This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json) Hash identifier: M2OhSPo0WgG/isoU41+Iif4W95gvDHhAa2gMqHjy+JU= Subject key identifier: 60:62:61:F8:D6:B5:26:07:72:68:CA:E3:3C:35:24:71:D8:25:C8:FD Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019AEAF3D1E73C9026E00F66A59639C6D0D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft Manifest number: 17A5 Signing time: Thu 04 Dec 2025 20:00:38 +0000 Manifest this update: Thu 04 Dec 2025 20:00:38 +0000 Manifest next update: Fri 05 Dec 2025 20:00:38 +0000 Files and hashes: 1: 8UvLZFAKqJpCEGRDA7MQZYKB1FA.roa (hash: 5khISlq6bPf+kIeClZYuIkWnj2m5z+5Ni6D2mjecYjc=) 2: BTXeEQn6_jLij6GesQgVzF28xUU.roa (hash: 3+QwzsmWeQIw1BpFKk9yQ7ilD7j33KCr6XV4sTa+P88=) 3: GaKfTqsXTBbzB0l6PPjCOtbieE8.roa (hash: bGjsSkVxtFTtg2bHcJH2NQE4duud/iaOMe/znbQ8Z78=) 4: TbTTZ-P2c2oKLxHAzaFKu1MWiOc.roa (hash: 3ytVgZVe5hScQPWAtYnYdviW70pMd2q5EFmWpIQV17E=) 5: WS3Z_BM52BTJjWbBHhazrpZVOYg.roa (hash: SJIHk7TT3ZTlS12qN7Nxucuns7jAOlr08V7cn7ZqJWk=) 6: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: m8Hk2/Yi3SgFr0oFJIAsDiHUgWCtpAhgX9CONmsqMRw=) 7: f4FMIhtgeWoUMY7EiYz-PWPm8do.roa (hash: 9J3M63EhcrOtxQbOA25BDsJR1IwyddHic2UZOnTfau4=) 8: pg08iZmXiA9f3gK9qFVPkKWX3Do.roa (hash: DtPQdtrOm/UwJd40BqGvwz8RH+fB/26Ry4OZL+v4IOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:f3:d1:e7:3c:90:26:e0:0f:66:a5:96:39:c6:d0:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Dec 4 20:00:38 2025 GMT Not After : Dec 5 20:00:38 2025 GMT Subject: CN=606261f8d6b526077268cae33c352471d825c8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:91:cd:2e:85:a8:86:71:12:f0:2f:ee:34: 12:2e:a7:50:0a:5d:30:3a:95:65:43:69:00:61:8a: 96:0c:72:14:0a:5e:db:03:a3:0b:9e:99:47:38:c8: 1e:9e:4f:97:81:c4:b2:5c:4d:e6:b0:79:61:d8:64: da:08:17:ad:da:cb:a9:34:12:81:7b:b6:d8:e2:f7: cb:6d:88:41:86:0f:fc:3b:b6:97:67:93:fd:fe:fb: 54:a6:13:af:b7:32:4e:bf:d0:86:b4:00:69:9f:15: c1:8e:a0:f2:44:75:41:75:dc:df:46:a2:d5:95:49: b0:7a:cd:ad:49:d8:3c:a2:d1:dc:b4:b1:b2:f6:d9: 7a:60:44:cc:6b:f8:79:47:8f:63:fd:6f:bf:ce:cf: 3a:4d:97:5c:48:7f:5c:14:58:71:65:ac:5e:e3:5a: 16:17:b5:b7:a0:a2:67:bb:df:7e:51:04:16:17:00: c9:10:ec:02:2f:3a:5d:28:6c:49:89:1f:b2:73:37: 7d:f9:35:e4:a4:bb:66:bf:bf:08:c3:13:2f:45:bf: 81:f1:80:07:ce:a5:86:0b:2f:01:2a:1d:69:78:7e: 