This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft File: ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json) Hash identifier: dTzri2+xx0lSxhsFNVM81zkQrqWEt2S0SHl2XZei440= Subject key identifier: 9C:E0:8F:3C:33:8E:39:CA:F1:C2:F4:F1:13:D2:E8:AA:DC:E9:3A:1A Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67 Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67 Certificate serial: 019AF46510E81179F73C6EF3C11FB5162AE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 16:00:55 +0000 Manifest this update: Sat 06 Dec 2025 16:00:55 +0000 Manifest next update: Sun 07 Dec 2025 16:00:55 +0000 Files and hashes: 1: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: 0IzgNSEReH2aZko8ZAS6zI1k5qIHhDl5iDhnUvfVNvg=) 2: uq1i3QTcOfr9aoUS3uiTj-7_PxQ.roa (hash: TsR7okYr+7CVrm7zPPpfCJyYKvk1uxkHBTpNsw0aMrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:10:e8:11:79:f7:3c:6e:f3:c1:1f:b5:16:2a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67 Validity Not Before: Dec 6 16:00:55 2025 GMT Not After : Dec 7 16:00:55 2025 GMT Subject: CN=9ce08f3c338e39caf1c2f4f113d2e8aadce93a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:78:2c:38:d8:71:5d:f1:d4:d1:bb:f3:5d: 2f:6f:8b:c0:33:df:44:6c:03:bf:c3:6e:74:c7:af: 58:be:ed:bf:3d:14:3f:35:12:30:fe:67:9c:11:1c: d4:3f:ab:d7:0e:06:86:c0:14:80:4c:7e:88:b7:9c: dd:0d:f4:86:a5:82:ab:29:dc:b0:3c:e5:77:fc:6d: 78:9e:29:c4:b2:e4:e8:f8:75:ba:07:9c:96:a6:8d: 6b:8a:ae:6e:54:db:a9:c9:9d:55:59:0d:e8:04:bc: c1:e0:8d:57:0b:c4:b5:cf:a7:0e:d7:07:7b:51:d1: dd:1b:ce:98:71:85:05:4b:e7:30:42:21:cf:ce:6c: 25:dc:7c:8a:d2:90:01:0a:eb:82:b0:61:b7:e1:b7: 9b:a8:9e:8b:8b:3d:2d:36:d1:58:5a:21:4e:4a:01: f0:fb:36:6b:1c:3e:b1:c6:72:d5:b8:51:4e:db:e0: 3c:32:9b:7c:11:b9:34:fa:5e:0f:10:55:53:3d:0c: c5:4b:85:d4:e4:24:c8:8f:0d:e0:03:76:a0:eb:bb: 58:da:11:d2:34:54:50:20:dd:10:ab:71:21:7a:52: b9:a9:4b:0d:e9:eb:a4:26:bc:f4:5d:91:86:52:af: d0:71:e6:91:ee:2e:c6:bd:6e:78:ce:01:da:0b:33: 7f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E0:8F:3C:33:8E:39:CA:F1:C2:F4:F1:13:D2:E8:AA:DC:E9:3A:1A X509v3 Authority Key Identifier: keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:01:c6:03:7d:9c:5a:e6:4d:c3:f2:66:8e:57:34:51:b5:b4: 87:3c:7a:5d:7a:f3:74:12:4b:a2:bc:20:a6:ae:83:52:fe:ef: 65:12:09:fd:be:4b:db:d4:75:7c:c0:dc:50:2a:7b:9a:a9:f3: b0:64:b2:24:4c:39:1d:9d:54:82:94:4e:f6:6f:a7:25:e0:20: b2:88:21:4b:8d:24:0b:21:a1:81:94:d7:c1:2a:43:3c:35:a7: 93:92:51:33:07:08:ba:73:de:eb:ab:3d:30:32:79:ce:35:a3: 7f:10:b2:01:a5:e4:ca:b2:8e:5e:80:a5:8c:f5:66:52:f4:3c: de:fb:9e:d6:df:6f:d9:e1:53:87:84:5b:c4:cc:3e:19:ec:8f: 48:44:a0:39:61:b6:ca:f8:21:2a:cf:08:ec:35:d1:8b:12:3a: 0d:1e:58:ec:61:68:7e:97:69:b2:95:0b:2b:43:c2:7f:34:70: 40:9b:20:5d:54:33:8c:bf:38:0e:e2:ad:22:c4:ac:12:c2:cc: 4c:3a:bc:06:5c:98:eb:af:fd:c9:91:b2:fa:4b:4b:4d:af:dd: 69:3f:5d:d7:c6:dc:52:e7:e1:ab:e8:9f:68:93:a8:48:9f:2b: b8:1c:13:82:46:b0:06:e0:20:dc:ea:25:fc:0f:0a:f8:ed:eb: b3:f5:89:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRDoEXn3PG7zwR+1FirlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZGVkODVkOWEwNWIxZGY2ODlhOGI2YzMxM2Y4MTI4Yzdh MDBiNjcwHhcNMjUxMjA2MTYwMDU1WhcNMjUxMjA3MTYwMDU1WjAzMTEwLwYDVQQD Eyg5Y2UwOGYzYzMzOGUzOWNhZjFjMmY0ZjExM2QyZThhYWRjZTkzYTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjJ4LDjYcV3x1NG7810vb4vAM99E bAO/w250x69Yvu2/PRQ/NRIw/mecERzUP6vXDgaGwBSATH6It5zdDfSGpYKrKdyw POV3/G14ninEsuTo+HW6B5yWpo1riq5uVNupyZ1VWQ3oBLzB4I1XC8S1z6cO1wd7 UdHdG86YcYUFS+cwQiHPzmwl3HyK0pABCuuCsGG34bebqJ6Liz0tNtFYWiFOSgHw +zZrHD6xxnLVuFFO2+A8Mpt8Ebk0+l4PEFVTPQzFS4XU5CTIjw3gA3ag67tY2hHS NFRQIN0Qq3EhelK5qUsN6eukJrz0XZGGUq/QceaR7i7GvW54zgHaCzN/4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzgjzwzjjnK8cL08RPS6Krc6ToaMB8GA1UdIwQY MBaAFGTe2F2aBbHfaJqLbDE/gSjHoAtnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUt YjllYjg3MWY2ZDk2LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUtYjllYjg3MWY2ZDk2 LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAHGA32c WuZNw/Jmjlc0UbW0hzx6XXrzdBJLorwgpq6DUv7vZRIJ/b5L29R1fMDcUCp7mqnz sGSyJEw5HZ1UgpRO9m+nJeAgsoghS40kCyGhgZTXwSpDPDWnk5JRMwcIunPe66s9 MDJ5zjWjfxCyAaXkyrKOXoCljPVmUvQ83vue1t9v2eFTh4RbxMw+GeyPSESgOWG2 yvghKs8I7DXRixI6DR5Y7GFofpdpspULK0PCfzRwQJsgXVQzjL84DuKtIsSsEsLM TDq8BlyY66/9yZGy+ktLTa/daT9d18bcUufhq+ifaJOoSJ8ruBwTgkawBuAg3Ool /A8K+O3rs/WJ+g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:43:51 2025 by rpki-client