This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft File: ZnGexRbxFUDaTE5-S39bN32f0ls.mft (raw, json) Hash identifier: nMXNHWjaH+gWGGkNfDuGzbuFE3c/unRd/CjHqzFaXJI= Subject key identifier: 6E:03:11:C2:53:3C:4B:EF:28:60:44:98:46:29:A4:F3:1D:EC:B0:22 Authority key identifier: 66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B Certificate issuer: /CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b Certificate serial: 019B34203CD83FC013ECF3B06CD4AE9D6C83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft Manifest number: 0AE4 Signing time: Fri 19 Dec 2025 01:01:26 +0000 Manifest this update: Fri 19 Dec 2025 01:01:26 +0000 Manifest next update: Sat 20 Dec 2025 01:01:26 +0000 Files and hashes: 1: ZnGexRbxFUDaTE5-S39bN32f0ls.crl (hash: ZhpiPOxmPeX4BpVC8pWTbDbe92VNgdB2GDly11DzdFg=) 2: m2QATzNu0SRSUTMmrV_23UYzqCU.roa (hash: iD9hVdOJHc5GBYHSyd+djF2Re6JSu/DsX978dRZjYtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:3c:d8:3f:c0:13:ec:f3:b0:6c:d4:ae:9d:6c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b Validity Not Before: Dec 19 01:01:26 2025 GMT Not After : Dec 20 01:01:26 2025 GMT Subject: CN=6e0311c2533c4bef286044984629a4f31decb022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:7d:e9:ea:ba:8c:79:e6:75:6d:01:ee:4e: 25:b0:32:9e:71:00:e3:4a:a2:7c:6c:34:86:15:51: 29:5b:2d:83:7a:c1:46:a3:b3:78:b4:73:1a:c4:e2: 43:76:32:f9:3e:2d:43:f7:bb:1a:ff:07:bb:4e:26: 9e:81:f1:c5:d9:21:a8:3f:54:61:d0:b1:87:65:e7: b8:d4:3e:b7:be:32:80:34:0e:38:af:19:48:77:79: 7c:b9:05:cf:40:44:79:9c:15:78:b5:f5:b7:60:98: a4:33:4a:d1:34:ae:a3:d7:2d:b6:59:70:c4:a0:b3: 83:6f:e5:7d:6c:a7:5c:4c:3a:00:0a:2c:46:4f:f4: 26:33:8e:bd:b9:5b:48:e6:06:49:5b:ca:b0:29:86: 2b:c7:d1:64:bf:35:86:2b:1a:b8:5d:0c:c4:82:78: 25:90:24:16:a6:30:60:7c:3e:f6:e4:aa:43:23:e9: 90:f3:63:7a:c3:ba:e6:ec:22:e8:1b:2f:64:c8:a2: 2b:a3:bc:f6:71:46:43:61:1f:b1:07:e1:62:c8:8f: 09:4f:f4:75:06:f3:3f:dc:cf:70:fd:6b:c1:d7:2e: a5:2b:82:d8:05:ac:84:bf:ce:bc:e7:83:16:fe:5f: 76:77:56:8a:02:e4:6f:d6:d6:6a:6a:ed:c5:87:85: 23:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:03:11:C2:53:3C:4B:EF:28:60:44:98:46:29:A4:F3:1D:EC:B0:22 X509v3 Authority Key Identifier: keyid:66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a9:5b:32:a4:b9:b8:c9:6c:5a:85:87:f6:fb:19:84:d8:73: 5e:4e:2c:76:e8:dc:fd:78:04:fc:07:f2:a1:ec:b2:f3:1f:29: