This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft File: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft (raw, json) Hash identifier: JzpjrHM4T1SlXQCQUbnh4ILymanPH2w6DKaqjilexbM= Subject key identifier: DE:BF:67:9D:04:7C:30:27:AB:13:28:1A:C4:94:46:C4:BC:81:74:60 Authority key identifier: 66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46 Certificate issuer: /CN=66953361ff6c0083fd93d52865033319863fbc46 Certificate serial: 019AF2090BAC1F7370FC59D0042783EB05E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft Manifest number: 09A2 Signing time: Sat 06 Dec 2025 05:01:10 +0000 Manifest this update: Sat 06 Dec 2025 05:01:10 +0000 Manifest next update: Sun 07 Dec 2025 05:01:10 +0000 Files and hashes: 1: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl (hash: J8QpQu3xo4Gqif0ppXtLVZI8rMw0u6wTD7P518s8HW4=) 2: x7YKpAfSkOct6Fg0XF9orQA6c8g.roa (hash: TXWS81jR34NiA/SsVNyLTEvMyxNkcObY8WiOh+sls1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0b:ac:1f:73:70:fc:59:d0:04:27:83:eb:05:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66953361ff6c0083fd93d52865033319863fbc46 Validity Not Before: Dec 6 05:01:10 2025 GMT Not After : Dec 7 05:01:10 2025 GMT Subject: CN=debf679d047c3027ab13281ac49446c4bc817460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:21:a9:17:ad:cd:03:d0:2d:f3:fa:5e:d0:a8: 10:ce:62:98:e7:b3:54:b9:d4:3c:b8:d8:be:e9:8c: d5:64:a6:7a:95:89:2c:d4:a8:02:3a:4c:49:a2:7a: 81:69:b0:6f:7f:91:7e:95:0f:58:7c:23:38:f8:8a: e8:ce:da:9e:fc:e8:93:2e:e2:a3:b5:f4:a5:5b:c8: ea:2d:06:43:ac:c4:6f:19:d0:4d:f1:f2:d7:68:5a: b3:ca:2b:d8:60:9b:3d:f4:37:19:ea:03:e8:72:ab: a9:a4:ab:06:ae:11:8c:80:3c:d8:44:15:46:8e:e8: 3b:a3:6d:26:92:30:ad:0b:5f:08:05:bf:1b:f2:41: 8e:20:c6:b6:c1:0e:d4:9f:c9:33:18:fa:8c:1b:b5: e1:c9:70:79:44:9d:17:9c:e6:d9:40:b8:9d:0d:e2: d6:df:c3:58:f4:e3:2a:8a:7e:69:78:ac:37:27:07: 15:41:61:75:8e:75:8c:fb:b0:96:0a:45:fb:60:ee: dc:cd:e2:a9:6f:36:0b:02:c8:a7:bf:38:bd:99:1e: e4:44:9f:02:8a:c1:d3:8e:e1:f8:05:a3:4e:7e:27: 45:77:67:8a:a5:23:13:d4:99:9c:b5:64:9f:06:56: 3f:7a:c0:46:21:62:e2:8d:42:61:70:d7:7d:c4:46: eb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BF:67:9D:04:7C:30:27:AB:13:28:1A:C4:94:46:C4:BC:81:74:60 X509v3 Authority Key Identifier: keyid:66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:14:08:5f:d3:fd:3f:20:39:d4:40:ea:23:11:fa:07:1b:f6: b6:3a:7b:40:27:c0:b8:17:7e:e3:73:63:e7:ae:e0:14:55:41: 90:26:b6:33:22:66:2c:d2:cd:1e:35:47:da:7e:7c:36:79:c6: 04:57:90:a1:2a:09:13:21:34:b7:96:7d:b3:29:f5:19:b8:1b: d0:69:95:da:2a:7a:c5:c2:13:b8:ba:b6:74:ea:ec:0a:5a:a2: a0:e6:d4:1b:e9:1c:72:ba:b3:9f:4d:fa:03:6e:4d:70:9c:cb: e0:a0:6b:1f:a2:59:32:fe:6b:77:10:8c:d1:0a:69:e6:d8:96: 27:22:75:59:27:7a:35:94:b8:12:1a:64:a3:82:1d:20:e2:e6: d0:e4:c6:a6:c5:96:de:43:af:a3:93:42:af:d3:64:98:82:b7: 2c:6a:64:b9:7f:c9:c7:46:db:3f:d8:88:88:86:6d:71:6e:7f: ae:55:4e:21:cd:6c:d4:08:2f:2c:f5:e3:91:9d:2b:61:a7:0b: a7:5b:4c:ab:e3:7c:fb:90:1e:2c:f0:bc:10:ff:3f:20:3f:cb: 9c:ba:91:b4:3f:c1:ec:45:8e:07:22:ad:55:b5:12:ef:82:23: ff:91:1b:b3:49:31:49:64:a4:cc:d7:d3:ec:b3:72:61:0c:a0: 12:8a:78:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQusH3Nw/FnQBCeD6wXoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTUzMzYxZmY2YzAwODNmZDkzZDUyODY1MDMzMzE5ODYz ZmJjNDYwHhcNMjUxMjA2MDUwMTEwWhcNMjUxMjA3MDUwMTEwWjAzMTEwLwYDVQQD EyhkZWJmNjc5ZDA0N2MzMDI3YWIxMzI4MWFjNDk0NDZjNGJjODE3NDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yGpF63NA9At8/pe0KgQzmKY57NU udQ8uNi+6YzVZKZ6lYks1KgCOkxJonqBabBvf5F+lQ9YfCM4+Iroztqe/OiTLuKj tfSlW8jqLQZDrMRvGdBN8fLXaFqzyivYYJs99DcZ6gPocquppKsGrhGMgDzYRBVG jug7o20mkjCtC18IBb8b8kGOIMa2wQ7Un8kzGPqMG7XhyXB5RJ0XnObZQLidDeLW 38NY9OMqin5peKw3JwcVQWF1jnWM+7CWCkX7YO7czeKpbzYLAsinvzi9mR7kRJ8C isHTjuH4BaNOfidFd2eKpSMT1JmctWSfBlY/esBGIWLijUJhcNd9xEbr4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6/Z50EfDAnqxMoGsSURsS8gXRgMB8GA1UdIwQY MBaAFGaVM2H/bACD/ZPVKGUDMxmGP7xGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wMTM1MjYtNzcxMC00YmIwLWI1MTQt ZmJiN2QzMGRjZTM4LzEvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wMTM1MjYtNzcxMC00YmIwLWI1MTQtZmJiN2QzMGRjZTM4 LzEvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxQIX9P9 PyA51EDqIxH6Bxv2tjp7QCfAuBd+43Nj567gFFVBkCa2MyJmLNLNHjVH2n58NnnG BFeQoSoJEyE0t5Z9syn1Gbgb0GmV2ip6xcITuLq2dOrsClqioObUG+kccrqzn036 A25NcJzL4KBrH6JZMv5rdxCM0Qpp5tiWJyJ1WSd6NZS4Ehpko4IdIOLm0OTGpsWW 3kOvo5NCr9NkmIK3LGpkuX/Jx0bbP9iIiIZtcW5/rlVOIc1s1AgvLPXjkZ0rYacL p1tMq+N8+5AeLPC8EP8/ID/LnLqRtD/B7EWOByKtVbUS74Ij/5Ebs0kxSWSkzNfT 7LNyYQygEop4Kg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:57 2025 by rpki-client