This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json) Hash identifier: gJYD4oWf8x3PI08+5jpgCC1u99fvtgTWM/as/qGBXvs= Subject key identifier: 22:E4:DC:37:1B:38:4F:F9:71:19:67:D9:49:8F:3C:F7:6E:ED:DE:01 Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73 Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73 Certificate serial: 019AF31BBFB0CCE74193B906D7293F4BD3FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft Manifest number: 04A6 Signing time: Sat 06 Dec 2025 10:01:13 +0000 Manifest this update: Sat 06 Dec 2025 10:01:13 +0000 Manifest next update: Sun 07 Dec 2025 10:01:13 +0000 Files and hashes: 1: HwGE0614r9XuIYTbb7FI9qw3QhA.roa (hash: NN98O8b8/m43VOkHIWYXipqgMBc9JvK22oHaFCTLRzA=) 2: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: yRHwgzPqYkbNBAy+YQ2C9H1mnOqZtsiqXNiXFTu6xxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:bf:b0:cc:e7:41:93:b9:06:d7:29:3f:4b:d3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73 Validity Not Before: Dec 6 10:01:13 2025 GMT Not After : Dec 7 10:01:13 2025 GMT Subject: CN=22e4dc371b384ff9711967d9498f3cf76eedde01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:77:f3:cd:17:d0:48:5a:18:b6:5a:b9:e9: 4c:a9:f9:8a:2a:a8:8a:78:5e:59:2a:0d:86:bd:b8: 38:7f:5a:94:0f:12:96:d6:2a:a8:8f:0f:e0:e3:4c: d8:3f:b2:07:45:0b:4e:78:f3:f8:5a:b8:3c:03:80: a9:df:44:d7:55:71:c1:45:27:33:c8:fc:16:96:5c: 60:7a:21:cf:a9:2b:30:8d:ae:e1:ab:d2:11:95:92: 8f:41:66:3a:ad:65:fc:16:a9:26:32:23:cd:1b:d9: 80:c2:c8:41:a5:9f:67:52:ac:b5:bb:35:4a:95:5b: d1:80:5e:04:9e:17:79:81:a1:c5:03:58:a8:00:ca: d3:69:b8:2d:cd:1c:f1:dc:a3:e2:46:f4:d2:bd:ff: a3:44:8f:54:81:0a:1c:ae:d9:71:63:85:5e:5d:48: 1b:1d:dd:46:78:a7:4e:98:3c:b9:d7:88:00:a8:fa: dd:a8:9d:c0:9f:c9:c7:10:5a:43:ac:34:85:0d:99: 63:99:bb:60:f1:89:6d:79:a3:97:14:34:ed:8f:50: fe:d5:b9:b7:52:f8:83:08:dc:5f:2e:74:25:20:9d: af:15:60:cb:66:6b:19:fc:78:c4:5b:76:55:37:6e: 2f:c1:0c:07:e4:cd:6f:5b:37:6d:13:d1:15:1a:c0: 23:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E4:DC:37:1B:38:4F:F9:71:19:67:D9:49:8F:3C:F7:6E:ED:DE:01 X509v3 Authority Key Identifier: keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:43:26:ac:e8:9c:7d:8f:4e:d4:6a:2c:25:aa:95:51:85:28: 40:0d:f8:e5:39:cc:5d:d0:f5:09:b2:0e:67:d5:55:d3:71:10: 4c:f1:5e:83:0a:9e:63:29:8b:85:de:cc:da:28:17:b7:e1:cc: dd:4c:3f:52:8e:63:3c:71:8f:ef:02:a5:49:a1:4b:dc:d8:f0: 13:5d:99:1b:66:0e:c5:93:57:76:43:b2:fb:9b:47:89:c7:9b: 78:86:52:f8:bf:48:7d:72:2e:50:8c:e8:db:20:d2:fc:31:ac: 93:61:a0:5b:6f:e7:dc:5b:73:f1:4f:28:e1:9b:84:91:b0:80: 69:22:d2:f3:3b:09:5c:25:44:2b:42:74:ba:31:31:0d:75:ad: 51:f2:36:b7:e4:3e:e3:99:65:72:bc:e3:e9:8b:35:6a:a3:0d: 00:77:dc:e5:aa:8d:d8:dd:fd:ac:15:7a:c5:15:a4:4b:3c:6b: be:fa:d1:e2:8c:b7:98:21:9a:42:e1:72:92:48:86:79:f3:5e: 95:62:0e:00:51:6b:5a:30:72:e0:f6:1e:11:04:8d:7e:b4:24: 9c:e3:46:aa:59:17:bb:4e:ec:5a:ba:75:4b:61:66:55:b1:08: e5:da:2a:d1:14:3b:f7:18:66:91:ef:45:3a:6c:81:e6:02:80: 92:59:b5:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7+wzOdBk7kG1yk/S9P8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YTkwNjZkNWI2YWMzMDE5YzIwMzdmNTc5ZDExYmFlMWE1 ZWVhNzMwHhcNMjUxMjA2MTAwMTEzWhcNMjUxMjA3MTAwMTEzWjAzMTEwLwYDVQQD EygyMmU0ZGMzNzFiMzg0ZmY5NzExOTY3ZDk0OThmM2NmNzZlZWRkZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNR3880X0EhaGLZauelMqfmKKqiK eF5ZKg2Gvbg4f1qUDxKW1iqojw/g40zYP7IHRQtOePP4Wrg8A4Cp30TXVXHBRScz yPwWllxgeiHPqSswja7hq9IRlZKPQWY6rWX8FqkmMiPNG9mAwshBpZ9nUqy1uzVK lVvRgF4Enhd5gaHFA1ioAMrTabgtzRzx3KPiRvTSvf+jRI9UgQocrtlxY4VeXUgb Hd1GeKdOmDy514gAqPrdqJ3An8nHEFpDrDSFDZljmbtg8YlteaOXFDTtj1D+1bm3 UviDCNxfLnQlIJ2vFWDLZmsZ/HjEW3ZVN24vwQwH5M1vWzdtE9EVGsAjCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLk3DcbOE/5cRln2UmPPPdu7d4BMB8GA1UdIwQY MBaAFGWpBm1basMBnCA39XnRG64aXupzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2Qt MThmMzQzNDg4Mjg2LzEvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2QtMThmMzQzNDg4Mjg2 LzEvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEMmrOic fY9O1GosJaqVUYUoQA345TnMXdD1CbIOZ9VV03EQTPFegwqeYymLhd7M2igXt+HM 3Uw/Uo5jPHGP7wKlSaFL3NjwE12ZG2YOxZNXdkOy+5tHicebeIZS+L9IfXIuUIzo 2yDS/DGsk2GgW2/n3Ftz8U8o4ZuEkbCAaSLS8zsJXCVEK0J0ujExDXWtUfI2t+Q+ 45llcrzj6Ys1aqMNAHfc5aqN2N39rBV6xRWkSzxrvvrR4oy3mCGaQuFykkiGefNe lWIOAFFrWjBy4PYeEQSNfrQknONGqlkXu07sWrp1S2FmVbEI5doq0RQ79xhmke9F OmyB5gKAklm1mA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:08:02 2025 by rpki-client