This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft File: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft (raw, json) Hash identifier: /s4LtVkEhIFjfbFA4Olf6gbfbgH057toIoJzSqgs26g= Subject key identifier: 3B:E9:7A:BD:5F:D9:7B:2A:2A:F1:33:9C:52:B1:23:36:63:80:A9:AA Authority key identifier: CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E Certificate issuer: /CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e Certificate serial: 019AF49C4E08595E1ED90E1C9304F0ACD816 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft Manifest number: 0523 Signing time: Sat 06 Dec 2025 17:01:15 +0000 Manifest this update: Sat 06 Dec 2025 17:01:15 +0000 Manifest next update: Sun 07 Dec 2025 17:01:15 +0000 Files and hashes: 1: Kj9VfdUCgMk4aGgFNgZJ64WvAz4.roa (hash: B1YIPHashB6NFlEh7qNPbd/2OLMoFdhR39F9O5/IGts=) 2: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl (hash: dAuDvQecq9OR9Rsu4sVl09jo2OnjLSc57tUrAsMt/oc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:4e:08:59:5e:1e:d9:0e:1c:93:04:f0:ac:d8:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e Validity Not Before: Dec 6 17:01:15 2025 GMT Not After : Dec 7 17:01:15 2025 GMT Subject: CN=3be97abd5fd97b2a2af1339c52b123366380a9aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:df:be:03:0d:20:01:68:6c:aa:59:34:7e: 4c:b2:1f:33:bd:8c:52:32:4c:02:60:a3:4c:d5:79: 2b:cf:c9:85:9c:f3:e3:ea:53:de:36:2a:b3:aa:3b: 15:39:55:6d:cb:3f:1c:42:b3:64:b4:5f:86:fb:a8: 9f:a4:55:0b:e4:70:e0:69:f4:6e:42:ee:e7:eb:67: b2:42:9e:e9:d5:99:5e:03:2c:0d:17:e2:31:05:20: d5:2c:51:17:d7:5a:9a:1e:3d:85:cc:f5:62:79:38: 7e:42:da:0b:f1:50:1e:fb:71:93:45:72:53:1b:fc: 77:ad:88:92:0a:50:1a:b3:0d:a1:02:f7:84:cb:79: 1f:17:ca:eb:96:f7:33:6b:cc:df:19:5b:1f:c9:0d: 26:db:34:77:44:a2:c0:e0:c2:10:6f:a9:79:6d:25: a9:bb:4a:d5:c5:c5:eb:94:36:db:1c:02:47:f6:ff: 57:0e:6e:ee:80:69:10:4d:1b:ee:01:0b:6b:3b:eb: 0b:0c:41:45:10:b6:9e:cb:88:28:25:b9:3f:b3:15: f9:71:6b:38:8c:28:6a:ed:ec:cc:79:34:76:3d:22: 5f:82:59:b1:00:69:62:4f:b2:ce:86:e3:9a:11:3d: d9:f6:00:6b:80:ec:10:57:ab:98:26:4a:c0:af:d0: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E9:7A:BD:5F:D9:7B:2A:2A:F1:33:9C:52:B1:23:36:63:80:A9:AA X509v3 Authority Key Identifier: keyid:CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c6:f4:c3:7f:b5:71:1d:66:64:90:db:52:2d:b8:79:4b:a4: ff:3c:54:b9:ec:af:3c:fc:2d:73:46:5c:1a:62:6e:5d:7b:e8: 2c:50:dd:7c:3e:b0:fe:7c:19:e8:d9:5d:fc:77:b1:9e:8e:ba: 95:67:16:fa:b9:03:38:e2:b6:ca:c2:30:c2:70:e2:40:81:0b: f6:9f:0c:8c:54:88:3b:6e:ff:9d:1d:7d:a9:aa:fc:3c:21:b3: 3d:0c:0b:68:45:ae:6d:ba:6a:48:f1:1d:43:00:80:00:07:71: 62:4d:7d:f6:db:b3:c5:4b:b6:0e:e2:45:1e:4c:00:f6:68:a3: 16:07:f3:24:1e:79:42:d9:20:ad:d1:15:13:36:6e:20:e0:d6: 38:28:5d:1d:2b:dd:6b:b5:c2:34:f6:10:39:2d:09:31:f4:6d: c4:d2:df:ac:19:c4:c0:07:f6:67:cb:d3:b7:a6:90:25:9a:8e: e6:07:6b:c5:83:2c:e5:ad:96:90:d7:ee:07:54:5f:69:bd:d9: b2:17:e9:bc:14:86:a7:81:fc:7f:a3:ad:e3:bf:2f:28:e1:19: 71:1c:d6:6f:78:d9:ce:ce:00:af:63:94:93:5b:bb:16:51:e0: 63:29:55:a5:d9:9d:67:a6:d8:ea:73:89:3f:20:e6:99:26:ab: d4:d4:ea:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nE4IWV4e2Q4ckwTwrNgWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNGRkYWZjMmNmNTY1OGQwMmU1NjgyOGMyYzkxMzUzNTI5 ZWRlOGUwHhcNMjUxMjA2MTcwMTE1WhcNMjUxMjA3MTcwMTE1WjAzMTEwLwYDVQQD EygzYmU5N2FiZDVmZDk3YjJhMmFmMTMzOWM1MmIxMjMzNjYzODBhOWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzHfvgMNIAFobKpZNH5Msh8zvYxS MkwCYKNM1Xkrz8mFnPPj6lPeNiqzqjsVOVVtyz8cQrNktF+G+6ifpFUL5HDgafRu Qu7n62eyQp7p1ZleAywNF+IxBSDVLFEX11qaHj2FzPVieTh+QtoL8VAe+3GTRXJT G/x3rYiSClAasw2hAveEy3kfF8rrlvcza8zfGVsfyQ0m2zR3RKLA4MIQb6l5bSWp u0rVxcXrlDbbHAJH9v9XDm7ugGkQTRvuAQtrO+sLDEFFELaey4goJbk/sxX5cWs4 jChq7ezMeTR2PSJfglmxAGliT7LOhuOaET3Z9gBrgOwQV6uYJkrAr9B0lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvper1f2XsqKvEznFKxIzZjgKmqMB8GA1UdIwQY MBaAFM5N2vws9WWNAuVoKMLJE1NSnt6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemszYV9DejFaWTBDNVdnb3dza1RVMUtlM280LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMzk3ZmItMGRkMC00MWMzLWJjNmUt YmE4NzQzOWI3ZGE5LzEvemszYV9DejFaWTBDNVdnb3dza1RVMUtlM280Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yMzk3ZmItMGRkMC00MWMzLWJjNmUtYmE4NzQzOWI3ZGE5 LzEvemszYV9DejFaWTBDNVdnb3dza1RVMUtlM280LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8b0w3+1 cR1mZJDbUi24eUuk/zxUueyvPPwtc0ZcGmJuXXvoLFDdfD6w/nwZ6Nld/Hexno66 lWcW+rkDOOK2ysIwwnDiQIEL9p8MjFSIO27/nR19qar8PCGzPQwLaEWubbpqSPEd QwCAAAdxYk199tuzxUu2DuJFHkwA9mijFgfzJB55QtkgrdEVEzZuIODWOChdHSvd a7XCNPYQOS0JMfRtxNLfrBnEwAf2Z8vTt6aQJZqO5gdrxYMs5a2WkNfuB1Rfab3Z shfpvBSGp4H8f6Ot478vKOEZcRzWb3jZzs4Ar2OUk1u7FlHgYylVpdmdZ6bY6nOJ PyDmmSar1NTqCA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:45:00 2025 by rpki-client