This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft File: ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json) Hash identifier: 2SMc8IeSJwvl8K4IaPKM6b/oBao/09PQf6uVYM3jIZo= Subject key identifier: AC:5B:E6:8B:B2:61:0D:95:23:68:41:05:97:76:F3:98:81:06:F7:F6 Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a Certificate serial: 019AE6A92B1444FBBFDCF33CDE0445048DDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft Manifest number: 0F4F Signing time: Thu 04 Dec 2025 00:00:37 +0000 Manifest this update: Thu 04 Dec 2025 00:00:37 +0000 Manifest next update: Fri 05 Dec 2025 00:00:37 +0000 Files and hashes: 1: EQLAmwce-4qvK6GmwcFTOhIRkwQ.roa (hash: JsjgQjAnTuCMbWUsyWPVoy0ThBVMbRkRSyV5BIOaYsk=) 2: VBFGSZe25hk515GWxj1O9wYFsPI.roa (hash: cO/lLoWMHsASPsdz4OnLCXsIfZY9ylovdO0mqXRc+eM=) 3: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: nkvwcrRkc0S+hAH63/9i+IMgg6p+71TLyDrNEgFi7Gk=) 4: t_lJAzfvjWKMyLKQMrioEk5d_0w.roa (hash: wl26VQmURsOv+pvsAOIbkvKehkFtkmgC21ZsAlFMTv4=) 5: wqvUrg3ytAmyescNq7O97CA45e8.roa (hash: e+ouxKVrzJBnu8qX3QbAYldaZ2LWrtwIg9cy15dfuBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:a9:2b:14:44:fb:bf:dc:f3:3c:de:04:45:04:8d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a Validity Not Before: Dec 4 00:00:37 2025 GMT Not After : Dec 5 00:00:37 2025 GMT Subject: CN=ac5be68bb2610d95236841059776f3988106f7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c8:32:06:88:5a:6d:f8:cd:99:d8:ab:1f:2f: 77:ce:53:45:4b:d8:6d:69:47:c5:43:3f:63:ae:89: 99:ad:64:f5:68:54:da:f0:fd:7a:4f:db:9c:a6:19: 70:05:87:fb:9a:1d:ba:5a:17:cb:13:a0:19:1e:cb: 8c:51:ad:db:fa:fb:f4:ff:c6:52:a0:ce:32:1d:da: cd:3b:e3:d3:dd:e1:cf:38:13:69:b1:a1:5c:49:7e: e0:0d:e3:fb:9a:50:b1:22:e9:86:93:a7:3c:6c:21: 2c:bf:26:52:60:1d:27:ed:d8:1a:d4:26:c7:44:e6: 6b:8e:c2:50:e5:0d:67:aa:e2:c7:a2:45:24:f0:05: 70:54:05:08:7e:b3:ac:be:9e:bc:b3:6f:c8:04:d6: 9d:1c:c0:ee:e0:16:36:cb:2f:31:79:90:41:2e:24: 44:0b:f2:7d:ea:96:47:b1:78:6e:e4:3d:0b:fb:26: 50:56:0c:82:6f:34:a0:4e:57:ff:10:81:d8:09:25: 02:89:da:13:74:d6:36:b1:43:71:11:be:8a:7c:d9: 1a:98:24:e8:66:40:1b:43:74:b0:bd:ef:55:53:86: 3f:57:98:80:83:41:a0:b6:4e:b0:f8:be:d8:ea:24: 63:88:4a:0a:be:76:89:cd:83:f9:98:9d:2f:90:da: d1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5B:E6:8B:B2:61:0D:95:23:68:41:05:97:76:F3:98:81:06:F7:F6 