This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft File: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft (raw, json) Hash identifier: Tv9gOkIMsvDOFsphLmai6HgAOxmi9RKtvc2g0M8BRKw= Subject key identifier: 1B:F0:F3:22:56:FB:4A:04:85:F7:F3:B1:13:A6:6C:5F:9E:C9:09:0C Authority key identifier: 66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46 Certificate issuer: /CN=66953361ff6c0083fd93d52865033319863fbc46 Certificate serial: 019B35A05CC156AFB1DBAEE35255B514CA69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft Manifest number: 09C5 Signing time: Fri 19 Dec 2025 08:01:00 +0000 Manifest this update: Fri 19 Dec 2025 08:01:00 +0000 Manifest next update: Sat 20 Dec 2025 08:01:00 +0000 Files and hashes: 1: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl (hash: rRR6oub3MByHKI9f1E+5w4DdOCWXRkLazxNfEFcz+wE=) 2: x7YKpAfSkOct6Fg0XF9orQA6c8g.roa (hash: TXWS81jR34NiA/SsVNyLTEvMyxNkcObY8WiOh+sls1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:5c:c1:56:af:b1:db:ae:e3:52:55:b5:14:ca:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66953361ff6c0083fd93d52865033319863fbc46 Validity Not Before: Dec 19 08:01:00 2025 GMT Not After : Dec 20 08:01:00 2025 GMT Subject: CN=1bf0f32256fb4a0485f7f3b113a66c5f9ec9090c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:30:c7:8b:4a:17:40:f3:06:1b:93:03:b2:7e: 2b:c7:a0:77:2a:43:78:d2:5a:70:ab:f5:f8:9d:51: e2:8e:1f:7e:e7:4c:73:2d:45:36:52:d3:3f:4c:8f: 5a:7e:99:11:a3:4d:5e:ba:e0:bf:19:dd:3a:5a:72: 82:df:cf:a1:29:22:4f:3b:a0:c8:49:c5:6a:e6:8b: 6b:2a:29:80:2b:ca:eb:12:bd:aa:8e:cd:47:ef:13: d8:3a:a0:22:5c:44:f4:a4:7a:0f:8e:02:f3:d8:c3: 69:1c:c2:70:58:52:18:8a:aa:07:cc:8a:4b:da:fc: c6:bd:bf:a1:f2:d4:e5:41:58:6d:b7:c1:2b:56:0d: eb:e6:8f:34:7f:94:2c:1e:4b:51:99:59:6f:a0:f3: ea:5f:c0:45:68:12:36:4f:3c:39:91:e1:90:98:37: f4:71:44:7a:07:de:d3:6f:a6:67:c6:82:7e:bc:1c: 4b:0a:1f:f8:3c:ca:08:23:c9:1c:c9:e6:19:83:86: a1:b1:0d:4d:4e:f0:18:de:e0:50:fb:65:f6:0a:03: 3f:c6:f8:d5:41:c6:7e:f2:aa:28:01:b1:f1:f3:c1: 39:b3:bc:10:89:95:7d:4f:e2:bf:0e:b5:0e:f7:53: 5d:39:be:88:8d:b6:53:57:64:3f:d3:4b:24:7f:e9: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F0:F3:22:56:FB:4A:04:85:F7:F3:B1:13:A6:6C:5F:9E:C9:09:0C X509v3 Authority Key Identifier: keyid:66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cf:77:35:5f:49:76:d9:39:7b:ea:de:24:91:cf:61:90:cc: 01:90:c5:23:0d:69:e1:82:86:10:88:8f:73:6b:42:58:ee:db: 34:94:d9:f0:d5:73:78:a6:35:d4:d7:a0:ed:44:b2:d4:67:b0: fe:b4:28:bd:20:e9:1e:ab:d5:47:b7:d6:71:d2:ef:ea:c5:aa: 38:85:ff:46:ad:81:09:21:d9:1c:ea:87:a2:92:da:da:f4:c6: f8:43:3b:fa:d3:89:46:a1:e0:27:ed:f9:44:48:7b:aa:aa:ec: 4d:a2:3a:af:28:97:3d:ce:20:2e:35:43:c4:8d:f7:b1:89:95: bf:e6:42:aa:d9:93:7f:d6:db:93:1e:92:83:9c:4a:61:df:97: 01:57:1a:4f:68:a5:bd:f0:a0:c0:18:16:d1:97:0d:99:a7:26: b9:3d:61:1f:36:30:1c:82:1c:6d:72:32:8f:e2:f3:90:d7:18: 40:3b:f0:f1:cc:b2:da:99:d0:fe:20:13:07:15:0f:56:64:2f: 95:cd:76:23:f2:85:01:d0:50:f7:f3:a0:c4:bd:2e:c7:c3:fa: ca:7f:7a:d5:af:18:72:be:14:5e:e1:68:89:9f:ea:83:fb:7d: 30:3a:1c:05:b0:fd:fe:cb:a4:c1:57:84:2d:b4:89:46:6d:e1: ad:8d:78:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oFzBVq+x267jUlW1FMppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTUzMzYxZmY2YzAwODNmZDkzZDUyODY1MDMzMzE5ODYz ZmJjNDYwHhcNMjUxMjE5MDgwMTAwWhcNMjUxMjIwMDgwMTAwWjAzMTEwLwYDVQQD EygxYmYwZjMyMjU2ZmI0YTA0ODVmN2YzYjExM2E2NmM1ZjllYzkwOTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjDHi0oXQPMGG5MDsn4rx6B3KkN4 0lpwq/X4nVHijh9+50xzLUU2UtM/TI9afpkRo01euuC/Gd06WnKC38+hKSJPO6DI ScVq5otrKimAK8rrEr2qjs1H7xPYOqAiXET0pHoPjgLz2MNpHMJwWFIYiqoHzIpL 2vzGvb+h8tTlQVhtt8ErVg3r5o80f5QsHktRmVlvoPPqX8BFaBI2Tzw5keGQmDf0 cUR6B97Tb6ZnxoJ+vBxLCh/4PMoII8kcyeYZg4ahsQ1NTvAY3uBQ+2X2CgM/xvjV QcZ+8qooAbHx88E5s7wQiZV9T+K/DrUO91NdOb6IjbZTV2Q/00skf+lqtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvw8yJW+0oEhffzsROmbF+eyQkMMB8GA1UdIwQY MBaAFGaVM2H/bACD/ZPVKGUDMxmGP7xGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wMTM1MjYtNzcxMC00YmIwLWI1MTQt ZmJiN2QzMGRjZTM4LzEvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wMTM1MjYtNzcxMC00YmIwLWI1MTQtZmJiN2QzMGRjZTM4 LzEvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUM93NV9J dtk5e+reJJHPYZDMAZDFIw1p4YKGEIiPc2tCWO7bNJTZ8NVzeKY11Neg7USy1Gew /rQovSDpHqvVR7fWcdLv6sWqOIX/Rq2BCSHZHOqHopLa2vTG+EM7+tOJRqHgJ+35 REh7qqrsTaI6ryiXPc4gLjVDxI33sYmVv+ZCqtmTf9bbkx6Sg5xKYd+XAVcaT2il vfCgwBgW0ZcNmacmuT1hHzYwHIIcbXIyj+LzkNcYQDvw8cyy2pnQ/iATBxUPVmQv lc12I/KFAdBQ9/OgxL0ux8P6yn961a8Ycr4UXuFoiZ/qg/t9MDocBbD9/sukwVeE LbSJRm3hrY14jQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:35:11 2025 by rpki-client