This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json) Hash identifier: +D17eo8kgF2H8ewXf63LroWHGG3t1skFsijxeGwxxnw= Subject key identifier: FF:4B:89:4F:97:F9:BC:3E:B8:02:DE:5E:98:A8:18:F7:F4:73:0A:00 Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff Certificate serial: 019B19BAD81E8067FF8458F3413E1C9BF2B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft Manifest number: 08ED Signing time: Sat 13 Dec 2025 22:00:33 +0000 Manifest this update: Sat 13 Dec 2025 22:00:33 +0000 Manifest next update: Sun 14 Dec 2025 22:00:33 +0000 Files and hashes: 1: OBgfNHwDlYtlqjjhJRFUWeZDTUY.roa (hash: 6sPRuYPKeEviFfVQ52vvMVNq0j09JkQvr2PG17VGRJU=) 2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: hWtNmwl2P/NkltzVALV03P7WoJe+gxu6ynCR7kJhcDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:d8:1e:80:67:ff:84:58:f3:41:3e:1c:9b:f2:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff Validity Not Before: Dec 13 22:00:33 2025 GMT Not After : Dec 14 22:00:33 2025 GMT Subject: CN=ff4b894f97f9bc3eb802de5e98a818f7f4730a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:63:79:87:dd:22:f2:83:0f:ba:bb:84:0d:70: 66:e8:07:ac:26:8a:e6:6a:bf:1c:b3:fd:c9:1c:6f: cf:11:5c:04:ac:67:6d:1d:5b:e9:67:2c:2c:a4:bf: 74:ad:f6:17:01:c1:e1:64:e0:76:46:d3:fd:ea:da: 5c:e2:62:cf:99:a6:46:2a:c6:e2:1e:85:e5:1c:ef: 4a:e8:e5:29:d0:0e:e6:60:a8:f6:61:8d:c2:e8:70: 25:99:e9:d9:89:bf:3c:63:c9:58:17:cd:5b:da:f5: e1:3f:b8:d9:fe:fc:7f:0d:82:5b:cc:ac:45:e7:b7: da:f4:2c:1d:77:93:d8:fd:2b:e3:14:27:11:a5:68: b1:ca:37:47:a2:a0:d5:5a:c9:76:38:80:2a:73:a8: a1:8e:cd:f9:b0:04:31:86:49:4d:86:b7:59:15:42: 00:46:88:a7:a6:d8:32:f5:8e:9b:46:3c:ee:c4:d1: e8:b2:88:8c:82:5e:bb:49:17:d5:82:67:9b:ec:47: fb:03:6b:f2:07:17:7d:b1:49:13:e8:50:cb:8a:24: 2c:9d:ae:41:f4:d3:f6:d1:5a:88:2b:c4:43:5b:6d: 78:48:dd:17:e6:9a:49:a7:8e:1a:f2:9f:fc:98:e9: af:ea:26:c8:cf:ed:92:c1:05:c8:d2:05:3d:9f:ab: e0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4B:89:4F:97:F9:BC:3E:B8:02:DE:5E:98:A8:18:F7:F4:73:0A:00 X509v3 Authority Key Identifier: keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ef:9f:24:ae:06:34:0b:ed:42:fb:d0:72:9c:0f:c3:4c:41: d9:b0:67:c4:66:ea:58:a5:9f:7f:28:4a:4b:c4:eb:2b:91:1c: f2:f4:df:6b:55:4c:33:bd:48:6c:1f:20:2b:68:9a:14:a5:51: 2b:8e:9c:b5:a3:52:fe:7b:13:d9:3b:28:f5:66:c6:de:ce:93: 83:01:1a:b4:c2:6f:c5:16:ed:da:2c:a8:20:60:01:14:f9:17: 28:be:bb:36:cf:6a:cb:9c:7e:69:7a:cb:1a:21:20:97:f0:f0: 42:ec:1c:e2:ce:c2:ed:3c:df:d5:6b:a9:e1:27:b7:af:0d:c6: f6:a1:7d:e3:99:7b:f9:00:3d:ca:97:33:56:6b:72:86:17:5c: d3:ee:e7:7a:35:a1:79:a7:16:ba:85:f7:f1:09:dd:d8:f1:3f: c5:d9:72:43:c8:a0:1e:39:bc:c5:94:ca:3a:c6:4d:72:1b:13: 1b:36:4a:05:e8:cc:af:df:99:d6:0e:ba:7b:3f:3c:ac:ed:f8: a6:2e:e5:ab:34:39:4a:41:48:9b:14:45:02:06:69:f9:6d:ea: ef:20:76:54:0d:8a:78:4d:b4:0c:25:a6:a0:a2:81:63:90:8b: b7:b4:42:13:5b:2e:d0:6e:af:37:82:9e:66:42:d6:5e:bb:5d: fd:3f:32:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZutgegGf/hFjzQT4cm/K3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTNmMmIwNGViODViNmEyYTZlMjFjMDNjZmJiNzcyODdh NDVhZmYwHhcNMjUxMjEzMjIwMDMzWhcNMjUxMjE0MjIwMDMzWjAzMTEwLwYDVQQD EyhmZjRiODk0Zjk3ZjliYzNlYjgwMmRlNWU5OGE4MThmN2Y0NzMwYTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWN5h90i8oMPuruEDXBm6AesJorm ar8cs/3JHG/PEVwErGdtHVvpZywspL90rfYXAcHhZOB2RtP96tpc4mLPmaZGKsbi HoXlHO9K6OUp0A7mYKj2YY3C6HAlmenZib88Y8lYF81b2vXhP7jZ/vx/DYJbzKxF 57fa9Cwdd5PY/SvjFCcRpWixyjdHoqDVWsl2OIAqc6ihjs35sAQxhklNhrdZFUIA Roinptgy9Y6bRjzuxNHosoiMgl67SRfVgmeb7Ef7A2vyBxd9sUkT6FDLiiQsna5B 9NP20VqIK8RDW214SN0X5ppJp44a8p/8mOmv6ibIz+2SwQXI0gU9n6vgiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9LiU+X+bw+uALeXpioGPf0cwoAMB8GA1UdIwQY MBaAFGaT8rBOuFtqKm4hwDz7t3KHpFr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zMDdiZTgtNWUxMS00MTEwLWExZDMt M2E5YzBmYmM4YTBhLzEvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8zMDdiZTgtNWUxMS00MTEwLWExZDMtM2E5YzBmYmM4YTBh LzEvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT++fJK4G NAvtQvvQcpwPw0xB2bBnxGbqWKWffyhKS8TrK5Ec8vTfa1VMM71IbB8gK2iaFKVR K46ctaNS/nsT2Tso9WbG3s6TgwEatMJvxRbt2iyoIGABFPkXKL67Ns9qy5x+aXrL GiEgl/DwQuwc4s7C7Tzf1Wup4Se3rw3G9qF945l7+QA9ypczVmtyhhdc0+7nejWh eacWuoX38Qnd2PE/xdlyQ8igHjm8xZTKOsZNchsTGzZKBejMr9+Z1g66ez88rO34 pi7lqzQ5SkFImxRFAgZp+W3q7yB2VA2KeE20DCWmoKKBY5CLt7RCE1su0G6vN4Ke ZkLWXrtd/T8yiw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:32 2025 by rpki-client