This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft File: ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json) Hash identifier: K22Jnwf8kIYaHYKJa2N3CJ9uhkT/cm5aZypMUvCzC/A= Subject key identifier: 81:F3:1B:CB:A0:99:A9:8F:1A:4D:A7:D6:0C:EA:77:E8:AA:95:A1:1A Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb Certificate serial: 019B06D945F8F345F4C6A8BC3DEBC2B35357 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft Manifest number: 176E Signing time: Wed 10 Dec 2025 06:01:00 +0000 Manifest this update: Wed 10 Dec 2025 06:01:00 +0000 Manifest next update: Thu 11 Dec 2025 06:01:00 +0000 Files and hashes: 1: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: eQbHDphhO3aH9bEPjmmmx29ojMNySVwt0Y1oN3VRKmk=) 2: hN0z1_4mmxKbkIk8CqnnvzNahto.roa (hash: AI7qbHiXXWxj2c6Gw1e/W0ArXAzLidVM4yaZJ83W98E=) 3: loQfbpMkrF-8FHm8l3OiW-eTM6E.roa (hash: u9sgxZASXDE+M+FEbB4vnXmXUh6Lo2WySjfXfmuOY70=) 4: vyP9hbS_76ZrupwSMef0B1pOVPk.roa (hash: f7AZEySBA5XegD3mdK9pluMntAOS8jT+L60Mq8N3IVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:d9:45:f8:f3:45:f4:c6:a8:bc:3d:eb:c2:b3:53:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb Validity Not Before: Dec 10 06:01:00 2025 GMT Not After : Dec 11 06:01:00 2025 GMT Subject: CN=81f31bcba099a98f1a4da7d60cea77e8aa95a11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:f1:fd:bb:14:5b:f9:3b:e3:56:1f:cf:81: 0d:61:64:f2:94:06:70:7f:d7:e8:ae:be:37:b4:2d: 16:6f:11:3d:a5:27:7e:9e:6e:75:bd:56:23:84:47: 46:9b:8f:fd:95:1c:56:a2:86:00:54:a6:da:2e:cd: ac:dd:75:bc:de:a9:90:93:07:62:65:d6:bf:71:96: 4e:22:c7:bd:b9:7a:a9:a4:52:38:f3:ab:93:1a:06: 6d:45:a7:d9:a0:ff:3f:ce:21:72:30:28:71:5d:12: 68:c8:2c:f8:1d:a9:54:4c:7a:c1:1b:cb:63:7a:67: c1:7e:02:89:24:b2:a7:fd:59:94:3a:57:03:8f:17: 2e:85:39:41:4f:87:e4:03:01:4c:6f:dd:2d:1d:39: 67:00:cf:0c:26:4d:40:9d:90:ec:e9:16:1e:60:77: e6:bd:51:db:bd:cc:8f:89:77:86:ed:6f:f2:fc:d1: 82:66:76:26:b8:59:ff:3d:26:33:01:74:e9:b2:3f: 11:57:fb:a7:4b:65:58:5d:23:52:82:12:6b:da:d4: 06:05:9b:a3:4d:42:22:21:67:40:50:53:66:24:09: 36:17:fc:89:b5:9c:6d:12:10:e8:c4:9e:2d:fa:e0: a1:f8:f5:a8:30:4e:43:bb:2b:ed:8c:b3:8b:51:a7: d4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F3:1B:CB:A0:99:A9:8F:1A:4D:A7:D6:0C:EA:77:E8:AA:95:A1:1A X509v3 Authority Key Identifier: keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c6:74:0c:2d:5a:97:5a:a6:34:0d:46:3c:ee:4c:c4:ed:80: 7b:37:05:6b:8c:02:f0:ea:c4:4f:4a:37:a7:53:86:e3:c5:d5: 05:60:05:55:99:89:6c:2e:89:87:5e:bf:33:3d:03:7f:0a:9a: bb:50:ff:2a:8f:2e:56:a9:76:d1:fd:59:7b:c9:e5:97:c1:77: b1:93:1a:fc:ec:a5:8f:50:11:6d:77:c1:cb:be:aa:9f:35:23: f4:aa:21:6b:b8:e4:e8:98:10:41:49:fd:a9:a4:87:05:c7:27: 37:76:1b:79:52:2b:b4:30:05:e5:4c:0e:71:43:c0:de:3a:44: cd:93:68:70:d6:6b:dd:0c:24:37:58:5a:6f:63:dc:72:f1:6f: 23:6d:7a:41:54:e7:6f:36:17:51:86:07:b5:3c:93:86:ab:94: 83:3d:f6:27:9d:f0:3a:41:e3:e6:2c:df:d6:fc:23:89:31:f3: 20:da:03:8d:42:95:9a:d9:db:7a:5f:8c:26:77:ae:ef:14:95: 5a:ea:6c:da:4a:a2:76:48:8e:36:f7:80:ba:34:33:f3:e1:b3: bf:d2:4a:e8:04:5f:b5:ab:c9:68:45:ba:32:d0:ff:5d:0b:ed: 8c:78:42:1f:08:3a:36:28:5a:e0:2b:3f:2b:e4:54:cc:86:b6: bc:f2:89:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsG2UX480X0xqi8PevCs1NXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OWE2Yjk3NWVhZmQyY2U1MTQ2ODcyMzgxNDM1NWY1NmM1 NWJhZmIwHhcNMjUxMjEwMDYwMTAwWhcNMjUxMjExMDYwMTAwWjAzMTEwLwYDVQQD Eyg4MWYzMWJjYmEwOTlhOThmMWE0ZGE3ZDYwY2VhNzdlOGFhOTVhMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0fx/bsUW/k741Yfz4ENYWTylAZw f9forr43tC0WbxE9pSd+nm51vVYjhEdGm4/9lRxWooYAVKbaLs2s3XW83qmQkwdi Zda/cZZOIse9uXqppFI486uTGgZtRafZoP8/ziFyMChxXRJoyCz4HalUTHrBG8tj emfBfgKJJLKn/VmUOlcDjxcuhTlBT4fkAwFMb90tHTlnAM8MJk1AnZDs6RYeYHfm vVHbvcyPiXeG7W/y/NGCZnYmuFn/PSYzAXTpsj8RV/unS2VYXSNSghJr2tQGBZuj TUIiIWdAUFNmJAk2F/yJtZxtEhDoxJ4t+uCh+PWoME5DuyvtjLOLUafUoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHzG8ugmamPGk2n1gzqd+iqlaEaMB8GA1UdIwQY MBaAFGWaa5der9LOUUaHI4FDVfVsVbr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQt ZWZmM2NkY2JkMDBhLzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQtZWZmM2NkY2JkMDBh LzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsZ0DC1a l1qmNA1GPO5MxO2AezcFa4wC8OrET0o3p1OG48XVBWAFVZmJbC6Jh16/Mz0Dfwqa u1D/Ko8uVql20f1Ze8nll8F3sZMa/Oylj1ARbXfBy76qnzUj9Koha7jk6JgQQUn9 qaSHBccnN3YbeVIrtDAF5UwOcUPA3jpEzZNocNZr3QwkN1hab2PccvFvI216QVTn bzYXUYYHtTyThquUgz32J53wOkHj5izf1vwjiTHzINoDjUKVmtnbel+MJneu7xSV Wups2kqidkiONveAujQz8+Gzv9JK6ARftavJaEW6MtD/XQvtjHhCHwg6Niha4Cs/ K+RUzIa2vPKJYg== -----END CERTIFICATE-----Generated at Wed Dec 10 11:59:44 2025 by rpki-client