This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json) Hash identifier: c3EYuhjyr9wt3/pGEMdTGUocuMhrrkr5aGrrKWQpuEI= Subject key identifier: 8E:47:E5:94:20:62:AF:E0:7C:06:2A:1A:41:3F:D6:BD:C9:9D:34:CB Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39 Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39 Certificate serial: 019B115CB104182D88E0550BEFD0DEB22B5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft Manifest number: 06BF Signing time: Fri 12 Dec 2025 07:00:45 +0000 Manifest this update: Fri 12 Dec 2025 07:00:45 +0000 Manifest next update: Sat 13 Dec 2025 07:00:45 +0000 Files and hashes: 1: 1-P9YegJEgTTrNaAEU3IIuc08RmY.roa (hash: VMR860mh90RZ0uHCWx/O5Sa1yv7ih7Q2heb0CHOeN9M=) 2: DeGtb7yujTyTVa3OH4DyZgT0oXs.roa (hash: nw8jgAJXgkkRIoQf1v0bYUYfpASn5VshZprEj2zsrkk=) 3: EMVR9NYVRq-EMjxpptyq2L_gJw8.roa (hash: ae6WIIHau+j7Ux1GHG57mV6lm8wtBV6sLPHMj084L2M=) 4: GjPy1tsdvgbyCKZxZGu0WrgmPwk.roa (hash: Gjo03csZv216WbwMAfrV2mPHc5TstpRZcbzipd7HL+w=) 5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: +ReK4RvLShx/Jhl7FoFVlXIkxgWEysDHUdoEOomirLo=) 6: kNJTv0u8R3n31XhM175qS3qSPYc.roa (hash: yEcxvFp6oLKPqomZkL6wGasrZzjv/ubXMRsnyY1hRmM=) 7: oBmDtOMzv9uYHMZKHsP_7TZtJDo.roa (hash: 1TEsgDEf5icrK07cJlsmMerQGE88qLGKElgw/ofxA2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:b1:04:18:2d:88:e0:55:0b:ef:d0:de:b2:2b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a665b90069bd71850602e7400c529793269e39 Validity Not Before: Dec 12 07:00:45 2025 GMT Not After : Dec 13 07:00:45 2025 GMT Subject: CN=8e47e5942062afe07c062a1a413fd6bdc99d34cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cc:66:04:74:76:54:c1:f6:7e:dd:26:00:93: 6c:12:dc:57:d1:d8:86:2f:ea:9f:1e:d1:51:f7:57: e0:bf:09:4c:ff:25:dd:4b:21:25:c6:32:44:6e:7e: 0d:c7:4e:bf:f6:97:2c:47:5d:73:8f:0c:d1:7a:d0: 6d:b0:c6:77:4c:ec:f4:94:fd:9c:6d:fd:78:e0:fc: 80:56:0e:20:7a:f9:f1:19:85:67:eb:b8:69:9a:56: a3:da:2a:95:25:85:2a:f9:32:a7:5b:df:17:3b:b3: a3:47:4d:42:ee:8c:32:ef:7a:59:ea:05:ae:44:e1: d6:05:ae:83:a3:02:31:0b:e6:0f:78:b1:69:c8:23: 17:c1:e1:62:cc:27:75:02:e8:14:d8:d8:53:db:7e: c1:e7:31:48:9d:af:4c:cb:33:b3:bf:c0:4f:e7:98: 39:72:cf:09:6f:4f:b6:54:74:84:ce:a8:bc:54:cb: f1:1d:24:b3:64:87:42:7e:d6:f1:ee:c0:ca:35:14: 68:45:84:21:83:53:0b:a0:a6:dd:0d:6f:58:14:ff: ee:44:4b:c5:6a:f5:ea:f3:aa:8f:54:b0:0a:75:7c: b9:ca:c7:9f:48:f2:5c:4a:13:d5:71:d0:6f:0d:18: