This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json) Hash identifier: d8gUHlr91CcZI8xAWsnUtJ6CF1cAAvbRnFvxqTsjjkY= Subject key identifier: 60:EB:1B:C2:29:78:1E:C7:3E:9F:01:9A:E5:E2:BB:D8:48:19:12:0C Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04 Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504 Certificate serial: 019B0E25D6F9E906301BEC4283C446792CED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft Manifest number: 1369 Signing time: Thu 11 Dec 2025 16:01:59 +0000 Manifest this update: Thu 11 Dec 2025 16:01:59 +0000 Manifest next update: Fri 12 Dec 2025 16:01:59 +0000 Files and hashes: 1: 6LczYu9ryKjTocWYecYUFUv673o.roa (hash: tjb/z4zkMDQBH6/Vrji53BKdyb6GsDIQMh6du73aM0A=) 2: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: RLEYZb3kMsAIrOa21kmQ+0gEhA33lKYQCc1f/Jn2jb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:d6:f9:e9:06:30:1b:ec:42:83:c4:46:79:2c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504 Validity Not Before: Dec 11 16:01:59 2025 GMT Not After : Dec 12 16:01:59 2025 GMT Subject: CN=60eb1bc229781ec73e9f019ae5e2bbd84819120c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:58:33:9d:cd:95:52:dc:f1:4d:e3:58:34: a8:59:72:e0:af:4b:9a:15:98:56:cc:05:1a:f5:a8: 0b:38:70:a6:9d:b9:63:43:ae:af:6d:c5:ae:98:13: f9:18:66:b3:74:40:d6:50:0d:c9:0e:f9:fc:7e:c1: 56:1f:5b:51:aa:eb:67:55:95:48:8d:2c:90:7e:c1: c3:c9:04:b7:69:11:a1:0f:f4:df:92:2e:dd:ac:24: 6b:f6:08:5c:a4:03:51:a0:ea:f9:00:75:5e:80:d1: fb:ce:9f:a8:7a:2c:f1:ca:5f:58:ec:b3:c0:6b:a9: f7:a5:db:e5:bf:6f:3c:bb:84:87:43:ab:42:e4:71: a2:09:3e:b1:c2:f3:9c:4d:83:3d:93:67:19:19:46: e6:ad:43:7b:61:5a:9a:6f:5c:cb:d6:52:c0:31:f7: 18:54:56:f3:61:34:12:91:31:32:23:b6:7c:f6:a3: 7d:f3:64:78:a9:86:cd:49:35:44:b2:b1:91:6d:5d: 40:46:15:16:ec:0e:1f:62:64:82:33:0d:0d:64:9e: 5d:1b:d9:9c:46:ca:38:0a:2b:5f:ed:83:12:98:14: d0:c8:87:e5:78:21:1e:53:b6:e0:c0:ba:80:3f:2d: 53:ac:2e:8e:e8:4c:61:cf:94:5e:bc:06:ba:ab:78: a5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EB:1B:C2:29:78:1E:C7:3E:9F:01:9A:E5:E2:BB:D8:48:19:12:0C X509v3 Authority Key Identifier: keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:26:02:1d:98:ef:0b:ef:83:72:a4:3e:e1:05:7e:17:9b:72: 2b:b3:5b:b6:38:67:1b:23:04:46:b0:52:09:d1:f5:68:11:b5: dd:ac:11:17:31:c1:a7:c4:03:81:35:5f:0d:5b:11:b3:80:13: 1e:0d:fd:72:b6:24:58:78:20:0c:85:b6:0a:ae:36:e0:5f:29: 78:34:c1:64:51:bd:9a:f2:58:6f:d6:a9:d3:3e:79:12:1f:69: 43:f8:fb:d0:03:56:3f:fb:76:d6:a5:54:19:e4:fb:14:3c:39: 38:25:85:93:12:25:6c:d8:02:38:2d:fe:c3:71:81:46:89:89: da:e7:a0:95:f3:ac:80:d1:cd:67:f8:38:fd:04:d3:a7:ba:29: a5:ea:cd:ff:70:61:a5:01:4c:91:1d:35:47:3b:d2:4b:6f:7b: 12:ae:bf:90:2c:bc:9c:cb:8d:26:9d:24:c6:de:96:b0:04:ca: 4c:41:57:bb:6d:e6:40:53:f5:d5:d4:30:60:9c:3e:b0:47:8f: a8:52:16:e8:64:e6:1e:6f:bc:53:34:bd:76:ab:2d:79:89:61: 8d:a5:4b:72:c9:ce:59:11:0f:ee:70:c9:38:08:2e:db:6e:54: f5:6c:46:d8:77:f0:a6:ea:9a:9b:46:7c:df:f9:4a:7b:b4:76: af:b7:6e:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJdb56QYwG+xCg8RGeSztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NDE1YTE3NjNmZTAwNWIwMTM5YjAxNGM2ZTU3NWQ1Zjli MmE1MDQwHhcNMjUxMjExMTYwMTU5WhcNMjUxMjEyMTYwMTU5WjAzMTEwLwYDVQQD Eyg2MGViMWJjMjI5NzgxZWM3M2U5ZjAxOWFlNWUyYmJkODQ4MTkxMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8RYM53NlVLc8U3jWDSoWXLgr0ua FZhWzAUa9agLOHCmnbljQ66vbcWumBP5GGazdEDWUA3JDvn8fsFWH1tRqutnVZVI jSyQfsHDyQS3aRGhD/Tfki7drCRr9ghcpANRoOr5AHVegNH7zp+oeizxyl9Y7LPA a6n3pdvlv288u4SHQ6tC5HGiCT6xwvOcTYM9k2cZGUbmrUN7YVqab1zL1lLAMfcY VFbzYTQSkTEyI7Z89qN982R4qYbNSTVEsrGRbV1ARhUW7A4fYmSCMw0NZJ5dG9mc Rso4Citf7YMSmBTQyIfleCEeU7bgwLqAPy1TrC6O6Exhz5RevAa6q3iliwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDrG8IpeB7HPp8BmuXiu9hIGRIMMB8GA1UdIwQY MBaAFGVBWhdj/gBbATmwFMblddX5sqUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTct ZWU3YTIwNTY5YjgzLzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTctZWU3YTIwNTY5Yjgz LzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiYCHZjv C++DcqQ+4QV+F5tyK7NbtjhnGyMERrBSCdH1aBG13awRFzHBp8QDgTVfDVsRs4AT Hg39crYkWHggDIW2Cq424F8peDTBZFG9mvJYb9ap0z55Eh9pQ/j70ANWP/t21qVU GeT7FDw5OCWFkxIlbNgCOC3+w3GBRomJ2ueglfOsgNHNZ/g4/QTTp7opperN/3Bh pQFMkR01RzvSS297Eq6/kCy8nMuNJp0kxt6WsATKTEFXu23mQFP11dQwYJw+sEeP qFIW6GTmHm+8UzS9dqsteYlhjaVLcsnOWREP7nDJOAgu225U9WxG2Hfwpuqam0Z8 3/lKe7R2r7duxw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:54:34 2025 by rpki-client