This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json) Hash identifier: 0zoXVneoMu4t5ZWeog+jwsO5qMdz/8jvO/CE89KgUB4= Subject key identifier: 64:BD:2A:8E:BE:F4:D2:71:3B:4E:E1:84:8B:29:4D:A4:13:ED:B1:35 Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b Certificate serial: 019AF12EA45D25B25316A5B8AEB35D2856DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:36 +0000 Manifest this update: Sat 06 Dec 2025 01:02:36 +0000 Manifest next update: Sun 07 Dec 2025 01:02:36 +0000 Files and hashes: 1: bveNVNZQRYaQggK5H4XE-ImTkzI.roa (hash: RsefAt4XMHkoKxXyBZqmXBMXlqDjbew2tMCZMb8OiUg=) 2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: 2xJ8CUL4QVgB5U3s3G6bLGhOpfOoIY02Ls5dhCmVKdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a4:5d:25:b2:53:16:a5:b8:ae:b3:5d:28:56:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b Validity Not Before: Dec 6 01:02:36 2025 GMT Not After : Dec 7 01:02:36 2025 GMT Subject: CN=64bd2a8ebef4d2713b4ee1848b294da413edb135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:d7:cd:c9:66:61:f1:69:9d:6f:2b:e2:1c: 84:6b:3c:85:82:c5:9e:48:36:bf:ad:0a:de:13:b3: b0:65:4a:19:07:72:fb:b3:b5:22:76:1e:59:5a:b1: 7c:68:02:2f:6b:68:43:64:9e:8b:cf:46:94:d1:41: 44:b8:b0:7c:b5:c7:2a:81:39:73:ef:7c:a6:50:c0: 0b:10:7e:9a:ae:e2:41:1c:24:cf:19:33:ee:49:ca: ef:87:23:e1:31:2a:d6:21:3a:21:9e:c4:78:a7:da: 25:cb:a1:94:19:9e:7b:2c:c8:28:bb:15:bb:a6:15: cb:a4:d3:db:41:63:07:87:2d:bb:f5:3c:63:bb:18: 39:79:73:7a:06:52:6a:7e:db:f0:25:0b:a7:3b:44: a3:72:c0:ef:05:6e:96:72:ee:d5:2e:bc:59:57:4a: 2a:80:ed:1f:5d:fb:c9:25:d4:b2:00:d1:8d:5c:66: 4e:b7:c2:3e:95:e4:ad:41:7e:1b:80:34:cf:f4:2a: 91:dd:39:4e:9a:7e:d3:75:fc:fc:31:20:6a:49:8a: ef:bb:e4:26:e4:50:48:81:30:d0:bf:81:ef:d3:be: a2:f1:94:ef:e4:3c:a5:39:a0:a9:17:2e:14:4e:d0: de:74:8c:4f:19:27:d6:0c:f3:b3:d0:63:83:8c:91: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BD:2A:8E:BE:F4:D2:71:3B:4E:E1:84:8B:29:4D:A4:13:ED:B1:35 X509v3 Authority Key Identifier: keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:fb:cf:96:9b:d5:55:74:0f:08:67:7a:e2:5e:d3:0e:3d:f9: 19:16:ef:0a:a2:ef:e1:6c:74:eb:1e:2d:a3:97:73:71:50:15: 3d:cf:57:c9:4c:c0:08:c8:68:11:80:84:11:ed:16:0b:20:03: 9e:bb:71:77:1a:a6:1f:8e:84:b2:e6:48:f3:38:fa:e0:7e:4f: e7:ca:51:dc:27:81:b8:4b:7d:55:a7:e0:ec:ea:73:20:cd:88: f4:d5:a5:d0:40:94:65:d2:7c:62:04:b9:67:67:a8:17:43:60: e0:19:07:a9:25:ec:7e:7d:da:16:45:95:40:8e:fe:86:6b:24: 21:d6:77:02:99:1f:26:52:b0:c1:a0:b6:f6:b5:c0:31:99:bb: 28:8f:ab:aa:87:26:94:3f:11:44:94:71:a2:73:39:73:2a:f7: 82:91:89:02:87:c8:a1:55:93:64:ca:0c:de:cf:d8:60:1f:2f: 49:b3:4b:86:e9:5e:35:de:24:1f:9e:29:70:1b:4a:bc:ee:d8: 61:06:9f:cf:b0:87:59:96:09:91:fd:d3:69:61:c6:72:b3:40: 0c:90:30:2b:bd:44:fb:7c:65:d7:fc:08:4c:e6:79:05:cc:f2: 22:82:c1:25:31:19:7c:73:fa:7d:a2:1c:01:a4:6e:95:ff:58: 47:a9:81:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqRdJbJTFqW4rrNdKFbbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNGNhZjZhZWNjOGMzMTA3YjRiNzExNzRlYjI5OTc0ZTBm ZDg1NWIwHhcNMjUxMjA2MDEwMjM2WhcNMjUxMjA3MDEwMjM2WjAzMTEwLwYDVQQD Eyg2NGJkMmE4ZWJlZjRkMjcxM2I0ZWUxODQ4YjI5NGRhNDEzZWRiMTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh3XzclmYfFpnW8r4hyEazyFgsWe SDa/rQreE7OwZUoZB3L7s7Uidh5ZWrF8aAIva2hDZJ6Lz0aU0UFEuLB8tccqgTlz 73ymUMALEH6aruJBHCTPGTPuScrvhyPhMSrWITohnsR4p9oly6GUGZ57LMgouxW7 phXLpNPbQWMHhy279Txjuxg5eXN6BlJqftvwJQunO0SjcsDvBW6Wcu7VLrxZV0oq gO0fXfvJJdSyANGNXGZOt8I+leStQX4bgDTP9CqR3TlOmn7Tdfz8MSBqSYrvu+Qm 5FBIgTDQv4Hv076i8ZTv5DylOaCpFy4UTtDedIxPGSfWDPOz0GODjJHyjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGS9Ko6+9NJxO07hhIspTaQT7bE1MB8GA1UdIwQY MBaAFM5Mr2rsyMMQe0txF06ymXTg/YVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAt NzgxYWRhNmJlM2EwLzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAtNzgxYWRhNmJlM2Ew LzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPvPlpvV VXQPCGd64l7TDj35GRbvCqLv4Wx06x4to5dzcVAVPc9XyUzACMhoEYCEEe0WCyAD nrtxdxqmH46EsuZI8zj64H5P58pR3CeBuEt9Vafg7OpzIM2I9NWl0ECUZdJ8YgS5 Z2eoF0Ng4BkHqSXsfn3aFkWVQI7+hmskIdZ3ApkfJlKwwaC29rXAMZm7KI+rqocm lD8RRJRxonM5cyr3gpGJAofIoVWTZMoM3s/YYB8vSbNLhuleNd4kH54pcBtKvO7Y YQafz7CHWZYJkf3TaWHGcrNADJAwK71E+3xl1/wITOZ5BczyIoLBJTEZfHP6faIc AaRulf9YR6mBvA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:14 2025 by rpki-client