This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft File: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json) Hash identifier: MSLc4ur5FlP9Zr9fKbmsCayLYsm5xrNuf+JYnXNmvdQ= Subject key identifier: 04:07:CD:E1:E7:89:3D:E1:B0:2F:E3:19:93:3B:07:24:A0:DB:50:8D Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9 Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9 Certificate serial: 019B3B6BEF1204AB8B8D4E328E96D1762F5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft Manifest number: 10EE Signing time: Sat 20 Dec 2025 11:01:27 +0000 Manifest this update: Sat 20 Dec 2025 11:01:27 +0000 Manifest next update: Sun 21 Dec 2025 11:01:27 +0000 Files and hashes: 1: 1M6uqQrJ-H8cZQtvFA1H52Pn6A4.roa (hash: nnfKaOcFHds8X3AM+jMxIYq03nNPy9Dlqx+6UDoHZiY=) 2: GKsMg22mlpLXCVq6Bfh92-dR9A0.roa (hash: vyV6Le4sH8oc7qh9Fe3hr94CnSdMfMjPQP6XmVQxrGc=) 3: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: bClp4ZLidJaQ5GAHVKIgSY3A5Xw9Ul0IaF4rlshq3M4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:ef:12:04:ab:8b:8d:4e:32:8e:96:d1:76:2f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9 Validity Not Before: Dec 20 11:01:27 2025 GMT Not After : Dec 21 11:01:27 2025 GMT Subject: CN=0407cde1e7893de1b02fe319933b0724a0db508d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:13:d7:22:03:56:bc:27:4d:c1:31:c3:c4: 15:0a:27:c5:c2:81:cd:16:a6:7b:8b:62:9a:20:16: c1:c9:fe:5a:43:b3:fc:c0:df:da:f1:ab:69:3f:c4: 93:34:40:cf:64:ae:d1:e2:98:7b:ce:73:cc:75:92: 6a:fd:eb:f4:d8:0e:75:9d:4a:8e:8c:9d:08:06:4d: 93:a5:ff:49:de:13:26:e4:d5:53:88:26:ab:00:d2: b4:09:6e:c4:47:47:41:08:00:ce:56:e3:e3:41:08: 2c:ba:3a:9e:7f:14:42:8c:86:88:f8:c0:2c:c7:6d: 89:d5:3a:24:7e:59:ab:c9:81:c6:37:a0:a3:2b:42: 7b:c9:49:5a:4d:a7:a5:a6:af:22:b1:08:fb:9d:65: 96:69:d4:f2:d4:3b:24:b5:99:00:1f:1a:00:56:bf: b6:9e:a0:24:e4:34:fc:76:4b:79:b6:01:91:a1:7d: cb:79:59:86:d0:32:7b:51:d0:09:dd:4a:80:9b:75: 76:cb:b0:ca:ef:77:a6:d7:e3:14:c0:b2:f9:7a:02: 96:58:03:dc:7e:0a:ac:d9:ab:be:87:58:b8:5f:cf: 55:fa:01:9b:1a:42:55:b6:c7:57:ce:e9:20:7d:86: 33:f9:4b:00:40:67:0e:00:6b:41:5b:47:e3:b6:57: dc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:07:CD:E1:E7:89:3D:E1:B0:2F:E3:19:93:3B:07:24:A0:DB:50:8D X509v3 Authority Key Identifier: keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d8:d9:bc:04:b2:ff:7a:86:3c:8e:77:5d:6b:1f:44:98:79: 78:8a:01:70:19:5e:c0:48:e6:f7:bf:d2:de:0a:88:f6:12:da: 95:b2:87:09:22:e9:39:d5:72:2e:54:6e:8a:d4:53:4f:7b:65: 64:6c:62:b7:e4:34:5f:52:82:fd:81:33:48:ba:1b:cd:46:fe: c0:74:f9:7e:96:af:76:22:39:fd:34:03:67:e9:27:84:bc:bf: e8:bf:1e:fd:a4:fb:c2:aa:0e:3a:15:f2:aa:dc:f5:4c:15:a2: bc:d7:b4:20:d9:cb:e6:03:1b:2d:66:c8:8e:bb:3b:93:9d:19: 5e:7b:6b:02:d3:57:2f:94:7d:87:f3:c5:22:70:b9:9d:74:08: 92:79:b7:c0:99:d7:f2:88:0b:f5:9b:db:1a:d6:f9:93:9e:b7: 0f:38:ea:8d:54:25:38:39:3d:b8:26:d4:1d:c0:ea:73:72:cb: 01:51:ec:16:a6:70:9f:d7:99:d2:28:4d:07:54:c3:2f:47:b0: bd:6e:21:e6:d8:30:5f:32:7d:f5:b0:8b:2c:e0:fc:7d:65:2b: 6b:e8:d2:35:56:66:74:b4:e5:e4:b0:87:68:83:5f:e6:84:23: b8:ea:d7:71:18:a5:e0:cc:2e:cc:4e:66:9e:ee:71:fa:e9:7c: 0b:54:6b:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a+8SBKuLjU4yjpbRdi9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YjU5YWU1MjE5NTJkYTU1ZTAzZjc3OWI4ODUwMzFjMGM4 MDljZjkwHhcNMjUxMjIwMTEwMTI3WhcNMjUxMjIxMTEwMTI3WjAzMTEwLwYDVQQD EygwNDA3Y2RlMWU3ODkzZGUxYjAyZmUzMTk5MzNiMDcyNGEwZGI1MDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVYT1yIDVrwnTcExw8QVCifFwoHN FqZ7i2KaIBbByf5aQ7P8wN/a8atpP8STNEDPZK7R4ph7znPMdZJq/ev02A51nUqO jJ0IBk2Tpf9J3hMm5NVTiCarANK0CW7ER0dBCADOVuPjQQgsujqefxRCjIaI+MAs x22J1TokflmryYHGN6CjK0J7yUlaTaelpq8isQj7nWWWadTy1DsktZkAHxoAVr+2 nqAk5DT8dkt5tgGRoX3LeVmG0DJ7UdAJ3UqAm3V2y7DK73em1+MUwLL5egKWWAPc fgqs2au+h1i4X89V+gGbGkJVtsdXzukgfYYz+UsAQGcOAGtBW0fjtlfcGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQHzeHniT3hsC/jGZM7BySg21CNMB8GA1UdIwQY MBaAFGS1muUhlS2lXgP3ebiFAxwMgJz5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQt NTFhZDAwZTU0MzMyLzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQtNTFhZDAwZTU0MzMy LzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9jZvASy /3qGPI53XWsfRJh5eIoBcBlewEjm97/S3gqI9hLalbKHCSLpOdVyLlRuitRTT3tl ZGxit+Q0X1KC/YEzSLobzUb+wHT5fpavdiI5/TQDZ+knhLy/6L8e/aT7wqoOOhXy qtz1TBWivNe0INnL5gMbLWbIjrs7k50ZXntrAtNXL5R9h/PFInC5nXQIknm3wJnX 8ogL9ZvbGtb5k563DzjqjVQlODk9uCbUHcDqc3LLAVHsFqZwn9eZ0ihNB1TDL0ew vW4h5tgwXzJ99bCLLOD8fWUra+jSNVZmdLTl5LCHaINf5oQjuOrXcRil4MwuzE5m nu5x+ul8C1RrXw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:58:04 2025 by rpki-client