This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft File: Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft (raw, json) Hash identifier: /5IqG6B1sxXQ5ZgSrLq8rGaHc/YsOUJTdl2RLSq+I/c= Subject key identifier: 2B:E1:A5:BC:B9:D0:C1:A6:C3:51:D7:B9:80:35:06:C1:B8:82:4E:A4 Authority key identifier: 66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41 Certificate issuer: /CN=667d377dd4c830c246cb48a934699699e4b37741 Certificate serial: 019B5B655BF61E7144411552FD591628E840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft Manifest number: 100D Signing time: Fri 26 Dec 2025 16:02:07 +0000 Manifest this update: Fri 26 Dec 2025 16:02:07 +0000 Manifest next update: Sat 27 Dec 2025 16:02:07 +0000 Files and hashes: 1: Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl (hash: jEoI6+RNe6jZdo8XHNzVOyjoi+LJ7V3C3jOruxdS4N8=) 2: gBvfSY4X722osdS0oGwbWca756o.roa (hash: qRD13MOAWh4vkqsKDndu25MB5rnSOvhlh2YKABBiyH4=) 3: x-oHQjnwxvG7zZvcQkuRXWO2h4Q.roa (hash: QRsXLezrt6W9iYwytMlCkOMS0u3CyU/UmS4vgAyjWJg=) 4: yFVTSR_CTrclIRPPye7JgJhB-BE.roa (hash: 02rS4vnA9A+lQ0jM0xxD7zUGWNZmGUrpLvyYuEGWcEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:5b:f6:1e:71:44:41:15:52:fd:59:16:28:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=667d377dd4c830c246cb48a934699699e4b37741 Validity Not Before: Dec 26 16:02:07 2025 GMT Not After : Dec 27 16:02:07 2025 GMT Subject: CN=2be1a5bcb9d0c1a6c351d7b9803506c1b8824ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:13:71:77:8b:d4:b0:92:9e:10:76:16:5f:d6: 8e:a4:4d:ae:0d:81:4a:c0:ef:6b:ef:50:e6:4f:66: e7:a2:3c:3e:d5:0f:40:f4:15:3d:95:42:fb:de:19: 99:85:b4:97:cc:90:e2:d1:f6:fa:e6:b0:ad:06:ca: f2:8d:32:4e:dd:9b:e5:d5:2a:4b:4c:21:82:23:0c: 6c:ad:52:4d:0f:42:d0:3b:85:51:b5:cc:5f:7d:d1: 6b:f9:db:5f:c7:30:cf:0a:a0:3a:78:26:5d:49:d7: fc:65:61:a5:76:1d:71:ec:8a:20:14:23:fb:95:bb: 82:41:ac:6e:a1:bd:6d:0a:62:fd:84:b5:64:9f:4e: ed:fd:05:bc:f0:40:3d:8a:3c:84:a2:f3:fb:05:93: fe:cf:db:a6:c1:f0:0e:d7:30:e5:2c:10:4d:6f:52: ab:2b:e9:7a:b0:22:7c:08:73:29:6f:a0:bc:f3:b1: 12:a5:91:81:0f:2f:8e:ff:33:e0:88:81:73:75:ee: f7:59:4f:7b:a1:95:e6:fe:35:33:90:af:e2:ad:09: 18:39:2f:3a:3f:b4:63:22:cb:f4:43:d4:cc:62:26: c6:17:48:45:fe:74:cc:49:d1:02:23:e3:4b:0b:57: 6c:4c:cb:c4:f9:61:38:32:5d:32:8c:82:13:76:83: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E1:A5:BC:B9:D0:C1:A6:C3:51:D7:B9:80:35:06:C1:B8:82:4E:A4 X509v3 Authority Key Identifier: