This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft File: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft (raw, json) Hash identifier: +jZ6kyY2FaQGAhEkN0pQwxquEmEssIe/f9wArYCsAEU= Subject key identifier: 1D:87:2E:83:44:01:8E:EF:12:84:6B:A6:32:85:C0:85:EC:5C:DC:D9 Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22 Certificate issuer: /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822 Certificate serial: 019B21E300D7D7FA02CA86DFB1DBEE7185D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft Manifest number: 1377 Signing time: Mon 15 Dec 2025 12:01:23 +0000 Manifest this update: Mon 15 Dec 2025 12:01:23 +0000 Manifest next update: Tue 16 Dec 2025 12:01:23 +0000 Files and hashes: 1: YINjBgqke9O6MEFg3LsttnUbivA.roa (hash: FiVOsjs04yLCv34Ov+9Fkl+VTtf648KKXDA45deG6fU=) 2: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl (hash: bkQKZP2xOrzq+E0GttVfUUYHnnS6CS8BRYKDNWMbM2M=) 3: a48ohAuzOYw-D3deAcBdgdbuYdE.roa (hash: s6C2UNG19Y9Btn3B7Z6k8U1vX9nGyhjdM6XWlgIHyig=) 4: tGlHaeP9l4PIJg0VnS_cNRO7zcQ.roa (hash: OUc0RlEHBoBsIR+K/PErkMIbX3pRL0dEZfaQuWCuRDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e3:00:d7:d7:fa:02:ca:86:df:b1:db:ee:71:85:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822 Validity Not Before: Dec 15 12:01:23 2025 GMT Not After : Dec 16 12:01:23 2025 GMT Subject: CN=1d872e8344018eef12846ba63285c085ec5cdcd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ce:ab:f5:ca:92:cf:97:3a:ff:c6:68:fc:2f: 35:5a:0e:fe:fb:d7:80:a4:e3:13:2e:6a:10:e0:8e: d4:ee:dc:4e:5e:d7:42:99:ad:b5:1b:78:fe:e2:74: fa:41:2b:15:94:fd:8f:c8:3d:2a:63:2f:31:ab:ad: 4f:b5:ce:78:3f:0d:19:6c:c4:27:b0:fc:b1:00:61: 4b:db:32:7c:95:63:1d:26:d0:81:1a:f7:50:82:3e: 56:92:57:53:57:07:35:84:50:3a:d6:cb:db:d2:b4: 51:d8:1e:a3:d6:f7:09:f5:37:e6:7d:57:40:3b:82: fa:f2:d5:4b:98:c4:bb:be:07:c8:e7:38:2d:37:df: 2d:fe:1c:b5:75:aa:1d:b4:42:0d:64:d7:24:31:3d: e2:d0:7f:35:a8:e6:54:24:89:76:c2:54:4f:4e:7c: 2e:9d:21:f1:d9:39:70:69:df:3c:f5:7b:a0:15:01: fb:c4:7a:96:03:ad:de:24:c1:35:af:ed:2c:88:f3: 74:45:af:3b:9d:5c:04:65:b0:7a:5f:28:9e:c6:51: fc:d6:6c:29:13:10:41:14:2d:fe:a6:d5:bf:35:04: c4:e5:a2:7d:dd:a7:fe:f2:84:83:d5:23:67:55:5e: f4:71:ce:f0:fe:5d:29:50:9b:fa:8d:f6:ac:c1:34: f4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:87:2E:83:44:01:8E:EF:12:84:6B:A6:32:85:C0:85:EC:5C:DC:D9 X509v3 Authority Key Identifier: keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:3e:ee:e6:71:03:b1:88:ff:52:85:93:22:f5:b4:d7:43:45: 63:b0:ca:a2:eb:d2:b9:db:96:54:82:f7:cd:54:84:8f:0f:14: f0:cc:07:e4:93:8b:54:77:af:74:a3:1a:04:7b:2c:55:a1:1e: 06:93:9a:92:ed:d2:31:53:77:3d:12:2e:9a:12:3b:df:4b:7b: 54:6f:39:61:06:ca:12:23:19:bd:cb:ad:29:e9:59:37:40:eb: 48:ed:29:a8:ce:dd:ae:19:2d:37:fe:71:4b:c5:d9:86:01:e1: 9a:dc:54:76:df:4c:24:6e:f3:19:7a:a4:44:fb:33:32:83:c2: 53:5e:36:f1:8d:6c:e2:aa:c5:09:2f:03:d6:ed:a0:d8:d6:c6: 13:56:4a:0d:1b:c7:70:86:40:d0:dd:52:54:ed:50:37:93:18: 07:93:a9:de:27:ce:50:2e:c5:62:9e:45:73:98:f5:13:ad:e9: ff:ae:c4:14:ec:12:ac:dd:0c:6e:92:83:15:30:76:69:14:64: 67:d7:25:d3:00:a2:3b:9a:eb:45:3e:31:2e:fb:82:4c:5d:4a: fe:da:3c:d4:2c:c4:eb:11:69:bc:4d:1f:59:31:8c:15:50:db: e8:4f:36:a8:4c:10:85:5e:f8:ed:89:de:b3:9c:20:82:84:3c: 8a:ca:e5:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4wDX1/oCyobfsdvucYXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ODljMzk5NWUyNDYxZDVhNTJmZDRmMTAwMDc4MmY5OWE0 ZDQ4MjIwHhcNMjUxMjE1MTIwMTIzWhcNMjUxMjE2MTIwMTIzWjAzMTEwLwYDVQQD EygxZDg3MmU4MzQ0MDE4ZWVmMTI4NDZiYTYzMjg1YzA4NWVjNWNkY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj86r9cqSz5c6/8Zo/C81Wg7++9eA pOMTLmoQ4I7U7txOXtdCma21G3j+4nT6QSsVlP2PyD0qYy8xq61Ptc54Pw0ZbMQn sPyxAGFL2zJ8lWMdJtCBGvdQgj5WkldTVwc1hFA61svb0rRR2B6j1vcJ9TfmfVdA O4L68tVLmMS7vgfI5zgtN98t/hy1daodtEINZNckMT3i0H81qOZUJIl2wlRPTnwu nSHx2Tlwad889XugFQH7xHqWA63eJME1r+0siPN0Ra87nVwEZbB6XyiexlH81mwp ExBBFC3+ptW/NQTE5aJ93af+8oSD1SNnVV70cc7w/l0pUJv6jfaswTT0fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2HLoNEAY7vEoRrpjKFwIXsXNzZMB8GA1UdIwQY MBaAFGaJw5leJGHVpS/U8QAHgvmaTUgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMt NDFlYWExZmRlMTFiLzEvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMtNDFlYWExZmRlMTFi LzEvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdT7u5nED sYj/UoWTIvW010NFY7DKouvSuduWVIL3zVSEjw8U8MwH5JOLVHevdKMaBHssVaEe BpOaku3SMVN3PRIumhI730t7VG85YQbKEiMZvcutKelZN0DrSO0pqM7drhktN/5x S8XZhgHhmtxUdt9MJG7zGXqkRPszMoPCU1428Y1s4qrFCS8D1u2g2NbGE1ZKDRvH cIZA0N1SVO1QN5MYB5Op3ifOUC7FYp5Fc5j1E63p/67EFOwSrN0MbpKDFTB2aRRk Z9cl0wCiO5rrRT4xLvuCTF1K/to81CzE6xFpvE0fWTGMFVDb6E82qEwQhV747Yne s5wggoQ8isrlYg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:52:16 2025 by rpki-client