This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json) Hash identifier: SATlHS59ppstIoTXr+E+hdM2f7U3QU5clMJDrvAH0Ek= Subject key identifier: A7:87:24:71:51:A1:D0:F2:8C:4D:7C:75:34:04:B8:91:16:12:B9:00 Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13 Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13 Certificate serial: 019AA3485ADDB44472B7D361961767D6F4F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft Manifest number: 173B Signing time: Thu 20 Nov 2025 22:00:19 +0000 Manifest this update: Thu 20 Nov 2025 22:00:19 +0000 Manifest next update: Fri 21 Nov 2025 22:00:19 +0000 Files and hashes: 1: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: uaDwKNn7YrKOmOtWqxoWlvKvwbConpcEp/1kUZHi3Oc=) 2: hMmPM9uQjSpja4bSUK9zc_akA0w.roa (hash: hrlNP/K4kHD/OY4z6+CaOp00xjs5GduVuaQsaUliKXM=) 3: hq1zxN1P7ODqyzoFL2dWnE0-qB0.roa (hash: dCbnfgImnpSOcXJjI96J3fJxTUfan9KZXuyelbOpBm8=) 4: kXDtSEP8wehej7ozup3ULNF_kxE.roa (hash: pFGVv12QjKqbl/zBNnLTn7joQ5O/ICyXPOVOcqhZ97Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Nov 2025 19:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a3:48:5a:dd:b4:44:72:b7:d3:61:96:17:67:d6:f4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13 Validity Not Before: Nov 20 22:00:19 2025 GMT Not After : Nov 21 22:00:19 2025 GMT Subject: CN=a787247151a1d0f28c4d7c753404b8911612b900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:f0:a1:c3:6e:59:a4:87:a9:2b:ad:f3:d6: d8:2e:e0:cc:00:3d:0f:e4:b7:f6:de:de:c4:97:d9: 70:ad:1d:96:07:be:28:61:90:8c:44:6f:41:d7:6d: a7:c7:18:5c:57:7d:03:fc:47:ca:3b:f3:bd:25:ef: 62:8c:eb:09:5e:8a:ab:5d:0a:9a:1b:4f:bf:71:27: 15:16:c7:c0:cc:bc:ff:f1:1c:ff:6a:9f:7d:a7:77: c5:a5:9c:57:f5:3b:f0:94:e7:11:0e:9f:ae:bf:d0: 68:ce:aa:c7:aa:29:69:d1:31:de:1d:ea:fc:2d:b5: f9:17:14:71:89:d9:a4:5b:8b:fe:a3:7b:58:25:85: 53:a1:78:72:1d:8c:40:87:d1:7f:72:6c:fa:4d:55: 73:b5:54:ea:e9:de:da:f5:98:05:c0:76:d8:c1:b5: 0a:0c:ee:45:5c:db:3e:04:60:d7:d5:b4:15:c0:27: c9:57:83:d2:98:62:95:e4:34:86:c2:d8:bf:91:0f: 88:a8:2a:48:61:42:e6:1e:b8:63:fc:57:f1:f8:2a: ec:de:fd:c4:46:64:f2:5b:df:ce:6d:6a:2e:7c:18: 96:13:4e:9b:16:c0:6b:f0:7a:18:6b:68:9e:c1:c4: 73:19:12:c2:7c:c7:b1:af:e8:ca:e7:d2:22:19:6d: 51:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:87:24:71:51:A1:D0:F2:8C:4D:7C:75:34:04:B8:91:16:12:B9:00 X509v3 Authority Key Identifier: keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d1:53:93:ec:9f:0b:89:1a:7f:df:e7:18:f2:3b:75:99:ae: ab:9e:24:70:38:a1:65:fe:a4:dd:55:d9:00:52:6f:46:9d:dd: 30:65:32:46:b9:6e:dc:90:e0:1e:26:7a:c2:b4:74:49:35:dd: 87:c9:b2:55:9a:9a:cb:ac:a5:2e:0a:1c:31:34:ba:4f:f3:54: c5:57:40:cf:c8:21:60:1c:b2:c4:92:03:7a:43:b1:e9:a9:bc: 56:a1:c4:b8:2e:25:38:94:0b:f0:c0:7a:c4:53:51:db:05:09: a9:0e:e7:da:f7:8d:27:c5:80:cc:21:5c:3e:f8:84:46:be:ce: 27:0b:c1:65:02:4d:9b:72:3a:2f:4a:fb:cd:10:a0:66:d0:80: ea:89:eb:60:d3:c7:38:91:6c:6e:2b:29:0f:fd:40:fe:c1:78: 52:4c:d5:25:b8:2e:97:f4:b6:3f:7c:a4:c8:56:0a:73:b3:2d: df:6e:8e:91:a8:10:83:fa:c8:86:e4:7e:82:65:8d:75:3e:63: ed:2c:43:fd:95:83:ca:72:59:12:74:00:76:8c:57:2b:3d:78: 0d:68:1e:90:20:6a:3c:4b:7c:62:17:e9:bb:4b:e4:a0:61:2f: 10:9e:60:b2:16:5a:e6:94:46:1c:91:34:a0:07:f0:9e:26:dc: 65:9c:e7:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqjSFrdtERyt9Nhlhdn1vTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjkwZTc1ZGY5OGFmYjQzMDE5Y2U3NTAzNTBlNzY5Yjk5 ZmJjMTMwHhcNMjUxMTIwMjIwMDE5WhcNMjUxMTIxMjIwMDE5WjAzMTEwLwYDVQQD EyhhNzg3MjQ3MTUxYTFkMGYyOGM0ZDdjNzUzNDA0Yjg5MTE2MTJiOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sPwocNuWaSHqSut89bYLuDMAD0P 5Lf23t7El9lwrR2WB74oYZCMRG9B122nxxhcV30D/EfKO/O9Je9ijOsJXoqrXQqa G0+/cScVFsfAzLz/8Rz/ap99p3fFpZxX9TvwlOcRDp+uv9BozqrHqilp0THeHer8 LbX5FxRxidmkW4v+o3tYJYVToXhyHYxAh9F/cmz6TVVztVTq6d7a9ZgFwHbYwbUK DO5FXNs+BGDX1bQVwCfJV4PSmGKV5DSGwti/kQ+IqCpIYULmHrhj/Ffx+Crs3v3E RmTyW9/ObWoufBiWE06bFsBr8HoYa2iewcRzGRLCfMexr+jK59IiGW1RvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeHJHFRodDyjE18dTQEuJEWErkAMB8GA1UdIwQY MBaAFGb5DnXfmK+0MBnOdQNQ52m5n7wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUt MzMzZjBjOTkyNzllLzEvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUtMzMzZjBjOTkyNzll LzEvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9FTk+yf C4kaf9/nGPI7dZmuq54kcDihZf6k3VXZAFJvRp3dMGUyRrlu3JDgHiZ6wrR0STXd h8myVZqay6ylLgocMTS6T/NUxVdAz8ghYByyxJIDekOx6am8VqHEuC4lOJQL8MB6 xFNR2wUJqQ7n2veNJ8WAzCFcPviERr7OJwvBZQJNm3I6L0r7zRCgZtCA6onrYNPH OJFsbispD/1A/sF4UkzVJbgul/S2P3ykyFYKc7Mt326OkagQg/rIhuR+gmWNdT5j 7SxD/ZWDynJZEnQAdoxXKz14DWgekCBqPEt8Yhfpu0vkoGEvEJ5gshZa5pRGHJE0 oAfwnibcZZznQg== -----END CERTIFICATE-----Generated at Fri Nov 21 01:17:01 2025 by rpki-client