This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json) Hash identifier: SKi03xGnX34Kf6LeCB4kdSSuSv7gXVGfG9ffCAGNdKU= Subject key identifier: 0F:8F:EE:BF:1E:5F:0D:FD:34:50:23:AA:07:51:BC:57:AC:E2:C4:8D Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9 Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9 Certificate serial: 019B06A2542FD062B46B6854BEA44DA1E417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft Manifest number: 1039 Signing time: Wed 10 Dec 2025 05:01:00 +0000 Manifest this update: Wed 10 Dec 2025 05:01:00 +0000 Manifest next update: Thu 11 Dec 2025 05:01:00 +0000 Files and hashes: 1: NyUxlhwtEkrfLySazfcIwYLq2uE.roa (hash: nbUnPx7laXVoJ1K+1QDprr0SXDSN8ACCPbp85TtzNB8=) 2: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: shevhbasNyp80yxKZGjpScxQkH0zsR7rBkbbgOZKITA=) 3: v7McWGmC6x_jve8hO4dvjOUzDnU.roa (hash: pEIX+2zdNDbAjQYiraeVFcmiQz+0WDogJaC+EZR5c2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 05:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:a2:54:2f:d0:62:b4:6b:68:54:be:a4:4d:a1:e4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9 Validity Not Before: Dec 10 05:01:00 2025 GMT Not After : Dec 11 05:01:00 2025 GMT Subject: CN=0f8feebf1e5f0dfd345023aa0751bc57ace2c48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a1:f7:8f:30:88:d8:29:42:05:82:13:de:16: 00:3d:e5:73:b1:4c:d9:b7:59:a4:58:00:44:15:e9: ee:7d:8d:9a:c5:2a:ce:d9:7c:74:90:fe:11:38:8a: e3:e3:f1:52:2f:bc:bb:2a:dc:c0:2f:6f:d4:16:4e: 5e:9d:e9:f7:3c:ab:f8:2f:9b:05:b5:7c:27:75:87: d4:c1:07:51:c3:7e:9a:ae:a3:7c:7b:3c:98:6f:25: ca:c4:b3:23:13:32:88:38:80:95:e0:03:4c:53:f0: f2:80:96:62:8b:a9:3b:31:4d:21:2b:5a:ef:d0:77: d3:49:0a:e1:72:a3:e8:fe:a5:37:10:58:40:a4:36: 54:b9:15:69:61:59:55:12:e3:ea:82:6e:0c:61:5f: ff:7d:b6:c6:13:fb:d0:b3:00:42:35:5c:a5:36:64: 7f:27:0a:40:10:d4:c1:31:5d:c6:17:6f:07:a1:ea: 90:42:17:f6:fc:99:b4:e6:16:77:8d:27:0f:74:01: 7a:77:7e:73:d9:0d:e0:04:ed:ce:41:f7:59:ff:d2: 37:88:d0:cb:42:a7:22:87:0a:f6:dc:cd:8a:12:df: 53:81:5a:74:5b:b4:53:5b:2b:68:63:84:21:10:b0: 2f:de:18:82:34:35:da:91:4d:45:96:a2:ad:7a:11: c9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8F:EE:BF:1E:5F:0D:FD:34:50:23:AA:07:51:BC:57:AC:E2:C4:8D X509v3 Authority Key Identifier: keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:37:86:d8:b3:89:6b:97:98:9c:03:a4:c7:9a:ab:9d:ce:46: 95:2d:3e:a6:8b:70:ec:3e:f5:3f:3a:58:e3:59:db:b2:fe:8f: 8c:0c:17:14:b4:d3:aa:28:a5:e9:81:5d:48:c0:eb:d0:e6:40: 98:d4:15:c2:87:ef:0a:4c:9a:02:58:9d:20:b7:bd:07:9e:2e: 9a:05:e0:43:7a:61:06:1b:82:77:67:cc:a7:7a:9e:02:6d:e9: ed:1c:3c:be:d7:4e:50:b7:67:2a:6f:66:89:07:ce:66:fe:b4: 9e:01:e9:33:30:03:ae:4b:c1:f7:bc:c2:4c:57:03:14:b4:72: 6f:6e:0f:cd:14:70:31:9c:11:ad:a8:2d:32:aa:17:73:d9:c9: b0:d7:b5:ef:69:6d:fc:af:70:f6:6f:84:e4:c9:40:81:c3:e5: 41:74:35:7d:e6:80:74:ab:39:29:fd:25:72:b8:fe:c7:f4:9d: e1:cb:60:cd:85:09:fd:5d:a0:f3:69:17:77:d2:96:d9:e9:ac: b7:2e:d7:f9:09:d6:bd:7c:4f:4b:61:58:e8:02:55:ad:17:0e: e6:50:47:5f:8d:a8:3c:98:cc:43:41:f2:e1:0d:5e:45:11:46: 0f:5d:25:b9:0c:13:a8:79:cc:2d:e9:f9:8c:f2:bb:9f:24:ba: 34:1f:1e:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGolQv0GK0a2hUvqRNoeQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YWE0NTFiNzgzZmM5MWEwNGI4MmY4MmYxNTZmMGI0ODk3 MTVkYzkwHhcNMjUxMjEwMDUwMTAwWhcNMjUxMjExMDUwMTAwWjAzMTEwLwYDVQQD EygwZjhmZWViZjFlNWYwZGZkMzQ1MDIzYWEwNzUxYmM1N2FjZTJjNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qH3jzCI2ClCBYIT3hYAPeVzsUzZ t1mkWABEFenufY2axSrO2Xx0kP4ROIrj4/FSL7y7KtzAL2/UFk5enen3PKv4L5sF tXwndYfUwQdRw36arqN8ezyYbyXKxLMjEzKIOICV4ANMU/DygJZii6k7MU0hK1rv 0HfTSQrhcqPo/qU3EFhApDZUuRVpYVlVEuPqgm4MYV//fbbGE/vQswBCNVylNmR/ JwpAENTBMV3GF28HoeqQQhf2/Jm05hZ3jScPdAF6d35z2Q3gBO3OQfdZ/9I3iNDL Qqcihwr23M2KEt9TgVp0W7RTWytoY4QhELAv3hiCNDXakU1FlqKtehHJfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+P7r8eXw39NFAjqgdRvFes4sSNMB8GA1UdIwQY MBaAFGWqRRt4P8kaBLgvgvFW8LSJcV3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWIt M2JjM2RmN2EyOThhLzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWItM2JjM2RmN2EyOThh LzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTeG2LOJ a5eYnAOkx5qrnc5GlS0+potw7D71PzpY41nbsv6PjAwXFLTTqiil6YFdSMDr0OZA mNQVwofvCkyaAlidILe9B54umgXgQ3phBhuCd2fMp3qeAm3p7Rw8vtdOULdnKm9m iQfOZv60ngHpMzADrkvB97zCTFcDFLRyb24PzRRwMZwRragtMqoXc9nJsNe172lt /K9w9m+E5MlAgcPlQXQ1feaAdKs5Kf0lcrj+x/Sd4ctgzYUJ/V2g82kXd9KW2ems ty7X+QnWvXxPS2FY6AJVrRcO5lBHX42oPJjMQ0Hy4Q1eRRFGD10luQwTqHnMLen5 jPK7nyS6NB8edQ== -----END CERTIFICATE-----Generated at Wed Dec 10 11:40:12 2025 by rpki-client