This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json) Hash identifier: kmIeojCcjnQ0sp4Q9zqwKnwtzQS7DbS32CqpU4JMuOc= Subject key identifier: D5:8B:D7:E2:E4:99:56:B2:FE:76:30:12:F4:71:54:FB:3A:48:6D:75 Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13 Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13 Certificate serial: 019B6A3298C5E0D55135D153F35E40A19AB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft Manifest number: 17A2 Signing time: Mon 29 Dec 2025 13:00:59 +0000 Manifest this update: Mon 29 Dec 2025 13:00:59 +0000 Manifest next update: Tue 30 Dec 2025 13:00:59 +0000 Files and hashes: 1: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: /X3484lA+1ZLa54us6IxO0/hcslzSJ+RwoEVd2lwwT0=) 2: hMmPM9uQjSpja4bSUK9zc_akA0w.roa (hash: hrlNP/K4kHD/OY4z6+CaOp00xjs5GduVuaQsaUliKXM=) 3: hq1zxN1P7ODqyzoFL2dWnE0-qB0.roa (hash: dCbnfgImnpSOcXJjI96J3fJxTUfan9KZXuyelbOpBm8=) 4: kXDtSEP8wehej7ozup3ULNF_kxE.roa (hash: pFGVv12QjKqbl/zBNnLTn7joQ5O/ICyXPOVOcqhZ97Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:32:98:c5:e0:d5:51:35:d1:53:f3:5e:40:a1:9a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13 Validity Not Before: Dec 29 13:00:59 2025 GMT Not After : Dec 30 13:00:59 2025 GMT Subject: CN=d58bd7e2e49956b2fe763012f47154fb3a486d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4d:26:86:69:fe:5d:aa:53:36:07:06:ed:88: 92:8d:6f:6c:95:89:a2:55:68:fc:90:81:d5:12:41: a0:81:b3:77:5e:49:40:35:7c:12:18:63:92:6d:5a: f3:5f:37:4c:ea:32:2f:e6:f9:ac:21:58:86:0c:be: 08:c8:e6:9b:6b:6c:9d:a7:87:09:e7:ae:96:7f:9f: 26:fe:45:5b:8d:63:f9:6b:92:98:f3:dd:c1:11:e5: db:66:c8:09:75:9c:30:48:a7:e2:19:bf:90:78:b5: f9:8a:57:47:19:76:7d:06:ba:33:67:15:ed:2a:86: 75:99:3a:a9:27:ab:73:f7:66:7d:e8:35:5b:e0:a8: 88:ef:e6:95:ed:c6:2e:c8:2d:f8:dd:db:0d:79:73: 4d:3b:50:59:e3:7b:dc:68:e9:e5:d2:5e:e3:3b:3c: eb:2a:91:71:69:f2:bb:60:5e:93:76:cb:5d:71:d8: b3:51:72:db:55:c5:71:ec:dc:28:09:cb:89:bf:ad: 91:ac:c7:bb:e8:44:a6:6f:ac:aa:16:15:a9:47:58: ea:c2:31:4c:dc:af:a3:37:51:ef:55:90:73:2b:63: d6:95:5b:4b:ff:3b:6b:32:9e:5b:3c:7f:31:47:50: 7e:25:83:dd:2e:4f:47:ca:bc:1f:d1:b9:f6:21:a0: ba:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8B:D7:E2:E4:99:56:B2:FE:76:30:12:F4:71:54:FB:3A:48:6D:75 X509v3 Authority Key Identifier: keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ad:17:66:56:1a:68:07:e9:43:66:ca:17:a8:3a:e0:34:cd: 0c:90:16:89:d2:e4:fa:c5:92:77:db:76:f7:0e:1b:22:22:f3: 17:65:8e:1c:0a:bf:3a:48:83:db:cd:02:75:56:bf:9d:ec:5b: 4e:1c:79:38:74:c8:2f:ad:dd:09:25:f8:b1:11:94:db:a4:43: 93:ed:ab:a3:6f:ed:03:f1:62:5c:df:aa:08:c9:4f:32:3a:1d: 9d:2b:0d:a6:62:d8:75:b7:dd:26:09:08:a3:8f:e6:f6:ab:2f: c5:a9:25:86:da:83:3e:71:5c:9b:08:f7:7d:ff:c6:b9:8e:a9: 41:98:ad:16:12:c4:20:b7:82:26:93:5a:c5:c3:3f:10:f7:74: 2c:93:c7:6b:91:b0:f9:10:da:9a:3a:29:7f:61:fa:b1:33:95: 33:da:bb:04:9f:05:60:5a:34:76:9f:ce:a4:ae:62:1f:54:61: ba:c7:ee:98:d9:64:09:09:92:39:da:f8:0c:24:6e:3d:be:a1: e6:0f:22:e5:43:98:39:b7:7e:25:e0:84:ef:7c:ec:b9:dd:86: 86:37:ac:eb:59:24:85:bd:b7:eb:9b:71:cb:7b:32:ff:92:cf: f7:b6:f1:49:7f:ea:47:0d:b3:9e:d8:90:de:7a:30:50:70:a1: b8:23:03:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqMpjF4NVRNdFT815AoZq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjkwZTc1ZGY5OGFmYjQzMDE5Y2U3NTAzNTBlNzY5Yjk5 ZmJjMTMwHhcNMjUxMjI5MTMwMDU5WhcNMjUxMjMwMTMwMDU5WjAzMTEwLwYDVQQD EyhkNThiZDdlMmU0OTk1NmIyZmU3NjMwMTJmNDcxNTRmYjNhNDg2ZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw00mhmn+XapTNgcG7YiSjW9slYmi VWj8kIHVEkGggbN3XklANXwSGGOSbVrzXzdM6jIv5vmsIViGDL4IyOaba2ydp4cJ 566Wf58m/kVbjWP5a5KY893BEeXbZsgJdZwwSKfiGb+QeLX5ildHGXZ9BrozZxXt KoZ1mTqpJ6tz92Z96DVb4KiI7+aV7cYuyC343dsNeXNNO1BZ43vcaOnl0l7jOzzr KpFxafK7YF6TdstdcdizUXLbVcVx7NwoCcuJv62RrMe76ESmb6yqFhWpR1jqwjFM 3K+jN1HvVZBzK2PWlVtL/ztrMp5bPH8xR1B+JYPdLk9Hyrwf0bn2IaC6twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWL1+LkmVay/nYwEvRxVPs6SG11MB8GA1UdIwQY MBaAFGb5DnXfmK+0MBnOdQNQ52m5n7wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUt MzMzZjBjOTkyNzllLzEvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUtMzMzZjBjOTkyNzll LzEvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATa0XZlYa aAfpQ2bKF6g64DTNDJAWidLk+sWSd9t29w4bIiLzF2WOHAq/OkiD280CdVa/nexb Thx5OHTIL63dCSX4sRGU26RDk+2ro2/tA/FiXN+qCMlPMjodnSsNpmLYdbfdJgkI o4/m9qsvxaklhtqDPnFcmwj3ff/GuY6pQZitFhLEILeCJpNaxcM/EPd0LJPHa5Gw +RDamjopf2H6sTOVM9q7BJ8FYFo0dp/OpK5iH1RhusfumNlkCQmSOdr4DCRuPb6h 5g8i5UOYObd+JeCE73zsud2Ghjes61kkhb2365txy3sy/5LP97bxSX/qRw2zntiQ 3nowUHChuCMD3A== -----END CERTIFICATE-----Generated at Mon Dec 29 17:30:48 2025 by rpki-client