This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft File: ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json) Hash identifier: xzZmG91KRlM2DxESg043B60ZUCbpSyU7Ompa25E/uTI= Subject key identifier: 85:5A:8B:AB:10:E3:A8:EF:ED:CD:DB:DA:24:25:17:78:98:22:CB:36 Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05 Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705 Certificate serial: 019B34C493A3A01D298F74F75A20720D2FD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft Manifest number: 0CD7 Signing time: Fri 19 Dec 2025 04:00:56 +0000 Manifest this update: Fri 19 Dec 2025 04:00:56 +0000 Manifest next update: Sat 20 Dec 2025 04:00:56 +0000 Files and hashes: 1: LsPOYMRIkwCviikK1SggYlQsE6c.roa (hash: C4ntpCFi4UgQNTh+MTX375uysoH85gdlFAEV6hZ2Gtw=) 2: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: UWZPRGiAPTYXbC7xsiirDPXS3JQkAiz5eQWoaaf5wJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:93:a3:a0:1d:29:8f:74:f7:5a:20:72:0d:2f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705 Validity Not Before: Dec 19 04:00:56 2025 GMT Not After : Dec 20 04:00:56 2025 GMT Subject: CN=855a8bab10e3a8efedcddbda242517789822cb36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0b:10:dc:61:22:a5:85:ea:13:23:4e:95:dd: 14:06:04:b9:12:48:2c:61:1c:f3:a9:6b:d4:b6:d0: 7d:39:05:a8:c7:67:64:2d:de:49:3e:15:6c:01:6d: ba:47:49:5b:cb:99:0a:7e:36:4d:49:40:16:6e:11: 54:d9:ae:f7:b9:76:57:44:2d:b6:3a:6d:d4:e6:1f: 3d:31:f8:c9:cc:34:4d:d6:ca:9f:f8:06:34:6b:3c: f4:72:d9:12:12:31:00:f5:1e:3c:99:42:88:ac:a0: 58:0a:51:a7:6e:54:96:8d:bd:0c:f5:d8:df:bb:a4: 15:a3:35:4f:65:e4:06:b2:1c:13:dd:33:42:61:25: 0f:02:52:59:de:d4:61:64:22:a4:f6:08:18:6c:d5: 78:ef:60:81:dc:82:3e:35:dc:df:a5:20:84:af:cf: 08:2e:f3:c3:cf:98:4d:d0:d1:6a:2d:03:17:b5:87: 91:7b:14:26:6c:0d:d0:bd:02:c9:1b:38:11:a1:ac: 8d:f5:72:d8:ad:d3:d1:9c:df:fc:9a:e1:a1:42:ca: 86:fe:d4:95:37:ab:55:3d:14:bc:9a:bf:93:af:1a: 36:0b:68:a3:03:19:dd:c9:8b:9a:37:23:3b:c9:e4: 98:f2:e6:57:2c:19:b7:7d:aa:d4:7f:be:1e:84:5d: 85:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5A:8B:AB:10:E3:A8:EF:ED:CD:DB:DA:24:25:17:78:98:22:CB:36 X509v3 Authority Key Identifier: keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:11:8e:2f:4d:1c:d6:23:9f:33:de:e5:d2:e6:dc:c7:f3:84: a9:a5:e3:5f:53:e5:bc:87:86:e1:34:aa:64:d5:45:78:23:0a: 09:b4:10:06:70:b1:f1:9f:3f:7e:ec:6b:46:43:6c:a4:fd:d3: 32:2f:af:4a:96:c3:10:6a:7c:7a:b9:a1:ab:77:9d:80:97:8e: 1c:ee:36:8d:ad:8d:ba:1c:70:e4:85:77:f1:41:fa:d4:ea:62: 27:33:6b:ec:2a:65:87:79:49:09:9d:71:f9:94:7c:65:7f:1a: 8f:40:85:c0:62:f1:2c:1a:1a:8d:52:20:be:d7:01:16:e0:cb: 8a:4a:e4:d4:42:85:36:6f:01:b9:23:24:7b:4f:62:d5:08:80: 31:5e:07:d8:e2:07:80:50:7c:db:05:fa:4a:e5:4a:d5:b3:8e: 91:23:d1:7e:c6:bb:4c:50:7c:36:c2:d3:ac:4f:50:6e:d7:c4: 8d:b1:f6:ae:50:e6:30:04:b4:8e:2b:02:ea:be:8d:9c:59:57: 3d:81:34:76:1f:dc:94:b5:a4:77:f3:0a:28:d6:a3:98:ee:b1: 2a:5f:ad:c7:4d:db:fa:88:bc:de:f6:7f:6e:37:ac:f3:00:9e: a5:f7:36:2f:ed:02:2a:d7:f8:b7:ef:8f:5b:9c:0a:03:fb:57: bf:d9:5f:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xJOjoB0pj3T3WiByDS/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MjVkOGI3ZjE5ZTJmYjc1Y2I3Zjk1Nzg5ZDkxMThmNmIx Yjk3MDUwHhcNMjUxMjE5MDQwMDU2WhcNMjUxMjIwMDQwMDU2WjAzMTEwLwYDVQQD Eyg4NTVhOGJhYjEwZTNhOGVmZWRjZGRiZGEyNDI1MTc3ODk4MjJjYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgsQ3GEipYXqEyNOld0UBgS5Ekgs YRzzqWvUttB9OQWox2dkLd5JPhVsAW26R0lby5kKfjZNSUAWbhFU2a73uXZXRC22 Om3U5h89MfjJzDRN1sqf+AY0azz0ctkSEjEA9R48mUKIrKBYClGnblSWjb0M9djf u6QVozVPZeQGshwT3TNCYSUPAlJZ3tRhZCKk9ggYbNV472CB3II+NdzfpSCEr88I LvPDz5hN0NFqLQMXtYeRexQmbA3QvQLJGzgRoayN9XLYrdPRnN/8muGhQsqG/tSV N6tVPRS8mr+Trxo2C2ijAxndyYuaNyM7yeSY8uZXLBm3farUf74ehF2FPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVai6sQ46jv7c3b2iQlF3iYIss2MB8GA1UdIwQY MBaAFGUl2Lfxni+3XLf5V4nZEY9rG5cFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jYWEzODUtYjJhNS00MzIzLWFkYzUt NDY2MDNkZTgwNWVjLzEvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jYWEzODUtYjJhNS00MzIzLWFkYzUtNDY2MDNkZTgwNWVj LzEvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBGOL00c 1iOfM97l0ubcx/OEqaXjX1PlvIeG4TSqZNVFeCMKCbQQBnCx8Z8/fuxrRkNspP3T Mi+vSpbDEGp8ermhq3edgJeOHO42ja2Nuhxw5IV38UH61OpiJzNr7Cplh3lJCZ1x +ZR8ZX8aj0CFwGLxLBoajVIgvtcBFuDLikrk1EKFNm8BuSMke09i1QiAMV4H2OIH gFB82wX6SuVK1bOOkSPRfsa7TFB8NsLTrE9QbtfEjbH2rlDmMAS0jisC6r6NnFlX PYE0dh/clLWkd/MKKNajmO6xKl+tx03b+oi83vZ/bjes8wCepfc2L+0CKtf4t++P W5wKA/tXv9lfyg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:09:58 2025 by rpki-client