This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json) Hash identifier: fITgtn93GfMtlSuWgh0H9LCErySGnuwsNUvBJBVf7vI= Subject key identifier: BD:02:5B:F5:5A:4B:55:F6:1E:B8:4F:BD:F5:B9:3A:36:20:AF:1D:B9 Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76 Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876 Certificate serial: 019B5A1AD3E5795DD0AD53954C3EFE384C7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 10:01:06 +0000 Manifest this update: Fri 26 Dec 2025 10:01:06 +0000 Manifest next update: Sat 27 Dec 2025 10:01:06 +0000 Files and hashes: 1: E_L2oklniQj05pWuM0xgBEBv9Z0.roa (hash: vggfw58sjlCL17O/pPVvpJxnAr4298gihw1aekiLNHY=) 2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: iQgp0TDGVVhykZKpYwb4xIlSTr2TYupxegot7g1+XyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:d3:e5:79:5d:d0:ad:53:95:4c:3e:fe:38:4c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876 Validity Not Before: Dec 26 10:01:06 2025 GMT Not After : Dec 27 10:01:06 2025 GMT Subject: CN=bd025bf55a4b55f61eb84fbdf5b93a3620af1db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:34:70:4a:f5:34:a3:05:45:7d:8f:37:88: 90:8a:72:de:82:71:09:b7:0c:cb:fd:b6:b1:00:e1: bd:8a:6c:32:66:7a:76:10:4c:f1:e1:8b:4b:be:ee: 19:f3:e9:e4:56:75:0b:94:c8:f3:be:65:07:e8:c5: 6b:7a:7b:44:0c:f0:12:72:06:3b:e2:4c:ef:d1:21: 89:cd:eb:82:45:ad:23:22:b4:8e:fc:a5:99:13:d9: 32:41:49:78:79:32:24:2e:15:aa:49:a4:47:ac:b0: 78:d2:bc:2c:93:c6:06:e6:f4:70:17:75:31:9d:55: e2:a7:f5:2e:05:21:7f:89:17:37:cf:bc:86:92:e6: 78:7c:5a:71:a1:70:ce:cc:96:c5:c1:b6:d4:8a:fd: 50:2d:6c:38:89:07:40:5f:f7:c7:ac:48:c9:fe:9f: d8:55:46:62:cf:21:83:c6:fd:64:77:67:1e:5c:b2: b9:89:a2:83:a1:a6:76:d0:20:1e:61:59:5a:e9:d5: a9:e4:73:f4:08:94:41:b8:2e:d9:68:22:c8:78:f2: 9f:78:79:50:5f:c6:a8:27:72:3d:a4:5f:eb:db:d8: 05:a7:c0:fd:d0:06:08:11:f3:65:f7:10:c3:f8:62: ab:2d:32:0a:9a:6b:14:e3:75:27:9f:1f:6c:a2:64: a4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:02:5B:F5:5A:4B:55:F6:1E:B8:4F:BD:F5:B9:3A:36:20:AF:1D:B9 X509v3 Authority Key Identifier: keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6c:f1:61:94:09:1c:f6:76:1e:02:67:aa:c5:83:d1:ad:3f: 02:ab:a8:a2:64:ce:90:59:32:e0:9a:29:aa:88:eb:86:e8:8c: 89:8b:47:6a:ca:54:02:e8:50:35:4a:43:f7:38:1a:43:c2:25: 3b:9d:02:23:2f:93:aa:fb:67:69:68:7a:3c:e0:b6:51:e4:13: cc:b6:9a:ac:6d:ba:ec:ee:f6:74:6c:67:3e:9b:73:08:f8:7b: 3d:e8:a3:d3:57:ce:23:a9:8b:89:e7:68:dc:f3:28:27:de:46: b6:58:1d:b2:f1:b5:97:ff:70:2e:fb:8e:1d:70:50:e1:27:03: 2d:f4:ab:c7:93:51:b0:c3:af:d6:d8:04:e9:4c:a0:90:a3:81: a7:87:ca:a3:4f:c7:b5:84:54:59:d2:d3:ce:b8:ab:a2:d2:56: 93:7c:5d:e1:9f:3a:c3:a9:99:81:35:e5:ff:ba:9e:0b:dc:0a: 18:3a:00:36:bc:21:7b:56:0a:25:e1:89:6c:76:99:db:95:a8: 87:c2:65:6f:3f:fe:99:fc:01:68:10:6b:42:9a:e2:42:44:55: 5d:2d:30:4a:71:1b:eb:86:ad:4e:aa:1b:1b:97:ab:ce:f0:a0: 24:3f:51:42:bb:cc:20:28:52:ad:ab:36:ac:64:bb:32:51:73: 24:ac:e4:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtPleV3QrVOVTD7+OEx7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OTZmYjg5YThhMjNjYmU0ZjJhZGIxNjVjODlmMjZkZThh Yjc4NzYwHhcNMjUxMjI2MTAwMTA2WhcNMjUxMjI3MTAwMTA2WjAzMTEwLwYDVQQD EyhiZDAyNWJmNTVhNGI1NWY2MWViODRmYmRmNWI5M2EzNjIwYWYxZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgQ0cEr1NKMFRX2PN4iQinLegnEJ twzL/baxAOG9imwyZnp2EEzx4YtLvu4Z8+nkVnULlMjzvmUH6MVrentEDPAScgY7 4kzv0SGJzeuCRa0jIrSO/KWZE9kyQUl4eTIkLhWqSaRHrLB40rwsk8YG5vRwF3Ux nVXip/UuBSF/iRc3z7yGkuZ4fFpxoXDOzJbFwbbUiv1QLWw4iQdAX/fHrEjJ/p/Y VUZizyGDxv1kd2ceXLK5iaKDoaZ20CAeYVla6dWp5HP0CJRBuC7ZaCLIePKfeHlQ X8aoJ3I9pF/r29gFp8D90AYIEfNl9xDD+GKrLTIKmmsU43Unnx9somSknwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0CW/VaS1X2HrhPvfW5OjYgrx25MB8GA1UdIwQY MBaAFGWW+4moojy+TyrbFlyJ8m3oq3h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUt MjAyZTE5YzA4OGIxLzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUtMjAyZTE5YzA4OGIx LzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2zxYZQJ HPZ2HgJnqsWD0a0/AquoomTOkFky4JopqojrhuiMiYtHaspUAuhQNUpD9zgaQ8Il O50CIy+TqvtnaWh6POC2UeQTzLaarG267O72dGxnPptzCPh7Peij01fOI6mLiedo 3PMoJ95GtlgdsvG1l/9wLvuOHXBQ4ScDLfSrx5NRsMOv1tgE6UygkKOBp4fKo0/H tYRUWdLTzrirotJWk3xd4Z86w6mZgTXl/7qeC9wKGDoANrwhe1YKJeGJbHaZ25Wo h8Jlbz/+mfwBaBBrQpriQkRVXS0wSnEb64atTqobG5erzvCgJD9RQrvMIChSras2 rGS7MlFzJKzkMQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:16 2025 by rpki-client