b2:e0:93:43:dc:92:f3:69:ed:03:2e:93:68:9b:56:01:ec:49: 3a:3d:d5:99:d8:f3:d1:7b:cc:0f:14:fd:b2:c2:ee:85:cf:f2: 1d:ca:5b:fe:2f:e2:82:bb:d2:f5:9e:d3:2a:57:cb:44:01:85: 76:4f:a1:e4:56:b5:ff:89:28:54:09:68:4c:af:83:c8:1a:cb: 21:27:5c:69:a6:4d:b3:0c:da:dd:1e:34:1a:54:58:52:f2:57: f6:51:db:f9:be:4d:ee:6e:07:24:0d:5f:a6:91:22:bd:78:d3: 43:24:b9:fe:59:b0:64:88:e6:f9:13:21:0a:b1:fa:f0:2c:e6: 11:21:88:52:5f:2e:3c:d3:89:07:bd:2e:c1:be:20:25:62:f8: e7:62:c5:55:ca:25:79:d4:81:5f:04:ef:35:9b:43:c3:41:6d: 55:63:e4:0c:b1:ac:2b:90:11:49:c5:30:c8:1f:74:20:5d:fd: 38:43:6e:25:a1:5b:c5:16:7e:d2:b4:b4:d8:04:c2:9b:40:9b: 5b:dd:e5:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/S8nccvIJBgEbyxEkD7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1N2VkNmY1YmJhNjMzZDU1MjY5ZmRkMDU2YmNmNjBjNjhj N2IyYjgwHhcNMjUxMjA2MTAwMTI2WhcNMjUxMjA3MTAwMTI2WjAzMTEwLwYDVQQD EyhiZmYxMzEwZTZlNjQ1MjhhOTlmZWEwMWQ5NDY2NmE0NzkyNDExZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqymeZN3hRmibdjr3hEACLW9m4Srx 65r6skfwHTxgQOR3XioO3zxe8TSeLROYdYQ8Lz9OPw+SooM4cJkOmQgkoqpGI+uZ DY2nM9ReCgdslv2WFW2uC5U0NPt+AA7nDGwqiWBRZkRDlhjdONkwunT8KKBJ8UP+ 9HhIC1bZvmaUzaCndCMHoHbN2jtN9/AUYQRXKwK5gE/j2j6dy/gM0z5CJcSZX31X dRKM+8l1OBLxfK8G8OPXDWmx2UKvZU2gzkMDUOMucrcXe1xzU+wiQMPQTlIqB9Ds qdFh3VOn+AsKF/e2yHAstxiNu0qYc0fI/qlVpurg6Z3YroApeIG/guUVswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/xMQ5uZFKKmf6gHZRmakeSQR+pMB8GA1UdIwQY MBaAFGV+1vW7pjPVUmn90Fa89gxox7K4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8wNjRmYWMtZWRkZC00OTAzLWExM2Qt MGI5Yzc2YzBkOTFjLzEvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8wNjRmYWMtZWRkZC00OTAzLWExM2QtMGI5Yzc2YzBkOTFj LzEvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGkqglkQ Ffsk38D59Et59FCDFq2J1wmfEJl81F1tNFrlkHWexYukmyySsUubmlwa+bBtBMjp suCTQ9yS82ntAy6TaJtWAexJOj3Vmdjz0XvMDxT9ssLuhc/yHcpb/i/igrvS9Z7T KlfLRAGFdk+h5Fa1/4koVAloTK+DyBrLISdcaaZNswza3R40GlRYUvJX9lHb+b5N 7m4HJA1fppEivXjTQyS5/lmwZIjm+RMhCrH68CzmESGIUl8uPNOJB70uwb4gJWL4 52LFVcoledSBXwTvNZtDw0FtVWPkDLGsK5ARScUwyB90IF39OENuJaFbxRZ+0rS0 2ATCm0CbW93lkg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:27 2025 by rpki-client