This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft File: ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft (raw, json) Hash identifier: gH5N5E4ftdEGODTfTahvQP9hJerGdqGuW7gMwe8L5ss= Subject key identifier: D8:12:AD:33:4A:9F:66:5C:7E:9C:A6:20:6A:50:DF:F0:0D:64:28:10 Authority key identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45 Certificate issuer: /CN=66f04275253f967384c4973758a54b7fd085fe45 Certificate serial: 019AF1646FC92595F44332F7A7F56FDEB7BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft Manifest number: 15AF Signing time: Sat 06 Dec 2025 02:01:22 +0000 Manifest this update: Sat 06 Dec 2025 02:01:22 +0000 Manifest next update: Sun 07 Dec 2025 02:01:22 +0000 Files and hashes: 1: 0Iy8NsUXTA0psQPyCINqg9pVI58.roa (hash: yvEGBqidyX57HbZdF/uHS+mpQFnEILAUnlH+f4viPS0=) 2: ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl (hash: PxdYeOkqcO4hL/WNJ82tH1qcHBa+0aDOFAhsJJj4SeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6f:c9:25:95:f4:43:32:f7:a7:f5:6f:de:b7:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f04275253f967384c4973758a54b7fd085fe45 Validity Not Before: Dec 6 02:01:22 2025 GMT Not After : Dec 7 02:01:22 2025 GMT Subject: CN=d812ad334a9f665c7e9ca6206a50dff00d642810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:c1:9c:88:13:79:68:55:76:d9:b8:ae:fe: 70:8b:a6:96:61:b1:3f:97:7c:20:d8:9f:1b:00:b7: eb:f5:10:d7:cc:9d:cc:a1:35:a1:3d:d6:32:60:21: e4:1f:ec:19:9e:dc:4c:32:c5:2a:2c:0a:65:42:d3: 14:6f:4e:ea:70:ba:fc:d3:ed:ef:55:75:b0:b3:d3: f0:b1:da:ce:4c:1f:c7:6a:35:08:1b:50:97:00:97: 9e:80:d6:cd:fa:d9:82:88:42:5f:dd:89:45:5b:01: b1:94:26:c0:79:12:b3:b7:64:08:24:ba:5a:0a:23: 54:6f:14:71:8a:3d:d4:0a:ee:ac:3c:02:e8:a0:64: 6f:18:66:57:b4:70:02:b7:6f:ae:2e:02:4c:ec:ef: ee:22:ac:47:b5:ba:6c:b3:20:25:f1:c9:01:d3:b3: e2:7f:7a:2c:aa:74:84:0a:26:5f:72:97:a7:a9:13: 7a:ed:d2:1e:69:c2:37:71:a3:a7:ad:f3:2f:d6:35: 7c:03:82:61:69:a7:08:77:d2:6c:b4:20:58:73:b2: 81:bc:87:47:88:a7:6e:f7:cf:b8:c9:51:49:f7:1a: bc:be:be:d2:be:e1:2a:ed:90:47:5e:75:b5:5c:8c: 93:23:1f:8c:7f:63:bf:8e:96:dd:d7:fc:6d:39:95: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:12:AD:33:4A:9F:66:5C:7E:9C:A6:20:6A:50:DF:F0:0D:64:28:10 X509v3 Authority Key Identifier: keyid:66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:68:89:57:e5:c9:07:5e:33:71:72:09:d1:cb:22:8c:30:81: 1e:77:4f:de:7d:7d:b7:fa:4f:0e:c7:52:e6:43:3e:eb:8e:bd: 