This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft File: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft (raw, json) Hash identifier: QxI40eqbDN9BXUN10FUHqdF9ojSxhyCtkiDAAMlUidM= Subject key identifier: 18:A4:AA:75:1C:97:20:F2:CC:E1:97:F2:59:74:77:6E:22:88:1A:D8 Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7 Certificate issuer: /CN=646836c9214faaa16798a93e8773e599534b29d7 Certificate serial: 019AF766C7503BBE5A5887D7BD7A0948FE3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft Manifest number: 08D1 Signing time: Sun 07 Dec 2025 06:01:39 +0000 Manifest this update: Sun 07 Dec 2025 06:01:39 +0000 Manifest next update: Mon 08 Dec 2025 06:01:39 +0000 Files and hashes: 1: 61Gq7F9HDY76tR6eiEQWqVAvCDc.roa (hash: UnYiE/hrC17fToVR4tEZHFP7UPTNmsiE/lDxvNs6zSU=) 2: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl (hash: rYD9EtuG7cViMzfBkUfHRRyKg4a9fpdPQPTDT5hvDVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:66:c7:50:3b:be:5a:58:87:d7:bd:7a:09:48:fe:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7 Validity Not Before: Dec 7 06:01:39 2025 GMT Not After : Dec 8 06:01:39 2025 GMT Subject: CN=18a4aa751c9720f2cce197f25974776e22881ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ed:85:c3:21:28:a6:f8:0e:a6:29:c4:b8:aa: de:92:e9:74:f1:69:a0:e2:31:77:9e:f4:0d:32:06: ad:46:07:0f:f4:e6:ce:71:31:45:b8:37:4f:48:e4: fd:df:2b:ce:79:89:1a:98:ae:ee:0b:a9:e3:d5:b1: 31:57:36:40:e0:f4:97:4f:22:50:2c:45:54:e1:29: bb:e1:ed:b2:bb:de:e1:b8:f9:12:96:4f:b9:4f:de: 07:43:62:e6:7e:9e:7e:ae:fb:ae:31:d6:75:b8:92: 95:ff:a4:a8:db:80:ba:8f:16:d9:e2:1f:63:4c:96: 4f:0f:3f:c1:b8:77:3e:e0:a6:70:7d:3a:92:85:77: f8:6b:1e:62:e2:ef:5b:65:8b:ea:68:55:d6:f9:be: 4c:49:e1:7f:07:6b:72:0a:5c:02:8d:cd:cc:bb:12: 5a:43:74:d8:b8:52:32:2c:3a:84:5e:d3:ee:58:4b: c5:d6:e0:9a:17:14:f0:66:35:e7:5c:33:d4:af:96: e0:ce:29:63:30:4a:d0:62:cb:18:6f:44:ad:2c:5a: 66:2c:fb:26:35:0b:9e:2e:06:96:64:e8:c2:11:90: 80:31:bb:63:f8:1c:31:02:24:4b:a7:3b:c1:9a:bb: c2:9c:2c:b5:8d:bd:be:78:4b:cc:65:22:a3:ac:47: eb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A4:AA:75:1C:97:20:F2:CC:E1:97:F2:59:74:77:6E:22:88:1A:D8 X509v3 Authority Key Identifier: keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:30:17:c0:94:af:7d:a6:9a:a7:34:b0:c5:b5:77:7d:49:08: 6c:0d:f4:3f:d3:76:41:1e:42:85:0f:4a:02:6f:b0:0c:21:b8: 0c:5c:2f:c9:ae:a0:3b:e9:b4:f2:bf:32:93:92:a6:4b:81:0e: ae:fe:cd:f2:3f:9d:ff:bd:93:c4:13:30:ca:6a:b6:db:d5:b4: 23:83:51:70:89:2e:42:4a:98:c6:38:12:3b:e7:06:76:97:bb: 66:c7:5d:2e:0c:38:be:ce:89:03:82:31:08:cd:84:2a:7d:c0: e9:14:db:1d:80:56:2a:e8:fe:2e:d7:fc:74:9d:60:a5:ce:69: 6e:f7:01:b8:49:87:49:5e:54:dd:13:f3:74:40:71:b7:53:77: 88:18:76:7d:98:14:4b:1c:f4:33:09:33:f4:83:da:af:32:7e: 5b:5c:97:e7:db:a8:04:30:04:1b:ee:d4:93:e3:61:88:b0:85: a9:f2:a1:3d:53:50:02:c9:78:e6:c1:01:3e:02:07:89:5a:26: 31:48:ac:2c:ac:51:cb:c2:d8:b4:8b:a6:a3:bf:fd:5e:d6:90: 19:84:b9:76:f2:d0:aa:bb:9e:53:05:f8:22:c9:e4:6f:74:04: fd:dd:e7:2b:9a:b5:dc:39:a8:36:15:0f:7a:dd:df:bf:41:93: d3:cc:c6:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3ZsdQO75aWIfXvXoJSP48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NjgzNmM5MjE0ZmFhYTE2Nzk4YTkzZTg3NzNlNTk5NTM0 YjI5ZDcwHhcNMjUxMjA3MDYwMTM5WhcNMjUxMjA4MDYwMTM5WjAzMTEwLwYDVQQD EygxOGE0YWE3NTFjOTcyMGYyY2NlMTk3ZjI1OTc0Nzc2ZTIyODgxYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6u2FwyEopvgOpinEuKrekul08Wmg 4jF3nvQNMgatRgcP9ObOcTFFuDdPSOT93yvOeYkamK7uC6nj1bExVzZA4PSXTyJQ LEVU4Sm74e2yu97huPkSlk+5T94HQ2Lmfp5+rvuuMdZ1uJKV/6So24C6jxbZ4h9j TJZPDz/BuHc+4KZwfTqShXf4ax5i4u9bZYvqaFXW+b5MSeF/B2tyClwCjc3MuxJa Q3TYuFIyLDqEXtPuWEvF1uCaFxTwZjXnXDPUr5bgziljMErQYssYb0StLFpmLPsm NQueLgaWZOjCEZCAMbtj+BwxAiRLpzvBmrvCnCy1jb2+eEvMZSKjrEfrmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBikqnUclyDyzOGX8ll0d24iiBrYMB8GA1UdIwQY MBaAFGRoNskhT6qhZ5ipPodz5ZlTSynXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYt NWU4MjJmMzEwNjM4LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYtNWU4MjJmMzEwNjM4 LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDAXwJSv faaapzSwxbV3fUkIbA30P9N2QR5ChQ9KAm+wDCG4DFwvya6gO+m08r8yk5KmS4EO rv7N8j+d/72TxBMwymq229W0I4NRcIkuQkqYxjgSO+cGdpe7ZsddLgw4vs6JA4Ix CM2EKn3A6RTbHYBWKuj+Ltf8dJ1gpc5pbvcBuEmHSV5U3RPzdEBxt1N3iBh2fZgU Sxz0Mwkz9IParzJ+W1yX59uoBDAEG+7Uk+NhiLCFqfKhPVNQAsl45sEBPgIHiVom MUisLKxRy8LYtIumo7/9XtaQGYS5dvLQqrueUwX4Isnkb3QE/d3nK5q13DmoNhUP et3fv0GT08zGcQ== -----END CERTIFICATE-----Generated at Sun Dec 7 11:37:48 2025 by rpki-client