83:d1:d2:9e:10:97:8b:9d:63:18:ad:53:4a:43:a2: f1:92:ad:34:09:21:da:06:8f:b0:58:a4:b5:78:90: 76:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:62:61:F8:D6:B5:26:07:72:68:CA:E3:3C:35:24:71:D8:25:C8:FD X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e1:28:d0:b4:89:58:77:1f:1c:b0:2e:d0:f8:3b:45:66:53: 95:6c:46:ee:06:6a:5e:a2:d8:64:cc:23:52:79:b8:f4:60:4d: de:97:a8:1f:fc:51:4e:1a:05:d1:71:44:d9:c2:9a:9d:1d:ac: ff:e3:c1:27:fa:a2:f7:e6:ea:ba:c2:ee:b5:99:27:21:02:ae: 3b:4d:8d:36:ee:a0:f1:8e:d6:4a:39:40:aa:4b:00:db:89:d9: a3:2e:0c:7c:4c:c0:71:99:d8:7c:00:f9:e6:88:74:b2:1b:69: 61:b9:61:d3:df:69:bd:f4:b6:77:e4:d0:dc:2e:f7:05:25:33: 45:5d:74:de:d3:a0:2f:a3:46:bc:33:02:47:43:a6:39:71:7c: 44:3b:dd:dd:99:a5:d3:6c:7e:e8:b4:e0:3d:38:69:50:f1:31: 5c:d5:19:40:08:54:16:2d:8c:43:f4:73:0a:7a:6e:b6:a1:f8: 80:c9:a0:70:ee:94:4c:63:d1:36:98:77:47:36:ef:de:eb:b6: 67:c1:0c:9b:00:9b:b6:6c:17:97:83:50:a6:6a:2d:b7:a9:b4: ba:a7:e7:5c:ee:28:71:6e:e8:b1:d3:3e:49:97:7d:bd:17:5f: 60:9d:79:ce:da:6e:34:68:a1:39:8f:77:2b:29:22:c6:83:41: b5:d0:95:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrq89HnPJAm4A9mpZY5xtDUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjUxMjA0MjAwMDM4WhcNMjUxMjA1MjAwMDM4WjAzMTEwLwYDVQQD Eyg2MDYyNjFmOGQ2YjUyNjA3NzI2OGNhZTMzYzM1MjQ3MWQ4MjVjOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyCRzS6FqIZxEvAv7jQSLqdQCl0w OpVlQ2kAYYqWDHIUCl7bA6MLnplHOMgenk+XgcSyXE3msHlh2GTaCBet2supNBKB e7bY4vfLbYhBhg/8O7aXZ5P9/vtUphOvtzJOv9CGtABpnxXBjqDyRHVBddzfRqLV lUmwes2tSdg8otHctLGy9tl6YETMa/h5R49j/W+/zs86TZdcSH9cFFhxZaxe41oW F7W3oKJnu99+UQQWFwDJEOwCLzpdKGxJiR+yczd9+TXkpLtmv78IwxMvRb+B8YAH zqWGCy8BKh1peH6D0dKeEJeLnWMYrVNKQ6Lxkq00CSHaBo+wWKS1eJB2ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBiYfjWtSYHcmjK4zw1JHHYJcj9MB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUeEo0LSJ WHcfHLAu0Pg7RWZTlWxG7gZqXqLYZMwjUnm49GBN3peoH/xRThoF0XFE2cKanR2s /+PBJ/qi9+bqusLutZknIQKuO02NNu6g8Y7WSjlAqksA24nZoy4MfEzAcZnYfAD5 5oh0shtpYblh099pvfS2d+TQ3C73BSUzRV103tOgL6NGvDMCR0OmOXF8RDvd3Zml 02x+6LTgPThpUPExXNUZQAhUFi2MQ/RzCnputqH4gMmgcO6UTGPRNph3Rzbv3uu2 Z8EMmwCbtmwXl4NQpmott6m0uqfnXO4ocW7osdM+SZd9vRdfYJ15ztpuNGihOY93 KykixoNBtdCVlg== -----END CERTIFICATE-----Generated at Thu Dec 4 21:57:07 2025 by rpki-client