This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft File: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json) Hash identifier: /n4bmzUh2j+95k79s33L1p/dBCRATmkQRblcMuBirEc= Subject key identifier: A2:79:6E:83:77:30:EE:5C:65:F3:8F:8B:74:7A:26:7B:03:B3:FC:26 Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14 Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14 Certificate serial: 019B10B857C0E4C88775B6C9B78B92446778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft Manifest number: 12FD Signing time: Fri 12 Dec 2025 04:01:15 +0000 Manifest this update: Fri 12 Dec 2025 04:01:15 +0000 Manifest next update: Sat 13 Dec 2025 04:01:15 +0000 Files and hashes: 1: UzhPx96yGOR4LTMi9dIu864aqsY.roa (hash: bKjirubIh89AKZTNw76UL/cnaoe6Ib86+oTooy6mls0=) 2: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: K1wjFPbBDsAHQ9K3Y/a3MRkKX5lE6WMOaBQ8iydQpYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:57:c0:e4:c8:87:75:b6:c9:b7:8b:92:44:67:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14 Validity Not Before: Dec 12 04:01:15 2025 GMT Not After : Dec 13 04:01:15 2025 GMT Subject: CN=a2796e837730ee5c65f38f8b747a267b03b3fc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:95:90:cf:f0:83:f7:b2:db:3a:6f:d1:82: 81:9a:89:a5:44:a6:66:3c:7c:66:4e:f4:82:60:3a: d4:72:77:7c:28:90:ae:fd:03:76:8d:bd:db:46:19: 88:f0:00:3d:52:d2:f1:73:73:f2:56:5a:22:e8:2f: 11:66:b4:35:6a:52:45:f3:c3:27:59:e6:9e:dd:e2: bf:03:9d:c7:df:de:f5:05:ec:54:32:3c:a8:46:37: e0:19:85:f3:80:8b:ac:df:d4:94:39:e0:68:5d:84: 3a:aa:02:8e:b9:07:99:27:71:7f:cb:a5:25:d2:2a: 64:dd:f8:16:56:a8:ce:71:d4:ce:c9:19:87:f7:46: 13:8b:9a:e8:b9:56:fc:da:4a:08:53:d9:c1:cd:ed: 75:ce:a7:70:8b:30:0f:28:aa:26:6d:74:61:ef:48: 2f:13:61:58:8c:f6:9c:70:47:35:ae:63:a6:3b:54: f9:99:2d:16:24:73:5d:b7:59:2e:4a:e5:d2:c3:5e: 33:0c:12:d9:1e:49:af:a8:41:b2:75:6f:e6:09:79: ab:f4:7e:99:89:72:e4:4f:95:1b:52:c1:30:47:a7: 56:38:ac:f5:f0:5e:c4:81:3b:45:0e:eb:03:10:a0: f9:72:e0:62:08:db:e2:37:03:6e:46:89:be:5d:9e: d7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:79:6E:83:77:30:EE:5C:65:F3:8F:8B:74:7A:26:7B:03:B3:FC:26 X509v3 Authority Key Identifier: keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:71:38:ff:dd:d1:91:f0:b4:b7:43:d4:f8:ea:8d:79:07:11: 2f:8c:07:da:9d:39:6f:da:35:e0:b4:c9:d9:cd:de:14:7a:9b: 93:c1:d8:47:a1:d8:ce:b1:5e:6b:a6:aa:e7:c4:47:d8:8b:41: a3:0f:63:ec:6a:08:3e:3e:09:1b:4d:2d:d5:90:e0:08:53:75: 19:c7:99:9d:0b:ae:c4:96:df:89:e8:d9:0a:50:e9:d1:09:2d: 53:94:02:20:08:e3:e3:73:ab:ce:17:b4:0e:7b:26:7c:b4:a4: e9:52:56:b5:22:0f:dd:c0:15:3e:af:57:2e:9f:b4:d4:11:1d: 7a:43:e5:88:ed:97:0f:00:bf:23:11:ff:bd:ab:fb:74:9a:75: 70:f3:de:3c:3f:39:c9:a3:58:59:c7:38:6a:6a:d7:56:5d:c4: ee:fe:15:61:e3:bb:e8:86:a0:a9:9c:93:fc:cd:2a:58:e5:de: 30:49:c2:8e:12:0c:88:ff:9f:e1:9a:54:7f:bc:5f:bf:07:54: 00:4f:80:ff:29:95:4a:76:37:68:76:8e:e4:02:d8:28:c4:35: 05:96:b9:f9:e9:e7:d0:61:a4:da:f4:11:34:ca:51:f1:19:5c: d2:16:d0:6e:ef:d3:9b:d9:15:a7:3b:23:17:a1:ce:c6:d0:d7: 52:87:53:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuFfA5MiHdbbJt4uSRGd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1Mjk1OTEzYzA3YzIyNjEwMGJkMzlmMWVlMmM1MmVhOThh YWVlMTQwHhcNMjUxMjEyMDQwMTE1WhcNMjUxMjEzMDQwMTE1WjAzMTEwLwYDVQQD EyhhMjc5NmU4Mzc3MzBlZTVjNjVmMzhmOGI3NDdhMjY3YjAzYjNmYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv36VkM/wg/ey2zpv0YKBmomlRKZm PHxmTvSCYDrUcnd8KJCu/QN2jb3bRhmI8AA9UtLxc3PyVloi6C8RZrQ1alJF88Mn Weae3eK/A53H3971BexUMjyoRjfgGYXzgIus39SUOeBoXYQ6qgKOuQeZJ3F/y6Ul 0ipk3fgWVqjOcdTOyRmH90YTi5rouVb82koIU9nBze11zqdwizAPKKombXRh70gv E2FYjPaccEc1rmOmO1T5mS0WJHNdt1kuSuXSw14zDBLZHkmvqEGydW/mCXmr9H6Z iXLkT5UbUsEwR6dWOKz18F7EgTtFDusDEKD5cuBiCNviNwNuRom+XZ7XbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJ5boN3MO5cZfOPi3R6JnsDs/wmMB8GA1UdIwQY MBaAFGUpWRPAfCJhAL058e4sUuqYqu4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYt NjQyMzZmYzM2ZDFkLzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYtNjQyMzZmYzM2ZDFk LzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3E4/93R kfC0t0PU+OqNeQcRL4wH2p05b9o14LTJ2c3eFHqbk8HYR6HYzrFea6aq58RH2ItB ow9j7GoIPj4JG00t1ZDgCFN1GceZnQuuxJbfiejZClDp0QktU5QCIAjj43Orzhe0 DnsmfLSk6VJWtSIP3cAVPq9XLp+01BEdekPliO2XDwC/IxH/vav7dJp1cPPePD85 yaNYWcc4amrXVl3E7v4VYeO76IagqZyT/M0qWOXeMEnCjhIMiP+f4ZpUf7xfvwdU AE+A/ymVSnY3aHaO5ALYKMQ1BZa5+enn0GGk2vQRNMpR8Rlc0hbQbu/Tm9kVpzsj F6HOxtDXUodTFA== -----END CERTIFICATE-----Generated at Fri Dec 12 07:39:31 2025 by rpki-client