This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft File: ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json) Hash identifier: /6j90s256gNvqA8Dmn6Y8biazbVn80vCtcC8AzaJWyg= Subject key identifier: 91:22:8E:C9:30:7B:62:98:36:C3:BA:72:89:F8:08:5B:5A:84:6A:95 Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC Certificate issuer: /CN=659abae2b0cae86c4196b020765b823a203207fc Certificate serial: 019AF1D25D826228B0FEDD94913DCDB7346C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: O5xBU8VL53qxjYE82WOYcODpGTk.roa (hash: T0jCYlMlaGotp+vjckUxtBiuT4d14wsO10or/VNnLsU=) 2: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: OoVHZpc16v0/DZdIsCyqcMllIWbE+ZaJzUjMy25mWoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5d:82:62:28:b0:fe:dd:94:91:3d:cd:b7:34:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=91228ec9307b629836c3ba7289f8085b5a846a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:6a:7e:75:23:dd:86:10:2a:a5:af:9f:9f: 79:ed:62:2a:79:66:28:73:10:6c:04:3c:58:2c:be: 6c:a9:47:4b:59:10:30:e3:c5:92:47:92:dd:aa:c9: 79:f9:7a:a3:2d:66:04:b6:70:50:e0:47:09:6e:db: 58:a9:12:7d:69:8b:7e:60:d6:2d:df:37:b2:bb:11: 79:57:c3:6f:0f:a4:4d:29:e4:59:b5:5e:66:b2:b9: 78:6f:47:ba:e1:dd:29:36:68:04:d6:9d:01:fb:25: 2c:2d:06:35:6d:e2:a8:48:9b:3f:ca:b8:80:b9:5f: e4:4f:eb:39:26:ff:d4:34:ab:3d:87:ce:e7:da:02: 1f:7f:f2:49:71:6c:21:c6:c4:3b:f0:48:d2:ee:ce: 45:4d:b6:9a:72:ef:83:70:2b:86:8a:0a:d8:19:2c: 89:88:d2:be:0a:e8:9f:0f:5c:3a:3a:35:32:25:00: 16:88:c6:cd:51:3e:02:72:21:d7:74:16:69:c5:eb: 68:54:de:93:40:5d:af:03:38:8c:6a:44:fc:0f:b1: f2:d9:bf:7d:6f:74:74:12:ca:bc:c7:9e:17:b5:81: f6:99:ed:21:a7:05:1e:d4:e1:dc:53:5d:09:d5:63: 1b:12:2a:28:d0:3a:f5:6b:26:47:f1:32:9e:3a:c6: 28:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:22:8E:C9:30:7B:62:98:36:C3:BA:72:89:F8:08:5B:5A:84:6A:95 X509v3 Authority Key Identifier: keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f2:92:f8:ff:12:20:54:8a:8b:60:9d:19:1e:81:20:e4:92: cd:10:a8:5b:af:45:8f:1d:23:e7:b0:0f:f7:af:58:7b:13:af: 87:b1:31:63:1b:44:ac:86:e2:6c:5e:99:8a:ec:40:a1:c8:8a: f8:de:0f:9a:1e:a9:f9:71:7f:f7:95:24:ea:8e:9f:86:11:d8: 0e:a8:3b:b9:92:a8:85:6e:0d:37:fc:fc:f4:ff:a5:25:e4:4d: 84:73:98:4c:5f:40:83:90:54:b8:54:70:1c:11:38:20:67:7d: 50:ed:b2:1a:52:e0:a7:2b:09:c2:d4:82:5f:9f:85:d7:6e:91: 5c:ae:d9:5e:7b:dc:bd:a3:3f:1e:4c:e2:0f:7c:e8:0e:5e:88: 97:62:c2:af:84:59:95:8a:0d:c1:9a:84:92:13:dd:77:3b:a4: 5e:57:49:0d:07:0f:9e:f1:a8:4c:31:f6:bc:73:11:09:61:09: 4f:7d:34:f0:c5:bf:f3:15:f8:17:b3:1d:58:9d:29:0f:24:6c: 46:0d:56:2e:d2:2d:48:09:1e:f0:1e:cc:7c:57:52:6f:c1:ce: 18:ce:1d:2e:97:61:3f:36:c6:5b:6a:af:c5:b1:5a:0d:0f:d6: 8f:1a:b8:d1:60:32:fc:ad:72:2e:74:e2:46:94:19:28:de:c2: ff:4e:4f:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0l2CYiiw/t2UkT3NtzRsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OWFiYWUyYjBjYWU4NmM0MTk2YjAyMDc2NWI4MjNhMjAz MjA3ZmMwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD Eyg5MTIyOGVjOTMwN2I2Mjk4MzZjM2JhNzI4OWY4MDg1YjVhODQ2YTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5BqfnUj3YYQKqWvn5957WIqeWYo cxBsBDxYLL5sqUdLWRAw48WSR5Ldqsl5+XqjLWYEtnBQ4EcJbttYqRJ9aYt+YNYt 3zeyuxF5V8NvD6RNKeRZtV5msrl4b0e64d0pNmgE1p0B+yUsLQY1beKoSJs/yriA uV/kT+s5Jv/UNKs9h87n2gIff/JJcWwhxsQ78EjS7s5FTbaacu+DcCuGigrYGSyJ iNK+CuifD1w6OjUyJQAWiMbNUT4CciHXdBZpxetoVN6TQF2vAziMakT8D7Hy2b99 b3R0Esq8x54XtYH2me0hpwUe1OHcU10J1WMbEioo0Dr1ayZH8TKeOsYoFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEijskwe2KYNsO6con4CFtahGqVMB8GA1UdIwQY MBaAFGWauuKwyuhsQZawIHZbgjogMgf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgt MDJhYWM4YjU5NmRjLzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgtMDJhYWM4YjU5NmRj LzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPKS+P8S IFSKi2CdGR6BIOSSzRCoW69Fjx0j57AP969YexOvh7ExYxtErIbibF6ZiuxAociK +N4Pmh6p+XF/95Uk6o6fhhHYDqg7uZKohW4NN/z89P+lJeRNhHOYTF9Ag5BUuFRw HBE4IGd9UO2yGlLgpysJwtSCX5+F126RXK7ZXnvcvaM/HkziD3zoDl6Il2LCr4RZ lYoNwZqEkhPddzukXldJDQcPnvGoTDH2vHMRCWEJT3008MW/8xX4F7MdWJ0pDyRs Rg1WLtItSAke8B7MfFdSb8HOGM4dLpdhPzbGW2qvxbFaDQ/Wjxq40WAy/K1yLnTi RpQZKN7C/05PMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:17 2025 by rpki-client