This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft File: ZhaRypxY0IWba4cCMLD1gb5mpYo.mft (raw, json) Hash identifier: YHPjKh5ZqthNhyx2JA1ii/Tvf5ArAEA8sUy22NuKQ2M= Subject key identifier: 1B:0F:3C:FD:3A:66:10:02:81:69:32:76:F8:30:23:DE:E9:AB:D4:DF Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a Certificate serial: 019B5A1B1CFDF9D3339F384B3B02B24BCCF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft Manifest number: 10F6 Signing time: Fri 26 Dec 2025 10:01:24 +0000 Manifest this update: Fri 26 Dec 2025 10:01:24 +0000 Manifest next update: Sat 27 Dec 2025 10:01:24 +0000 Files and hashes: 1: 4X9zKpM0fzVE9wv8WP9X1bnQ1uM.roa (hash: f+FU6utJDlIeoEMokf16CI5SGqAM0UoUv6lKNDA9Xzc=) 2: G6NThMBREhLa53fkZ6P5ulaKQSs.roa (hash: nq58Q0f4P6XNFgEzUDpyUxQlJR4ZSwEA+qGwg8fqrzI=) 3: Rq-lqv8nvaGlsC79el8fMA5_1rc.roa (hash: T0ctud47vtW/7aXgZpP0x6VHkVLrf38PbYskxMdhNRg=) 4: ZhaRypxY0IWba4cCMLD1gb5mpYo.crl (hash: xjxCN/o7KhAwiiBEEyKvIaQbBU4D9cBE95JqEyqR+Gc=) 5: byX4XqUIEmVjtSF74Vja9liWXww.roa (hash: 6RlIk6GXgp36HBDBBcA87k4kHMHfV998BVRCjiswL3U=) 6: z7EntH2_RgrImndWaf9CHwQF-tM.roa (hash: At0xjBHWEf4xXBr9D4SeVUGhACOqx602brOEncq8KCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:1c:fd:f9:d3:33:9f:38:4b:3b:02:b2:4b:cc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a Validity Not Before: Dec 26 10:01:24 2025 GMT Not After : Dec 27 10:01:24 2025 GMT Subject: CN=1b0f3cfd3a66100281693276f83023dee9abd4df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ef:c8:30:59:ad:d9:08:f5:28:3e:1a:39:56: 35:6d:1f:7b:0c:1c:60:eb:21:b1:d3:12:ad:1f:14: 19:a8:d3:06:6e:e3:73:42:a2:53:11:c0:42:e8:8c: 59:2c:47:65:30:1d:e2:57:fc:23:eb:47:24:14:c6: 72:33:23:33:26:bd:dd:58:ff:d9:f9:28:a6:74:ae: 07:2b:18:57:81:d0:3f:d7:8f:4f:6b:0e:e3:b6:d4: 28:bb:e3:09:53:94:42:6b:f8:12:01:b8:66:73:cd: c1:b7:ae:0e:0f:8c:c6:d4:e4:33:19:35:64:2b:95: 95:06:30:4a:02:ef:0e:b3:49:9d:35:b8:41:1a:71: 68:1e:a0:85:6e:09:98:d4:fc:34:c4:b7:10:06:4c: 32:26:03:89:ab:1c:be:d3:97:93:aa:31:db:6e:a7: 03:a8:17:45:85:0c:a7:38:ff:1f:6b:e6:b8:52:b7: 31:44:6f:0a:8a:e7:f4:38:9c:40:b5:e5:b6:20:e4: 51:c4:f0:a3:7d:5c:29:4c:f3:14:ad:1e:f6:75:bc: 14:3b:c6:49:3b:f1:23:44:24:f1:0b:17:70:44:b7: 5f:03:63:61:a5:3f:a4:10:2b:e0:b1:ad:23:96:00: 69:d8:45:01:dd:43:d3:0a:99:b5:6c:3d:ca:1b:59: 1d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0F:3C:FD:3A:66:10:02:81:69:32:76:F8:30:23:DE:E9:AB:D4:DF X509v3 Authority