This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft File: zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json) Hash identifier: RwIZ2VVaWSdtafqc6iGZIjKCz6mF7w8iEBFYMmTYmwo= Subject key identifier: 3C:D9:49:3E:39:70:4A:07:6C:68:95:63:13:6F:F3:A8:EC:00:63:89 Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5 Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5 Certificate serial: 019B25519ED18BA637A428DFC0B73AC78786 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft Manifest number: 098F Signing time: Tue 16 Dec 2025 04:01:04 +0000 Manifest this update: Tue 16 Dec 2025 04:01:04 +0000 Manifest next update: Wed 17 Dec 2025 04:01:04 +0000 Files and hashes: 1: 30I5HnA19uvAFRwz6jWfyDavx24.roa (hash: vJ50DB07ovpFnN7XIrmEVraJFX3BgV6jKWZ19zdFhPQ=) 2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: 7HN5Nd8gJQ9jp2gxEarrIRnEVhkOiWgtDeILNcBilA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:9e:d1:8b:a6:37:a4:28:df:c0:b7:3a:c7:87:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5 Validity Not Before: Dec 16 04:01:04 2025 GMT Not After : Dec 17 04:01:04 2025 GMT Subject: CN=3cd9493e39704a076c689563136ff3a8ec006389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:c0:3a:3e:18:ee:9a:46:8d:87:31:49:4d: e5:90:a5:db:32:54:dd:01:ec:3f:b2:44:f3:b7:d6: 97:9c:57:08:da:6e:dd:6a:d0:e0:96:53:17:ab:50: 76:88:05:a5:41:d3:2a:51:a4:2e:82:d8:fe:54:4b: 75:6c:bc:44:d0:48:39:ff:95:56:b4:45:56:e8:14: 8a:84:60:cd:2f:e1:d9:6e:62:6d:45:20:ef:fa:48: c5:71:52:0a:e6:49:5f:91:4b:fa:f5:6a:68:35:ce: 5d:8a:03:dd:5b:84:26:f1:a2:19:93:2e:f6:a9:a2: ba:3b:3f:9d:b1:17:75:e0:75:86:12:02:f3:8a:13: 4c:a0:f3:15:7e:72:52:b7:bd:4a:8c:93:14:b2:ed: 66:1f:2e:ed:30:45:91:36:fa:d6:27:ca:ce:f2:fb: 19:f1:6d:c1:69:1b:b2:6a:20:b9:36:27:83:db:00: 19:9e:47:88:95:5a:95:dd:0e:58:7d:0c:c2:db:25: 81:f5:02:e6:cc:bc:3c:f2:80:26:29:62:73:3d:fa: 72:c7:10:5b:76:0c:d4:68:04:ad:84:04:26:e2:f7: 97:ea:63:5d:e6:0c:df:84:af:7d:53:2e:50:90:b2: 7d:55:b9:04:a4:c4:e6:5e:40:83:95:c3:78:e3:e3: 64:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D9:49:3E:39:70:4A:07:6C:68:95:63:13:6F:F3:A8:EC:00:63:89 X509v3 Authority Key Identifier: keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:de:b4:3b:62:59:38:19:4d:64:a3:5a:3a:52:ec:ca:83:b3: 25:1f:71:0e:00:b1:d6:3e:6f:a9:79:d1:32:83:7e:24:c9:d4: 72:93:a8:af:77:45:1c:a4:b0:57:01:4e:53:b2:70:e8:61:0d: 99:73:da:93:9d:ed:90:e3:6a:e6:e1:ee:b0:f6:7c:e2:63:0f: ab:2a:52:a7:f9:44:ad:33:6c:f0:0f:d6:ba:c4:91:61:10:24: 21:eb:8a:ad:43:f9:40:6e:60:28:9e:68:f1:ae:e4:17:9a:fb: 0a:2d:95:b6:2e:09:5b:77:a7:3c:c2:20:8b:e4:cb:9d:ef:fd: 52:5b:88:df:b7:4c:48:3e:f9:21:5a:ba:29:dd:e2:f9:0c:56: 82:36:8c:eb:4d:4d:12:a2:29:fd:96:52:46:38:d4:c8:a9:02: 6e:a5:4c:cb:e4:25:3b:da:bb:fc:44:2b:19:9c:fe:14:89:07: 9e:de:33:ac:b1:45:2e:77:19:48:e1:fc:8e:3f:b3:a1:fb:c3: 42:52:9b:55:fa:e8:51:d1:8b:1c:c4:25:fc:2a:f8:83:ea:95: cb:5a:01:5d:e7:c1:67:7f:de:f9:e3:55:b9:58:84:81:33:3a: d0:0b:ab:6d:bd:17:c7:8e:fd:d0:d4:6a:d6:86:b3:74:32:15: 7c:69:f2:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUZ7Ri6Y3pCjfwLc6x4eGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZjM4ZjQ4NTY4ODMzYTVmNzE1N2VlZjU5Nzg3ODMzYTAx ZjUzZjUwHhcNMjUxMjE2MDQwMTA0WhcNMjUxMjE3MDQwMTA0WjAzMTEwLwYDVQQD EygzY2Q5NDkzZTM5NzA0YTA3NmM2ODk1NjMxMzZmZjNhOGVjMDA2Mzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZHAOj4Y7ppGjYcxSU3lkKXbMlTd Aew/skTzt9aXnFcI2m7datDgllMXq1B2iAWlQdMqUaQugtj+VEt1bLxE0Eg5/5VW tEVW6BSKhGDNL+HZbmJtRSDv+kjFcVIK5klfkUv69WpoNc5digPdW4Qm8aIZky72 qaK6Oz+dsRd14HWGEgLzihNMoPMVfnJSt71KjJMUsu1mHy7tMEWRNvrWJ8rO8vsZ 8W3BaRuyaiC5NieD2wAZnkeIlVqV3Q5YfQzC2yWB9QLmzLw88oAmKWJzPfpyxxBb dgzUaASthAQm4veX6mNd5gzfhK99Uy5QkLJ9VbkEpMTmXkCDlcN44+Nk/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzZST45cEoHbGiVYxNv86jsAGOJMB8GA1UdIwQY MBaAFM7zj0hWiDOl9xV+71l4eDOgH1P1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUt Zjk1YzYwOTdhNTBkLzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUtZjk1YzYwOTdhNTBk LzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARt60O2JZ OBlNZKNaOlLsyoOzJR9xDgCx1j5vqXnRMoN+JMnUcpOor3dFHKSwVwFOU7Jw6GEN mXPak53tkONq5uHusPZ84mMPqypSp/lErTNs8A/WusSRYRAkIeuKrUP5QG5gKJ5o 8a7kF5r7Ci2Vti4JW3enPMIgi+TLne/9UluI37dMSD75IVq6Kd3i+QxWgjaM601N EqIp/ZZSRjjUyKkCbqVMy+QlO9q7/EQrGZz+FIkHnt4zrLFFLncZSOH8jj+zofvD QlKbVfroUdGLHMQl/Cr4g+qVy1oBXefBZ3/e+eNVuViEgTM60Aurbb0Xx4790NRq 1oazdDIVfGnyhw== -----END CERTIFICATE-----Generated at Tue Dec 16 13:06:19 2025 by rpki-client