This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json) Hash identifier: v+ip1rn4pBokkCg82d+/2EGV8RzkZLsdhR+hAOIO5ZI= Subject key identifier: FA:C7:D2:AF:54:35:D9:F7:8E:9F:5F:BD:5B:FB:DA:08:96:21:DE:0F Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9 Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9 Certificate serial: 019AF3528922C1A7639596E98D8FD9CFE4B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft Manifest number: 102F Signing time: Sat 06 Dec 2025 11:01:03 +0000 Manifest this update: Sat 06 Dec 2025 11:01:03 +0000 Manifest next update: Sun 07 Dec 2025 11:01:03 +0000 Files and hashes: 1: NyUxlhwtEkrfLySazfcIwYLq2uE.roa (hash: nbUnPx7laXVoJ1K+1QDprr0SXDSN8ACCPbp85TtzNB8=) 2: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: 10mHtGfJH/2cXZDjmJshJYAWViZNI1ge75JDFcFP88M=) 3: v7McWGmC6x_jve8hO4dvjOUzDnU.roa (hash: pEIX+2zdNDbAjQYiraeVFcmiQz+0WDogJaC+EZR5c2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:89:22:c1:a7:63:95:96:e9:8d:8f:d9:cf:e4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9 Validity Not Before: Dec 6 11:01:03 2025 GMT Not After : Dec 7 11:01:03 2025 GMT Subject: CN=fac7d2af5435d9f78e9f5fbd5bfbda089621de0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b3:51:9e:66:6c:26:f6:1e:d4:46:a5:d4:a2: 1a:97:2f:a9:cc:38:9e:73:4f:c0:0f:e0:09:17:64: eb:af:fb:77:be:ea:35:f8:f7:d2:aa:a7:99:1e:38: 0f:c3:5f:a8:99:32:27:1b:01:48:e4:9d:3e:f3:92: 77:d5:b9:ce:b0:f9:39:a3:de:44:34:61:c6:9c:33: c5:22:03:fe:d3:35:8b:9c:89:c8:fe:df:07:cc:70: 19:c3:af:e9:02:be:5e:ba:16:12:0e:cb:76:10:10: d9:4b:f9:06:0d:fc:dd:41:d8:d7:f3:48:3b:4d:d2: fa:0c:e4:da:dc:6b:e6:99:00:8a:b3:06:8d:8e:68: c1:72:43:fd:4c:2d:65:cd:d8:09:af:1d:b6:5d:a1: 6d:51:06:a7:a8:b4:a6:b2:8e:76:3d:b8:18:a3:ef: 53:9c:5c:74:f9:91:06:c9:62:28:88:6a:69:17:47: 93:16:a6:27:b3:49:89:cb:10:ee:35:54:68:62:97: 2d:53:42:c5:cb:47:44:22:24:03:3c:ae:62:4e:5f: 0c:3d:f1:a5:60:6b:4c:6c:ca:50:9a:60:44:7d:77: dd:3c:4c:68:3d:ca:46:3f:1f:51:d9:bc:ae:21:19: 68:ad:33:be:ee:bf:44:90:ee:2c:97:cf:c3:af:d3: 36:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C7:D2:AF:54:35:D9:F7:8E:9F:5F:BD:5B:FB:DA:08:96:21:DE:0F X509v3 Authority Key Identifier: keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e3:bd:a2:f1:9f:a8:05:88:92:14:05:7a:cd:ae:94:e6:13: a5:92:0e:c6:c1:6c:1c:6d:bc:d2:57:37:f4:a9:47:03:fd:b7: 18:65:36:b1:23:45:1c:8d:8c:47:89:47:59:e8:b5:7a:29:0e: 84:36:0d:83:5f:6c:9f:b0:10:6c:2f:37:f6:49:8b:1b:51:15: 38:4f:71:b3:93:69:fc:e3:b6:ec:b6:8b:e6:6b:ac:45:77:df: 7e:a0:2f:78:59:61:66:4e:93:fb:be:dc:09:7f:ca:82:3f:11: 15:00:74:ad:a8:02:44:bc:c7:64:6f:a8:c9:dd:a3:bc:fd:0e: c1:fa:b0:40:ea:01:79:a1:c5:44:90:6e:17:ec:ad:54:db:80: 1f:f9:91:4f:82:1f:3b:21:f0:eb:41:62:f8:24:92:5b:a6:44: 01:ac:8a:4e:4d:ac:bc:58:ad:0e:6b:fe:f4:28:a7:e0:1a:29: 0f:cc:28:e5:66:41:c4:c7:03:c0:03:15:6b:22:7c:ba:9d:28: a1:0f:fc:dc:81:94:c0:6d:5a:0c:79:90:15:87:3e:22:7f:f2: fc:e8:35:49:56:07:f7:ea:fb:94:a2:ae:ee:49:7a:59:2b:e2: f1:06:57:5e:16:45:98:75:70:a9:d9:b7:41:14:1b:47:89:d4: 92:5a:c0:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUokiwadjlZbpjY/Zz+S5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YWE0NTFiNzgzZmM5MWEwNGI4MmY4MmYxNTZmMGI0ODk3 MTVkYzkwHhcNMjUxMjA2MTEwMTAzWhcNMjUxMjA3MTEwMTAzWjAzMTEwLwYDVQQD EyhmYWM3ZDJhZjU0MzVkOWY3OGU5ZjVmYmQ1YmZiZGEwODk2MjFkZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7NRnmZsJvYe1Eal1KIaly+pzDie c0/AD+AJF2Trr/t3vuo1+PfSqqeZHjgPw1+omTInGwFI5J0+85J31bnOsPk5o95E NGHGnDPFIgP+0zWLnInI/t8HzHAZw6/pAr5euhYSDst2EBDZS/kGDfzdQdjX80g7 TdL6DOTa3GvmmQCKswaNjmjBckP9TC1lzdgJrx22XaFtUQanqLSmso52PbgYo+9T nFx0+ZEGyWIoiGppF0eTFqYns0mJyxDuNVRoYpctU0LFy0dEIiQDPK5iTl8MPfGl YGtMbMpQmmBEfXfdPExoPcpGPx9R2byuIRlorTO+7r9EkO4sl8/Dr9M2twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrH0q9UNdn3jp9fvVv72giWId4PMB8GA1UdIwQY MBaAFGWqRRt4P8kaBLgvgvFW8LSJcV3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWIt M2JjM2RmN2EyOThhLzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWItM2JjM2RmN2EyOThh LzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOO9ovGf qAWIkhQFes2ulOYTpZIOxsFsHG280lc39KlHA/23GGU2sSNFHI2MR4lHWei1eikO hDYNg19sn7AQbC839kmLG1EVOE9xs5Np/OO27LaL5musRXfffqAveFlhZk6T+77c CX/Kgj8RFQB0ragCRLzHZG+oyd2jvP0OwfqwQOoBeaHFRJBuF+ytVNuAH/mRT4If OyHw60Fi+CSSW6ZEAayKTk2svFitDmv+9Cin4BopD8wo5WZBxMcDwAMVayJ8up0o oQ/83IGUwG1aDHmQFYc+In/y/Og1SVYH9+r7lKKu7kl6WSvi8QZXXhZFmHVwqdm3 QRQbR4nUklrACw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:09 2025 by rpki-client