This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft File: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft (raw, json) Hash identifier: WpltcBrrQkH58/eB5xQB3UYWroDijW5ZRj/EaLonnzQ= Subject key identifier: E3:D6:19:52:1F:B1:8A:71:06:21:BB:D2:08:5D:F9:2D:0B:21:91:E5 Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22 Certificate issuer: /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822 Certificate serial: 019B0E935413550B4435657D0BC1CDDBFF8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft Manifest number: 136D Signing time: Thu 11 Dec 2025 18:01:34 +0000 Manifest this update: Thu 11 Dec 2025 18:01:34 +0000 Manifest next update: Fri 12 Dec 2025 18:01:34 +0000 Files and hashes: 1: YINjBgqke9O6MEFg3LsttnUbivA.roa (hash: FiVOsjs04yLCv34Ov+9Fkl+VTtf648KKXDA45deG6fU=) 2: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl (hash: a1814WHw4QbwNw7EgF6eWeABfmQJbcUI3gkqmoOZCio=) 3: a48ohAuzOYw-D3deAcBdgdbuYdE.roa (hash: s6C2UNG19Y9Btn3B7Z6k8U1vX9nGyhjdM6XWlgIHyig=) 4: tGlHaeP9l4PIJg0VnS_cNRO7zcQ.roa (hash: OUc0RlEHBoBsIR+K/PErkMIbX3pRL0dEZfaQuWCuRDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:54:13:55:0b:44:35:65:7d:0b:c1:cd:db:ff:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822 Validity Not Before: Dec 11 18:01:34 2025 GMT Not After : Dec 12 18:01:34 2025 GMT Subject: CN=e3d619521fb18a710621bbd2085df92d0b2191e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:f9:c7:1a:00:9d:11:38:7c:82:d5:ad:80: b9:a5:4d:49:56:15:32:af:f8:85:f6:b6:e4:89:77: 98:9c:27:4a:eb:76:ad:60:a9:02:00:48:35:ab:e1: 84:fb:2e:74:b2:0a:d0:5d:f9:6f:29:2b:9d:19:4b: 2d:55:0b:66:c4:d3:d7:9d:6e:86:05:f2:85:7d:23: 35:2f:39:1f:bc:de:6c:6f:e9:47:5f:0a:a6:d8:f5: 8c:0d:15:b4:f6:f7:f0:dd:93:2c:2d:06:7d:2b:e2: 46:6e:47:b0:3a:8b:9c:b2:a4:6e:22:dd:e9:78:f2: 88:1e:73:59:1e:53:f1:d9:82:54:98:7a:37:ab:b6: 83:f8:5f:ec:7d:b5:a0:7c:34:5e:eb:53:c7:5f:5e: 57:dd:91:51:38:83:59:72:86:75:f0:6b:b5:a7:a7: e8:d6:31:c9:24:b6:ea:f7:49:9b:f9:5a:fe:43:e2: 4d:e8:87:8b:c8:f9:53:28:a5:f8:d4:b8:8a:0e:40: 8c:28:0b:3d:29:43:05:03:76:ba:39:6e:03:e4:31: d0:14:c6:81:eb:46:32:92:43:cc:c6:1b:d0:94:4a: 49:b0:a2:e6:2f:b2:29:94:7a:98:46:d0:6d:37:c0: 28:e2:3a:73:f4:c6:86:09:6f:8c:54:b9:8c:0d:78: 9f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D6:19:52:1F:B1:8A:71:06:21:BB:D2:08:5D:F9:2D:0B:21:91:E5 X509v3 Authority Key Identifier: keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:22:7f:7a:01:3a:cf:66:34:04:00:60:60:0e:9c:85:70:11: 88:2f:7e:3d:34:9e:15:b2:e2:31:ff:cf:01:74:9a:f3:ea:10: fd:fe:39:a4:80:1b:51:39:eb:7e:10:e1:a8:3d:ef:6a:27:01: 74:1c:04:4d:3f:d5:2d:cb:21:74:57:f0:e6:af:66:65:bf:80: ee:49:3f:46:88:34:d5:e0:c2:38:19:51:bb:5c:62:f7:ea:98: 9a:58:de:d8:b1:e1:43:4b:16:87:78:e0:fe:3b:c7:da:b4:ca: cd:6c:2d:e8:6f:c3:ad:1b:1d:dc:78:b7:7d:84:49:13:e0:8e: f0:3e:37:cf:d6:75:d5:ef:23:fe:3d:91:c5:64:92:3b:e6:54: f0:16:9a:12:3c:00:e3:00:a1:12:b0:c5:87:0b:22:6c:fd:b5: b9:7d:a0:60:3f:52:4e:92:91:85:5d:ca:bd:88:fd:eb:5b:61: 36:c4:7a:5f:d9:89:44:d2:b8:ec:7b:57:fe:08:5f:da:77:7b: ad:12:70:39:6a:57:81:64:05:7c:67:1f:17:45:47:17:86:74: 89:c1:f9:4d:fb:56:dc:09:d6:57:45:cb:8d:1c:36:a0:51:31: 72:69:a0:05:d2:4e:4b:e8:54:49:70:6d:83:4a:97:9d:f1:5a: e4:30:65:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk1QTVQtENWV9C8HN2/+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ODljMzk5NWUyNDYxZDVhNTJmZDRmMTAwMDc4MmY5OWE0 ZDQ4MjIwHhcNMjUxMjExMTgwMTM0WhcNMjUxMjEyMTgwMTM0WjAzMTEwLwYDVQQD EyhlM2Q2MTk1MjFmYjE4YTcxMDYyMWJiZDIwODVkZjkyZDBiMjE5MWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroH5xxoAnRE4fILVrYC5pU1JVhUy r/iF9rbkiXeYnCdK63atYKkCAEg1q+GE+y50sgrQXflvKSudGUstVQtmxNPXnW6G BfKFfSM1LzkfvN5sb+lHXwqm2PWMDRW09vfw3ZMsLQZ9K+JGbkewOoucsqRuIt3p ePKIHnNZHlPx2YJUmHo3q7aD+F/sfbWgfDRe61PHX15X3ZFROINZcoZ18Gu1p6fo 1jHJJLbq90mb+Vr+Q+JN6IeLyPlTKKX41LiKDkCMKAs9KUMFA3a6OW4D5DHQFMaB 60YykkPMxhvQlEpJsKLmL7IplHqYRtBtN8Ao4jpz9MaGCW+MVLmMDXifiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPWGVIfsYpxBiG70ghd+S0LIZHlMB8GA1UdIwQY MBaAFGaJw5leJGHVpS/U8QAHgvmaTUgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMt NDFlYWExZmRlMTFiLzEvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMtNDFlYWExZmRlMTFi LzEvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCJ/egE6 z2Y0BABgYA6chXARiC9+PTSeFbLiMf/PAXSa8+oQ/f45pIAbUTnrfhDhqD3vaicB dBwETT/VLcshdFfw5q9mZb+A7kk/Rog01eDCOBlRu1xi9+qYmlje2LHhQ0sWh3jg /jvH2rTKzWwt6G/DrRsd3Hi3fYRJE+CO8D43z9Z11e8j/j2RxWSSO+ZU8BaaEjwA 4wChErDFhwsibP21uX2gYD9STpKRhV3KvYj961thNsR6X9mJRNK47HtX/ghf2nd7 rRJwOWpXgWQFfGcfF0VHF4Z0icH5TftW3AnWV0XLjRw2oFExcmmgBdJOS+hUSXBt g0qXnfFa5DBlAQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:58:17 2025 by rpki-client