This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft File: Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json) Hash identifier: yIhlIsAUL3/W9rgs2FYrvzdV/qjxoOT5QKU3B8mLFKc= Subject key identifier: BE:60:E9:98:8D:6A:41:BD:1A:ED:C9:38:80:B1:F5:8C:04:40:96:26 Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64 Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364 Certificate serial: 019B2475A506789E68AFE16E828F15874CC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft Manifest number: 07A8 Signing time: Tue 16 Dec 2025 00:00:48 +0000 Manifest this update: Tue 16 Dec 2025 00:00:48 +0000 Manifest next update: Wed 17 Dec 2025 00:00:48 +0000 Files and hashes: 1: 3vz-rOJraHXgtuodvtQFH_a0-9E.roa (hash: IX6pchZZJC1/03c77tkG6zkGv/Mwl6B+D7gi48C82ao=) 2: 8oEJVvsajcBRoUJrjPZ44H-lDvU.roa (hash: s8IZbmglKempNB2FF6VAP5r2WVPZqYqiGBObGrONRsw=) 3: Fj8ltGVj4bwSu39N9YoDfu9hSDQ.roa (hash: uLPHDZq9gqVO8ebYrJkyS5eyy5WJ7smXGXrfo42hNSA=) 4: MaxzsR0kwMliUpktNGJeA1YTbq8.roa (hash: E2oo5IoDgbAj+TaESsQDHN0WQGIrVE8oADktvNT9aM0=) 5: Ur62Nf4a7xdo9YL9reRteLUJLQg.roa (hash: cTYkrEu5Wjkc8LFBNFp03pV3rpo4tl8VZFY9in/a2XI=) 6: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: ieBFeVC6XHUpviIlPMPcaMO72KdPth2Cnui7giRgef4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:75:a5:06:78:9e:68:af:e1:6e:82:8f:15:87:4c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364 Validity Not Before: Dec 16 00:00:48 2025 GMT Not After : Dec 17 00:00:48 2025 GMT Subject: CN=be60e9988d6a41bd1aedc93880b1f58c04409626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7c:bd:62:2b:6e:44:a5:6f:40:c9:30:4b:84: d1:29:bc:85:15:d3:42:b3:b9:e0:0c:07:11:8f:aa: 6b:d4:01:b9:30:6a:fb:37:7f:4b:09:59:75:9f:cb: c1:a1:d0:2d:b6:45:75:b4:1e:11:02:7f:82:1b:25: 97:69:c2:3b:a9:51:5a:26:20:07:5e:dd:94:9a:18: 86:87:bc:f5:00:38:69:6f:77:94:38:b7:a3:f9:a3: a8:d5:16:58:9b:92:a5:47:10:5f:23:0b:11:fc:27: 30:30:69:35:ce:66:10:6a:f5:5b:92:4b:20:b8:fd: 12:38:29:52:7d:d6:36:3d:7a:c7:49:3e:96:75:b9: 99:37:20:b8:d9:5d:77:dd:d2:98:d0:60:96:94:dc: 26:42:19:7b:5c:78:74:9d:1b:00:83:e9:d2:ee:07: 96:81:ec:d3:de:35:4e:35:77:a8:b5:95:59:a0:25: 53:51:92:fd:e6:51:2f:d6:6a:ef:f4:3a:bb:74:79: 33:a3:c7:96:d2:d8:de:61:16:30:f8:1d:0a:68:ae: 9e:cd:d6:2e:bc:17:ee:01:6a:cb:1a:6a:9d:a9:1c: 0a:a3:d0:f0:65:5b:76:b1:08:fa:f2:a8:9e:e4:eb: 24:d6:dd:85:ea:39:ed:32:c5:1c:5b:a8:e0:b9:51: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:60:E9:98:8D:6A:41:BD:1A:ED:C9:38:80:B1:F5:8C:04:40:96:26 