This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft File: ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft (raw, json) Hash identifier: KrCVKTK2OMlJxZE2VtACqHMxlkbk8JuW1dIRpYQRbLY= Subject key identifier: EA:04:A5:CF:5B:6A:88:2A:40:F1:9B:8A:97:41:9E:9A:6F:E5:AF:DB Authority key identifier: 67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92 Certificate issuer: /CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92 Certificate serial: 019B35A04AFFDC35B0A513A2C2FD3BF22938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft Manifest number: 1716 Signing time: Fri 19 Dec 2025 08:00:55 +0000 Manifest this update: Fri 19 Dec 2025 08:00:55 +0000 Manifest next update: Sat 20 Dec 2025 08:00:55 +0000 Files and hashes: 1: U0b6gboi64n531Jc6zyEuav6vyg.roa (hash: PZafjNuKkOPJe0JHguIOtwXHpUoa+ViotM7w88t40Yc=) 2: ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl (hash: 4XBXeu1KXLtkubyAb45kk9O+rtck4IHz6AR2EHLM5lI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:4a:ff:dc:35:b0:a5:13:a2:c2:fd:3b:f2:29:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6703f258d47becc2cb4b4fc572b229b2e64b6b92 Validity Not Before: Dec 19 08:00:55 2025 GMT Not After : Dec 20 08:00:55 2025 GMT Subject: CN=ea04a5cf5b6a882a40f19b8a97419e9a6fe5afdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:9d:1f:1f:16:1c:56:ca:0c:d9:33:78:41: 91:34:74:3f:4c:0d:d7:3a:31:08:60:c5:5b:e2:8a: 2d:aa:ea:e3:41:dc:42:8e:1c:fc:75:dd:55:b1:8a: 3a:8f:97:a5:68:95:af:c2:31:69:74:49:2b:20:a5: b0:18:96:dd:ab:7a:15:9d:63:e4:86:31:81:6a:33: 9d:15:e7:25:f9:42:29:b5:c2:21:cc:27:ed:06:2b: fb:d3:e0:9f:5f:ec:66:19:1e:35:ce:0f:8f:e5:d1: 0a:8f:88:bd:76:f7:94:7e:d9:bc:4c:c2:f3:1a:ab: c7:98:6a:17:8a:a8:11:ce:2b:8b:df:ac:e4:5b:9d: a2:6a:0a:15:d5:22:e2:0e:5d:07:1a:a3:59:7f:2f: a1:d8:a9:f6:b0:c0:f4:22:af:5e:14:4e:ad:44:e7: 9f:71:0e:4c:4d:43:a6:7a:48:51:bc:15:62:39:ce: 86:a1:f7:9d:ab:64:7d:c9:64:7b:a8:4d:29:3d:64: ab:56:cc:2d:2f:bc:76:08:ef:3f:fd:5c:40:5f:25: 2e:33:5a:a4:f9:3c:a5:9f:85:3e:6a:15:91:b4:fd: 8c:2c:ac:95:5e:7c:51:e8:45:8b:1a:98:5f:0c:af: 55:87:26:34:e2:75:f8:ed:cf:96:44:4f:ca:28:96: d1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:04:A5:CF:5B:6A:88:2A:40:F1:9B:8A:97:41:9E:9A:6F:E5:AF:DB X509v3 Authority Key Identifier: keyid:67:03:F2:58:D4:7B:EC:C2:CB:4B:4F:C5:72:B2:29:B2:E6:4B:6B:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPyWNR77MLLS0_FcrIpsuZLa5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2a07cb-f6c0-49ba-a7d1-1b01453347da/1/ZwPyWNR77MLLS0_FcrIpsuZLa5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:05:7a:74:a8:5d:73:17:2e:33:78:b8:02:1f:0d:dc:cf:cc: 