This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft File: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft (raw, json) Hash identifier: A8U5wAk253tLSNe5MBnCwkXcaFaYNQLlMj7Fxbtxnoc= Subject key identifier: A5:79:80:0B:B6:2B:34:35:DF:0C:5E:91:F8:03:2D:08:BE:A6:D8:21 Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C Certificate issuer: /CN=66927b2b26b5214b9665d8dc85f414709714996c Certificate serial: 019AF276FE17D324E1093C499A8A4E60C221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft Manifest number: 1394 Signing time: Sat 06 Dec 2025 07:01:15 +0000 Manifest this update: Sat 06 Dec 2025 07:01:15 +0000 Manifest next update: Sun 07 Dec 2025 07:01:15 +0000 Files and hashes: 1: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl (hash: 746mQUxOZ8un9NLsfSROA+kD9eHve92PiS0cnxkwTVA=) 2: z14kTSlHc0FGtPp_p4eZCWL53uI.roa (hash: o0QCjev3qiHHVGYnELxUtNoSu9oIG3V8qNROrWFFFEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:fe:17:d3:24:e1:09:3c:49:9a:8a:4e:60:c2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c Validity Not Before: Dec 6 07:01:15 2025 GMT Not After : Dec 7 07:01:15 2025 GMT Subject: CN=a579800bb62b3435df0c5e91f8032d08bea6d821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:9a:7f:ff:09:49:51:76:f5:f9:84:c7:95: 66:8c:70:04:17:fd:9d:42:87:26:9c:d5:7c:1c:dc: b2:4c:72:af:9f:93:3f:27:5c:6d:b4:45:30:9f:7c: de:d6:77:8f:0e:56:4c:46:e1:0b:12:2a:49:39:f0: 7e:35:2e:a5:92:84:d0:f8:88:ba:ce:32:d1:29:8a: 1c:8d:bb:7f:9a:7d:ab:0b:a4:38:67:93:87:37:d4: fd:71:fb:c2:d8:19:3a:ba:9b:7b:ec:72:b7:0d:50: 1e:87:e1:85:28:9b:e8:b9:f8:c9:b1:18:3f:17:11: 43:23:ef:e9:07:52:e2:df:15:dc:c3:f4:ee:22:00: 0b:fb:ea:ab:d9:bf:8a:ab:33:d2:61:0a:54:d9:6a: 3b:3c:e7:41:8f:e7:bc:8f:46:c9:7c:13:9c:ea:d9: f3:c8:19:91:e4:5a:98:6a:f6:6b:99:19:0e:ed:94: 44:0b:06:34:64:10:7e:86:ac:bc:fc:be:6b:2b:29: d8:e7:02:97:0f:f0:95:01:b3:5b:a7:25:26:aa:52: 04:8e:d4:a5:bc:34:73:5e:dd:45:91:65:10:40:0e: 5b:10:69:cb:85:d6:9b:f0:78:35:73:74:01:bc:1b: d7:62:27:51:23:bf:1f:1a:ac:b6:18:31:fe:eb:7a: 48:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:79:80:0B:B6:2B:34:35:DF:0C:5E:91:F8:03:2D:08:BE:A6:D8:21 X509v3 Authority Key Identifier: keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a5:46:7d:8a:26:61:5f:02:59:cf:4e:cf:da:bf:00:6b:23: 2f:48:11:48:8d:72:40:52:9d:f0:e7:87:04:2b:6b:01:52:fb: 44:de:f3:4f:67:6b:7b:c1:c5:64:6a:b5:aa:d6:f1:9c:0b:ff: 3a:50:7e:2f:27:2b:11:f3:5e:99:75:65:bc:b1:df:64:00:a5: b4:3d:54:cb:77:ff:ba:5b:be:94:22:25:0d:4f:f0:b0:a0:9c: 97:72:8e:25:fe:ce:e9:74:6c:b5:d7:89:cd:62:b2:5f:c5:e3: 55:8e:b0:5f:83:56:2a:f1:0f:91:ff:27:f6:3a:fb:7a:60:3c: bf:d9:29:ba:3e:91:0b:cb:90:49:26:e6:98:7c:2b:88:c0:72: 95:a7:c0:4a:eb:ce:d7:02:d5:77:30:36:46:a1:2f:1c:c9:19: ac:18:f1:35:57:f4:9e:59:cf:59:7c:46:fb:46:26:3e:d9:2f: 46:72:2d:f5:ca:e6:ec:43:70:c2:e0:58:59:35:b0:2a:6d:ac: b5:cf:ed:a0:7a:25:35:4a:f0:da:ba:a9:bb:2c:c9:a7:f0:b0: bd:d7:44:11:61:06:12:5e:5f:f9:ae:cf:02:79:85:2b:04:f4: 13:a5:bf:cf:e0:fb:bf:d5:bf:a6:a2:23:88:37:68:bf:b3:90: 13:07:96:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydv4X0yThCTxJmopOYMIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTI3YjJiMjZiNTIxNGI5NjY1ZDhkYzg1ZjQxNDcwOTcx NDk5NmMwHhcNMjUxMjA2MDcwMTE1WhcNMjUxMjA3MDcwMTE1WjAzMTEwLwYDVQQD EyhhNTc5ODAwYmI2MmIzNDM1ZGYwYzVlOTFmODAzMmQwOGJlYTZkODIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Kaf/8JSVF29fmEx5VmjHAEF/2d QocmnNV8HNyyTHKvn5M/J1xttEUwn3ze1nePDlZMRuELEipJOfB+NS6lkoTQ+Ii6 zjLRKYocjbt/mn2rC6Q4Z5OHN9T9cfvC2Bk6upt77HK3DVAeh+GFKJvoufjJsRg/ FxFDI+/pB1Li3xXcw/TuIgAL++qr2b+KqzPSYQpU2Wo7POdBj+e8j0bJfBOc6tnz yBmR5FqYavZrmRkO7ZRECwY0ZBB+hqy8/L5rKynY5wKXD/CVAbNbpyUmqlIEjtSl vDRzXt1FkWUQQA5bEGnLhdab8Hg1c3QBvBvXYidRI78fGqy2GDH+63pIqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKV5gAu2KzQ13wxekfgDLQi+ptghMB8GA1UdIwQY MBaAFGaSeysmtSFLlmXY3IX0FHCXFJlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lNGNlN2MtYWQ3Yi00MDA2LThlNmEt ODAzNTJkMTQxM2Q5LzEvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9lNGNlN2MtYWQ3Yi00MDA2LThlNmEtODAzNTJkMTQxM2Q5 LzEvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaVGfYom YV8CWc9Oz9q/AGsjL0gRSI1yQFKd8OeHBCtrAVL7RN7zT2dre8HFZGq1qtbxnAv/ OlB+LycrEfNemXVlvLHfZACltD1Uy3f/ulu+lCIlDU/wsKCcl3KOJf7O6XRstdeJ zWKyX8XjVY6wX4NWKvEPkf8n9jr7emA8v9kpuj6RC8uQSSbmmHwriMBylafASuvO 1wLVdzA2RqEvHMkZrBjxNVf0nlnPWXxG+0YmPtkvRnIt9crm7ENwwuBYWTWwKm2s tc/toHolNUrw2rqpuyzJp/CwvddEEWEGEl5f+a7PAnmFKwT0E6W/z+D7v9W/pqIj iDdov7OQEweWPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:25 2025 by rpki-client