This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json) Hash identifier: t7u9ZJwJhzuPMzXCIhaijDrHUFOIpDXSuyFV5o/a0FA= Subject key identifier: EA:62:4F:16:B8:D8:B7:EF:14:E4:E7:5D:91:14:10:A2:8C:BF:5F:70 Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04 Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504 Certificate serial: 019AF12CBC236B3C77F71AFAE7C61ED72117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft Manifest number: 135A Signing time: Sat 06 Dec 2025 01:00:31 +0000 Manifest this update: Sat 06 Dec 2025 01:00:31 +0000 Manifest next update: Sun 07 Dec 2025 01:00:31 +0000 Files and hashes: 1: 6LczYu9ryKjTocWYecYUFUv673o.roa (hash: tjb/z4zkMDQBH6/Vrji53BKdyb6GsDIQMh6du73aM0A=) 2: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: 77f0JHEc3UJOaBF21bVZQYyA2YGMzCphhzUwzuVKKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:bc:23:6b:3c:77:f7:1a:fa:e7:c6:1e:d7:21:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504 Validity Not Before: Dec 6 01:00:31 2025 GMT Not After : Dec 7 01:00:31 2025 GMT Subject: CN=ea624f16b8d8b7ef14e4e75d911410a28cbf5f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:61:49:70:ed:90:7d:64:ee:72:4d:b6:84: fd:ea:a5:a3:8f:b7:a1:1d:aa:57:47:1b:2c:9a:84: 7e:2f:ca:ce:b6:b3:15:09:03:33:3a:26:1f:eb:f9: 33:27:71:a1:55:7e:14:a1:e6:d0:5d:44:1d:e0:f4: d7:70:a2:a5:d8:48:fa:c7:1e:e8:8f:32:7c:8f:94: 95:57:85:ba:47:05:dc:fc:ab:e8:bf:9d:89:2b:f7: 54:b0:01:7e:61:88:9b:3a:46:5a:7b:df:cc:70:39: 30:7b:59:0d:50:74:3c:2e:d1:fc:ca:2f:e4:ef:54: 47:e5:cf:ae:71:ae:95:51:bc:a6:3d:a5:96:93:51: f4:14:81:4f:a2:b9:29:9d:d5:79:3a:1e:14:04:a7: c3:4f:8b:89:0a:d4:30:a7:e6:6e:f4:54:70:93:e0: 15:12:70:6a:4d:42:86:b1:67:50:6d:fd:40:95:55: e2:e1:2f:3d:42:e8:d7:86:21:ea:10:1f:48:4b:45: f8:61:fb:f0:60:0b:2b:af:86:33:1c:4b:ee:06:2d: c6:6e:2e:da:44:d3:20:68:aa:d7:36:30:3c:35:fc: af:83:b1:c1:54:1e:6e:5b:ef:05:fa:29:fd:f9:4e: 28:34:07:10:6b:1c:d8:c7:11:af:5d:37:ad:22:37: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:62:4F:16:B8:D8:B7:EF:14:E4:E7:5D:91:14:10:A2:8C:BF:5F:70 X509v3 Authority Key Identifier: keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:50:f7:6e:8d:2d:b4:e9:fa:75:9c:58:46:e4:82:4b:1a:58: dc:d3:8a:c2:ef:72:2c:0c:42:e0:62:42:af:b4:7e:5d:34:bb: 86:ce:8c:5a:9f:38:6b:a7:3a:4f:ae:95:c6:2f:f0:17:23:84: 8d:35:ea:dd:74:43:12:98:b6:6e:c8:9b:ac:1f:bd:89:a5:15: a5:a4:bc:5e:a1:ae:14:74:88:81:7c:a9:cc:ed:76:e6:ce:ce: 50:03:e0:78:38:f5:0f:fc:e7:52:f4:3a:6a:05:28:2e:96:c1: 14:7a:45:9d:57:97:cd:3d:3f:7d:00:65:e0:cc:3e:90:26:6c: 34:0c:16:1f:f1:a8:61:08:03:de:78:74:5c:d9:5e:d6:29:0a: 43:70:c3:a4:43:3e:79:2b:8c:bf:25:54:47:3c:48:ec:ee:48: ce:e1:55:17:88:b6:91:b5:1b:b0:70:67:70:71:c0:32:24:55: bf:10:9c:a6:2e:88:18:d9:79:f9:bc:8f:5e:30:2d:0c:e4:8a: fa:05:97:69:7d:e7:1a:91:11:8b:4b:6e:c2:5b:98:a3:9e:56: fb:94:18:bb:79:48:32:68:76:73:3a:d6:5d:cc:86:dd:5a:a2: a7:93:9b:ef:9d:62:fb:3e:fc:dc:86:c7:48:51:1c:e3:a5:e6: e8:dc:5a:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLwjazx39xr658Ye1yEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NDE1YTE3NjNmZTAwNWIwMTM5YjAxNGM2ZTU3NWQ1Zjli MmE1MDQwHhcNMjUxMjA2MDEwMDMxWhcNMjUxMjA3MDEwMDMxWjAzMTEwLwYDVQQD EyhlYTYyNGYxNmI4ZDhiN2VmMTRlNGU3NWQ5MTE0MTBhMjhjYmY1ZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVRhSXDtkH1k7nJNtoT96qWjj7eh HapXRxssmoR+L8rOtrMVCQMzOiYf6/kzJ3GhVX4UoebQXUQd4PTXcKKl2Ej6xx7o jzJ8j5SVV4W6RwXc/Kvov52JK/dUsAF+YYibOkZae9/McDkwe1kNUHQ8LtH8yi/k 71RH5c+uca6VUbymPaWWk1H0FIFPorkpndV5Oh4UBKfDT4uJCtQwp+Zu9FRwk+AV EnBqTUKGsWdQbf1AlVXi4S89QujXhiHqEB9IS0X4YfvwYAsrr4YzHEvuBi3Gbi7a RNMgaKrXNjA8Nfyvg7HBVB5uW+8F+in9+U4oNAcQaxzYxxGvXTetIjcVWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpiTxa42LfvFOTnXZEUEKKMv19wMB8GA1UdIwQY MBaAFGVBWhdj/gBbATmwFMblddX5sqUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTct ZWU3YTIwNTY5YjgzLzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTctZWU3YTIwNTY5Yjgz LzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFD3bo0t tOn6dZxYRuSCSxpY3NOKwu9yLAxC4GJCr7R+XTS7hs6MWp84a6c6T66Vxi/wFyOE jTXq3XRDEpi2bsibrB+9iaUVpaS8XqGuFHSIgXypzO125s7OUAPgeDj1D/znUvQ6 agUoLpbBFHpFnVeXzT0/fQBl4Mw+kCZsNAwWH/GoYQgD3nh0XNle1ikKQ3DDpEM+ eSuMvyVURzxI7O5IzuFVF4i2kbUbsHBncHHAMiRVvxCcpi6IGNl5+byPXjAtDOSK +gWXaX3nGpERi0tuwluYo55W+5QYu3lIMmh2czrWXcyG3Vqip5Ob751i+z783IbH SFEc46Xm6NxaFw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:35 2025 by rpki-client