This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft File: ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft (raw, json) Hash identifier: a08rkgkMZh8kfVxmLlwW1UEbJft808VFdqypJVjxxT4= Subject key identifier: 76:29:0C:E3:68:49:0D:82:75:AC:94:24:DA:28:38:F5:9A:F3:9C:39 Authority key identifier: 64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F Certificate issuer: /CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f Certificate serial: 019AF0BF4AD99DB0FE2ADC7832032CF5CD8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft Manifest number: 118D Signing time: Fri 05 Dec 2025 23:00:59 +0000 Manifest this update: Fri 05 Dec 2025 23:00:59 +0000 Manifest next update: Sat 06 Dec 2025 23:00:59 +0000 Files and hashes: 1: ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl (hash: JcORSCFxv9Nhzm9+xP6pSRUmMz0+jLABvVeT3oRGJFw=) 2: natM_WPGOslxNGy-WWG31EWqeRQ.roa (hash: tw5Pi8YXZ8+HgAyIg5gw92v0qWpZtmlxf2AnJMSdWBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:4a:d9:9d:b0:fe:2a:dc:78:32:03:2c:f5:cd:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f Validity Not Before: Dec 5 23:00:59 2025 GMT Not After : Dec 6 23:00:59 2025 GMT Subject: CN=76290ce368490d8275ac9424da2838f59af39c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:84:c9:ff:07:b9:ca:c3:05:c0:93:9a:ee: ca:7c:c5:ea:d3:31:aa:16:92:d6:cd:a4:ca:78:e2: 91:05:d8:f8:54:a4:f7:ad:06:3e:9b:67:6b:28:fa: 87:db:07:54:df:e6:ad:9a:a9:7f:b6:3c:2a:15:fa: e5:b8:17:6e:72:5d:8b:71:41:c6:2a:e2:21:68:63: 5a:84:6f:4c:aa:85:04:f2:5d:7a:5a:96:f5:db:cf: db:de:41:56:4f:52:db:49:8f:a9:b3:79:03:1d:76: 50:38:6f:4d:c5:6a:5d:42:f9:2e:58:aa:6e:56:6b: c3:04:f1:c9:20:b6:62:1c:94:ba:fd:9e:35:ad:d7: c5:da:1b:65:5f:50:0a:42:2c:63:13:de:9e:04:09: cb:38:87:20:42:91:d8:0f:3e:02:ea:ea:6c:a8:08: 1e:1e:38:06:74:fb:fe:20:57:47:80:88:1e:83:f7: 63:97:a1:00:c7:78:4e:7c:bf:49:6c:c0:d4:2f:47: 0b:cd:43:c0:9e:11:0d:20:62:47:3b:f3:3e:d9:65: d2:dd:0a:f2:f3:83:03:56:6b:62:58:04:08:0e:ad: e5:35:73:16:9f:ff:d9:ab:41:3d:62:cd:24:1a:70: 1b:e9:02:92:17:ae:65:6a:f7:28:4f:d4:ba:1c:be: a1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:29:0C:E3:68:49:0D:82:75:AC:94:24:DA:28:38:F5:9A:F3:9C:39 X509v3 Authority Key Identifier: keyid:64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:52:7a:4e:82:05:dd:cc:d9:29:8a:81:a9:74:58:92:6e:d8: ae:ab:1e:5f:57:e1:b4:3d:c6:d5:97:7a:e0:22:bc:8e:a8:0b: 38:3a:1e:66:11:6a:57:e9:28:7f:79:cc:59:2e:5f:41:29:21: d0:c3:93:a2:0a:88:cd:68:23:b7:41:39:a1:db:ff:c7:ce:a6: 68:e9:e6:a4:08:56:24:97:95:b2:e9:a1:a8:d2:ce:53:d7:a9: f4:ef:24:20:ef:f3:d4:94:d1:1f:c6:c6:15:0d:af:c0:e1:9b: 04:42:b3:43:9f:cc:df:e1:9c:21:e3:83:e3:95:1f:86:70:01: d8:a3:64:67:b5:64:2b:dc:48:69:b6:4d:95:a1:21:49:88:7a: c6:0f:78:bc:2f:d7:79:c2:76:c2:3c:60:75:af:60:33:b6:cc: e9:61:2b:4f:cb:37:0a:6a:d6:b2:26:9d:e2:1b:db:d9:e4:b2: d4:58:d8:f3:f5:da:e7:85:38:6a:31:4d:9c:f4:8b:24:cf:cc: 6d:a1:af:19:e4:48:5a:cd:91:3c:c1:15:d2:3c:fd:87:4c:a5: ec:b9:b0:3a:65:93:df:b8:ce:a5:1a:11:8d:3b:73:51:29:cf: 39:2a:ab:9f:f2:55:20:3b:49:ab:b3:d7:20:54:26:87:56:3d: a8:bf:76:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0rZnbD+Ktx4MgMs9c2MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZTY3ZjdlYmMwYTgxMGI4OGMwYWFkMzQwYzI2ZWRjYjQ1 ZGU2NWYwHhcNMjUxMjA1MjMwMDU5WhcNMjUxMjA2MjMwMDU5WjAzMTEwLwYDVQQD Eyg3NjI5MGNlMzY4NDkwZDgyNzVhYzk0MjRkYTI4MzhmNTlhZjM5YzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssOEyf8HucrDBcCTmu7KfMXq0zGq FpLWzaTKeOKRBdj4VKT3rQY+m2drKPqH2wdU3+atmql/tjwqFfrluBducl2LcUHG KuIhaGNahG9MqoUE8l16Wpb128/b3kFWT1LbSY+ps3kDHXZQOG9NxWpdQvkuWKpu VmvDBPHJILZiHJS6/Z41rdfF2htlX1AKQixjE96eBAnLOIcgQpHYDz4C6upsqAge HjgGdPv+IFdHgIgeg/djl6EAx3hOfL9JbMDUL0cLzUPAnhENIGJHO/M+2WXS3Qry 84MDVmtiWAQIDq3lNXMWn//Zq0E9Ys0kGnAb6QKSF65lavcoT9S6HL6hEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYpDONoSQ2CdayUJNooOPWa85w5MB8GA1UdIwQY MBaAFGTmf368CoELiMCq00DCbty0XeZfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk9aX2Zyd0tnUXVJd0tyVFFNSnUzTFJkNWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYWI3OWYtYWJjMS00YTYyLWJjNjkt NDQyMjk5ZjQxMmZkLzEvWk9aX2Zyd0tnUXVJd0tyVFFNSnUzTFJkNWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jYWI3OWYtYWJjMS00YTYyLWJjNjktNDQyMjk5ZjQxMmZk LzEvWk9aX2Zyd0tnUXVJd0tyVFFNSnUzTFJkNWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFJ6ToIF 3czZKYqBqXRYkm7YrqseX1fhtD3G1Zd64CK8jqgLODoeZhFqV+kof3nMWS5fQSkh 0MOTogqIzWgjt0E5odv/x86maOnmpAhWJJeVsumhqNLOU9ep9O8kIO/z1JTRH8bG FQ2vwOGbBEKzQ5/M3+GcIeOD45UfhnAB2KNkZ7VkK9xIabZNlaEhSYh6xg94vC/X ecJ2wjxgda9gM7bM6WErT8s3CmrWsiad4hvb2eSy1FjY8/Xa54U4ajFNnPSLJM/M baGvGeRIWs2RPMEV0jz9h0yl7LmwOmWT37jOpRoRjTtzUSnPOSqrn/JVIDtJq7PX IFQmh1Y9qL928A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:07 2025 by rpki-client