This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft File: ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json) Hash identifier: fYvvC7wQ6f3MPl2V+ztRoEmlz7MESl+PhIznOHHr2M8= Subject key identifier: DA:13:3E:B7:D9:1C:2D:B0:C7:67:01:44:18:9C:D7:50:A4:A5:27:6C Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c Certificate serial: 019AF5AEACD2B9C86D083A5B22BB5FE60088 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft Manifest number: 1777 Signing time: Sat 06 Dec 2025 22:00:56 +0000 Manifest this update: Sat 06 Dec 2025 22:00:56 +0000 Manifest next update: Sun 07 Dec 2025 22:00:56 +0000 Files and hashes: 1: 4DVldFO5y9KBtzxCTr71AtgC-eU.roa (hash: sBM0L37YAXg4FUlTCLrrPugqQEHySprVmExRuh4Lv3Y=) 2: 6kPkXmlWSAQjjCwMVOC6F-rjNv0.roa (hash: sTc836fo7TkkLRKHAoIO0+HiUzTAeRmVazBYlJks2f4=) 3: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: TQVLYLkfzpshWKSur6PNh6yVowt27PjougXxlUBQzHc=) 4: _9bhuNhFLcA0HPv8bquRW0OUHTY.roa (hash: +AAi2JdNKRV5CFL7Yq+UFdnc1nHIGlMicPgKcuKxkmI=) 5: xZI_bvE6JftjTV0B3dxc_5kYW0g.roa (hash: AB1DpoviLX3AxgItOuLbSEQmOM0xIHXrb99sosPXy80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:ac:d2:b9:c8:6d:08:3a:5b:22:bb:5f:e6:00:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c Validity Not Before: Dec 6 22:00:56 2025 GMT Not After : Dec 7 22:00:56 2025 GMT Subject: CN=da133eb7d91c2db0c7670144189cd750a4a5276c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1c:9d:58:16:79:32:f8:98:54:2c:47:f3:e5: c1:11:a8:02:89:91:bc:a6:e3:6a:bd:ff:9d:de:2b: bc:0d:f4:75:29:cb:ea:59:94:19:ab:4c:b6:86:f2: e2:0e:c4:62:3c:9d:6d:b2:15:df:d1:d2:99:b2:36: 5f:8e:78:8f:0c:db:e9:95:a8:e8:78:fd:85:14:9a: 90:91:7f:b1:6e:5b:92:ea:ff:ec:f4:cf:69:7e:23: f6:97:4b:d9:a0:77:33:21:1e:38:71:94:11:de:49: 52:60:b5:d9:79:6f:00:08:a4:07:c1:b9:4a:a3:1b: c1:65:39:32:d1:69:f1:7a:40:0a:3e:4a:10:84:77: b2:e1:e8:7a:e1:90:81:e6:60:48:4c:12:f7:df:a0: f6:39:f8:41:e9:8f:e1:10:db:df:9e:cd:09:47:79: 54:4e:15:d9:29:79:f4:2a:05:c9:cf:28:43:de:38: 4f:8f:ef:5e:98:39:84:92:bb:ac:df:eb:4e:9a:a8: 12:18:18:b6:8c:d7:9d:ed:26:d0:7b:a1:3e:5b:40: 44:01:0e:0b:5f:75:40:33:5e:22:2e:fe:2a:7b:e1: 0f:f1:05:46:a1:05:f6:3a:09:e6:4b:de:08:2c:b4: b6:39:ab:f9:21:b3:04:aa:d0:5e:37:a3:df:09:38: 95:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:13:3E:B7:D9:1C:2D:B0:C7:67:01:44:18:9C:D7:50:A4:A5:27:6C X509v3 Authority Key