This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft File: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft (raw, json) Hash identifier: PG05xcJSqSQObvpx3gqMPWn2YuNKNkzcDtldcXFtHP4= Subject key identifier: 14:63:F6:D8:EA:02:DD:26:D0:6A:D9:8D:E5:BC:12:C5:10:78:ED:09 Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22 Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222 Certificate serial: 019AF12EBA09CE9399805038CA303F0F75BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft Manifest number: 0EFC Signing time: Sat 06 Dec 2025 01:02:42 +0000 Manifest this update: Sat 06 Dec 2025 01:02:42 +0000 Manifest next update: Sun 07 Dec 2025 01:02:42 +0000 Files and hashes: 1: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl (hash: r2JVu+7NvVs0+yAsX8m+TlXIshBp2yJtfTD+seCVnBo=) 2: bmxfR1YI28e9AvruScrILUTRG3I.roa (hash: cqN9qg0IAUOQT2Uuvb3v+aRnSBYZJQOZClfPWFzUISg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ba:09:ce:93:99:80:50:38:ca:30:3f:0f:75:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222 Validity Not Before: Dec 6 01:02:42 2025 GMT Not After : Dec 7 01:02:42 2025 GMT Subject: CN=1463f6d8ea02dd26d06ad98de5bc12c51078ed09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:eb:88:d5:7f:18:8b:5a:3f:8c:71:13:b0: f7:a0:a0:b4:00:84:b2:b9:34:08:8b:f7:76:8c:16: 02:f8:c6:57:3a:d8:bd:2a:b6:e9:80:bd:46:51:b5: 0a:4b:19:31:d6:30:e8:23:cd:9a:f6:ad:d7:e3:56: 9f:1d:e4:fc:1e:2b:5d:ea:cd:31:9a:f1:94:9f:c0: 10:47:9f:59:93:7b:67:83:45:a4:8c:1d:50:53:ef: 75:c1:db:a4:6c:37:73:3d:61:2c:e5:7e:81:5c:c9: e0:60:4d:5a:3f:37:3d:c3:c5:24:cd:88:65:0c:b8: e5:b5:eb:ea:ef:bf:3f:f5:cd:3e:b0:c8:74:63:c7: 7c:69:39:4b:20:7c:83:72:4c:61:75:3b:ae:da:65: a4:08:ac:e0:83:31:3f:74:b9:4f:2d:3b:a9:1a:fd: 6a:58:26:5d:1d:11:68:34:2c:47:ba:fa:74:0c:92: f2:56:92:4f:8e:5a:90:7e:72:c6:0f:c0:eb:a7:58: db:b8:af:52:7a:1d:3a:d8:8b:ae:a7:f5:af:fc:c4: 50:f5:ef:46:5e:3f:2c:0a:93:ce:65:66:d6:d6:87: 31:d1:c5:b0:26:5d:01:b5:83:72:fa:a1:57:44:db: 7d:7c:f5:3a:17:ef:49:eb:31:0c:8d:90:ba:78:ab: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:63:F6:D8:EA:02:DD:26:D0:6A:D9:8D:E5:BC:12:C5:10:78:ED:09 X509v3 Authority Key Identifier: keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:95:cd:2a:50:1e:63:99:8c:0d:40:67:92:90:3c:e8:9d:25: c1:1d:39:d3:cb:71:cc:53:d5:d3:b4:c9:b1:53:c2:a2:7e:98: 08:3e:f2:55:03:f7:bc:a7:0c:ae:85:83:e7:5e:2e:b5:90:8e: df:16:09:51:76:c8:e0:be:e3:74:73:b6:42:ec:77:4a:1f:ba: e2:4c:ff:9d:dc:ba:dd:61:43:21:4a:d6:87:8a:de:eb:56:f9: 8f:87:aa:5a:c7:f6:2f:42:f0:8b:e4:24:0f:98:29:5b:90:e7: 6a:94:e7:2f:73:2d:e6:08:e4:51:5b:cd:fb:18:1b:80:03:b3: 11:df:8f:e6:88:0f:c0:a9:3b:76:63:ca:0a:a8:8c:60:17:a2: 43:a2:2c:ac:0a:e6:e8:9a:21:fb:d3:12:85:b3:de:7b:e5:d3: 91:2c:63:e4:30:1f:29:a9:c1:de:2e:ac:78:e7:2b:43:e6:aa: 88:22:52:fd:db:de:66:8b:72:ba:73:43:01:bc:54:cb:10:92: dc:7b:e4:4d:e5:0e:0a:15:4b:89:f8:cb:7d:ef:31:f1:5a:e0: 31:b2:39:82:6a:0c:07:30:e0:29:0a:63:38:53:e1:a6:c8:4e: f5:cd:dc:c5:41:85:0d:36:d9:da:ab:4b:3b:74:d1:61:bc:b6: 42:2b:25:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLroJzpOZgFA4yjA/D3W+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MDQ3Yjk4N2JlOTc0Mjc4NWJhOGU4YjMzYWMwNzdiZjlj N2EyMjIwHhcNMjUxMjA2MDEwMjQyWhcNMjUxMjA3MDEwMjQyWjAzMTEwLwYDVQQD EygxNDYzZjZkOGVhMDJkZDI2ZDA2YWQ5OGRlNWJjMTJjNTEwNzhlZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmnriNV/GItaP4xxE7D3oKC0AISy uTQIi/d2jBYC+MZXOti9KrbpgL1GUbUKSxkx1jDoI82a9q3X41afHeT8Hitd6s0x mvGUn8AQR59Zk3tng0WkjB1QU+91wdukbDdzPWEs5X6BXMngYE1aPzc9w8UkzYhl DLjltevq778/9c0+sMh0Y8d8aTlLIHyDckxhdTuu2mWkCKzggzE/dLlPLTupGv1q WCZdHRFoNCxHuvp0DJLyVpJPjlqQfnLGD8Drp1jbuK9Seh062Iuup/Wv/MRQ9e9G Xj8sCpPOZWbW1ocx0cWwJl0BtYNy+qFXRNt9fPU6F+9J6zEMjZC6eKvbyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRj9tjqAt0m0GrZjeW8EsUQeO0JMB8GA1UdIwQY MBaAFGcEe5h76XQnhbqOizOsB3v5x6IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYt ZThlZGYyOTI0NWMwLzEvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYtZThlZGYyOTI0NWMw LzEvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZXNKlAe Y5mMDUBnkpA86J0lwR0508txzFPV07TJsVPCon6YCD7yVQP3vKcMroWD514utZCO 3xYJUXbI4L7jdHO2Qux3Sh+64kz/ndy63WFDIUrWh4re61b5j4eqWsf2L0Lwi+Qk D5gpW5DnapTnL3Mt5gjkUVvN+xgbgAOzEd+P5ogPwKk7dmPKCqiMYBeiQ6IsrArm 6Joh+9MShbPee+XTkSxj5DAfKanB3i6seOcrQ+aqiCJS/dveZotyunNDAbxUyxCS 3HvkTeUOChVLifjLfe8x8VrgMbI5gmoMBzDgKQpjOFPhpshO9c3cxUGFDTbZ2qtL O3TRYby2Qisl/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:23 2025 by rpki-client