33:1a:bb:ce:fe:e9:9d:2d:0c:66:2f:7e:60:d6:db:3d:56:79: e5:c9:78:95:7b:7d:d0:5c:57:70:67:e5:1b:ec:7d:f8:20:9a: 82:22:7e:65:46:d5:4e:19:db:3c:3e:1b:35:d4:86:00:9b:06: 97:95:ef:bc:40:75:88:d7:4d:52:b7:0a:10:48:65:99:f9:22: 09:50:55:20:87:63:f9:8c:6a:82:36:58:38:57:21:e5:e0:15: b7:93:6e:cd:6b:71:5f:30:30:5b:e4:33:e8:8a:ee:3e:31:09: ba:40:4e:a2:42:ba:ee:f7:70:31:af:39:0a:c6:01:7d:70:7b: 3a:a4:f6:9d:e4:cb:8f:b2:47:4a:09:5b:a9:4a:a1:19:97:74: b7:d3:da:d0:0f:c2:dd:49:ab:39:78:d0:1f:45:e6:57:47:b0: d6:98:40:15:ad:20:65:42:0e:d4:a7:83:a7:e6:d0:f5:dc:fe: b8:d5:df:fe:03:6d:63:8f:a7:f5:d1:bd:39:03:2a:1f:23:da: c7:85:f1:f4:48:09:fa:35:2e:d0:b6:04:5e:36:a8:8f:dd:59: 53:38:26:23:0a:41:cc:2c:08:5f:81:fd:57:8a:6c:71:2d:9c: 01:70:c6:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oEr/3DWwpROiwv078ik4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MDNmMjU4ZDQ3YmVjYzJjYjRiNGZjNTcyYjIyOWIyZTY0 YjZiOTIwHhcNMjUxMjE5MDgwMDU1WhcNMjUxMjIwMDgwMDU1WjAzMTEwLwYDVQQD EyhlYTA0YTVjZjViNmE4ODJhNDBmMTliOGE5NzQxOWU5YTZmZTVhZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHudHx8WHFbKDNkzeEGRNHQ/TA3X OjEIYMVb4ootqurjQdxCjhz8dd1VsYo6j5elaJWvwjFpdEkrIKWwGJbdq3oVnWPk hjGBajOdFecl+UIptcIhzCftBiv70+CfX+xmGR41zg+P5dEKj4i9dveUftm8TMLz GqvHmGoXiqgRziuL36zkW52iagoV1SLiDl0HGqNZfy+h2Kn2sMD0Iq9eFE6tROef cQ5MTUOmekhRvBViOc6Gofedq2R9yWR7qE0pPWSrVswtL7x2CO8//VxAXyUuM1qk +Tyln4U+ahWRtP2MLKyVXnxR6EWLGphfDK9VhyY04nX47c+WRE/KKJbRCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoEpc9baogqQPGbipdBnppv5a/bMB8GA1UdIwQY MBaAFGcD8ljUe+zCy0tPxXKyKbLmS2uSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWndQeVdOUjc3TUxMUzBfRmNySXBzdVpMYTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYTA3Y2ItZjZjMC00OWJhLWE3ZDEt MWIwMTQ1MzM0N2RhLzEvWndQeVdOUjc3TUxMUzBfRmNySXBzdVpMYTVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yYTA3Y2ItZjZjMC00OWJhLWE3ZDEtMWIwMTQ1MzM0N2Rh LzEvWndQeVdOUjc3TUxMUzBfRmNySXBzdVpMYTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAV6dKhd cxcuM3i4Ah8N3M/MMxq7zv7pnS0MZi9+YNbbPVZ55cl4lXt90FxXcGflG+x9+CCa giJ+ZUbVThnbPD4bNdSGAJsGl5XvvEB1iNdNUrcKEEhlmfkiCVBVIIdj+YxqgjZY OFch5eAVt5NuzWtxXzAwW+Qz6IruPjEJukBOokK67vdwMa85CsYBfXB7OqT2neTL j7JHSglbqUqhGZd0t9Pa0A/C3UmrOXjQH0XmV0ew1phAFa0gZUIO1KeDp+bQ9dz+ uNXf/gNtY4+n9dG9OQMqHyPax4Xx9EgJ+jUu0LYEXjaoj91ZUzgmIwpBzCwIX4H9 V4pscS2cAXDG1Q== -----END CERTIFICATE-----Generated at Fri Dec 19 11:41:22 2025 by rpki-client