This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft File: ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft (raw, json) Hash identifier: T3/DFPfvNw6eR/qNFXF9N2dQaf0ZvxbLGkMta1MGRQk= Subject key identifier: E7:91:9E:8E:36:15:BD:8F:84:37:5E:5D:1E:B6:F6:81:EB:08:52:A9 Authority key identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45 Certificate issuer: /CN=66f04275253f967384c4973758a54b7fd085fe45 Certificate serial: 019B1FBD90A84DFF5A3327076C65CB9EF13A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft Manifest number: 15C7 Signing time: Mon 15 Dec 2025 02:01:15 +0000 Manifest this update: Mon 15 Dec 2025 02:01:15 +0000 Manifest next update: Tue 16 Dec 2025 02:01:15 +0000 Files and hashes: 1: 0Iy8NsUXTA0psQPyCINqg9pVI58.roa (hash: yvEGBqidyX57HbZdF/uHS+mpQFnEILAUnlH+f4viPS0=) 2: ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl (hash: X632NUCzdDbgytn2uHEbrG/ISeY8vRMCyTQu4gdyl+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:bd:90:a8:4d:ff:5a:33:27:07:6c:65:cb:9e:f1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f04275253f967384c4973758a54b7fd085fe45 Validity Not Before: Dec 15 02:01:15 2025 GMT Not After : Dec 16 02:01:15 2025 GMT Subject: CN=e7919e8e3615bd8f84375e5d1eb6f681eb0852a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:41:72:a9:f6:af:4c:9e:14:2a:9a:b5:5b: da:e6:2b:90:26:d9:c5:75:8f:81:1c:84:3c:c8:cf: 1a:d7:c2:df:b3:02:41:6c:9d:09:59:ef:34:0d:f2: 92:24:9e:27:29:40:44:95:e1:e6:bf:e2:99:74:b7: 97:01:1f:32:a2:4c:9c:60:b0:64:da:37:f4:8b:34: 54:f3:34:e3:15:41:33:da:52:9b:70:2a:12:91:11: 83:b9:fe:a7:09:a9:c8:6f:e9:cb:bc:01:74:3e:b8: 02:f3:96:ee:d7:3c:4d:31:e4:a2:5d:bd:34:99:17: 0f:4a:4f:fc:65:d3:7f:a4:c6:20:54:8f:81:4b:1c: bb:81:ff:c2:67:70:c4:e0:c2:6f:01:df:61:07:ed: 59:e8:de:ac:9a:d5:b4:5e:87:11:b3:d7:dc:a6:2d: 91:b7:8d:29:d0:be:17:68:8c:2f:c0:67:17:2f:08: da:f6:b1:df:fa:62:34:e1:a1:85:73:b9:78:49:48: e2:69:ee:3e:ce:6b:70:b3:2a:f4:0b:ee:94:0a:69: 6c:84:22:62:a5:93:a1:9d:9f:ec:05:b6:4d:28:b2: cb:81:04:81:05:47:fb:12:a2:9e:ce:7a:da:c5:6e: fe:b6:83:69:9a:31:49:b0:75:f1:47:9c:cd:2d:ed: 28:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:91:9E:8E:36:15:BD:8F:84:37:5E:5D:1E:B6:F6:81:EB:08:52:A9 X509v3 Authority Key Identifier: keyid:66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:2b:5c:b3:e8:22:95:93:b3:61:23:36:71:30:0a:f9:f6:eb: 