X509v3 Authority Key Identifier: keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d7:80:8e:4a:85:45:e3:d6:79:fb:31:03:93:bd:00:b6:0b: 5e:96:3b:0a:c2:75:a3:7c:11:3f:d9:15:90:1e:4e:5d:26:8b: 78:39:37:dc:fc:dc:1b:03:48:27:70:9d:ae:40:64:1d:ad:31: 68:51:dc:21:32:49:5f:0f:fe:71:da:6f:92:b7:e3:30:c0:46: 22:ee:ef:82:bc:c5:14:94:79:f2:6f:7b:cd:c4:17:c0:be:3c: 9b:87:a5:8d:b0:1b:e8:7e:a4:37:e9:fc:40:21:44:35:e9:1f: 15:1c:a9:94:9c:ba:21:aa:1f:ab:44:40:17:6f:69:64:7d:67: 24:10:6c:76:4f:56:ec:36:97:dd:ce:eb:fa:60:97:9f:99:95: 0d:af:79:6b:33:85:ee:bf:b0:ec:c8:18:6c:7c:b4:e9:75:9a: 6a:07:a8:b4:83:be:9e:f6:ad:a3:e1:c4:04:f6:bd:53:a7:aa: d8:52:86:12:cb:51:27:87:ff:64:d0:f9:82:c6:e6:39:70:f1: 38:39:e8:dc:e7:12:76:f9:53:9f:d1:9b:2b:58:77:07:24:a9: 4b:3d:b3:ed:ac:0a:79:e0:34:5a:b7:6f:77:ed:37:e3:7e:fe: 8c:be:a4:7b:31:b6:a1:e2:98:19:72:b6:5c:d7:f9:b2:14:1f: 82:44:e8:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrmqSsURPu/3PM83gRFBI3bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OWMzNTY2MzMzODhlOWJkODk3ZDAwMGEzZjM4YmMxZTU0 NmVmNGEwHhcNMjUxMjA0MDAwMDM3WhcNMjUxMjA1MDAwMDM3WjAzMTEwLwYDVQQD EyhhYzViZTY4YmIyNjEwZDk1MjM2ODQxMDU5Nzc2ZjM5ODgxMDZmN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMgyBohabfjNmdirHy93zlNFS9ht aUfFQz9jromZrWT1aFTa8P16T9ucphlwBYf7mh26WhfLE6AZHsuMUa3b+vv0/8ZS oM4yHdrNO+PT3eHPOBNpsaFcSX7gDeP7mlCxIumGk6c8bCEsvyZSYB0n7dga1CbH ROZrjsJQ5Q1nquLHokUk8AVwVAUIfrOsvp68s2/IBNadHMDu4BY2yy8xeZBBLiRE C/J96pZHsXhu5D0L+yZQVgyCbzSgTlf/EIHYCSUCidoTdNY2sUNxEb6KfNkamCTo ZkAbQ3Swve9VU4Y/V5iAg0Ggtk6w+L7Y6iRjiEoKvnaJzYP5mJ0vkNrRtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxb5ouyYQ2VI2hBBZd285iBBvf2MB8GA1UdIwQY MBaAFGWcNWYzOI6b2JfQAKPzi8HlRu9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt M2M3ZTRmOTNlNDJiLzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi LzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActeAjkqF RePWefsxA5O9ALYLXpY7CsJ1o3wRP9kVkB5OXSaLeDk33PzcGwNIJ3CdrkBkHa0x aFHcITJJXw/+cdpvkrfjMMBGIu7vgrzFFJR58m97zcQXwL48m4eljbAb6H6kN+n8 QCFENekfFRyplJy6Iaofq0RAF29pZH1nJBBsdk9W7DaX3c7r+mCXn5mVDa95azOF 7r+w7MgYbHy06XWaageotIO+nvato+HEBPa9U6eq2FKGEstRJ4f/ZND5gsbmOXDx ODno3OcSdvlTn9GbK1h3BySpSz2z7awKeeA0Wrdvd+03437+jL6kezG2oeKYGXK2 XNf5shQfgkToNA== -----END CERTIFICATE-----Generated at Thu Dec 4 06:38:08 2025 by rpki-client