This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft File: Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json) Hash identifier: 6fOl3FILpB1X55g1N/maz38gyNsX+mavPvlr1TTtjdk= Subject key identifier: AB:8D:9C:2B:0A:47:11:CB:A8:F2:09:58:CB:2C:C5:3C:A8:69:BB:3D Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c Certificate serial: 019B2BC20B33135DDACC3A2DBF07183B1D21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft Manifest number: 0677 Signing time: Wed 17 Dec 2025 10:01:35 +0000 Manifest this update: Wed 17 Dec 2025 10:01:35 +0000 Manifest next update: Thu 18 Dec 2025 10:01:35 +0000 Files and hashes: 1: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: /YYVBrj7gBcmQqKVf0nEQ54oIP8P4uBVQc95zzBk4jY=) 2: qV1VADgnM-UwMyvnzX700wlOQrY.roa (hash: fchq7gmgdQ6iV6UqjjJyNU6Y7myn1bicxh9WArTx5O4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:0b:33:13:5d:da:cc:3a:2d:bf:07:18:3b:1d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c Validity Not Before: Dec 17 10:01:35 2025 GMT Not After : Dec 18 10:01:35 2025 GMT Subject: CN=ab8d9c2b0a4711cba8f20958cb2cc53ca869bb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:79:fc:0e:29:95:fc:46:8c:05:01:43:1e: c7:1c:26:c6:e9:7b:75:0e:8e:77:5a:a8:88:68:9c: e5:cd:10:fd:1f:66:0e:0a:e6:d8:23:9f:e2:3d:a1: 96:d0:fd:b7:a2:ed:e5:dc:4b:36:90:fb:75:e4:2e: a0:e7:f4:c5:b9:72:f0:be:cf:fa:18:71:bd:1a:60: bc:cf:9e:72:e6:d2:c9:e5:4e:c4:b0:58:0c:5b:c0: 62:de:8a:12:52:69:2a:df:ee:5e:7e:ff:fc:bb:a8: 39:c1:71:5a:fd:31:8d:1a:e9:0c:94:1e:92:b5:44: 69:6d:b8:39:83:12:69:a0:5b:af:a6:a1:2e:3d:d5: 5b:c7:53:33:57:29:1d:28:3f:04:11:09:ae:f2:f7: ca:9a:74:aa:67:07:c7:74:24:6c:30:f8:d0:09:89: 3e:ff:09:1f:28:f9:ef:31:32:38:2c:c8:cd:1a:c7: 89:1a:e2:f2:c2:e1:d7:9e:7e:55:63:bd:f9:fc:0f: 47:c1:ef:79:a9:63:e1:3c:be:5f:08:16:16:78:d6: bb:35:41:27:42:bf:86:af:e0:c2:6d:01:a7:4f:b1: a5:fc:c5:1a:c4:a1:c2:36:20:65:dd:ea:21:15:a6: 26:7a:37:4b:a7:73:fa:2f:d1:40:b5:dc:c4:45:1f: b0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8D:9C:2B:0A:47:11:CB:A8:F2:09:58:CB:2C:C5:3C:A8:69:BB:3D X509v3 Authority Key Identifier: keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e7:fc:24:32:8b:6b:2c:52:bb:97:e8:12:f9:3c:ee:a6:09: e6:65:13:4f:17:a5:6c:0d:ff:6e:b2:22:2f:d6:e9:e9:b6:a7: c7:5b:47:ca:92:71:2d:0c:9a:69:8d:54:5a:5f:1e:10:76:69: 1f:75:66:e3:a3:fc:97:e5:be:af:2d:25:d0:53:26:2b:10:09: a0:d0:f9:70:ea:07:ef:3b:ef:49:7a:b0:f5:c0:51:4d:61:d8: d0:39:61:16:0f:7c:80:f4:11:26:0c:f2:0b:be:fb:5a:b3:db: 34:ea:5a:ab:cd:8a:75:a1:87:3a:d5:54:f8:37:98:d2:93:19: 42:3e:e1:80:6f:f1:d4:46:bb:22:83:41:da:59:62:3c:e8:92: ca:e2:1c:d3:52:f1:b5:b8:d7:ea:eb:0b:55:a1:60:2c:9d:bf: 7f:ca:c7:c2:f2:95:de:80:9a:b9:ae:c8:da:ec:1e:82:26:6b: f8:cc:79:63:f6:d2:75:49:56:6b:25:b5:25:da:aa:ee:51:b9: a6:d2:61:1b:83:0e:0d:fa:77:5d:11:17:a4:fc:25:75:2c:08: eb:e4:9b:18:4b:19:6c:bf:41:bf:3e:d0:40:37:09:b1:e6:21: 5b:dc:16:d8:16:c8:df:8f:40:e5:36:a4:ac:1e:49:0e:cb:50: 68:b4:be:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwgszE13azDotvwcYOx0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZmZmMDAxMzZjODNmNTNhMzhhYzNlZWFjOTcxMGE3OTkz NmIyNGMwHhcNMjUxMjE3MTAwMTM1WhcNMjUxMjE4MTAwMTM1WjAzMTEwLwYDVQQD EyhhYjhkOWMyYjBhNDcxMWNiYThmMjA5NThjYjJjYzUzY2E4NjliYjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2h5/A4plfxGjAUBQx7HHCbG6Xt1 Do53WqiIaJzlzRD9H2YOCubYI5/iPaGW0P23ou3l3Es2kPt15C6g5/TFuXLwvs/6 GHG9GmC8z55y5tLJ5U7EsFgMW8Bi3ooSUmkq3+5efv/8u6g5wXFa/TGNGukMlB6S tURpbbg5gxJpoFuvpqEuPdVbx1MzVykdKD8EEQmu8vfKmnSqZwfHdCRsMPjQCYk+ /wkfKPnvMTI4LMjNGseJGuLywuHXnn5VY735/A9Hwe95qWPhPL5fCBYWeNa7NUEn Qr+Gr+DCbQGnT7Gl/MUaxKHCNiBl3eohFaYmejdLp3P6L9FAtdzERR+w8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuNnCsKRxHLqPIJWMssxTyoabs9MB8GA1UdIwQY MBaAFGX/8AE2yD9To4rD7qyXEKeZNrJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmZfd0FUYklQMU9qaXNQdXJKY1FwNWsyc2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8wMmIzNTctYWJmNy00MDhiLThiMDkt MGQ1OWQ5ZDExNTA1LzEvWmZfd0FUYklQMU9qaXNQdXJKY1FwNWsyc2t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8wMmIzNTctYWJmNy00MDhiLThiMDktMGQ1OWQ5ZDExNTA1 LzEvWmZfd0FUYklQMU9qaXNQdXJKY1FwNWsyc2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuf8JDKL ayxSu5foEvk87qYJ5mUTTxelbA3/brIiL9bp6banx1tHypJxLQyaaY1UWl8eEHZp H3Vm46P8l+W+ry0l0FMmKxAJoND5cOoH7zvvSXqw9cBRTWHY0DlhFg98gPQRJgzy C777WrPbNOpaq82KdaGHOtVU+DeY0pMZQj7hgG/x1Ea7IoNB2lliPOiSyuIc01Lx tbjX6usLVaFgLJ2/f8rHwvKV3oCaua7I2uwegiZr+Mx5Y/bSdUlWayW1Jdqq7lG5 ptJhG4MODfp3XREXpPwldSwI6+SbGEsZbL9Bvz7QQDcJseYhW9wW2BbI349A5Tak rB5JDstQaLS+Fg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:39:02 2025 by rpki-client