This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft File: ZnGexRbxFUDaTE5-S39bN32f0ls.mft (raw, json) Hash identifier: lrg9eQoBn8KTNStIrYigyAldVayyNaTqcVNaauSUH7s= Subject key identifier: A3:91:B4:C4:8D:D1:19:E1:25:E9:96:DA:50:39:0D:B4:DE:C6:FB:F8 Authority key identifier: 66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B Certificate issuer: /CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b Certificate serial: 019B22BEAE51A8AF586EF863CDD5F7E94563 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft Manifest number: 0ADB Signing time: Mon 15 Dec 2025 16:01:20 +0000 Manifest this update: Mon 15 Dec 2025 16:01:20 +0000 Manifest next update: Tue 16 Dec 2025 16:01:20 +0000 Files and hashes: 1: ZnGexRbxFUDaTE5-S39bN32f0ls.crl (hash: pg6atu/A/ZrZ0mpWAXuK5cbmjDDBecWBfS+jAX5nYTs=) 2: m2QATzNu0SRSUTMmrV_23UYzqCU.roa (hash: iD9hVdOJHc5GBYHSyd+djF2Re6JSu/DsX978dRZjYtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:ae:51:a8:af:58:6e:f8:63:cd:d5:f7:e9:45:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b Validity Not Before: Dec 15 16:01:20 2025 GMT Not After : Dec 16 16:01:20 2025 GMT Subject: CN=a391b4c48dd119e125e996da50390db4dec6fbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ba:fa:1a:90:ae:a7:88:27:ed:c1:ca:0f:87: 12:4a:6a:63:2a:3b:bc:7d:61:80:46:21:d5:d9:ef: 83:bf:d7:bd:ae:ad:18:4c:03:2d:df:71:a1:11:8c: aa:99:7b:5d:c7:ec:d3:96:35:b5:52:75:ba:91:be: 09:bb:77:b0:a6:20:60:d0:25:af:95:17:44:73:b3: ef:a3:e5:ef:b4:11:ce:2c:74:d9:01:1f:ef:f6:7e: 37:bd:81:b8:d6:33:d8:c1:04:87:ac:fc:e8:32:0d: 2d:31:b9:24:b1:0e:92:e5:80:b5:3c:de:ef:2e:0a: f5:33:b8:e5:79:93:e2:d0:21:8a:48:68:d3:99:8e: fa:f2:f0:f7:32:53:63:52:2e:b2:c1:4d:4c:23:9f: 8c:af:e5:cc:d3:0e:b1:6c:b3:ee:a9:b1:53:09:b9: 72:8c:33:df:92:13:f5:cc:ac:84:8d:32:b4:a8:4a: a0:6c:ce:a3:b5:a7:b0:cc:a0:7a:d5:71:40:35:e1: de:e7:fb:65:fd:c5:ac:c5:23:bf:59:98:44:0c:63: 4c:4f:cc:40:3a:cb:f3:31:70:00:e0:01:38:dd:be: b3:21:b1:78:58:a3:1c:b3:df:54:0e:d7:b8:33:78: 6b:6d:c1:de:f3:10:95:67:29:2f:52:4f:db:de:25: c4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:91:B4:C4:8D:D1:19:E1:25:E9:96:DA:50:39:0D:B4:DE:C6:FB:F8 X509v3 Authority Key Identifier: keyid:66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:17:57:d5:97:02:26:16:88:6b:a0:3a:aa:bc:14:ab:6c:1d: a3:98:41:a6:b3:74:47:64:a0:f2:e1:c7:37:30:4c:7e:43:a8: 