This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json) Hash identifier: XExmp6irI+mt4/B83mfB9j/9MYcTyxoxiwtrrzMxj64= Subject key identifier: E7:02:3F:50:BF:8F:E3:DB:F0:03:63:69:F6:93:EA:BB:E8:D2:D4:98 Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e Certificate serial: 019B101408D4EA42C8C90E7362EA8147CB37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft Manifest number: 1354 Signing time: Fri 12 Dec 2025 01:01:46 +0000 Manifest this update: Fri 12 Dec 2025 01:01:46 +0000 Manifest next update: Sat 13 Dec 2025 01:01:46 +0000 Files and hashes: 1: 8P_S0IiROCk_5OYQ6mxMJ_E_ykg.roa (hash: hKXKA4mluIkjfh1vqK/elg6N0eojlwBUTy51lDcZmFo=) 2: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: DmZab1HNt3XVjtvUfcEHpBLcnearqTYevff5TwHM2KA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:08:d4:ea:42:c8:c9:0e:73:62:ea:81:47:cb:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e Validity Not Before: Dec 12 01:01:46 2025 GMT Not After : Dec 13 01:01:46 2025 GMT Subject: CN=e7023f50bf8fe3dbf0036369f693eabbe8d2d498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:04:b4:4a:b3:99:04:b0:80:a6:ab:cd:c0: 20:73:0c:ba:97:ff:4c:50:79:e0:fd:74:5d:4b:be: a8:e8:f6:e5:93:49:38:ba:c5:9a:60:b1:79:b4:e5: aa:33:ac:f0:66:30:c0:2a:4c:37:e9:bc:b5:d9:ee: 23:fa:43:94:5c:39:1c:86:2f:c3:2c:6e:57:5a:d1: fe:f1:b7:16:cb:0c:08:19:84:c5:66:5b:82:46:4e: 11:96:74:e9:4e:bd:69:15:87:b5:5d:bc:48:55:92: 1e:b2:f6:cb:f9:b8:37:2d:2a:a0:d4:ab:0d:26:3d: 2c:0e:59:e8:19:d8:fe:d1:d5:fd:42:ff:78:9d:ca: d6:32:06:4b:95:fd:09:86:89:40:cc:93:f0:7b:ff: b8:4c:ba:eb:d7:8f:28:e0:fe:ca:f1:18:d8:2b:51: 58:ea:5a:a6:cd:e7:45:be:40:b0:a4:6b:c5:5d:dc: 31:d1:a9:66:33:5b:44:56:81:b1:d8:6b:22:f2:1a: 7c:cf:03:fd:3c:fd:1b:ba:da:67:f5:28:68:10:81: d1:71:71:41:2e:0e:ee:35:9d:61:03:f9:c9:42:b9: 4a:92:bb:50:a8:d2:f7:39:b9:e9:f0:f4:94:b2:0b: e7:a7:a1:10:f4:6a:74:82:b6:32:40:e0:a8:8a:e8: c8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:02:3F:50:BF:8F:E3:DB:F0:03:63:69:F6:93:EA:BB:E8:D2:D4:98 X509v3 Authority Key Identifier: keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:eb:71:ba:41:88:fb:bc:b9:42:d4:27:a9:fc:ea:03:c4:54: 4a:4b:8b:50:66:13:fc:2c:fc:67:ae:12:6e:73:75:e2:b7:9a: f2:b6:71:8a:0f:6f:b1:05:33:f0:62:15:fa:1c:98:83:e6:81: 36:74:34:06:75:af:3e:4c:d2:21:f0:31:1f:ae:8f:8e:c9:ae: 9e:4f:68:de:a6:25:0d:4f:36:db:f6:34:8b:ef:67:51:bd:b9: 35:49:18:af:29:80:9e:9e:9d:79:d0:43:34:ab:7b:4f:91:53: 6b:e2:a9:fd:45:59:e9:b7:7f:25:a3:68:91:b0:c4:11:5f:f7: 6a:a0:f6:4e:a0:fd:ae:be:cc:f3:22:b3:73:b3:0d:15:a2:e5: 35:2d:4b:ed:96:f4:21:50:bc:2b:82:b6:c9:b9:ab:da:18:45: f9:61:6d:81:48:08:79:09:82:b3:04:19:a7:03:0f:27:92:96: 7c:fb:6a:d7:50:a4:33:e9:bf:2d:f4:8c:96:29:d7:f5:6b:37: 20:a2:20:49:14:61:0a:79:49:20:63:e9:38:47:89:29:bf:87: 8f:16:e5:8a:a0:a8:d0:7c:6e:f0:7d:23:c0:d2:21:9e:1b:a4: 0b:0e:01:0c:d6:86:af:c1:8a:fc:bf:92:30:55:86:ef:b7:bd: 0c:d6:0f:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFAjU6kLIyQ5zYuqBR8s3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NzI5ZjlkMDc4NmY2OGExZWNkNWM1YTkyYmMzOTJkODY5 MTk3NWUwHhcNMjUxMjEyMDEwMTQ2WhcNMjUxMjEzMDEwMTQ2WjAzMTEwLwYDVQQD EyhlNzAyM2Y1MGJmOGZlM2RiZjAwMzYzNjlmNjkzZWFiYmU4ZDJkNDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLMEtEqzmQSwgKarzcAgcwy6l/9M UHng/XRdS76o6Pblk0k4usWaYLF5tOWqM6zwZjDAKkw36by12e4j+kOUXDkchi/D LG5XWtH+8bcWywwIGYTFZluCRk4RlnTpTr1pFYe1XbxIVZIesvbL+bg3LSqg1KsN Jj0sDlnoGdj+0dX9Qv94ncrWMgZLlf0JholAzJPwe/+4TLrr148o4P7K8RjYK1FY 6lqmzedFvkCwpGvFXdwx0almM1tEVoGx2Gsi8hp8zwP9PP0butpn9ShoEIHRcXFB Lg7uNZ1hA/nJQrlKkrtQqNL3Obnp8PSUsgvnp6EQ9Gp0grYyQOCoiujI5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcCP1C/j+Pb8ANjafaT6rvo0tSYMB8GA1UdIwQY MBaAFGZyn50HhvaKHs1cWpK8OS2GkZdeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQt YWQ1MTBlMDVkYTkyLzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQtYWQ1MTBlMDVkYTky LzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJetxukGI +7y5QtQnqfzqA8RUSkuLUGYT/Cz8Z64SbnN14rea8rZxig9vsQUz8GIV+hyYg+aB NnQ0BnWvPkzSIfAxH66Pjsmunk9o3qYlDU822/Y0i+9nUb25NUkYrymAnp6dedBD NKt7T5FTa+Kp/UVZ6bd/JaNokbDEEV/3aqD2TqD9rr7M8yKzc7MNFaLlNS1L7Zb0 IVC8K4K2ybmr2hhF+WFtgUgIeQmCswQZpwMPJ5KWfPtq11CkM+m/LfSMlinX9Ws3 IKIgSRRhCnlJIGPpOEeJKb+HjxbliqCo0Hxu8H0jwNIhnhukCw4BDNaGr8GK/L+S MFWG77e9DNYPrw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:14:14 2025 by rpki-client