Key Identifier: keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:05:44:c1:89:0f:71:42:1b:80:a5:53:a8:8d:2e:00:45:72: 7a:bd:b1:31:a5:24:ed:68:6c:3f:33:96:f4:02:4d:af:5b:b1: 84:bc:78:8f:d7:53:42:0b:ba:11:20:1b:d6:8e:f0:82:ea:25: 77:26:0b:f1:df:b7:93:45:1d:28:cb:70:c1:af:ce:92:c0:e5: bd:ce:ec:c5:33:ad:ec:09:c6:64:37:cf:3c:b7:d2:28:29:65: d3:be:a8:15:80:c6:8a:7c:ee:a6:9f:55:8e:f4:0c:9f:e2:a8: 80:84:36:9e:a0:b9:d2:e1:1c:4f:99:eb:fa:5d:f5:7d:3f:1c: f1:52:85:f8:90:5e:2b:62:ed:14:9e:92:fd:81:ba:33:ad:c1: 51:7b:d0:df:6c:a2:dd:09:a6:2a:55:df:3b:bd:0b:37:0d:fa: d1:05:87:b3:2c:93:64:1c:0d:ad:13:96:d7:3d:31:98:72:b9: d2:13:c3:b0:a6:82:0a:83:70:25:7b:a8:33:b0:93:16:8a:97: 03:5d:a2:4f:f1:56:b7:75:65:4e:49:f1:7c:79:18:8f:0a:60: 2d:31:38:65:9c:fe:f1:a7:41:8f:c9:d6:bf:40:d5:61:82:51: 22:fc:88:1b:51:11:01:b2:e9:ce:38:6b:16:bd:6d:be:ae:d2: ed:75:94:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGxz9+dMznzhLOwKyS8z0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MTY5MWNhOWM1OGQwODU5YjZiODcwMjMwYjBmNTgxYmU2 NmE1OGEwHhcNMjUxMjI2MTAwMTI0WhcNMjUxMjI3MTAwMTI0WjAzMTEwLwYDVQQD EygxYjBmM2NmZDNhNjYxMDAyODE2OTMyNzZmODMwMjNkZWU5YWJkNGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju/IMFmt2Qj1KD4aOVY1bR97DBxg 6yGx0xKtHxQZqNMGbuNzQqJTEcBC6IxZLEdlMB3iV/wj60ckFMZyMyMzJr3dWP/Z +SimdK4HKxhXgdA/149Paw7jttQou+MJU5RCa/gSAbhmc83Bt64OD4zG1OQzGTVk K5WVBjBKAu8Os0mdNbhBGnFoHqCFbgmY1Pw0xLcQBkwyJgOJqxy+05eTqjHbbqcD qBdFhQynOP8fa+a4UrcxRG8Kiuf0OJxAteW2IORRxPCjfVwpTPMUrR72dbwUO8ZJ O/EjRCTxCxdwRLdfA2NhpT+kECvgsa0jlgBp2EUB3UPTCpm1bD3KG1kdBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsPPP06ZhACgWkydvgwI97pq9TfMB8GA1UdIwQY MBaAFGYWkcqcWNCFm2uHAjCw9YG+ZqWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84ZjAyNTktOWJjOC00ZmRjLTkyNmQt MWE4MGRhZmZkNzk2LzEvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84ZjAyNTktOWJjOC00ZmRjLTkyNmQtMWE4MGRhZmZkNzk2 LzEvWmhhUnlweFkwSVdiYTRjQ01MRDFnYjVtcFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAVEwYkP cUIbgKVTqI0uAEVyer2xMaUk7WhsPzOW9AJNr1uxhLx4j9dTQgu6ESAb1o7wguol dyYL8d+3k0UdKMtwwa/OksDlvc7sxTOt7AnGZDfPPLfSKCll076oFYDGinzupp9V jvQMn+KogIQ2nqC50uEcT5nr+l31fT8c8VKF+JBeK2LtFJ6S/YG6M63BUXvQ32yi 3QmmKlXfO70LNw360QWHsyyTZBwNrROW1z0xmHK50hPDsKaCCoNwJXuoM7CTFoqX A12iT/FWt3VlTknxfHkYjwpgLTE4ZZz+8adBj8nWv0DVYYJRIvyIG1ERAbLpzjhr Fr1tvq7S7XWUeg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:57 2025 by rpki-client