This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft File: ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json) Hash identifier: 15lae63QdDWqpXPsVfLonGh0heVgajn3+837+J3aZ3U= Subject key identifier: 84:9B:1C:C0:D9:BA:D9:82:80:AE:0B:13:8E:00:38:27:31:9E:5C:F3 Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06 Certificate issuer: /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206 Certificate serial: 019AF352B3435160CAF7BE0CD84A03CD40C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft Manifest number: 06DB Signing time: Sat 06 Dec 2025 11:01:14 +0000 Manifest this update: Sat 06 Dec 2025 11:01:14 +0000 Manifest next update: Sun 07 Dec 2025 11:01:14 +0000 Files and hashes: 1: CNanKGITt6BZ7mvdQ6Xv0MVd_cg.roa (hash: qTzgtOOAjYnbYX/V8tOmm+S0TaEKxSqcRfCFeliNRNI=) 2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: 9fMRnP9TDeHkA5lb2Gerc0eh23yue0P2wc84sbjm1Is=) 3: kLdYNlBxoUsO0xToRjcSbRZEf5M.roa (hash: uSz8pizyGPkpRJKc5zYo+RcDvjmGd3gE3D8JNJ5Va40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b3:43:51:60:ca:f7:be:0c:d8:4a:03:cd:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206 Validity Not Before: Dec 6 11:01:14 2025 GMT Not After : Dec 7 11:01:14 2025 GMT Subject: CN=849b1cc0d9bad98280ae0b138e003827319e5cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9e:73:bc:9a:8d:4b:76:7a:95:31:92:b1:b5: 57:cc:e9:3e:98:46:c3:16:4b:4b:4f:d0:33:20:65: e2:46:46:fe:9f:0b:69:34:ec:10:b5:85:97:48:9f: 17:21:7f:41:3f:b2:98:a9:34:ec:56:16:3c:d0:cb: 35:47:c8:20:68:39:71:0a:6b:f9:1d:e9:74:60:97: 22:f3:a3:ef:59:f0:f0:40:31:fa:cd:8e:24:c7:cc: 13:b9:ba:1f:b0:1b:96:8b:ad:98:eb:fd:56:29:09: 12:f2:e8:c7:08:86:84:de:e6:27:62:9b:26:de:6d: 8c:a5:55:d4:32:e2:68:aa:20:da:ab:5c:df:0d:20: 5a:c4:f1:c9:24:09:22:03:08:91:90:3b:a5:9b:99: 02:ed:86:5c:04:db:f0:73:a5:1a:70:d0:1b:ad:6e: dd:cb:bf:5d:24:6e:5d:41:c6:1d:ed:f9:25:38:2c: d9:1d:47:18:e8:b3:fc:0e:e9:b9:e3:da:57:de:fc: 45:5d:f7:21:c7:69:7e:65:69:c6:4d:c8:9a:93:60: fc:61:1f:84:5b:12:e8:28:1a:7d:72:17:b9:25:8f: e0:5a:f2:39:0b:30:8f:6f:37:49:2b:b8:45:85:5c: f4:47:d9:09:4f:05:4c:52:99:b3:92:a9:84:8a:e5: c6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9B:1C:C0:D9:BA:D9:82:80:AE:0B:13:8E:00:38:27:31:9E:5C:F3 X509v3 Authority Key Identifier: keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a0:8d:a5:bd:f1:34:a7:68:bf:93:1e:7f:99:49:74:f7:ef: ee:8a:a6:6d:0f:9e:68:7e:8f:fb:c6:86:20:f2:87:e0:35:f3: 1a:e3:41:5f:61:be:55:f2:bc:2c:5d:61:72:33:8a:95:70:bf: 80:b3:00:af:8a:c2:36:37:0c:6d:44:8b:06:c4:56:e3:48:f7: 10:35:6e:4a:7c:e7:25:b9:6c:69:a5:b8:12:fa:bc:a5:f9:15: 0a:a1:b5:27:4b:5a:91:a5:d1:5f:9d:5c:dc:d2:ae:7f:51:71: 2b:04:fe:0e:fa:0d:50:22:d1:a0:3c:de:cd:05:f6:ba:bd:24: 0c:35:f6:47:fc:30:46:23:75:53:ec:a5:7e:87:d2:9b:81:56: 51:99:f5:29:43:a0:48:18:47:24:9a:bc:c8:d6:a6:37:80:01: 3d:3a:b7:25:0d:f5:d6:d4:89:e4:15:02:61:2c:f9:97:f6:99: 58:47:99:06:f8:e3:f7:a0:3e:db:11:2b:cf:97:6f:49:db:e8: 53:d2:35:77:e1:e0:2e:31:1e:9b:73:b1:14:01:d5:7f:54:b1: e5:9f:38:a9:5d:1c:71:13:6e:05:e3:d7:f8:28:e2:88:79:be: 96:a6:6c:e4:3a:cd:dd:29:80:7b:3d:65:b9:6f:21:0c:e3:8e: 91:83:f0:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrNDUWDK974M2EoDzUDAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NzU5ZjdhOGY5MDY3MmVhODM1M2FmNGQxMWQ2YWM1ZTlm ZDgyMDYwHhcNMjUxMjA2MTEwMTE0WhcNMjUxMjA3MTEwMTE0WjAzMTEwLwYDVQQD Eyg4NDliMWNjMGQ5YmFkOTgyODBhZTBiMTM4ZTAwMzgyNzMxOWU1Y2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ5zvJqNS3Z6lTGSsbVXzOk+mEbD FktLT9AzIGXiRkb+nwtpNOwQtYWXSJ8XIX9BP7KYqTTsVhY80Ms1R8ggaDlxCmv5 Hel0YJci86PvWfDwQDH6zY4kx8wTubofsBuWi62Y6/1WKQkS8ujHCIaE3uYnYpsm 3m2MpVXUMuJoqiDaq1zfDSBaxPHJJAkiAwiRkDulm5kC7YZcBNvwc6UacNAbrW7d y79dJG5dQcYd7fklOCzZHUcY6LP8Dum549pX3vxFXfchx2l+ZWnGTciak2D8YR+E WxLoKBp9che5JY/gWvI5CzCPbzdJK7hFhVz0R9kJTwVMUpmzkqmEiuXG5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISbHMDZutmCgK4LE44AOCcxnlzzMB8GA1UdIwQY MBaAFGZ1n3qPkGcuqDU69NEdasXp/YIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xNzhiMDItOTQ4Yy00NjI0LTk3Yjgt ZTRlMTdlNGI1MTgwLzEvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xNzhiMDItOTQ4Yy00NjI0LTk3YjgtZTRlMTdlNGI1MTgw LzEvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaCNpb3x NKdov5Mef5lJdPfv7oqmbQ+eaH6P+8aGIPKH4DXzGuNBX2G+VfK8LF1hcjOKlXC/ gLMAr4rCNjcMbUSLBsRW40j3EDVuSnznJblsaaW4Evq8pfkVCqG1J0takaXRX51c 3NKuf1FxKwT+DvoNUCLRoDzezQX2ur0kDDX2R/wwRiN1U+ylfofSm4FWUZn1KUOg SBhHJJq8yNamN4ABPTq3JQ311tSJ5BUCYSz5l/aZWEeZBvjj96A+2xErz5dvSdvo U9I1d+HgLjEem3OxFAHVf1Sx5Z84qV0ccRNuBePX+CjiiHm+lqZs5DrN3SmAez1l uW8hDOOOkYPwxg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:27 2025 by rpki-client