This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json) Hash identifier: TIkHNIhsKlBvh9EOBfusFH3GtrUGlmEKYP0zrAfd2X0= Subject key identifier: 7F:A3:15:A2:D0:7D:B6:33:8F:96:FF:67:3E:C8:06:D6:EF:91:6B:C2 Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75 Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775 Certificate serial: 019B0F37D0AF3A5CE5D45A69BED4383772A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft Manifest number: 0729 Signing time: Thu 11 Dec 2025 21:01:14 +0000 Manifest this update: Thu 11 Dec 2025 21:01:14 +0000 Manifest next update: Fri 12 Dec 2025 21:01:14 +0000 Files and hashes: 1: BvxwicsH1ZVfBk6Q4DoBq1qq_Cg.roa (hash: 4jEtLdDvLytqaDFqVfLMjurgO3/mhXlRnfALOClKcPM=) 2: IaQkr4wJmPFX7MlGIC068T5SLas.roa (hash: LZsKSu9vsLm4Oqz5UZoGBpM3ebW0TaSiuaWmenP7SS0=) 3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: B3wyBmv6XXOtGf18yFLXXs3kavk2H4IXZzzH/dBfPzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:d0:af:3a:5c:e5:d4:5a:69:be:d4:38:37:72:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775 Validity Not Before: Dec 11 21:01:14 2025 GMT Not After : Dec 12 21:01:14 2025 GMT Subject: CN=7fa315a2d07db6338f96ff673ec806d6ef916bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:01:62:af:44:34:9e:d1:20:ab:1b:60:24:8b: 72:32:07:83:3a:9e:19:b6:ab:79:50:37:d0:af:0c: 1d:ba:b5:b7:81:63:3e:db:e5:e3:c2:79:87:73:7b: fd:52:e5:e8:12:5b:0c:d4:dd:09:11:7e:7f:bf:d0: d6:af:d1:ae:e6:5a:ad:04:f8:20:5f:74:25:42:8f: 2e:94:14:ea:27:bb:b4:96:9f:2d:23:d1:d5:ca:12: f8:9d:f4:5a:20:29:db:c4:66:22:9c:58:97:fc:a6: d9:60:f0:a4:69:e6:6d:a9:d4:2b:9b:e3:7e:c1:82: 70:ad:d3:63:ae:ad:ec:99:4f:ab:e3:49:7d:38:dc: 88:1e:f9:c8:c2:8d:9f:c8:ea:0c:29:1a:98:59:4d: 69:69:b1:e3:47:d9:c5:14:e4:76:4c:3c:db:a3:76: bc:b0:a1:91:71:b4:8a:6e:42:ab:b9:78:9a:d6:69: 19:07:ee:0b:ed:89:72:51:03:68:fa:eb:0b:13:f5: 57:4e:e0:b1:38:ea:f3:89:98:fc:92:8d:d4:01:dd: 0e:e2:d6:8d:00:1d:88:7c:e2:7f:d8:6b:8b:6d:96: f7:ba:8c:6a:a9:c8:c5:b9:4e:38:b8:ca:fb:6c:01: 47:98:0c:1a:97:da:43:24:0b:a7:cb:ac:4a:fb:18: d5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A3:15:A2:D0:7D:B6:33:8F:96:FF:67:3E:C8:06:D6:EF:91:6B:C2 X509v3 Authority Key Identifier: keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:b7:b8:70:f2:86:75:22:47:4e:1d:59:ec:97:a1:96:07:1a: a2:82:2d:40:ae:55:74:6a:ce:af:c9:1d:12:bc:b6:8f:8d:fa: 22:11:b0:b8:2c:6e:b3:57:e2:ee:1a:b3:2a:d2:98:ad:92:0b: 9c:1f:fb:0f:a8:20:0b:a2:cb:6d:d2:c5:69:2d:c6:0a:ec:77: d2:cc:ef:eb:ea:50:30:4f:61:3d:b9:24:b8:f7:32:91:ed:65: 1c:36:af:16:84:2f:33:c2:0b:d0:90:fc:35:41:0f:90:ae:e9: a7:2a:6e:b5:a2:09:52:75:a9:4d:66:b5:ab:f8:ae:94:4f:54: 9f:71:be:e6:76:17:cb:e2:4f:be:3a:4a:a3:31:51:54:0f:ca: 40:59:8f:5e:94:a4:84:8a:df:ba:9a:1e:00:ca:32:e8:44:7e: b1:9d:24:dd:ae:35:68:c8:04:e5:b7:c5:2c:b2:94:e4:00:1f: c2:a6:db:fa:42:1b:f9:0e:6d:85:eb:e7:fc:5b:dd:33:c9:c8: a7:47:48:71:b7:98:98:61:3c:e3:1d:f8:a7:2f:de:73:e8:fd: 18:80:52:66:46:f9:55:5a:bb:14:aa:74:07:0e:39:9d:95:54: 17:52:e7:29:55:78:76:bf:52:0d:28:79:cb:8f:8f:24:0a:b0: 47:de:97:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN9CvOlzl1FppvtQ4N3KkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlY2QzOTFjNjYwYzNlNTdjNTNiODdjMGI1MmVjMGQyZjJm NDI3NzUwHhcNMjUxMjExMjEwMTE0WhcNMjUxMjEyMjEwMTE0WjAzMTEwLwYDVQQD Eyg3ZmEzMTVhMmQwN2RiNjMzOGY5NmZmNjczZWM4MDZkNmVmOTE2YmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AFir0Q0ntEgqxtgJItyMgeDOp4Z tqt5UDfQrwwdurW3gWM+2+XjwnmHc3v9UuXoElsM1N0JEX5/v9DWr9Gu5lqtBPgg X3QlQo8ulBTqJ7u0lp8tI9HVyhL4nfRaICnbxGYinFiX/KbZYPCkaeZtqdQrm+N+ wYJwrdNjrq3smU+r40l9ONyIHvnIwo2fyOoMKRqYWU1pabHjR9nFFOR2TDzbo3a8 sKGRcbSKbkKruXia1mkZB+4L7YlyUQNo+usLE/VXTuCxOOrziZj8ko3UAd0O4taN AB2IfOJ/2GuLbZb3uoxqqcjFuU44uMr7bAFHmAwal9pDJAuny6xK+xjVlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+jFaLQfbYzj5b/Zz7IBtbvkWvCMB8GA1UdIwQY MBaAFM7NORxmDD5XxTuHwLUuwNLy9Cd1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEt YTRkMzU5ZDkxMjUxLzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEtYTRkMzU5ZDkxMjUx LzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqre4cPKG dSJHTh1Z7JehlgcaooItQK5VdGrOr8kdEry2j436IhGwuCxus1fi7hqzKtKYrZIL nB/7D6ggC6LLbdLFaS3GCux30szv6+pQME9hPbkkuPcyke1lHDavFoQvM8IL0JD8 NUEPkK7ppyputaIJUnWpTWa1q/iulE9Un3G+5nYXy+JPvjpKozFRVA/KQFmPXpSk hIrfupoeAMoy6ER+sZ0k3a41aMgE5bfFLLKU5AAfwqbb+kIb+Q5thevn/FvdM8nI p0dIcbeYmGE84x34py/ec+j9GIBSZkb5VVq7FKp0Bw45nZVUF1LnKVV4dr9SDSh5 y4+PJAqwR96X1w== -----END CERTIFICATE-----Generated at Thu Dec 11 23:20:12 2025 by rpki-client