X509v3 Authority Key Identifier: keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:58:89:86:f7:cc:38:65:10:24:62:fd:d0:44:61:ba:c7:bc: 90:1d:0b:ef:40:90:18:54:cf:e2:2f:74:59:d5:61:05:8f:32: 4d:11:83:a4:17:09:fb:39:92:01:32:73:d9:58:7d:71:d0:e8: 0e:8e:15:24:59:d2:09:90:3a:93:c7:4c:74:44:6c:ec:2c:c4: 45:5b:f0:b3:c2:fb:b5:55:f5:e7:7a:74:3b:2b:76:ba:a0:df: 58:4b:2e:40:c5:06:fe:94:0a:b8:46:4c:83:fb:aa:5c:60:b8: 9e:ff:86:63:a8:ff:f4:bc:aa:a2:b9:52:79:e1:9a:ae:6d:4c: 9c:99:ed:4a:88:72:f5:d9:8b:e9:64:ff:70:d7:5b:50:b8:2a: 5c:3c:b8:f3:50:67:dd:eb:07:38:16:ff:0f:2e:02:89:29:61: 17:f2:ca:6e:f4:6e:93:a0:70:42:74:ec:5e:ac:c7:9c:25:3f: 8b:4b:69:70:a1:f9:7b:97:0a:ec:02:ae:12:71:35:15:10:7f: ac:58:4e:c3:41:fd:13:1c:36:02:6b:f2:e3:8e:79:2a:95:15: 2a:35:32:cf:96:b5:dd:32:0d:73:96:00:22:d3:64:ae:04:e1: 4b:4e:af:e5:c7:2a:c5:c5:e8:cb:3e:7c:fb:01:7b:83:91:43: a8:e2:cc:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdaUGeJ5or+Fugo8Vh0zEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWQzYmE2OGM3OGJmZjJjNDcyNDQwMGFkZTYzNDg0ODJm YjQzNjQwHhcNMjUxMjE2MDAwMDQ4WhcNMjUxMjE3MDAwMDQ4WjAzMTEwLwYDVQQD EyhiZTYwZTk5ODhkNmE0MWJkMWFlZGM5Mzg4MGIxZjU4YzA0NDA5NjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ny9YituRKVvQMkwS4TRKbyFFdNC s7ngDAcRj6pr1AG5MGr7N39LCVl1n8vBodAttkV1tB4RAn+CGyWXacI7qVFaJiAH Xt2UmhiGh7z1ADhpb3eUOLej+aOo1RZYm5KlRxBfIwsR/CcwMGk1zmYQavVbkksg uP0SOClSfdY2PXrHST6WdbmZNyC42V133dKY0GCWlNwmQhl7XHh0nRsAg+nS7geW gezT3jVONXeotZVZoCVTUZL95lEv1mrv9Dq7dHkzo8eW0tjeYRYw+B0KaK6ezdYu vBfuAWrLGmqdqRwKo9DwZVt2sQj68qie5Osk1t2F6jntMsUcW6jguVEIuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5g6ZiNakG9Gu3JOICx9YwEQJYmMB8GA1UdIwQY MBaAFGbtO6aMeL/yxHJEAK3mNISC+0NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMt MGE0M2I3YTNlYjU0LzEvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMtMGE0M2I3YTNlYjU0 LzEvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFiJhvfM OGUQJGL90ERhuse8kB0L70CQGFTP4i90WdVhBY8yTRGDpBcJ+zmSATJz2Vh9cdDo Do4VJFnSCZA6k8dMdERs7CzERVvws8L7tVX153p0Oyt2uqDfWEsuQMUG/pQKuEZM g/uqXGC4nv+GY6j/9LyqorlSeeGarm1MnJntSohy9dmL6WT/cNdbULgqXDy481Bn 3esHOBb/Dy4CiSlhF/LKbvRuk6BwQnTsXqzHnCU/i0tpcKH5e5cK7AKuEnE1FRB/ rFhOw0H9Exw2Amvy4455KpUVKjUyz5a13TINc5YAItNkrgThS06v5ccqxcXoyz58 +wF7g5FDqOLMgw== -----END CERTIFICATE-----Generated at Tue Dec 16 09:02:45 2025 by rpki-client