This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json) Hash identifier: EThodA4Tb35D7iyy5eT96jxnmqa/0QO0+i7ZmMpma/8= Subject key identifier: D7:EB:F3:2E:CA:96:64:71:48:8C:F1:25:D1:FF:CB:98:56:FD:17:8E Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76 Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876 Certificate serial: 019AF1D185C69AC11D3D5F29A10228C0DC3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: E_L2oklniQj05pWuM0xgBEBv9Z0.roa (hash: vggfw58sjlCL17O/pPVvpJxnAr4298gihw1aekiLNHY=) 2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: GSLmjP+RLZMIyEnU5ZO7A+TNRfodNzCu+Nmi5UDBqgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:85:c6:9a:c1:1d:3d:5f:29:a1:02:28:c0:dc:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876 Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=d7ebf32eca966471488cf125d1ffcb9856fd178e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5c:57:ba:93:e0:3c:3e:9a:9a:18:64:3f:72: 33:ae:c1:d9:18:1d:9f:b4:1b:57:ab:06:f1:17:1b: 71:99:ff:84:c6:5c:fa:1c:23:14:1b:c2:33:43:18: 4a:20:98:bc:d0:ed:8d:b4:10:97:15:63:dd:72:a7: d8:ce:87:2e:70:5b:94:da:e9:29:42:47:ff:6f:f3: 55:d1:02:a5:af:4f:81:a0:f9:57:ef:e0:d5:33:4f: 01:5a:8c:68:a7:04:8b:76:17:f7:f5:14:d3:c6:22: e3:bc:90:e0:e1:b8:fe:a4:3c:3a:8b:0e:a9:af:9f: fa:7d:7e:36:7e:33:1b:04:7f:af:69:ed:05:c9:91: d7:e9:75:6e:40:85:75:52:66:4d:ec:45:83:c4:ba: b6:1c:98:bd:a6:24:53:e0:46:6a:5d:95:d9:b5:c0: 54:cc:ef:9c:44:c2:fd:73:f0:84:6b:05:84:e4:02: 45:30:77:22:0b:24:a6:61:f1:f5:7f:0f:77:42:5d: 96:41:f2:1f:33:1f:23:4a:4b:2a:78:c1:3e:21:d0: da:c6:40:6b:99:47:31:b2:ed:a7:0d:70:95:24:77: 8a:f3:cf:41:50:3f:9f:15:ce:58:00:59:4f:41:fe: 6a:c0:af:f0:2a:ed:f9:02:56:00:11:3b:b8:c2:30: 85:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EB:F3:2E:CA:96:64:71:48:8C:F1:25:D1:FF:CB:98:56:FD:17:8E X509v3 Authority Key Identifier: keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f0:b9:f7:ef:25:e6:1a:c6:5c:1d:39:1b:21:8d:c3:51:1f: a9:62:6d:54:6a:69:dc:81:a9:fc:f7:46:1d:e6:ee:35:83:f3: 4d:4e:11:b5:e7:4c:76:a5:4a:1c:ca:2e:36:e9:5b:c3:d6:0b: 1a:b9:9c:26:8a:96:af:a8:e9:fc:f0:27:81:4a:46:9e:89:2b: 3d:49:65:21:64:80:36:83:9e:bb:5e:32:54:c8:46:41:16:78: ae:2b:46:e7:04:d4:02:2c:04:f0:cc:32:77:a6:4b:f1:88:70: f4:ee:ff:01:4e:a2:a6:c1:03:89:8b:7e:eb:4c:20:83:ac:5a: 71:90:e6:b7:cd:e4:e4:76:2b:63:66:72:e3:23:82:f4:c9:7a: 8a:0b:36:b9:74:19:e3:9c:0f:8b:d8:32:46:92:d1:91:fe:c3: e0:e3:87:f8:f4:94:da:99:ca:bd:9c:16:ed:08:92:9a:37:34: 58:71:2f:e9:28:cc:73:94:4d:07:f9:47:57:3c:78:46:63:9c: 42:d1:cb:ba:2a:1f:00:13:99:5c:0c:4f:d2:98:6d:94:35:86: f4:37:de:32:c1:49:95:3a:5d:46:18:01:84:47:2e:0f:9d:5d: b8:09:b8:50:f6:f2:b5:e7:46:e4:2d:22:0f:36:f1:ea:4f:b7: 63:94:75:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YXGmsEdPV8poQIowNw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OTZmYjg5YThhMjNjYmU0ZjJhZGIxNjVjODlmMjZkZThh Yjc4NzYwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD EyhkN2ViZjMyZWNhOTY2NDcxNDg4Y2YxMjVkMWZmY2I5ODU2ZmQxNzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51xXupPgPD6amhhkP3IzrsHZGB2f tBtXqwbxFxtxmf+Exlz6HCMUG8IzQxhKIJi80O2NtBCXFWPdcqfYzocucFuU2ukp Qkf/b/NV0QKlr0+BoPlX7+DVM08BWoxopwSLdhf39RTTxiLjvJDg4bj+pDw6iw6p r5/6fX42fjMbBH+vae0FyZHX6XVuQIV1UmZN7EWDxLq2HJi9piRT4EZqXZXZtcBU zO+cRML9c/CEawWE5AJFMHciCySmYfH1fw93Ql2WQfIfMx8jSksqeME+IdDaxkBr mUcxsu2nDXCVJHeK889BUD+fFc5YAFlPQf5qwK/wKu35AlYAETu4wjCFSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfr8y7KlmRxSIzxJdH/y5hW/ReOMB8GA1UdIwQY MBaAFGWW+4moojy+TyrbFlyJ8m3oq3h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUt MjAyZTE5YzA4OGIxLzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUtMjAyZTE5YzA4OGIx LzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/C59+8l 5hrGXB05GyGNw1EfqWJtVGpp3IGp/PdGHebuNYPzTU4RtedMdqVKHMouNulbw9YL GrmcJoqWr6jp/PAngUpGnokrPUllIWSANoOeu14yVMhGQRZ4ritG5wTUAiwE8Mwy d6ZL8Yhw9O7/AU6ipsEDiYt+60wgg6xacZDmt83k5HYrY2Zy4yOC9Ml6igs2uXQZ 45wPi9gyRpLRkf7D4OOH+PSU2pnKvZwW7QiSmjc0WHEv6SjMc5RNB/lHVzx4RmOc QtHLuiofABOZXAxP0phtlDWG9DfeMsFJlTpdRhgBhEcuD51duAm4UPbytedG5C0i Dzbx6k+3Y5R1/g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:03 2025 by rpki-client