This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json) Hash identifier: O7tnNX+JrYVe8wy9gNrRo3S/+jpj+jeHbE8GHR401Bo= Subject key identifier: 23:27:41:B6:F0:31:C8:E8:C9:D4:6F:4E:17:3D:8C:C1:07:23:B4:C3 Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea Certificate serial: 019B077DF6D0A17DF6CBA4942FD553810E37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft Manifest number: 0C23 Signing time: Wed 10 Dec 2025 09:00:54 +0000 Manifest this update: Wed 10 Dec 2025 09:00:54 +0000 Manifest next update: Thu 11 Dec 2025 09:00:54 +0000 Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: ZpRiW42H2Z4GuM/r94LtN5n+B2xvvyBtvO94baYA7PY=) 2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=) 3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7d:f6:d0:a1:7d:f6:cb:a4:94:2f:d5:53:81:0e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea Validity Not Before: Dec 10 09:00:54 2025 GMT Not After : Dec 11 09:00:54 2025 GMT Subject: CN=232741b6f031c8e8c9d46f4e173d8cc10723b4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f3:0c:8d:f2:e4:06:0b:3e:00:7a:fd:e8:f9: 25:aa:6a:0d:f8:77:98:fc:25:a9:74:65:c8:26:f6: 86:ad:78:1a:87:8a:8b:b5:0b:0a:f4:2e:92:2a:be: d3:1f:57:58:91:4f:4c:68:29:10:57:1c:b4:7b:b9: 4b:05:a2:d9:34:e9:87:2c:81:4c:10:44:5d:07:b6: 7d:62:fa:52:1e:1b:d2:10:ac:08:43:93:c5:90:8e: cf:32:e9:2a:3f:c0:ef:0e:00:1b:9c:79:57:52:1f: 0f:bd:c5:c8:80:fc:39:ea:c5:73:c8:1c:83:2d:8d: 22:69:8e:b8:e2:77:ff:8e:6e:f1:34:83:79:66:ef: 39:c0:1a:f1:cb:86:d5:00:8c:06:2a:d7:b0:e3:f9: 66:28:5a:91:a1:a8:ba:e6:c8:c5:f9:57:6c:59:e3: 79:40:60:10:5e:cd:e4:7e:d7:91:65:05:62:ac:3d: 85:eb:16:11:b4:19:c9:7c:ee:8b:86:4b:e1:13:f3: 28:eb:6e:3b:70:e2:24:ed:9a:13:43:4b:8d:54:8f: d2:97:b2:57:0b:df:9c:bb:10:b4:dc:27:0b:ad:bb: b3:62:1f:a7:93:c7:ec:0c:36:a8:4d:f9:79:e7:77: e8:91:6f:2e:af:13:c4:19:53:13:b4:20:e0:1e:d1: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:27:41:B6:F0:31:C8:E8:C9:D4:6F:4E:17:3D:8C:C1:07:23:B4:C3 X509v3 Authority Key Identifier: keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c1:f8:21:e5:e6:a6:2f:e6:89:55:f4:df:37:eb:5b:5d:dc: 0c:a5:99:8a:9e:78:e2:d4:9b:1d:8d:ff:3d:83:15:b4:a8:57: c4:33:e0:a3:5f:9a:6f:60:87:84:ed:cd:f6:c7:c5:71:f2:03: 26:13:db:83:fc:22:6f:c1:2b:19:1a:26:58:18:38:49:c7:1b: 23:00:20:5a:c2:a9:16:9f:48:6a:68:34:98:9e:ba:0f:f5:6d: 88:7e:2d:91:0f:9f:5d:5c:0c:96:82:b5:0c:72:f9:bd:dd:d8: 72:34:0b:d7:41:3c:a2:00:74:1a:ad:2a:1d:30:b8:14:a5:b4: ad:97:c4:34:ee:01:31:84:76:8a:a9:78:99:39:22:70:2e:52: de:71:22:59:bd:6f:6f:fe:46:10:db:59:91:d2:d4:bf:d1:62: 8e:e6:6c:7e:cd:ea:6c:f7:61:00:31:20:d2:1b:23:88:cc:56: 93:8b:6e:c3:73:51:bd:33:a1:b1:02:52:4a:13:e3:1f:2a:6e: 86:d9:fb:d8:7c:73:f8:34:d0:02:48:99:01:9b:5f:91:63:37: b5:c0:f3:52:91:34:12:f3:27:21:1c:8d:e1:78:f4:74:ac:ef: b0:b1:3e:24:ce:b2:bb:c0:20:f5:ab:fd:7b:09:ff:e3:84:42: 1f:86:00:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHffbQoX32y6SUL9VTgQ43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmZiMzA5YzI4OWFjZmZjMWJlMzRhNmYwYjY2NzVjMDAx NzEzZWEwHhcNMjUxMjEwMDkwMDU0WhcNMjUxMjExMDkwMDU0WjAzMTEwLwYDVQQD EygyMzI3NDFiNmYwMzFjOGU4YzlkNDZmNGUxNzNkOGNjMTA3MjNiNGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPMMjfLkBgs+AHr96PklqmoN+HeY /CWpdGXIJvaGrXgah4qLtQsK9C6SKr7TH1dYkU9MaCkQVxy0e7lLBaLZNOmHLIFM EERdB7Z9YvpSHhvSEKwIQ5PFkI7PMukqP8DvDgAbnHlXUh8PvcXIgPw56sVzyByD LY0iaY644nf/jm7xNIN5Zu85wBrxy4bVAIwGKtew4/lmKFqRoai65sjF+VdsWeN5 QGAQXs3kfteRZQVirD2F6xYRtBnJfO6LhkvhE/Mo6247cOIk7ZoTQ0uNVI/Sl7JX C9+cuxC03CcLrbuzYh+nk8fsDDaoTfl553fokW8urxPEGVMTtCDgHtG4awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMnQbbwMcjoydRvThc9jMEHI7TDMB8GA1UdIwQY MBaAFGT/swnCiaz/wb40pvC2Z1wAFxPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUt Y2E0NDQ3MDQ0MTZmLzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUtY2E0NDQ3MDQ0MTZm LzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMH4IeXm pi/miVX03zfrW13cDKWZip544tSbHY3/PYMVtKhXxDPgo1+ab2CHhO3N9sfFcfID JhPbg/wib8ErGRomWBg4SccbIwAgWsKpFp9Iamg0mJ66D/VtiH4tkQ+fXVwMloK1 DHL5vd3YcjQL10E8ogB0Gq0qHTC4FKW0rZfENO4BMYR2iql4mTkicC5S3nEiWb1v b/5GENtZkdLUv9FijuZsfs3qbPdhADEg0hsjiMxWk4tuw3NRvTOhsQJSShPjHypu htn72Hxz+DTQAkiZAZtfkWM3tcDzUpE0EvMnIRyN4Xj0dKzvsLE+JM6yu8Ag9av9 ewn/44RCH4YA/w== -----END CERTIFICATE-----Generated at Wed Dec 10 18:06:09 2025 by rpki-client