54:a5:42:1c:70:ed:55:ab:db:3b:c8:f5:86:40:d6:cf:48:08: 7d:31:a5:4a:8b:81:fe:da:20:36:da:f2:65:c8:c7:cd:bc:78: 6b:40:cc:b5:2f:04:7c:40:1a:66:de:ff:f2:9f:05:30:d0:d3: 64:d1:8e:5d:49:e4:b0:30:a1:3a:7f:e8:63:67:5d:55:5d:bc: da:5d:ef:e7:ff:a0:b1:e6:e5:f6:23:b9:22:c2:0d:f9:d9:ab: 17:18:53:c6:03:b0:f4:33:ab:79:e4:e0:5c:53:9a:05:66:c0: 50:f0:2c:e5:ad:7e:e7:4e:bb:83:70:61:32:92:d5:af:64:6c: a1:80:3a:e7:9d:a6:9d:e3:2b:93:a4:1c:b9:16:f3:f4:47:1d: 5e:e2:a8:8a:54:cf:24:19:31:5e:60:11:e5:04:40:16:61:ca: 25:52:56:b3:69:64:e6:ca:cf:c4:a6:6d:3a:98:a0:bf:95:34: 44:6b:4a:7f:30:5d:59:27:6f:1e:85:39:21:67:b4:a3:ee:70: 37:de:3f:b7:d6:bc:5a:51:4c:ea:00:cf:08:50:10:46:5e:15: 78:7f:f4:eb:3f:48:cb:a0:d2:ce:50:84:f3:0a:6e:aa:dc:76: fc:56:3e:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfvZCoTf9aMycHbGXLnvE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjA0Mjc1MjUzZjk2NzM4NGM0OTczNzU4YTU0YjdmZDA4 NWZlNDUwHhcNMjUxMjE1MDIwMTE1WhcNMjUxMjE2MDIwMTE1WjAzMTEwLwYDVQQD EyhlNzkxOWU4ZTM2MTViZDhmODQzNzVlNWQxZWI2ZjY4MWViMDg1MmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuBBcqn2r0yeFCqatVva5iuQJtnF dY+BHIQ8yM8a18LfswJBbJ0JWe80DfKSJJ4nKUBEleHmv+KZdLeXAR8yokycYLBk 2jf0izRU8zTjFUEz2lKbcCoSkRGDuf6nCanIb+nLvAF0PrgC85bu1zxNMeSiXb00 mRcPSk/8ZdN/pMYgVI+BSxy7gf/CZ3DE4MJvAd9hB+1Z6N6smtW0XocRs9fcpi2R t40p0L4XaIwvwGcXLwja9rHf+mI04aGFc7l4SUjiae4+zmtwsyr0C+6UCmlshCJi pZOhnZ/sBbZNKLLLgQSBBUf7EqKeznraxW7+toNpmjFJsHXxR5zNLe0olQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeRno42Fb2PhDdeXR629oHrCFKpMB8GA1UdIwQY MBaAFGbwQnUlP5ZzhMSXN1ilS3/Qhf5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZCQ2RTVV9sbk9FeEpjM1dLVkxmOUNGX2tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85ZTE2ZDItZDNiOS00ZWZhLTljM2Qt ZTQ5NjE4NTJjOGI2LzEvWnZCQ2RTVV9sbk9FeEpjM1dLVkxmOUNGX2tVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85ZTE2ZDItZDNiOS00ZWZhLTljM2QtZTQ5NjE4NTJjOGI2 LzEvWnZCQ2RTVV9sbk9FeEpjM1dLVkxmOUNGX2tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCtcs+gi lZOzYSM2cTAK+fbrVKVCHHDtVavbO8j1hkDWz0gIfTGlSouB/togNtryZcjHzbx4 a0DMtS8EfEAaZt7/8p8FMNDTZNGOXUnksDChOn/oY2ddVV282l3v5/+gsebl9iO5 IsIN+dmrFxhTxgOw9DOreeTgXFOaBWbAUPAs5a1+5067g3BhMpLVr2RsoYA6552m neMrk6QcuRbz9EcdXuKoilTPJBkxXmAR5QRAFmHKJVJWs2lk5srPxKZtOpigv5U0 RGtKfzBdWSdvHoU5IWe0o+5wN94/t9a8WlFM6gDPCFAQRl4VeH/06z9Iy6DSzlCE 8wpuqtx2/FY+pg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:53:12 2025 by rpki-client