This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json) Hash identifier: qjLCl/1fpFPaj+J1NT39Yiizrf62ibDIkDoqGk4XHyI= Subject key identifier: 52:ED:4A:9E:F6:07:E8:B6:C2:E2:83:F2:AF:87:EB:C0:42:79:53:C8 Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8 Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8 Certificate serial: 019B19BB9E49FBDCD15C5A130EE0048B1815 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft Manifest number: 177B Signing time: Sat 13 Dec 2025 22:01:24 +0000 Manifest this update: Sat 13 Dec 2025 22:01:24 +0000 Manifest next update: Sun 14 Dec 2025 22:01:24 +0000 Files and hashes: 1: Wi8TeX6HlCf6UscTIz-eiQunz20.roa (hash: iC2va1BTrYFKnldJrvaufKukdaOfozas1t65U+xf85Q=) 2: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: 27b28BVLJwoa/M6ZEb0dgXIBfl8h9KwLPmeQ67sGZvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:9e:49:fb:dc:d1:5c:5a:13:0e:e0:04:8b:18:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8 Validity Not Before: Dec 13 22:01:24 2025 GMT Not After : Dec 14 22:01:24 2025 GMT Subject: CN=52ed4a9ef607e8b6c2e283f2af87ebc0427953c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:a4:47:2b:61:7a:63:1a:a7:85:88:4f:c6: c2:c6:d9:1b:b6:41:f0:c0:43:14:cb:4f:4a:84:08: e9:5f:96:ce:5d:4f:21:ac:bc:03:27:7c:10:4e:50: 73:fb:78:a6:e0:02:de:f5:31:df:8e:09:3b:d4:83: 72:58:09:07:5a:ba:6b:63:27:ba:c9:26:56:f9:3a: 2f:f5:ca:f0:9e:e3:2f:bc:6d:77:a6:d1:72:53:0a: 41:c2:08:e3:1f:e2:8b:71:be:15:1f:f5:30:aa:2e: 51:3f:f3:bd:33:28:91:0b:12:55:6e:6c:09:d3:a0: 40:46:07:c5:5f:77:96:19:21:a2:13:cf:89:fa:70: 77:57:27:56:dc:8e:ae:29:01:a3:d2:46:bf:f9:41: 43:84:8c:79:4b:2c:83:82:c0:91:77:f1:03:a9:63: 44:35:24:a3:49:a6:a3:94:7d:cc:da:7c:ac:be:c5: a5:77:cf:a2:23:8a:65:9e:20:af:37:77:79:cf:bd: a9:15:47:e0:38:89:ba:80:b7:2b:8c:60:f4:70:05: 29:95:0c:75:2e:5f:16:4b:a3:72:9a:51:c8:62:5a: 18:3a:8f:02:2f:67:d7:88:bc:40:de:d6:62:4b:1e: 23:b1:87:c6:9b:44:0d:4d:8b:4c:e2:9c:19:f9:a4: 52:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:ED:4A:9E:F6:07:E8:B6:C2:E2:83:F2:AF:87:EB:C0:42:79:53:C8 X509v3 Authority Key Identifier: keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:76:4a:21:88:34:fe:eb:d7:dc:a2:29:d7:f5:68:ae:cc:0f: 0c:34:00:45:38:ad:28:38:42:4a:5e:0b:e7:cb:da:66:a0:78: ca:c6:3b:b9:21:e6:a4:cd:14:52:47:8a:dc:4c:f9:7e:9c:41: 33:4e:13:2d:d1:26:68:2c:0c:87:8d:90:b1:9a:ba:92:1c:9a: 79:7d:98:da:26:e8:e2:af:d4:78:92:dc:ef:7f:ae:dc:c3:46: 83:55:0b:ac:e8:67:e7:36:30:29:bf:8e:d8:d0:b3:e5:c1:f4: 2e:6e:15:f8:f8:30:09:20:99:45:6b:c3:a2:7d:21:7d:f6:c5: f7:23:0e:87:44:9f:e9:aa:38:35:5f:5c:09:fd:a7:31:69:66: 6f:9d:f0:74:6a:12:97:ef:5f:80:76:6f:71:e7:86:46:20:53: 97:b9:81:51:9a:f1:8b:66:76:72:cf:a0:78:34:da:b9:79:2c: 93:7e:e9:61:b3:5d:b4:6f:87:9e:b0:45:b0:b7:37:51:e0:f2: 8c:a0:b7:70:79:30:74:18:24:6d:e5:db:4b:48:73:a0:f1:64: ab:07:1a:b7:6d:46:64:47:d1:bc:2d:c9:33:66:fd:03:af:07: 60:68:05:d1:4e:a8:eb:70:b9:5a:e8:22:bb:f4:27:d2:d4:d3: 59:6a:98:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu55J+9zRXFoTDuAEixgVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1N2VkNmY1YmJhNjMzZDU1MjY5ZmRkMDU2YmNmNjBjNjhj N2IyYjgwHhcNMjUxMjEzMjIwMTI0WhcNMjUxMjE0MjIwMTI0WjAzMTEwLwYDVQQD Eyg1MmVkNGE5ZWY2MDdlOGI2YzJlMjgzZjJhZjg3ZWJjMDQyNzk1M2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrSkRythemMap4WIT8bCxtkbtkHw wEMUy09KhAjpX5bOXU8hrLwDJ3wQTlBz+3im4ALe9THfjgk71INyWAkHWrprYye6 ySZW+Tov9crwnuMvvG13ptFyUwpBwgjjH+KLcb4VH/Uwqi5RP/O9MyiRCxJVbmwJ 06BARgfFX3eWGSGiE8+J+nB3VydW3I6uKQGj0ka/+UFDhIx5SyyDgsCRd/EDqWNE NSSjSaajlH3M2nysvsWld8+iI4plniCvN3d5z72pFUfgOIm6gLcrjGD0cAUplQx1 Ll8WS6NymlHIYloYOo8CL2fXiLxA3tZiSx4jsYfGm0QNTYtM4pwZ+aRS+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLtSp72B+i2wuKD8q+H68BCeVPIMB8GA1UdIwQY MBaAFGV+1vW7pjPVUmn90Fa89gxox7K4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8wNjRmYWMtZWRkZC00OTAzLWExM2Qt MGI5Yzc2YzBkOTFjLzEvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8wNjRmYWMtZWRkZC00OTAzLWExM2QtMGI5Yzc2YzBkOTFj LzEvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHZKIYg0 /uvX3KIp1/VorswPDDQARTitKDhCSl4L58vaZqB4ysY7uSHmpM0UUkeK3Ez5fpxB M04TLdEmaCwMh42QsZq6khyaeX2Y2ibo4q/UeJLc73+u3MNGg1ULrOhn5zYwKb+O 2NCz5cH0Lm4V+PgwCSCZRWvDon0hffbF9yMOh0Sf6ao4NV9cCf2nMWlmb53wdGoS l+9fgHZvceeGRiBTl7mBUZrxi2Z2cs+geDTauXksk37pYbNdtG+HnrBFsLc3UeDy jKC3cHkwdBgkbeXbS0hzoPFkqwcat21GZEfRvC3JM2b9A68HYGgF0U6o63C5Wugi u/Qn0tTTWWqY9Q== -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:08 2025 by rpki-client