f6:ca:62:ab:c5:84:aa:cb:4f:b8:72:70:2c:7a:fd:cb:e1:99: 26:ee:97:6e:63:22:92:d9:66:f7:5e:7a:d1:b6:37:a4:ea:82: 0c:7a:b2:f7:27:07:0b:d8:49:1e:5f:b2:94:30:3e:2d:b1:92: 65:dd:b4:f5:cd:f5:6e:3a:66:e1:b5:8d:5d:7a:49:69:81:5b: a3:bb:4a:ab:c5:6d:56:48:9f:30:9f:43:03:4f:a8:33:5e:81: f8:aa:eb:07:4a:86:bc:28:02:86:47:83:28:48:b9:c6:ec:cc: c7:f2:24:44:8e:fd:05:c4:4b:76:83:9d:c0:f3:e1:ad:93:e8: d0:28:74:7e:83:f3:08:14:03:da:9f:8c:21:0e:b7:00:43:15: b0:73:c9:a4:f3:96:bf:e0:44:b6:55:b4:f1:a8:28:ce:dd:ec: 64:ca:23:cf:ef:a7:f7:7b:ab:60:d0:66:70:92:d7:44:bd:96: 66:51:10:32:c0:29:88:3e:66:09:ee:5d:11:47:62:b4:b0:ac: bb:f4:34:50:cb:09:77:49:a2:e5:6f:97:4d:7d:e8:58:8c:98: e7:d1:90:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IDzYP8AT7POwbNSunWyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NzE5ZWM1MTZmMTE1NDBkYTRjNGU3ZTRiN2Y1YjM3N2Q5 ZmQyNWIwHhcNMjUxMjE5MDEwMTI2WhcNMjUxMjIwMDEwMTI2WjAzMTEwLwYDVQQD Eyg2ZTAzMTFjMjUzM2M0YmVmMjg2MDQ0OTg0NjI5YTRmMzFkZWNiMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugN96eq6jHnmdW0B7k4lsDKecQDj SqJ8bDSGFVEpWy2DesFGo7N4tHMaxOJDdjL5Pi1D97sa/we7TiaegfHF2SGoP1Rh 0LGHZee41D63vjKANA44rxlId3l8uQXPQER5nBV4tfW3YJikM0rRNK6j1y22WXDE oLODb+V9bKdcTDoACixGT/QmM469uVtI5gZJW8qwKYYrx9FkvzWGKxq4XQzEgngl kCQWpjBgfD725KpDI+mQ82N6w7rm7CLoGy9kyKIro7z2cUZDYR+xB+FiyI8JT/R1 BvM/3M9w/WvB1y6lK4LYBayEv86854MW/l92d1aKAuRv1tZqau3Fh4UjywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4DEcJTPEvvKGBEmEYppPMd7LAiMB8GA1UdIwQY MBaAFGZxnsUW8RVA2kxOfkt/Wzd9n9JbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm5HZXhSYnhGVURhVEU1LVMzOWJOMzJmMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC83N2MwNzQtZGEyNS00NWU4LTlkMjYt NTRjMTZiOWNjMTE4LzEvWm5HZXhSYnhGVURhVEU1LVMzOWJOMzJmMGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC83N2MwNzQtZGEyNS00NWU4LTlkMjYtNTRjMTZiOWNjMTE4 LzEvWm5HZXhSYnhGVURhVEU1LVMzOWJOMzJmMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6lbMqS5 uMlsWoWH9vsZhNhzXk4sdujc/XgE/Afyoeyy8x8p9spiq8WEqstPuHJwLHr9y+GZ Ju6XbmMiktlm91560bY3pOqCDHqy9ycHC9hJHl+ylDA+LbGSZd209c31bjpm4bWN XXpJaYFbo7tKq8VtVkifMJ9DA0+oM16B+KrrB0qGvCgChkeDKEi5xuzMx/IkRI79 BcRLdoOdwPPhrZPo0Ch0foPzCBQD2p+MIQ63AEMVsHPJpPOWv+BEtlW08agozt3s ZMojz++n93urYNBmcJLXRL2WZlEQMsApiD5mCe5dEUditLCsu/Q0UMsJd0mi5W+X TX3oWIyY59GQNw== -----END CERTIFICATE-----Generated at Fri Dec 19 05:46:03 2025 by rpki-client