This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft File: ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft (raw, json) Hash identifier: 6Tv4GVOcylToG4nYI0zCZBz6Zp/IcxL995Wc9ojdV6U= Subject key identifier: E0:0A:B1:EB:77:86:BF:BE:1C:A3:30:41:34:A9:AC:FD:D5:DC:11:91 Authority key identifier: 65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC Certificate issuer: /CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc Certificate serial: 019AF3F7B5F185EBF9BFC34D16E872A4860B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:01:28 +0000 Manifest this update: Sat 06 Dec 2025 14:01:28 +0000 Manifest next update: Sun 07 Dec 2025 14:01:28 +0000 Files and hashes: 1: KWbEbWMWx8GsR8Asb1Hi7iVj3A8.roa (hash: w7QiyqZy99cacAStF09i7GMZP3QKH24tEZwntPEoeMs=) 2: ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl (hash: 3vciOcwVOAnTV7dA8WAgiei2voAjH6ieQt0kPoZBIG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b5:f1:85:eb:f9:bf:c3:4d:16:e8:72:a4:86:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc Validity Not Before: Dec 6 14:01:28 2025 GMT Not After : Dec 7 14:01:28 2025 GMT Subject: CN=e00ab1eb7786bfbe1ca3304134a9acfdd5dc1191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:c6:1c:b8:54:0a:8b:ef:56:49:fa:37:85: ee:fd:2c:05:3a:a9:d5:9a:8a:59:3c:05:b7:fe:52: cc:6d:09:ea:ed:e5:ba:9c:24:d1:7c:26:58:0a:c0: f8:3e:b7:cb:1a:43:fe:b8:7d:9a:34:f3:2c:df:1b: 71:53:18:63:2b:24:d3:b7:c7:82:e8:3e:0e:05:c9: 0e:e0:ac:ce:1c:15:f4:af:77:7d:88:d0:e6:cd:2f: 9a:25:81:29:40:06:dd:0c:18:a3:85:b5:fe:29:3a: 83:a7:c0:3b:20:90:d8:a4:c8:6b:dd:9d:03:be:72: d8:4d:5b:a9:21:65:ea:8a:e4:81:9e:77:7b:8d:0a: 75:72:7c:6e:96:2e:f3:53:6d:3d:8e:4f:bd:c5:f4: c2:3e:49:d5:1a:9f:b9:ec:c8:2a:85:93:80:b3:5a: 4f:3d:f9:96:3b:19:bf:2b:81:62:82:6b:4f:47:34: 9e:f7:d7:98:19:93:17:9d:48:e7:24:8b:5d:79:8f: 85:c0:1a:95:e1:17:1c:f6:5e:49:ac:8a:f9:91:ff: fa:31:8d:96:44:8b:9b:2e:ac:a8:17:4b:e8:40:09: 5f:dd:9c:6d:7e:37:9a:c6:68:cf:e5:b1:a6:95:d7: 66:02:11:24:50:97:51:61:df:5d:25:d5:5c:49:42: 3f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0A:B1:EB:77:86:BF:BE:1C:A3:30:41:34:A9:AC:FD:D5:DC:11:91 X509v3 Authority Key Identifier: keyid:65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:de:6e:74:a0:8a:73:10:0c:6e:93:d2:8f:1c:c2:1c:1f:9d: a1:4e:d9:7f:d6:6c:b7:94:a5:ec:f5:ef:af:00:17:d0:20:b3: 89:f0:bc:b8:0a:54:a1:39:e6:5e:73:7b:91:a0:d1:0f:9b:df: 02:4c:b7:88:04:cb:9d:ec:e7:40:d7:ef:0d:85:b4:93:e0:a3: 6e:b1:0b:27:c1:80:fa:31:a4:dc:86:8e:41:47:17:6d:a1:3d: 7a:b1:69:18:d0:ef:64:86:b2:2e:01:5d:65:15:d0:01:ca:d1: e4:1a:23:f6:da:2f:1c:1b:04:6b:1d:bc:87:55:11:40:f9:bc: e6:bc:ea:7f:7d:6a:5e:9b:12:3f:06:78:9f:2a:a2:1b:d9:16: a8:87:d1:fa:37:ad:b3:48:25:f1:61:c3:67:89:d5:6b:92:d5: 7c:d9:84:5a:9c:b3:80:14:b1:f7:2d:f4:39:3c:69:9e:bb:a9: c0:74:85:69:67:54:f8:18:f7:e0:cb:ec:ff:c7:85:b2:9a:5b: 3d:ad:34:f3:04:ff:12:7e:1b:56:b8:47:2f:b9:c5:96:a8:54: 2a:a2:dc:61:ac:b0:4f:fc:2f:67:02:e7:c0:bc:62:fd:0a:85: a6:cd:a5:59:79:35:d1:b2:fe:3f:41:c2:01:f7:bc:48:a5:a3: c2:a5:36:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97Xxhev5v8NNFuhypIYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YWI0ODVhZjkyM2QxYjQ2YzVhMzIxZmM3YTNmODU2YzA0 ZmI2ZmMwHhcNMjUxMjA2MTQwMTI4WhcNMjUxMjA3MTQwMTI4WjAzMTEwLwYDVQQD EyhlMDBhYjFlYjc3ODZiZmJlMWNhMzMwNDEzNGE5YWNmZGQ1ZGMxMTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJvGHLhUCovvVkn6N4Xu/SwFOqnV mopZPAW3/lLMbQnq7eW6nCTRfCZYCsD4PrfLGkP+uH2aNPMs3xtxUxhjKyTTt8eC 6D4OBckO4KzOHBX0r3d9iNDmzS+aJYEpQAbdDBijhbX+KTqDp8A7IJDYpMhr3Z0D vnLYTVupIWXqiuSBnnd7jQp1cnxuli7zU209jk+9xfTCPknVGp+57MgqhZOAs1pP PfmWOxm/K4FigmtPRzSe99eYGZMXnUjnJItdeY+FwBqV4Rcc9l5JrIr5kf/6MY2W RIubLqyoF0voQAlf3ZxtfjeaxmjP5bGmlddmAhEkUJdRYd9dJdVcSUI/BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAKset3hr++HKMwQTSprP3V3BGRMB8GA1UdIwQY MBaAFGWrSFr5I9G0bFoyH8ej+FbAT7b8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmF0SVd2a2owYlJzV2pJZng2UDRWc0JQdHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xNjRkOGQtNDFhYy00NTIyLWJiMjUt ODk4NjM0OTQyMjg1LzEvWmF0SVd2a2owYlJzV2pJZng2UDRWc0JQdHZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8xNjRkOGQtNDFhYy00NTIyLWJiMjUtODk4NjM0OTQyMjg1 LzEvWmF0SVd2a2owYlJzV2pJZng2UDRWc0JQdHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAht5udKCK cxAMbpPSjxzCHB+doU7Zf9Zst5Sl7PXvrwAX0CCzifC8uApUoTnmXnN7kaDRD5vf Aky3iATLneznQNfvDYW0k+CjbrELJ8GA+jGk3IaOQUcXbaE9erFpGNDvZIayLgFd ZRXQAcrR5Boj9tovHBsEax28h1URQPm85rzqf31qXpsSPwZ4nyqiG9kWqIfR+jet s0gl8WHDZ4nVa5LVfNmEWpyzgBSx9y30OTxpnrupwHSFaWdU+Bj34Mvs/8eFsppb Pa008wT/En4bVrhHL7nFlqhUKqLcYaywT/wvZwLnwLxi/QqFps2lWXk10bL+P0HC Afe8SKWjwqU2jQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:04:44 2025 by rpki-client