This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json) Hash identifier: L9lIrLAzyPVOEw+WMEDgNZWqQcJ2fDnkppAywWgm0zA= Subject key identifier: B7:AB:F0:00:73:DC:9D:F2:3E:5B:A7:19:04:49:F2:63:2E:F4:00:DD Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f Certificate serial: 019AF208A5068F1596CF01639AD4B6EF2230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft Manifest number: 0B5D Signing time: Sat 06 Dec 2025 05:00:43 +0000 Manifest this update: Sat 06 Dec 2025 05:00:43 +0000 Manifest next update: Sun 07 Dec 2025 05:00:43 +0000 Files and hashes: 1: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: 3czk/S3P9ZJ3j+yimj3KbNO+CHwvuQbZpVChTyNV1MQ=) 2: kvXcpQTzKfI6gYewmYSpRpe0IKs.roa (hash: My61/36Uwh1IIiMu1AIZdI2rmfYYECW0U4UcdSmLLaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a5:06:8f:15:96:cf:01:63:9a:d4:b6:ef:22:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f Validity Not Before: Dec 6 05:00:43 2025 GMT Not After : Dec 7 05:00:43 2025 GMT Subject: CN=b7abf00073dc9df23e5ba7190449f2632ef400dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:8c:9c:0b:d6:7c:13:cb:a6:f6:fb:b6:48: 21:4f:a4:8e:dc:61:62:f2:97:79:ac:96:53:10:6c: 5b:dc:e6:15:35:59:4d:67:39:7b:d2:11:ce:e5:91: be:96:9a:c7:51:1e:d7:95:98:25:b8:31:ab:45:fe: e8:97:78:5a:22:ad:31:3e:58:d8:56:7f:2c:7b:44: e8:e3:8f:30:70:8b:80:3f:ec:ce:61:2d:38:57:fa: 24:ac:19:84:78:b7:1e:c0:16:7f:20:4c:29:79:6b: 32:09:32:c4:8e:76:9d:04:38:5c:2f:6f:c1:13:a0: 2e:67:c4:6a:2c:6b:2b:67:7b:ab:e6:9c:20:7c:e6: 64:c5:8c:62:43:80:5a:4b:93:1a:00:84:3d:71:f6: 36:46:05:04:9e:4b:e6:1f:09:d4:48:a6:05:ce:7f: 97:65:ab:c6:a5:b3:4e:4d:37:2f:e2:f0:16:82:33: fe:59:68:f6:85:a3:f5:f2:44:f3:ac:58:56:d9:0d: 93:3b:69:bc:1d:8d:0b:a8:56:59:d1:92:76:cc:9d: ec:cf:a4:fb:da:e1:ca:4f:0c:b0:ab:66:68:e5:14: 99:2f:fb:5d:b7:da:1e:6c:bc:89:5b:95:23:1f:b6: f5:72:a5:c9:ce:a8:0a:37:d0:12:b9:44:3c:ed:f8: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AB:F0:00:73:DC:9D:F2:3E:5B:A7:19:04:49:F2:63:2E:F4:00:DD X509v3 Authority Key Identifier: keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f9:54:fe:bf:65:83:64:08:81:89:5e:cc:46:8d:3b:77:e6: 49:70:79:97:ce:01:07:0f:14:82:b5:83:7c:ee:19:e9:06:fb: f8:10:c4:78:8b:63:60:da:54:8c:09:ef:05:71:e1:ae:d1:c7: 2d:dc:d9:ae:7e:0c:48:4e:d6:a5:1e:ab:f0:cc:7e:78:22:8d: cd:ff:3c:28:17:86:47:5a:11:cf:1f:3c:be:03:c2:33:79:d8: b4:4a:05:d2:96:09:ac:b9:46:57:59:f3:9c:30:a6:21:07:c9: 4c:79:fb:bb:45:b2:93:eb:25:2a:53:6e:06:d0:bc:cc:f3:c0: ab:f1:13:5b:c3:0e:6f:2b:9e:0b:bb:98:5b:d6:dc:27:70:e0: 0c:9f:2a:df:6b:de:3a:d2:83:67:54:63:d4:c1:2d:d4:d3:bd: 8c:a0:fa:6f:ea:8a:41:6e:55:d2:de:4e:f5:e3:33:61:7e:4a: b3:8b:77:f7:b1:12:33:c8:22:b9:a8:53:61:5f:ba:f4:8f:ef: 45:3b:86:0b:b6:0e:d7:fa:8f:44:4c:ac:53:ea:a6:03:bf:45: 36:d7:0a:d7:d6:3e:37:6b:ac:b2:a3:f7:92:b9:61:5f:76:3f: 2b:ec:88:0d:d1:a3:d3:45:b6:40:da:4c:39:90:48:ad:22:ea: 70:d0:c1:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKUGjxWWzwFjmtS27yIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDkxODgzY2I0YzUwMTIyZmRiMjc1NGI2MjUyZmRkNmZj OWQ1MWYwHhcNMjUxMjA2MDUwMDQzWhcNMjUxMjA3MDUwMDQzWjAzMTEwLwYDVQQD EyhiN2FiZjAwMDczZGM5ZGYyM2U1YmE3MTkwNDQ5ZjI2MzJlZjQwMGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHWMnAvWfBPLpvb7tkghT6SO3GFi 8pd5rJZTEGxb3OYVNVlNZzl70hHO5ZG+lprHUR7XlZgluDGrRf7ol3haIq0xPljY Vn8se0To448wcIuAP+zOYS04V/okrBmEeLcewBZ/IEwpeWsyCTLEjnadBDhcL2/B E6AuZ8RqLGsrZ3ur5pwgfOZkxYxiQ4BaS5MaAIQ9cfY2RgUEnkvmHwnUSKYFzn+X ZavGpbNOTTcv4vAWgjP+WWj2haP18kTzrFhW2Q2TO2m8HY0LqFZZ0ZJ2zJ3sz6T7 2uHKTwywq2Zo5RSZL/tdt9oebLyJW5UjH7b1cqXJzqgKN9ASuUQ87fjWqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLer8ABz3J3yPlunGQRJ8mMu9ADdMB8GA1UdIwQY MBaAFGZJGIPLTFASL9snVLYlL91vydUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEt NzVkNmJlNGU1YzM3LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEtNzVkNmJlNGU1YzM3 LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPlU/r9l g2QIgYlezEaNO3fmSXB5l84BBw8UgrWDfO4Z6Qb7+BDEeItjYNpUjAnvBXHhrtHH LdzZrn4MSE7WpR6r8Mx+eCKNzf88KBeGR1oRzx88vgPCM3nYtEoF0pYJrLlGV1nz nDCmIQfJTHn7u0Wyk+slKlNuBtC8zPPAq/ETW8MObyueC7uYW9bcJ3DgDJ8q32ve OtKDZ1Rj1MEt1NO9jKD6b+qKQW5V0t5O9eMzYX5Ks4t397ESM8giuahTYV+69I/v RTuGC7YO1/qPREysU+qmA79FNtcK19Y+N2ussqP3krlhX3Y/K+yIDdGj00W2QNpM OZBIrSLqcNDBTg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:42 2025 by rpki-client