a7:43:8d:51:3e:3e:90:dd:75:07:47:44:38:cb:02: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:47:E5:94:20:62:AF:E0:7C:06:2A:1A:41:3F:D6:BD:C9:9D:34:CB X509v3 Authority Key Identifier: keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:45:55:57:94:fa:0b:4b:2a:a8:44:c5:43:88:41:5f:35:be: 9c:e9:65:cc:07:1b:4c:9d:5e:80:e7:0c:73:45:4a:8b:f4:c5: 8e:c2:98:0d:82:72:65:72:3a:87:56:98:6c:af:47:17:bd:b2: 8c:eb:72:54:5b:8d:fa:ae:d1:6e:a6:63:34:bd:15:00:33:06: 8d:b3:ed:de:55:58:5e:6e:2a:18:30:37:75:3f:c9:95:ec:62: 6a:7c:1e:4b:1a:f2:bc:e1:8e:60:01:7f:ce:6a:36:15:d4:69: a5:c9:e7:f9:d5:07:16:17:8d:49:76:ca:30:d0:7a:1d:91:3b: 43:5e:ec:97:15:2c:90:57:9d:77:77:a6:11:db:8a:36:fe:14: 8b:39:b8:d7:24:d3:db:7e:f3:b3:69:05:fd:86:3f:b4:6d:f7: 9b:35:fd:55:0d:04:e0:c6:44:ec:76:6a:8b:ff:81:99:4a:1a: 2a:8e:5b:92:b6:48:26:f8:b3:e5:00:0d:98:94:56:10:c1:24: ff:d4:df:03:c4:e4:20:fd:0b:35:5e:78:aa:6f:1e:9f:f0:08: 77:f3:67:53:98:34:e7:61:a6:4c:18:18:cf:58:c5:df:d1:96: 47:f1:8a:73:bb:5f:c9:15:89:70:ba:bc:11:89:40:a8:81:c4: 18:8d:a6:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXLEEGC2I4FUL79DesitfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YTY2NWI5MDA2OWJkNzE4NTA2MDJlNzQwMGM1Mjk3OTMy NjllMzkwHhcNMjUxMjEyMDcwMDQ1WhcNMjUxMjEzMDcwMDQ1WjAzMTEwLwYDVQQD Eyg4ZTQ3ZTU5NDIwNjJhZmUwN2MwNjJhMWE0MTNmZDZiZGM5OWQzNGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8xmBHR2VMH2ft0mAJNsEtxX0diG L+qfHtFR91fgvwlM/yXdSyElxjJEbn4Nx06/9pcsR11zjwzRetBtsMZ3TOz0lP2c bf144PyAVg4gevnxGYVn67hpmlaj2iqVJYUq+TKnW98XO7OjR01C7owy73pZ6gWu ROHWBa6DowIxC+YPeLFpyCMXweFizCd1AugU2NhT237B5zFIna9MyzOzv8BP55g5 cs8Jb0+2VHSEzqi8VMvxHSSzZIdCftbx7sDKNRRoRYQhg1MLoKbdDW9YFP/uREvF avXq86qPVLAKdXy5ysefSPJcShPVcdBvDRinQ41RPj6Q3XUHR0Q4ywJaJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5H5ZQgYq/gfAYqGkE/1r3JnTTLMB8GA1UdIwQY MBaAFGWmZbkAab1xhQYC50AMUpeTJp45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjct Yzk0NTdlYzgxMTUxLzEvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjctYzk0NTdlYzgxMTUx LzEvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUVVV5T6 C0sqqETFQ4hBXzW+nOllzAcbTJ1egOcMc0VKi/TFjsKYDYJyZXI6h1aYbK9HF72y jOtyVFuN+q7RbqZjNL0VADMGjbPt3lVYXm4qGDA3dT/JlexianweSxryvOGOYAF/ zmo2FdRppcnn+dUHFheNSXbKMNB6HZE7Q17slxUskFedd3emEduKNv4Uizm41yTT 237zs2kF/YY/tG33mzX9VQ0E4MZE7HZqi/+BmUoaKo5bkrZIJviz5QANmJRWEMEk /9TfA8TkIP0LNV54qm8en/AId/NnU5g052GmTBgYz1jF39GWR/GKc7tfyRWJcLq8 EYlAqIHEGI2mwg== -----END CERTIFICATE-----Generated at Fri Dec 12 14:21:20 2025 by rpki-client