This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft File: zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json) Hash identifier: 4Vx51ExQ1p0Lc8q5M58ecv1clglwoM2v4Aig/SFhmVs= Subject key identifier: 62:D2:72:C3:B7:4C:96:82:47:45:CA:5B:4F:14:57:37:E8:AC:FA:BC Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5 Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5 Certificate serial: 019AF12EB268B9857BCC1F93EC9EC55DFAE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft Manifest number: 0974 Signing time: Sat 06 Dec 2025 01:02:40 +0000 Manifest this update: Sat 06 Dec 2025 01:02:40 +0000 Manifest next update: Sun 07 Dec 2025 01:02:40 +0000 Files and hashes: 1: 30I5HnA19uvAFRwz6jWfyDavx24.roa (hash: vJ50DB07ovpFnN7XIrmEVraJFX3BgV6jKWZ19zdFhPQ=) 2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: Ai+neRlKBJh8GMM/sXLqkupXgYPukBciz0SPzbytar4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b2:68:b9:85:7b:cc:1f:93:ec:9e:c5:5d:fa:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5 Validity Not Before: Dec 6 01:02:40 2025 GMT Not After : Dec 7 01:02:40 2025 GMT Subject: CN=62d272c3b74c96824745ca5b4f145737e8acfabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:22:20:e9:ba:f8:ba:30:88:a8:6e:9f:70:77: a4:5e:04:80:cd:9f:c3:dd:13:24:48:8c:aa:e5:55: 29:03:b3:95:38:17:79:49:08:73:98:69:08:b5:22: 67:84:df:e6:88:8c:88:be:8d:b5:9b:3b:3f:30:03: 13:3a:ff:dd:c2:f5:06:55:d3:29:4c:30:b6:5d:7d: d0:61:c0:5f:bc:63:9f:1f:e3:1f:aa:42:85:0e:39: ce:86:42:b3:86:ec:e5:39:62:af:0c:a1:0e:d0:90: 0d:b2:5c:14:82:94:ba:c9:41:3e:f4:d8:b2:7c:7c: 7b:e2:f4:33:e5:b6:ce:8c:64:67:61:32:0e:41:d6: 20:60:c2:02:78:ff:b4:70:b4:17:e3:a7:de:1b:5b: f4:e4:77:9e:ad:9e:48:01:1a:3e:4c:9a:6f:eb:7e: d5:f7:30:86:b5:e2:f3:40:23:b2:c9:92:7f:e6:dc: 79:98:da:33:3d:5d:bd:a7:60:d7:a2:f0:e6:f4:df: b1:30:55:3b:e0:2f:9c:23:8c:a7:7b:b4:e5:e1:c8: 44:40:3e:78:e6:ae:bf:5f:c6:ff:e9:72:37:61:58: 5d:87:a6:6a:5d:99:9f:e5:c2:92:ba:1b:16:eb:38: 33:e1:d0:8e:1e:f9:1e:ef:9e:b6:5a:47:ef:c6:18: c2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D2:72:C3:B7:4C:96:82:47:45:CA:5B:4F:14:57:37:E8:AC:FA:BC X509v3 Authority Key Identifier: keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:76:45:86:ce:84:e3:1b:a7:61:0c:43:4d:ff:12:a9:77:54: a6:b7:8a:fb:d6:33:c7:fd:4a:f4:6d:c4:02:cd:59:eb:93:44: 60:fa:6d:f4:6b:55:96:68:29:52:a0:f5:fd:4c:50:7b:36:c1: f4:42:95:8a:5e:c0:16:f3:aa:49:86:b7:71:75:21:50:52:fd: b0:57:d9:58:00:8b:c5:14:cf:52:03:b1:18:17:a3:f5:c6:cf: eb:1b:d7:ef:e7:7f:1d:fa:b7:e0:eb:f4:a6:e6:eb:e7:78:85: 2d:56:18:56:5f:71:01:cd:41:2b:bc:36:9c:6e:d7:81:60:1f: dc:a2:3e:16:ed:78:b6:31:32:1a:7e:6a:25:32:26:5e:7b:7b: be:41:40:c8:c4:c4:1d:8d:33:be:fe:57:c8:2e:9d:d3:4f:0e: 8d:18:be:7c:95:3d:bf:20:13:bd:4a:80:63:fe:c5:27:05:bb: 94:9f:2a:bc:14:26:99:c9:75:9a:92:40:bb:25:bd:a7:18:81: c1:96:6e:5f:3e:da:5f:f0:d4:66:7f:30:da:6f:fe:d8:6a:bc: 53:97:bd:e9:96:90:96:c5:b6:cf:ed:29:f4:ef:bb:c6:69:56: d2:54:dd:b2:0f:51:a1:8b:07:e0:24:d1:0d:53:75:8c:80:5f: 69:e3:92:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrJouYV7zB+T7J7FXfrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZjM4ZjQ4NTY4ODMzYTVmNzE1N2VlZjU5Nzg3ODMzYTAx ZjUzZjUwHhcNMjUxMjA2MDEwMjQwWhcNMjUxMjA3MDEwMjQwWjAzMTEwLwYDVQQD Eyg2MmQyNzJjM2I3NGM5NjgyNDc0NWNhNWI0ZjE0NTczN2U4YWNmYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCIg6br4ujCIqG6fcHekXgSAzZ/D 3RMkSIyq5VUpA7OVOBd5SQhzmGkItSJnhN/miIyIvo21mzs/MAMTOv/dwvUGVdMp TDC2XX3QYcBfvGOfH+MfqkKFDjnOhkKzhuzlOWKvDKEO0JANslwUgpS6yUE+9Niy fHx74vQz5bbOjGRnYTIOQdYgYMICeP+0cLQX46feG1v05HeerZ5IARo+TJpv637V 9zCGteLzQCOyyZJ/5tx5mNozPV29p2DXovDm9N+xMFU74C+cI4yne7Tl4chEQD54 5q6/X8b/6XI3YVhdh6ZqXZmf5cKSuhsW6zgz4dCOHvke7562WkfvxhjCkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLScsO3TJaCR0XKW08UVzforPq8MB8GA1UdIwQY MBaAFM7zj0hWiDOl9xV+71l4eDOgH1P1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUt Zjk1YzYwOTdhNTBkLzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUtZjk1YzYwOTdhNTBk LzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHZFhs6E 4xunYQxDTf8SqXdUpreK+9Yzx/1K9G3EAs1Z65NEYPpt9GtVlmgpUqD1/UxQezbB 9EKVil7AFvOqSYa3cXUhUFL9sFfZWACLxRTPUgOxGBej9cbP6xvX7+d/Hfq34Ov0 pubr53iFLVYYVl9xAc1BK7w2nG7XgWAf3KI+Fu14tjEyGn5qJTImXnt7vkFAyMTE HY0zvv5XyC6d008OjRi+fJU9vyATvUqAY/7FJwW7lJ8qvBQmmcl1mpJAuyW9pxiB wZZuXz7aX/DUZn8w2m/+2Gq8U5e96ZaQlsW2z+0p9O+7xmlW0lTdsg9RoYsH4CTR DVN1jIBfaeOS3A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:00 2025 by rpki-client