This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json) Hash identifier: uhndM3LeoGxpSR5DIm/0/MbwBCvGNOOQ5ga16dR0QlI= Subject key identifier: 46:E6:BA:0C:97:0B:5D:3E:65:C1:6C:D0:E1:56:E4:EA:90:C1:A6:D9 Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11 Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411 Certificate serial: 019B281BBF27D9BD03225803E2FB34EB1FD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft Manifest number: 1387 Signing time: Tue 16 Dec 2025 17:01:05 +0000 Manifest this update: Tue 16 Dec 2025 17:01:05 +0000 Manifest next update: Wed 17 Dec 2025 17:01:05 +0000 Files and hashes: 1: ID_lbNPN5Y-E-d8mbQhTW4YaucM.roa (hash: pqF3+TVfZVLtWeeY0X/7rX4dAra1r0f5BNTNZcfYgyw=) 2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: upiCRRkpSGFY3/FG3DLBIgId/dbP+7p10wTPu5F5T7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:bf:27:d9:bd:03:22:58:03:e2:fb:34:eb:1f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411 Validity Not Before: Dec 16 17:01:05 2025 GMT Not After : Dec 17 17:01:05 2025 GMT Subject: CN=46e6ba0c970b5d3e65c16cd0e156e4ea90c1a6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:35:ff:89:df:24:00:d3:f3:58:47:16:4c:db: dd:71:e8:6f:b9:3f:45:d5:bd:32:74:72:f0:ab:95: 8f:bd:b2:3a:67:82:45:e8:48:78:5e:6b:ba:79:7e: 56:c1:f9:8c:8e:72:71:fe:28:d2:f7:38:b7:0c:94: 10:c0:d5:d7:f1:d5:1c:f3:ff:e1:82:0a:57:17:cc: 84:fc:37:90:9e:09:95:fb:88:51:c8:9d:4a:72:0f: 1c:3d:e6:ca:61:b4:d1:6e:4b:5d:0c:1a:da:a2:43: e3:a9:0f:30:04:cd:a5:1c:39:83:59:2d:e2:53:26: a0:12:62:17:12:23:e7:15:a0:9e:ac:3a:86:51:9a: db:97:96:21:33:b5:7a:1f:f4:bb:b9:70:c2:56:f0: 9b:a5:25:a9:18:fa:a4:42:62:c7:10:c1:e1:f6:80: 17:3f:eb:de:42:b2:0a:d9:03:17:ff:5d:a3:47:f6: 27:eb:93:cf:3b:2e:d2:ce:5d:02:5a:a2:1a:6a:17: 17:2b:87:21:63:3d:c2:67:44:86:7a:ed:62:68:c3: fc:ed:af:39:c7:0f:8f:bd:9a:ee:e0:1c:19:5c:f3: 7c:f3:a0:3a:55:fa:71:94:f1:70:b4:9f:f1:65:5a: d7:6d:58:31:db:56:7f:20:7d:e3:e6:3c:6a:10:c8: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E6:BA:0C:97:0B:5D:3E:65:C1:6C:D0:E1:56:E4:EA:90:C1:A6:D9 X509v3 Authority Key Identifier: keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:eb:74:ae:aa:87:dc:b0:8a:3e:c1:e7:9b:3c:70:1a:4e:95: 05:47:b4:65:ba:6a:ce:46:2d:2e:c8:9c:c0:42:5e:63:ad:68: fe:56:55:a1:1b:76:5a:29:43:7b:14:75:f6:5b:d4:ff:4d:ce: 7a:fd:08:5a:61:0b:87:5a:ff:ea:b5:ae:d4:40:6e:1c:bb:68: 18:21:94:aa:95:0a:ae:08:0a:3c:b4:7f:98:7c:b7:1a:07:46: d4:32:19:e1:c3:64:36:31:f3:a3:fd:3b:d8:d5:58:cf:7b:bf: ab:58:dd:8a:8f:7e:da:e7:cd:a1:b4:ac:a0:56:37:fe:af:7d: 87:f9:6f:b8:0e:60:4f:01:c4:ad:3d:f2:28:cf:01:9f:53:00: 22:ad:16:2e:18:2b:e8:10:3d:4f:30:7d:17:1f:f7:c3:e4:1f: cc:9b:b8:a4:6e:4d:df:0f:d0:e6:e4:5e:67:97:94:80:d8:7d: 77:5f:45:d7:98:27:4d:44:83:8e:1d:c1:1b:0f:f2:2b:91:15: 2c:ca:fa:cb:7b:dc:ea:73:91:f4:df:98:2f:aa:50:8b:01:5b: 20:9f:93:3a:26:da:bf:1b:c7:13:b9:0f:f7:1d:09:04:f9:2b: b5:11:cf:05:0b:eb:76:5f:9a:d3:36:21:03:5a:07:a3:84:df: a8:1e:e5:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG78n2b0DIlgD4vs06x/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YTk4NTZkYjFhYjNiMjRmMDllOWNiOTI3NDM3Njg2Njgz MDE0MTEwHhcNMjUxMjE2MTcwMTA1WhcNMjUxMjE3MTcwMTA1WjAzMTEwLwYDVQQD Eyg0NmU2YmEwYzk3MGI1ZDNlNjVjMTZjZDBlMTU2ZTRlYTkwYzFhNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zX/id8kANPzWEcWTNvdcehvuT9F 1b0ydHLwq5WPvbI6Z4JF6Eh4Xmu6eX5WwfmMjnJx/ijS9zi3DJQQwNXX8dUc8//h ggpXF8yE/DeQngmV+4hRyJ1Kcg8cPebKYbTRbktdDBraokPjqQ8wBM2lHDmDWS3i UyagEmIXEiPnFaCerDqGUZrbl5YhM7V6H/S7uXDCVvCbpSWpGPqkQmLHEMHh9oAX P+veQrIK2QMX/12jR/Yn65PPOy7Szl0CWqIaahcXK4chYz3CZ0SGeu1iaMP87a85 xw+PvZru4BwZXPN886A6VfpxlPFwtJ/xZVrXbVgx21Z/IH3j5jxqEMiwowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbmugyXC10+ZcFs0OFW5OqQwabZMB8GA1UdIwQY MBaAFGSphW2xqzsk8J6cuSdDdoZoMBQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYt MzdhNDQyZTY1ZjE4LzEvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYtMzdhNDQyZTY1ZjE4 LzEvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEut0rqqH 3LCKPsHnmzxwGk6VBUe0ZbpqzkYtLsicwEJeY61o/lZVoRt2WilDexR19lvU/03O ev0IWmELh1r/6rWu1EBuHLtoGCGUqpUKrggKPLR/mHy3GgdG1DIZ4cNkNjHzo/07 2NVYz3u/q1jdio9+2ufNobSsoFY3/q99h/lvuA5gTwHErT3yKM8Bn1MAIq0WLhgr 6BA9TzB9Fx/3w+QfzJu4pG5N3w/Q5uReZ5eUgNh9d19F15gnTUSDjh3BGw/yK5EV LMr6y3vc6nOR9N+YL6pQiwFbIJ+TOibavxvHE7kP9x0JBPkrtRHPBQvrdl+a0zYh A1oHo4TfqB7l6g== -----END CERTIFICATE-----Generated at Tue Dec 16 20:19:27 2025 by rpki-client