This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json) Hash identifier: fQnNDduDxQvaeAqr3FaHjZb0JesQQN0ejdr7cQeh6z0= Subject key identifier: 24:64:79:D0:DC:61:E1:3E:22:89:E2:AA:1D:D4:2D:47:2C:B1:45:8B Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44 Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244 Certificate serial: 019AFBB0D5DDEB15C6FC179C28AA17A1EAF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft Manifest number: 06E9 Signing time: Mon 08 Dec 2025 02:01:01 +0000 Manifest this update: Mon 08 Dec 2025 02:01:01 +0000 Manifest next update: Tue 09 Dec 2025 02:01:01 +0000 Files and hashes: 1: 3tamc3sOw67HPVcPTfi-B2O8yU0.roa (hash: VKiy/+EDaLvbaW8IRlukGidMdNs6XDi7iV1i6VLWYS0=) 2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: kDg+1koQtzyrkeJPA5NORbA/k3LAqyFKHyBbKyozVXU=) 3: oMFhnG_2Z4roWQc3WgoG1HgKdEc.roa (hash: QGs1HFAKixXlw1vT4Oet6ENYZoHU7usshB/hp90M1GI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b0:d5:dd:eb:15:c6:fc:17:9c:28:aa:17:a1:ea:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244 Validity Not Before: Dec 8 02:01:01 2025 GMT Not After : Dec 9 02:01:01 2025 GMT Subject: CN=246479d0dc61e13e2289e2aa1dd42d472cb1458b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:00:15:be:e9:68:11:f0:cb:99:a4:d5:e5:29: 9d:28:79:94:fa:f2:f8:3c:1d:fa:fe:a7:64:21:8c: f5:f4:2e:ff:f4:a7:b7:91:22:79:dc:df:3e:ec:ac: 71:c2:c9:6f:d2:23:59:4c:7a:b2:c5:c1:83:28:1b: d5:b1:ad:7a:80:a0:9a:99:9e:50:bf:0f:21:a1:a9: 76:6c:5b:45:c5:8e:0d:cb:f0:e5:c5:f6:a1:9b:83: d6:16:58:72:82:c9:2b:1a:8f:d8:89:25:d6:85:1f: db:3f:ee:4b:cb:a3:c4:6e:08:94:42:78:c4:38:92: a9:58:15:a4:09:dd:6d:38:d4:62:fb:80:c5:27:62: 80:bd:b0:09:6e:63:69:7a:00:72:e1:40:f7:59:61: af:9a:e1:4c:49:3b:84:96:d1:db:2c:8c:dc:0a:44: fc:b5:2e:49:93:fa:48:78:5c:9a:99:0b:5f:18:7a: 68:5c:41:bd:c7:71:d6:87:9b:d0:62:b2:e2:63:a0: 81:14:2b:b5:88:7d:4e:68:79:12:99:fb:4c:20:e6: 6a:72:c8:56:17:e4:e9:a8:87:c0:91:1a:db:7c:64: b2:f1:c9:70:6f:cc:7c:2d:df:58:80:3e:aa:88:cc: 45:86:dd:a0:2d:a6:f5:06:6f:c5:49:35:1d:ca:44: 21:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:64:79:D0:DC:61:E1:3E:22:89:E2:AA:1D:D4:2D:47:2C:B1:45:8B X509v3 Authority Key Identifier: keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:4f:2a:70:c9:1f:8f:6e:f4:4c:a8:76:c8:1b:50:2d:52:78: d1:a0:12:26:b6:86:ec:19:d8:e7:ca:dd:ae:59:6a:ea:b8:fb: 04:da:d6:87:01:ca:86:f9:00:94:50:71:f0:59:22:cb:50:87: 93:33:a0:aa:1c:df:5e:0d:c1:96:68:36:20:53:fc:b1:75:d3: 5d:51:bd:29:09:31:f6:a6:70:47:d6:6f:48:6d:1a:91:bc:2b: 42:38:ff:a5:16:47:bd:34:93:fd:e2:57:ec:4f:58:f3:54:82: 3b:28:e3:ed:26:35:9c:c0:25:f4:f9:4e:ba:f7:c3:d3:db:23: 7a:12:2e:d4:3d:e9:1b:ff:46:60:0d:d0:d3:3c:ec:a4:13:fc: 9b:15:96:6f:a0:e6:0e:3f:4a:c8:09:0b:b2:aa:63:7e:f1:9a: 73:fe:09:8a:6b:aa:12:1f:c2:e2:64:a6:a2:31:9e:cd:45:23: db:ea:78:41:4f:ae:5b:7e:90:a6:7c:e1:5a:7a:b9:33:21:0e: 4c:a9:9a:13:6b:99:13:da:48:9f:8c:b4:39:fd:b3:38:c8:00: 1d:4e:f6:a0:3b:b5:d2:1f:5a:d0:5e:04:61:57:fb:b7:10:27: af:5a:8a:f3:10:ff:6d:d6:52:4e:1f:a5:16:fb:94:13:09:93: 83:b0:1e:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sNXd6xXG/BecKKoXoer1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NGQ5NjY3MmE1OWVjMzg5NWZjMTU4NDdhY2ExYjI5ZGI3 OTEyNDQwHhcNMjUxMjA4MDIwMTAxWhcNMjUxMjA5MDIwMTAxWjAzMTEwLwYDVQQD EygyNDY0NzlkMGRjNjFlMTNlMjI4OWUyYWExZGQ0MmQ0NzJjYjE0NThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AAVvuloEfDLmaTV5SmdKHmU+vL4 PB36/qdkIYz19C7/9Ke3kSJ53N8+7Kxxwslv0iNZTHqyxcGDKBvVsa16gKCamZ5Q vw8hoal2bFtFxY4Ny/Dlxfahm4PWFlhygskrGo/YiSXWhR/bP+5Ly6PEbgiUQnjE OJKpWBWkCd1tONRi+4DFJ2KAvbAJbmNpegBy4UD3WWGvmuFMSTuEltHbLIzcCkT8 tS5Jk/pIeFyamQtfGHpoXEG9x3HWh5vQYrLiY6CBFCu1iH1OaHkSmftMIOZqcshW F+TpqIfAkRrbfGSy8clwb8x8Ld9YgD6qiMxFht2gLab1Bm/FSTUdykQhLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRkedDcYeE+Ioniqh3ULUcssUWLMB8GA1UdIwQY MBaAFGVNlmcqWew4lfwVhHrKGynbeRJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZWJlMzAtZWU4OS00OGRlLTg3NGMt YjQ2OWRiMTBiNjhhLzEvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zZWJlMzAtZWU4OS00OGRlLTg3NGMtYjQ2OWRiMTBiNjhh LzEvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc08qcMkf j270TKh2yBtQLVJ40aASJraG7BnY58rdrllq6rj7BNrWhwHKhvkAlFBx8Fkiy1CH kzOgqhzfXg3Blmg2IFP8sXXTXVG9KQkx9qZwR9ZvSG0akbwrQjj/pRZHvTST/eJX 7E9Y81SCOyjj7SY1nMAl9PlOuvfD09sjehIu1D3pG/9GYA3Q0zzspBP8mxWWb6Dm Dj9KyAkLsqpjfvGac/4JimuqEh/C4mSmojGezUUj2+p4QU+uW36QpnzhWnq5MyEO TKmaE2uZE9pIn4y0Of2zOMgAHU72oDu10h9a0F4EYVf7txAnr1qK8xD/bdZSTh+l FvuUEwmTg7AeHQ== -----END CERTIFICATE-----Generated at Mon Dec 8 10:20:04 2025 by rpki-client