8f:84:7f:c6:0e:ec:81:b0:95:ae:7b:19:18:d0:d1:dc:c7:7f: 89:37:cb:03:7e:5f:c3:d2:6d:bc:16:71:38:ff:a5:7b:dd:9c: c6:bb:fe:e7:f0:c2:a9:cd:c9:33:a3:08:af:00:0d:17:c1:57: 5c:18:1b:e4:74:1e:a2:26:2f:90:e6:03:09:26:47:c4:9f:d0: a8:9c:17:a4:6b:9e:7e:ea:36:11:65:f1:61:0b:d9:e0:59:22: 07:46:fa:1c:55:4d:d4:8d:90:e1:e0:0c:d8:f5:76:b6:15:8f: d8:97:e3:e3:0e:7e:1a:2a:7a:de:5e:ff:b5:4f:8c:8d:5c:9d: bf:b9:20:96:6d:18:25:1f:cd:b6:8d:34:56:3d:82:48:e4:e0: 71:b5:0a:4c:e2:86:f4:4f:df:6c:88:43:f7:c3:3c:06:a9:86: 7c:8f:01:49:f6:80:23:35:d6:da:34:11:a0:f6:f3:66:06:ff: b3:29:1d:ff:a0:1f:d1:68:55:d3:0d:70:47:98:13:6c:e0:bb: ab:a2:37:24:16:6d:56:8a:5c:53:01:50:0a:ea:26:d6:cf:24: 60:cb:76:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZG/JJZX0QzL3p/Vv3re+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjA0Mjc1MjUzZjk2NzM4NGM0OTczNzU4YTU0YjdmZDA4 NWZlNDUwHhcNMjUxMjA2MDIwMTIyWhcNMjUxMjA3MDIwMTIyWjAzMTEwLwYDVQQD EyhkODEyYWQzMzRhOWY2NjVjN2U5Y2E2MjA2YTUwZGZmMDBkNjQyODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmfBnIgTeWhVdtm4rv5wi6aWYbE/ l3wg2J8bALfr9RDXzJ3MoTWhPdYyYCHkH+wZntxMMsUqLAplQtMUb07qcLr80+3v VXWws9PwsdrOTB/HajUIG1CXAJeegNbN+tmCiEJf3YlFWwGxlCbAeRKzt2QIJLpa CiNUbxRxij3UCu6sPALooGRvGGZXtHACt2+uLgJM7O/uIqxHtbpssyAl8ckB07Pi f3osqnSECiZfcpenqRN67dIeacI3caOnrfMv1jV8A4JhaacId9JstCBYc7KBvIdH iKdu98+4yVFJ9xq8vr7SvuEq7ZBHXnW1XIyTIx+Mf2O/jpbd1/xtOZWyxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgSrTNKn2ZcfpymIGpQ3/ANZCgQMB8GA1UdIwQY MBaAFGbwQnUlP5ZzhMSXN1ilS3/Qhf5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZCQ2RTVV9sbk9FeEpjM1dLVkxmOUNGX2tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85ZTE2ZDItZDNiOS00ZWZhLTljM2Qt ZTQ5NjE4NTJjOGI2LzEvWnZCQ2RTVV9sbk9FeEpjM1dLVkxmOUNGX2tVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85ZTE2ZDItZDNiOS00ZWZhLTljM2QtZTQ5NjE4NTJjOGI2 LzEvWnZCQ2RTVV9sbk9FeEpjM1dLVkxmOUNGX2tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2iJV+XJ B14zcXIJ0csijDCBHndP3n19t/pPDsdS5kM+6469j4R/xg7sgbCVrnsZGNDR3Md/ iTfLA35fw9JtvBZxOP+le92cxrv+5/DCqc3JM6MIrwANF8FXXBgb5HQeoiYvkOYD CSZHxJ/QqJwXpGuefuo2EWXxYQvZ4FkiB0b6HFVN1I2Q4eAM2PV2thWP2Jfj4w5+ Gip63l7/tU+MjVydv7kglm0YJR/Nto00Vj2CSOTgcbUKTOKG9E/fbIhD98M8BqmG fI8BSfaAIzXW2jQRoPbzZgb/sykd/6Af0WhV0w1wR5gTbOC7q6I3JBZtVopcUwFQ Cuom1s8kYMt2Xw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:46 2025 by rpki-client