This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft File: zn_f9IC7kN2LJtKCMJrxYEVeyws.mft (raw, json) Hash identifier: sXE1Y2nacuKoMcR/nyX99fk0ULSkTdnJfvKL/ecsAHM= Subject key identifier: 31:96:94:AE:BB:38:47:65:13:3D:8B:23:3A:77:6E:1A:17:2C:59:B8 Authority key identifier: CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B Certificate issuer: /CN=ce7fdff480bb90dd8b26d282309af160455ecb0b Certificate serial: 019AF0BF8DB3F4640B72CB96D485AD732CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft Manifest number: 0270 Signing time: Fri 05 Dec 2025 23:01:16 +0000 Manifest this update: Fri 05 Dec 2025 23:01:16 +0000 Manifest next update: Sat 06 Dec 2025 23:01:16 +0000 Files and hashes: 1: SQJJoXqFqNGjLH2o_g2vHuBkV6k.roa (hash: nQwkpZGomRtyEWqgatsYZovUvrMoig7TXoDGcNqHozM=) 2: zn_f9IC7kN2LJtKCMJrxYEVeyws.crl (hash: 7MC1dOdV43a3KYESvZ2eS4epv91YL970kBS8K/b0feQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:8d:b3:f4:64:0b:72:cb:96:d4:85:ad:73:2c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce7fdff480bb90dd8b26d282309af160455ecb0b Validity Not Before: Dec 5 23:01:16 2025 GMT Not After : Dec 6 23:01:16 2025 GMT Subject: CN=319694aebb384765133d8b233a776e1a172c59b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:50:05:13:29:bd:e7:6f:df:3a:a1:a5:75:f2: cd:47:9e:ae:2d:79:9f:9f:17:47:29:1e:36:c1:af: b0:0d:59:0d:f5:34:2f:88:2b:9c:b5:3d:28:f3:cf: dc:86:86:bc:af:53:94:38:a5:f1:92:06:dc:ea:09: 20:4b:3a:79:b7:3d:07:16:f5:d0:09:ab:3d:3f:f5: 6e:de:cd:ee:37:29:27:8f:f6:e9:9a:71:b9:48:0e: 41:10:c3:11:dd:89:d3:9e:1e:13:bd:1b:3c:ca:e8: b1:89:99:1f:2c:6f:84:4e:ba:d3:20:32:c1:85:13: bb:56:98:41:62:79:e0:b7:57:b0:38:6d:03:21:a4: 26:fe:4b:55:75:ff:87:8f:14:68:7b:6b:3b:6b:03: e9:46:90:4b:13:14:2d:cf:2d:f0:e5:63:b3:78:1e: 49:95:3e:d0:ae:c6:0c:c8:91:6d:40:dd:c1:cb:f1: f4:36:74:b3:97:fb:ad:2d:47:9f:85:e8:3c:d4:f4: d7:26:8f:f6:d7:bf:31:ba:d8:df:db:35:6e:2f:bf: d3:43:29:9f:e4:32:e8:d7:7b:61:a6:6f:9b:4d:f3: 0a:54:89:4d:7b:48:be:47:44:84:23:2e:21:b1:05: a8:1c:51:12:46:ba:e8:e5:6f:45:c6:e5:84:4b:e5: d7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:96:94:AE:BB:38:47:65:13:3D:8B:23:3A:77:6E:1A:17:2C:59:B8 X509v3 Authority Key Identifier: keyid:CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:02:e9:88:0f:0a:de:b6:d3:b2:96:a5:c0:66:75:70:35:b7: d9:9d:db:6f:33:47:fe:fd:49:34:fb:b6:67:1b:07:0e:b2:3d: f4:4f:25:60:06:e7:22:e9:42:83:38:c3:87:78:48:e4:13:55: 9f:b3:dd:a6:28:aa:2f:64:c6:df:a4:1c:29:15:38:c6:a6:56: 3f:3c:01:98:03:da:80:6b:1e:72:a8:20:04:1a:8d:92:7f:cd: 50:a0:e5:3e:a3:37:ba:34:1c:a6:27:4f:09:92:78:fb:7c:c5: d1:24:e8:b7:8c:7c:e6:d1:71:7b:76:2b:27:24:28:85:15:c2: 11:75:8c:c2:01:7e:fa:0d:53:79:a3:34:c2:aa:ab:b9:e7:c7: a6:e8:06:99:b1:61:74:81:19:89:29:54:ca:de:7c:07:82:01: 53:e3:69:6e:92:7e:1e:9e:15:fb:61:ae:4e:57:09:d3:f4:c8: 59:61:41:76:3a:04:26:6c:0a:30:11:a9:60:3b:f1:58:f5:21: cd:9c:14:13:c4:cf:dc:01:0f:e1:9a:4d:9d:52:47:0c:4f:09: c8:ef:63:f5:57:0c:ee:9a:49:90:3c:9f:dc:bb:a1:50:bd:d4: 65:9e:66:de:36:73:93:1d:74:f8:77:e5:d0:13:38:be:87:11: f1:81:d9:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv42z9GQLcsuW1IWtcyzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlN2ZkZmY0ODBiYjkwZGQ4YjI2ZDI4MjMwOWFmMTYwNDU1 ZWNiMGIwHhcNMjUxMjA1MjMwMTE2WhcNMjUxMjA2MjMwMTE2WjAzMTEwLwYDVQQD EygzMTk2OTRhZWJiMzg0NzY1MTMzZDhiMjMzYTc3NmUxYTE3MmM1OWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lAFEym952/fOqGldfLNR56uLXmf nxdHKR42wa+wDVkN9TQviCuctT0o88/choa8r1OUOKXxkgbc6gkgSzp5tz0HFvXQ Cas9P/Vu3s3uNyknj/bpmnG5SA5BEMMR3YnTnh4TvRs8yuixiZkfLG+ETrrTIDLB hRO7VphBYnngt1ewOG0DIaQm/ktVdf+HjxRoe2s7awPpRpBLExQtzy3w5WOzeB5J lT7QrsYMyJFtQN3By/H0NnSzl/utLUefheg81PTXJo/2178xutjf2zVuL7/TQymf 5DLo13thpm+bTfMKVIlNe0i+R0SEIy4hsQWoHFESRrro5W9FxuWES+XXZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGWlK67OEdlEz2LIzp3bhoXLFm4MB8GA1UdIwQY MBaAFM5/3/SAu5DdiybSgjCa8WBFXssLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMt ZTEyZDE2ZjQ0MTUzLzEvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMtZTEyZDE2ZjQ0MTUz LzEvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwLpiA8K 3rbTspalwGZ1cDW32Z3bbzNH/v1JNPu2ZxsHDrI99E8lYAbnIulCgzjDh3hI5BNV n7PdpiiqL2TG36QcKRU4xqZWPzwBmAPagGsecqggBBqNkn/NUKDlPqM3ujQcpidP CZJ4+3zF0STot4x85tFxe3YrJyQohRXCEXWMwgF++g1TeaM0wqqruefHpugGmbFh dIEZiSlUyt58B4IBU+NpbpJ+Hp4V+2GuTlcJ0/TIWWFBdjoEJmwKMBGpYDvxWPUh zZwUE8TP3AEP4ZpNnVJHDE8JyO9j9VcM7ppJkDyf3LuhUL3UZZ5m3jZzkx10+Hfl 0BM4vocR8YHZrg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:14 2025 by rpki-client