This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json) Hash identifier: VbdAhk/hn0Av4iCGveQf9UgEpZKzv+P9rHK8vffS1mk= Subject key identifier: 60:2F:6A:1A:0F:4E:00:77:B0:D6:E6:72:D4:32:4B:4E:36:2E:33:68 Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea Certificate serial: 019AF23FC0153216A8BA5629C02CBB9AB996 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft Manifest number: 0C18 Signing time: Sat 06 Dec 2025 06:00:55 +0000 Manifest this update: Sat 06 Dec 2025 06:00:55 +0000 Manifest next update: Sun 07 Dec 2025 06:00:55 +0000 Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: J2+Yvhgz2ZNaP5J1XRDfURfAkjxFYtkULLE7p616Xbc=) 2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=) 3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c0:15:32:16:a8:ba:56:29:c0:2c:bb:9a:b9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea Validity Not Before: Dec 6 06:00:55 2025 GMT Not After : Dec 7 06:00:55 2025 GMT Subject: CN=602f6a1a0f4e0077b0d6e672d4324b4e362e3368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dc:34:01:b9:0b:75:c0:8c:b1:13:c5:54:e2: 0b:cf:bd:f1:55:98:d5:a2:52:6d:df:26:23:82:a7: 5f:78:a1:c3:8a:d5:ef:41:37:0c:5b:cb:9d:a5:14: af:79:3d:46:58:4e:2e:5d:01:1f:0c:0d:6a:a6:07: c7:00:59:5c:a2:48:3f:93:04:ab:1d:78:db:7d:66: 97:a0:f7:0e:44:6a:5f:b9:37:13:0d:8f:0c:cf:26: 5e:5d:f3:df:75:c2:d9:19:a9:01:44:6f:fe:91:68: 47:1c:31:32:99:69:1b:ad:b5:f9:64:fa:70:89:98: db:ca:0c:55:a9:13:3f:7b:03:9e:f9:00:a3:72:ae: b3:b4:64:98:41:2d:b5:04:6a:47:b9:3e:72:2f:63: 6c:d4:03:90:e0:2b:21:ab:e5:39:7b:8a:b9:da:d7: 71:ad:aa:fe:74:a3:10:e4:b8:d5:94:00:3f:dd:1b: 0f:93:f3:73:e0:16:5f:ec:a8:e1:93:8c:1d:7e:16: cc:a3:41:29:99:52:4c:a8:06:69:39:e0:00:06:1e: 8b:79:b7:5c:0c:f3:18:20:82:c1:b3:d3:8b:35:25: bf:55:18:c2:fd:94:d7:f4:d7:37:ee:f7:23:10:8f: d5:23:0a:7d:ab:5c:b5:3f:e9:71:11:98:93:4b:a2: cb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2F:6A:1A:0F:4E:00:77:B0:D6:E6:72:D4:32:4B:4E:36:2E:33:68 X509v3 Authority Key Identifier: keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:50:d2:5f:a8:53:21:37:dc:ef:54:ed:71:4c:a1:19:91:5c: 67:b5:4a:26:26:fa:dd:22:0e:61:e9:3e:30:0e:7b:61:8a:d6: 5f:10:5e:af:9c:08:0f:bc:2c:c3:53:5e:e5:2a:f7:16:e0:55: 69:0c:d8:b8:a5:46:4e:6d:d5:ce:af:3f:72:f5:1a:4e:ce:c9: 63:bf:62:9a:87:37:a5:1c:5e:af:b3:83:e6:37:17:8c:05:32: 00:c3:83:0c:61:ce:de:4e:25:e4:3a:f6:b5:24:c7:c2:20:e4: 7f:57:5e:52:02:4a:51:1b:4e:aa:ad:14:6b:35:89:a7:12:df: da:37:84:60:5b:59:9a:a3:b9:f5:6e:e3:d4:ac:f2:14:7a:c0: 19:32:43:9d:57:01:da:38:18:f8:c4:75:45:bc:db:b1:c9:fb: 35:d5:7b:9b:a4:eb:0a:0c:99:7f:09:86:c0:f0:d5:9a:0e:68: e8:9b:4d:3b:66:da:77:12:a2:5c:5d:80:11:20:d8:fc:8b:24: 19:61:30:54:cb:64:a9:e4:b1:75:28:8b:9f:70:e6:ea:bc:ed: 88:cf:01:58:5f:cc:6a:3b:e6:2f:a1:2b:0b:c3:21:0e:a0:c1: 1c:ba:c2:a9:31:8d:7c:38:50:2f:5e:95:f9:22:27:eb:2a:de: da:3c:33:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8AVMhaoulYpwCy7mrmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmZiMzA5YzI4OWFjZmZjMWJlMzRhNmYwYjY2NzVjMDAx NzEzZWEwHhcNMjUxMjA2MDYwMDU1WhcNMjUxMjA3MDYwMDU1WjAzMTEwLwYDVQQD Eyg2MDJmNmExYTBmNGUwMDc3YjBkNmU2NzJkNDMyNGI0ZTM2MmUzMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9w0AbkLdcCMsRPFVOILz73xVZjV olJt3yYjgqdfeKHDitXvQTcMW8udpRSveT1GWE4uXQEfDA1qpgfHAFlcokg/kwSr HXjbfWaXoPcORGpfuTcTDY8MzyZeXfPfdcLZGakBRG/+kWhHHDEymWkbrbX5ZPpw iZjbygxVqRM/ewOe+QCjcq6ztGSYQS21BGpHuT5yL2Ns1AOQ4Cshq+U5e4q52tdx rar+dKMQ5LjVlAA/3RsPk/Nz4BZf7Kjhk4wdfhbMo0EpmVJMqAZpOeAABh6Lebdc DPMYIILBs9OLNSW/VRjC/ZTX9Nc37vcjEI/VIwp9q1y1P+lxEZiTS6LLrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAvahoPTgB3sNbmctQyS042LjNoMB8GA1UdIwQY MBaAFGT/swnCiaz/wb40pvC2Z1wAFxPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUt Y2E0NDQ3MDQ0MTZmLzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUtY2E0NDQ3MDQ0MTZm LzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFDSX6hT ITfc71TtcUyhGZFcZ7VKJib63SIOYek+MA57YYrWXxBer5wID7wsw1Ne5Sr3FuBV aQzYuKVGTm3Vzq8/cvUaTs7JY79imoc3pRxer7OD5jcXjAUyAMODDGHO3k4l5Dr2 tSTHwiDkf1deUgJKURtOqq0UazWJpxLf2jeEYFtZmqO59W7j1KzyFHrAGTJDnVcB 2jgY+MR1Rbzbscn7NdV7m6TrCgyZfwmGwPDVmg5o6JtNO2badxKiXF2AESDY/Isk GWEwVMtkqeSxdSiLn3Dm6rztiM8BWF/MajvmL6ErC8MhDqDBHLrCqTGNfDhQL16V +SIn6yre2jwzWw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:31 2025 by rpki-client