This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft File: ZpDQciFADjewHnSnEvrnxtcDFZU.mft (raw, json) Hash identifier: bnj+F6BEmg9GEyNIHFycg0QzjM+zKXEStkRvR5ogjyU= Subject key identifier: 49:19:7D:E2:27:C9:B4:AC:1B:38:21:F3:F5:61:98:F4:41:A2:6F:DC Authority key identifier: 66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95 Certificate issuer: /CN=6690d07221400e37b01e74a712fae7c6d7031595 Certificate serial: 019AF08817B34D723D36D703EAC339CF850C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft Manifest number: 120E Signing time: Fri 05 Dec 2025 22:00:42 +0000 Manifest this update: Fri 05 Dec 2025 22:00:42 +0000 Manifest next update: Sat 06 Dec 2025 22:00:42 +0000 Files and hashes: 1: ZpDQciFADjewHnSnEvrnxtcDFZU.crl (hash: UCJeHeS2SJtwDpSfdhuZ90mped/PlvXylh16jZe+QhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:17:b3:4d:72:3d:36:d7:03:ea:c3:39:cf:85:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6690d07221400e37b01e74a712fae7c6d7031595 Validity Not Before: Dec 5 22:00:42 2025 GMT Not After : Dec 6 22:00:42 2025 GMT Subject: CN=49197de227c9b4ac1b3821f3f56198f441a26fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2a:77:74:c0:f7:fd:9a:57:86:b0:6f:6a:7c: f6:f7:7a:b3:0a:02:4d:02:fa:0f:38:06:12:be:4d: d7:52:6b:78:78:17:ee:96:af:2f:8a:09:e6:b5:d8: 8f:f2:e1:8b:51:f3:67:72:8a:0b:dd:b3:f6:09:0e: a5:00:d4:f1:cb:b2:f0:b3:61:84:cf:18:eb:78:e8: 45:0d:96:04:ca:46:e4:f4:4f:a3:ed:ef:21:c8:b8: 7d:c7:74:76:c9:4b:8c:fe:19:56:b1:18:23:e7:91: 81:67:00:e1:29:a0:14:d0:4d:43:1a:6b:b4:47:e4: 4c:bf:11:03:4e:88:83:ec:18:ac:c3:f2:a6:01:67: 22:7d:22:9e:8d:b1:ea:a1:c5:a7:54:83:65:a4:1f: 1d:ea:b3:29:0a:b6:09:e5:68:e1:05:51:3d:88:6e: ce:63:a9:46:29:2e:cc:45:d3:a6:35:0e:a0:09:73: fe:28:67:a4:23:c1:21:9f:32:1d:a3:99:ae:c9:17: 6f:ba:30:50:19:4e:bd:85:49:11:39:4c:e8:35:9e: f0:23:92:20:51:ad:fb:9f:09:b4:28:76:cb:2a:51: 86:1e:08:86:48:e6:52:7a:14:64:05:18:a2:74:9a: ec:3d:ff:b6:bc:3a:28:6f:d1:02:79:2e:a4:ee:5c: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:19:7D:E2:27:C9:B4:AC:1B:38:21:F3:F5:61:98:F4:41:A2:6F:DC X509v3 Authority Key Identifier: keyid:66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7f:07:7a:dd:f0:c9:98:68:75:8e:d8:6c:77:4d:98:5f:e8: 1b:61:4f:59:ea:25:ca:fd:7b:5f:99:4a:b1:54:74:f5:f3:fd: b7:81:98:2c:27:62:2c:eb:09:ef:55:2f:d7:06:4c:1d:0f:58: 29:6c:52:b9:34:b6:8e:24:e3:cf:37:b2:20:e2:c4:d6:14:92: 64:24:3f:f9:43:ca:21:cf:55:6c:c2:4c:d4:d7:d3:b8:6f:c2: 4d:32:c6:1c:3e:99:f5:8e:24:59:1e:fd:c3:39:23:55:5f:29: 77:dd:9e:24:88:90:4d:17:4d:74:7b:7f:df:45:97:07:9d:d6: b5:c3:62:d0:b8:ee:48:8b:36:0b:c0:14:ad:82:d8:6d:52:f6: 27:54:ae:d2:2a:78:c1:d8:9a:4f:3c:a2:23:f5:1d:65:d4:a7: d4:7d:84:86:84:ce:95:90:e9:c2:44:ac:72:31:71:c9:5a:ab: e1:d4:ad:d1:85:d7:2a:66:55:4e:c9:1c:70:d4:da:39:59:4e: 45:34:27:31:c4:f8:42:57:df:38:37:07:8f:13:56:0e:aa:fc: 39:0b:9c:2f:06:de:f7:91:ab:72:eb:a6:e2:02:93:a7:85:ea: 7b:06:e8:01:f0:c3:7e:53:01:50:14:69:2d:3d:12:f6:86:1b: f0:45:d1:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiBezTXI9NtcD6sM5z4UMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTBkMDcyMjE0MDBlMzdiMDFlNzRhNzEyZmFlN2M2ZDcw MzE1OTUwHhcNMjUxMjA1MjIwMDQyWhcNMjUxMjA2MjIwMDQyWjAzMTEwLwYDVQQD Eyg0OTE5N2RlMjI3YzliNGFjMWIzODIxZjNmNTYxOThmNDQxYTI2ZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryp3dMD3/ZpXhrBvanz293qzCgJN AvoPOAYSvk3XUmt4eBfulq8vignmtdiP8uGLUfNncooL3bP2CQ6lANTxy7Lws2GE zxjreOhFDZYEykbk9E+j7e8hyLh9x3R2yUuM/hlWsRgj55GBZwDhKaAU0E1DGmu0 R+RMvxEDToiD7Bisw/KmAWcifSKejbHqocWnVINlpB8d6rMpCrYJ5WjhBVE9iG7O Y6lGKS7MRdOmNQ6gCXP+KGekI8EhnzIdo5muyRdvujBQGU69hUkROUzoNZ7wI5Ig Ua37nwm0KHbLKlGGHgiGSOZSehRkBRiidJrsPf+2vDoob9ECeS6k7lxr9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkZfeInybSsGzgh8/VhmPRBom/cMB8GA1UdIwQY MBaAFGaQ0HIhQA43sB50pxL658bXAxWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNTY1YjItZGMxOC00NDYwLWJmMDIt NDYxYWNiOGExYzlmLzEvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9kNTY1YjItZGMxOC00NDYwLWJmMDItNDYxYWNiOGExYzlm LzEvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS38Het3w yZhodY7YbHdNmF/oG2FPWeolyv17X5lKsVR09fP9t4GYLCdiLOsJ71Uv1wZMHQ9Y KWxSuTS2jiTjzzeyIOLE1hSSZCQ/+UPKIc9VbMJM1NfTuG/CTTLGHD6Z9Y4kWR79 wzkjVV8pd92eJIiQTRdNdHt/30WXB53WtcNi0LjuSIs2C8AUrYLYbVL2J1Su0ip4 wdiaTzyiI/UdZdSn1H2EhoTOlZDpwkSscjFxyVqr4dSt0YXXKmZVTskccNTaOVlO RTQnMcT4QlffODcHjxNWDqr8OQucLwbe95Grcuum4gKTp4XqewboAfDDflMBUBRp LT0S9oYb8EXR4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:56 2025 by rpki-client