keyid:66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:68:83:b1:a9:1a:81:8c:0e:61:21:1d:29:3f:54:fb:9d:f7: 71:21:cf:c4:ae:77:37:0a:7b:bf:63:55:21:3a:7e:4a:74:8c: b1:44:ff:86:a9:6a:fc:bf:16:18:ff:c2:9e:9e:41:f8:eb:02: 0b:4e:0d:94:12:5b:32:b1:84:04:35:dd:bb:45:06:18:c0:00: d0:b1:13:ba:82:fb:89:5c:b7:9c:9a:78:27:8d:7b:62:81:fe: 9f:67:f9:8b:f2:cc:b8:6b:53:2d:98:8d:51:c2:6e:d6:64:7a: 88:b8:0a:7b:d6:5d:49:2f:e7:86:73:ce:dc:e7:6a:bf:60:60: ce:44:7e:69:39:6d:9c:28:24:cc:de:6b:e0:f5:d6:c3:fb:0f: 7a:54:98:22:e7:37:00:ff:03:c4:75:76:da:c1:fd:2e:d6:a6: fc:bc:0c:c5:a1:df:e3:a6:d7:c5:31:94:bf:7a:55:5e:32:4c: ec:14:17:63:6b:f9:03:c0:fa:7a:d4:1a:99:2b:53:7e:9c:b2: d9:e4:a6:74:2b:59:53:c8:5f:f4:38:b2:69:2a:ef:3c:06:b9: 92:68:0b:ce:cd:05:07:dd:94:d9:59:0d:39:d5:fb:36:9a:e1: 79:b5:74:1a:c6:48:8b:b6:93:6b:c6:b5:bd:55:c3:53:17:70: 7a:b6:09:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZVv2HnFEQRVS/VkWKOhAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2N2QzNzdkZDRjODMwYzI0NmNiNDhhOTM0Njk5Njk5ZTRi Mzc3NDEwHhcNMjUxMjI2MTYwMjA3WhcNMjUxMjI3MTYwMjA3WjAzMTEwLwYDVQQD EygyYmUxYTViY2I5ZDBjMWE2YzM1MWQ3Yjk4MDM1MDZjMWI4ODI0ZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxNxd4vUsJKeEHYWX9aOpE2uDYFK wO9r71DmT2bnojw+1Q9A9BU9lUL73hmZhbSXzJDi0fb65rCtBsryjTJO3Zvl1SpL TCGCIwxsrVJND0LQO4VRtcxffdFr+dtfxzDPCqA6eCZdSdf8ZWGldh1x7IogFCP7 lbuCQaxuob1tCmL9hLVkn07t/QW88EA9ijyEovP7BZP+z9umwfAO1zDlLBBNb1Kr K+l6sCJ8CHMpb6C887ESpZGBDy+O/zPgiIFzde73WU97oZXm/jUzkK/irQkYOS86 P7RjIsv0Q9TMYibGF0hF/nTMSdECI+NLC1dsTMvE+WE4Ml0yjIITdoPDiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvhpby50MGmw1HXuYA1BsG4gk6kMB8GA1UdIwQY MBaAFGZ9N33UyDDCRstIqTRplpnks3dBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm4wM2ZkVElNTUpHeTBpcE5HbVdtZVN6ZDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lNjgxMmUtOTZhNC00OGI0LWFiNjEt MTIxZmY0NjAxOGYzLzEvWm4wM2ZkVElNTUpHeTBpcE5HbVdtZVN6ZDBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9lNjgxMmUtOTZhNC00OGI0LWFiNjEtMTIxZmY0NjAxOGYz LzEvWm4wM2ZkVElNTUpHeTBpcE5HbVdtZVN6ZDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2iDsaka gYwOYSEdKT9U+533cSHPxK53Nwp7v2NVITp+SnSMsUT/hqlq/L8WGP/Cnp5B+OsC C04NlBJbMrGEBDXdu0UGGMAA0LETuoL7iVy3nJp4J417YoH+n2f5i/LMuGtTLZiN UcJu1mR6iLgKe9ZdSS/nhnPO3Odqv2BgzkR+aTltnCgkzN5r4PXWw/sPelSYIuc3 AP8DxHV22sH9Ltam/LwMxaHf46bXxTGUv3pVXjJM7BQXY2v5A8D6etQamStTfpyy 2eSmdCtZU8hf9DiyaSrvPAa5kmgLzs0FB92U2VkNOdX7NprhebV0GsZIi7aTa8a1 vVXDUxdwerYJLg== -----END CERTIFICATE-----Generated at Fri Dec 26 23:03:16 2025 by rpki-client