83:a3:e5:f0:a5:2c:3a:0d:5a:a5:55:bc:84:a1:9c:28:71:f4: 05:40:35:1f:68:ff:0e:26:86:62:f1:d3:77:16:d5:79:45:fa: 8d:dd:8a:4f:c0:95:b6:59:11:39:f0:01:a9:ed:31:e7:e2:d1: 01:3c:c0:a4:78:f4:4c:58:5a:db:13:78:18:28:4f:0a:88:6f: 89:b7:13:0c:11:79:ac:d1:8e:3a:32:c9:11:64:d9:4f:2c:47: 4a:bc:5e:dc:e4:14:d4:9d:15:3c:15:2d:3c:e7:f0:a0:35:47: 30:f1:e9:e3:5a:5b:22:e4:50:81:7e:d7:73:af:9e:1b:98:05: 97:90:30:33:54:b3:4d:79:49:c5:2c:72:76:a5:89:79:8a:ef: 94:38:0d:72:70:8f:2f:31:a5:a6:e2:b6:bf:d5:74:03:7f:89: ac:dc:32:bb:de:d5:22:cc:8d:22:1a:ce:73:bc:14:d8:cc:c3: 07:25:3c:0b:68:82:57:1c:67:b3:86:53:36:2a:8e:5e:73:4d: 2b:5c:01:49:63:5a:ef:42:73:1f:02:01:63:ce:e3:1c:14:07: 6c:65:84:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivq5RqK9YbvhjzdX36UVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NzE5ZWM1MTZmMTE1NDBkYTRjNGU3ZTRiN2Y1YjM3N2Q5 ZmQyNWIwHhcNMjUxMjE1MTYwMTIwWhcNMjUxMjE2MTYwMTIwWjAzMTEwLwYDVQQD EyhhMzkxYjRjNDhkZDExOWUxMjVlOTk2ZGE1MDM5MGRiNGRlYzZmYmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+br6GpCup4gn7cHKD4cSSmpjKju8 fWGARiHV2e+Dv9e9rq0YTAMt33GhEYyqmXtdx+zTljW1UnW6kb4Ju3ewpiBg0CWv lRdEc7Pvo+XvtBHOLHTZAR/v9n43vYG41jPYwQSHrPzoMg0tMbkksQ6S5YC1PN7v Lgr1M7jleZPi0CGKSGjTmY768vD3MlNjUi6ywU1MI5+Mr+XM0w6xbLPuqbFTCbly jDPfkhP1zKyEjTK0qEqgbM6jtaewzKB61XFANeHe5/tl/cWsxSO/WZhEDGNMT8xA OsvzMXAA4AE43b6zIbF4WKMcs99UDte4M3hrbcHe8xCVZykvUk/b3iXEnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKORtMSN0RnhJemW2lA5DbTexvv4MB8GA1UdIwQY MBaAFGZxnsUW8RVA2kxOfkt/Wzd9n9JbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm5HZXhSYnhGVURhVEU1LVMzOWJOMzJmMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC83N2MwNzQtZGEyNS00NWU4LTlkMjYt NTRjMTZiOWNjMTE4LzEvWm5HZXhSYnhGVURhVEU1LVMzOWJOMzJmMGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC83N2MwNzQtZGEyNS00NWU4LTlkMjYtNTRjMTZiOWNjMTE4 LzEvWm5HZXhSYnhGVURhVEU1LVMzOWJOMzJmMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBdX1ZcC JhaIa6A6qrwUq2wdo5hBprN0R2Sg8uHHNzBMfkOog6Pl8KUsOg1apVW8hKGcKHH0 BUA1H2j/DiaGYvHTdxbVeUX6jd2KT8CVtlkROfABqe0x5+LRATzApHj0TFha2xN4 GChPCohvibcTDBF5rNGOOjLJEWTZTyxHSrxe3OQU1J0VPBUtPOfwoDVHMPHp41pb IuRQgX7Xc6+eG5gFl5AwM1SzTXlJxSxydqWJeYrvlDgNcnCPLzGlpuK2v9V0A3+J rNwyu97VIsyNIhrOc7wU2MzDByU8C2iCVxxns4ZTNiqOXnNNK1wBSWNa70JzHwIB Y87jHBQHbGWEXQ== -----END CERTIFICATE-----Generated at Mon Dec 15 18:15:27 2025 by rpki-client