Identifier: keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:74:c7:64:d1:c9:ed:35:a2:04:02:c6:d8:88:32:60:99:a2: 04:99:0e:04:f3:25:cb:92:e2:5e:84:f9:4d:34:48:ed:d1:bd: c5:5b:c3:e5:dc:f5:b2:a8:ad:6c:69:48:c9:28:51:38:34:42: 2a:a5:53:3f:ed:bf:11:42:58:fe:1c:6d:4f:d5:fb:dc:ce:36: 28:51:a1:19:3a:7d:ab:bd:6b:8d:37:cf:7d:60:a5:d5:be:1d: 19:0c:d8:f1:f0:81:3d:fc:0b:b1:15:15:64:71:2c:98:01:93: 56:b0:33:39:3d:e5:ab:12:80:44:9d:a9:96:b6:ba:79:b4:6a: 5f:73:f9:12:11:d2:92:e5:cb:e3:58:a6:98:dd:cf:b5:0d:a4: f2:67:e0:b1:35:0b:19:f4:e0:dd:73:77:e0:33:6d:99:cd:d4: 93:9e:60:dd:8c:ff:21:e6:43:af:07:7a:9b:75:60:56:43:72: f9:d1:06:44:d3:09:56:c2:98:3b:bd:60:b8:f4:c3:4b:19:cd: f4:0b:64:27:a9:c6:c0:60:94:fe:aa:d5:4f:c5:4d:83:9d:fa: 69:d3:72:21:84:cd:0c:19:06:3e:f9:22:94:5a:ca:dd:f4:a6: 1e:35:62:ea:80:c7:9b:7e:91:d7:2a:aa:db:be:6c:b8:22:3c: f5:b6:26:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rqzSuchtCDpbIrtf5gCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDE3MWY5M2NjMWNhNzE2ZmM4MDZlMzZhNTU4NTJjZGY0 ZjFjMWMwHhcNMjUxMjA2MjIwMDU2WhcNMjUxMjA3MjIwMDU2WjAzMTEwLwYDVQQD EyhkYTEzM2ViN2Q5MWMyZGIwYzc2NzAxNDQxODljZDc1MGE0YTUyNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRydWBZ5MviYVCxH8+XBEagCiZG8 puNqvf+d3iu8DfR1KcvqWZQZq0y2hvLiDsRiPJ1tshXf0dKZsjZfjniPDNvplajo eP2FFJqQkX+xbluS6v/s9M9pfiP2l0vZoHczIR44cZQR3klSYLXZeW8ACKQHwblK oxvBZTky0WnxekAKPkoQhHey4eh64ZCB5mBITBL336D2OfhB6Y/hENvfns0JR3lU ThXZKXn0KgXJzyhD3jhPj+9emDmEkrus3+tOmqgSGBi2jNed7SbQe6E+W0BEAQ4L X3VAM14iLv4qe+EP8QVGoQX2OgnmS94ILLS2Oav5IbMEqtBeN6PfCTiVVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoTPrfZHC2wx2cBRBic11CkpSdsMB8GA1UdIwQY MBaAFGTRcfk8wcpxb8gG42pVhSzfTxwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMmQ5ZGYtMTZlYi00NDllLTgzZjAt YTQ2MzVkZjQ3ZDcwLzEvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mMmQ5ZGYtMTZlYi00NDllLTgzZjAtYTQ2MzVkZjQ3ZDcw LzEvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3THZNHJ 7TWiBALG2IgyYJmiBJkOBPMly5LiXoT5TTRI7dG9xVvD5dz1sqitbGlIyShRODRC KqVTP+2/EUJY/hxtT9X73M42KFGhGTp9q71rjTfPfWCl1b4dGQzY8fCBPfwLsRUV ZHEsmAGTVrAzOT3lqxKARJ2plra6ebRqX3P5EhHSkuXL41immN3PtQ2k8mfgsTUL GfTg3XN34DNtmc3Uk55g3Yz/IeZDrwd6m3VgVkNy+dEGRNMJVsKYO71guPTDSxnN 9AtkJ6nGwGCU/qrVT8VNg536adNyIYTNDBkGPvkilFrK3fSmHjVi6oDHm36R1yqq 275suCI89bYm+g== -----END CERTIFICATE-----Generated at Sat Dec 6 23:54:44 2025 by rpki-client