This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft File: ZnsrG--6F48w0qMhxFG27qVGYnQ.mft (raw, json) Hash identifier: csdebQcR+xC4bO09e5ngx8MeyQb0xFg8CHmMY0NaquA= Subject key identifier: 81:24:46:44:8E:AA:71:E1:80:F9:24:41:8B:96:DE:BC:12:DF:43:BF Authority key identifier: 66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74 Certificate issuer: /CN=667b2b1befba178f30d2a321c451b6eea5466274 Certificate serial: 019AF2091CF86DBBD7D7447A59CEF7469A94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft Manifest number: 1074 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: ZnsrG--6F48w0qMhxFG27qVGYnQ.crl (hash: li0wjhiVShCPZ5Ss0rQCM0Ml9j8TEwJ38sUycsLNW+k=) 2: mcf7JveA9sP5q1fzjwTXe1Y9B94.roa (hash: vxgrGFoktHB0oWvn12RjOAHTGS54BioUpfkDuJPEQhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1c:f8:6d:bb:d7:d7:44:7a:59:ce:f7:46:9a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=667b2b1befba178f30d2a321c451b6eea5466274 Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=812446448eaa71e180f924418b96debc12df43bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:86:b5:68:3b:bc:45:b5:2b:5f:02:15:0a: 3f:29:a7:77:2d:48:ce:76:7e:21:db:50:57:ad:1c: 05:d2:54:fd:5e:73:47:17:31:bd:f0:43:c9:b5:0a: b1:20:1e:64:73:d5:2b:05:fa:df:d5:96:23:e9:3b: 69:94:3b:33:87:11:52:5d:1f:2c:43:2f:82:de:64: c9:93:d8:15:6c:d0:36:49:80:69:fb:83:7c:f8:54: 41:80:cb:87:a0:ed:47:7f:fc:7d:fb:20:24:c4:eb: 3b:5f:aa:f6:28:eb:eb:10:e6:23:e4:81:11:69:82: 0e:88:d3:8c:6e:2f:3f:26:0b:1d:e1:38:eb:99:1c: e8:b3:45:21:ee:0c:4f:25:ae:07:3c:83:5b:dd:76: 47:c7:73:be:7c:c1:46:82:f7:3d:7d:17:c7:af:57: 0e:09:d2:ca:2b:10:fa:10:5d:bc:f7:21:db:2b:04: 27:ad:eb:6d:5b:aa:b0:f1:a5:af:8a:b5:0d:0b:d6: b1:9b:2a:87:e6:c9:6f:c6:3b:17:b0:20:89:60:0d: 4a:de:dc:fc:36:1b:a7:d8:71:96:9f:21:55:62:96: 33:39:8d:13:4a:3e:54:04:c8:9c:e2:0c:f5:73:40: e7:5f:db:5b:8a:dd:00:1b:af:2c:bc:2d:17:48:07: da:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:24:46:44:8E:AA:71:E1:80:F9:24:41:8B:96:DE:BC:12:DF:43:BF X509v3 Authority Key Identifier: keyid:66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d2:1d:8b:95:1e:d4:9e:15:e6:5d:e5:e7:24:49:16:5a:7a: 85:c2:0b:5a:98:b9:aa:23:ae:62:3b:fe:f4:45:d8:91:1a:f5: 9f:c2:34:69:74:dc:e0:cc:65:8e:8b:35:5d:3a:32:30:d1:08: cb:3e:17:a2:48:02:8b:c6:2a:a7:e3:42:e9:cd:ab:67:77:c4: 9a:e7:05:8a:d1:d2:af:09:24:08:54:fb:fd:f6:0c:e0:9c:e5: 4b:44:3d:5c:78:d2:05:93:d7:67:f0:b8:9e:7f:2e:08:20:a0: 9f:72:7f:d4:95:59:19:32:8a:1d:90:de:26:1d:56:b4:c2:01: fc:7a:86:03:d9:b4:4a:72:cd:f5:c6:91:e1:52:aa:2c:84:64: 9e:af:3a:6b:47:85:6f:f1:8d:f2:57:00:28:1c:2e:4f:57:02: fb:bf:7d:0a:e2:b3:86:4f:1d:58:b1:f6:af:41:9a:a2:13:d6: cd:87:49:e7:0c:bc:80:66:f1:15:7b:79:72:3f:5d:6d:4d:26: fe:76:48:a1:69:6a:28:2a:1d:66:5d:f9:cd:4d:d5:50:42:e5: 3c:27:03:55:0c:cd:3b:8e:aa:09:b7:56:4b:7b:eb:7c:9a:78: 52:8e:e7:a7:61:ee:c8:8e:84:b0:a4:27:f0:56:fa:72:a0:d5: 47:db:9e:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRz4bbvX10R6Wc73RpqUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2N2IyYjFiZWZiYTE3OGYzMGQyYTMyMWM0NTFiNmVlYTU0 NjYyNzQwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD Eyg4MTI0NDY0NDhlYWE3MWUxODBmOTI0NDE4Yjk2ZGViYzEyZGY0M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0CGtWg7vEW1K18CFQo/Kad3LUjO dn4h21BXrRwF0lT9XnNHFzG98EPJtQqxIB5kc9UrBfrf1ZYj6TtplDszhxFSXR8s Qy+C3mTJk9gVbNA2SYBp+4N8+FRBgMuHoO1Hf/x9+yAkxOs7X6r2KOvrEOYj5IER aYIOiNOMbi8/Jgsd4TjrmRzos0Uh7gxPJa4HPINb3XZHx3O+fMFGgvc9fRfHr1cO CdLKKxD6EF289yHbKwQnrettW6qw8aWvirUNC9axmyqH5slvxjsXsCCJYA1K3tz8 Nhun2HGWnyFVYpYzOY0TSj5UBMic4gz1c0DnX9tbit0AG68svC0XSAfaIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEkRkSOqnHhgPkkQYuW3rwS30O/MB8GA1UdIwQY MBaAFGZ7KxvvuhePMNKjIcRRtu6lRmJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYt ZjhiZGQyZDc5MjdkLzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYtZjhiZGQyZDc5Mjdk LzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStIdi5Ue 1J4V5l3l5yRJFlp6hcILWpi5qiOuYjv+9EXYkRr1n8I0aXTc4Mxljos1XToyMNEI yz4XokgCi8Yqp+NC6c2rZ3fEmucFitHSrwkkCFT7/fYM4JzlS0Q9XHjSBZPXZ/C4 nn8uCCCgn3J/1JVZGTKKHZDeJh1WtMIB/HqGA9m0SnLN9caR4VKqLIRknq86a0eF b/GN8lcAKBwuT1cC+799CuKzhk8dWLH2r0GaohPWzYdJ5wy8gGbxFXt5cj9dbU0m /nZIoWlqKCodZl35zU3VUELlPCcDVQzNO46qCbdWS3vrfJp4Uo7np2HuyI6EsKQn 8Fb6cqDVR9uePg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:42 2025 by rpki-client