This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json) Hash identifier: I401W3qxBzlUZCJVQtd++m1hbDi7sCB1Nn3wrNLtQeM= Subject key identifier: 63:B3:0E:20:77:DB:76:E5:5A:D0:65:A4:86:55:CE:78:23:78:4A:E2 Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73 Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73 Certificate serial: 019B36B3806860CB129B3471A4A4E8875BBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft Manifest number: 04C9 Signing time: Fri 19 Dec 2025 13:01:32 +0000 Manifest this update: Fri 19 Dec 2025 13:01:32 +0000 Manifest next update: Sat 20 Dec 2025 13:01:32 +0000 Files and hashes: 1: HwGE0614r9XuIYTbb7FI9qw3QhA.roa (hash: NN98O8b8/m43VOkHIWYXipqgMBc9JvK22oHaFCTLRzA=) 2: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: pMQYasYPwgeeBKBU4vLKUM4q8NzNqeHWZ5pDj/vzByo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:80:68:60:cb:12:9b:34:71:a4:a4:e8:87:5b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73 Validity Not Before: Dec 19 13:01:32 2025 GMT Not After : Dec 20 13:01:32 2025 GMT Subject: CN=63b30e2077db76e55ad065a48655ce7823784ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:71:c7:76:f7:95:fe:05:fa:45:b6:40:a1:00: f9:97:11:42:a8:43:5f:b9:d3:a1:b3:1c:42:dc:de: 33:89:7c:91:d7:2a:c6:f3:f9:8b:10:f0:a9:b4:49: e6:a2:5b:1c:2d:ef:0a:fb:86:69:26:70:23:d6:d7: 95:e7:d7:e0:8b:a3:ba:82:be:d0:63:10:e6:4c:11: 26:be:f1:5a:c7:73:09:1e:18:1e:b9:b7:af:9f:ac: 04:fe:d5:c7:27:80:6a:07:92:ca:1f:9c:a0:ea:2e: 63:80:55:6e:eb:e3:7d:e0:d0:b2:da:90:d0:63:ac: be:74:51:ae:92:84:88:88:8d:1e:7e:67:25:6a:b4: c0:5a:a7:43:d9:1f:0a:db:75:ee:0e:9a:7f:04:01: 79:f4:84:d1:52:5e:e2:c1:87:b8:d6:16:83:a8:63: ad:12:18:0e:93:fe:28:a7:0a:77:e2:94:44:26:29: 56:35:92:3a:ba:ea:40:58:44:99:ad:9e:78:3a:1b: 16:c1:cc:41:cc:a2:8b:74:06:37:33:e3:65:1c:77: 38:97:55:37:cd:9d:a2:12:03:0a:45:41:6f:b9:8e: 71:20:66:e9:cf:df:43:46:00:13:b8:33:b5:8a:65: 25:5a:e0:23:8b:a1:6a:d6:88:be:e7:cf:11:19:38: 96:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B3:0E:20:77:DB:76:E5:5A:D0:65:A4:86:55:CE:78:23:78:4A:E2 X509v3 Authority Key Identifier: keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:bc:b6:f7:ef:4f:85:6c:e4:4f:5d:f2:29:ac:7f:87:70:a8: ee:0b:00:c4:e1:6d:ca:bf:18:21:21:52:58:d6:b1:ce:bb:ad: c9:43:66:ae:91:42:c8:fd:ad:7b:1c:6f:f4:fc:bb:1a:b6:76: 3f:f4:bb:bb:49:28:d8:3c:75:02:24:84:d2:b1:e0:a7:00:81: 92:1f:7a:f5:97:0d:03:15:e2:eb:25:ad:42:c8:dc:83:b8:fa: bd:11:8c:01:17:fb:3a:4c:39:22:dd:fc:de:9a:14:ab:de:7f: c2:9d:a3:ce:2f:ae:61:83:29:88:f5:12:1e:f7:88:8f:52:96: f0:ad:3d:2c:9c:7d:cd:9a:9b:47:97:1d:96:94:02:96:de:fe: 6f:89:f0:25:ad:99:9a:ca:f3:14:e4:f9:83:a0:ba:34:64:4c: 15:b0:e0:11:91:a8:ec:02:29:55:a1:e9:dd:d2:aa:71:49:b9: 0f:68:83:66:63:35:10:a0:3d:e8:e1:e2:c7:f3:94:d2:9a:28: d4:1b:a8:89:0a:1f:71:c1:48:9d:b2:d9:50:97:ae:46:9d:78: bc:02:e8:c1:75:e3:7c:66:45:23:36:2b:c0:d6:34:27:00:31: b5:8c:24:98:42:9f:a9:b5:26:51:df:05:69:78:94:bd:82:91: 06:59:e8:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s4BoYMsSmzRxpKToh1u9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YTkwNjZkNWI2YWMzMDE5YzIwMzdmNTc5ZDExYmFlMWE1 ZWVhNzMwHhcNMjUxMjE5MTMwMTMyWhcNMjUxMjIwMTMwMTMyWjAzMTEwLwYDVQQD Eyg2M2IzMGUyMDc3ZGI3NmU1NWFkMDY1YTQ4NjU1Y2U3ODIzNzg0YWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3HHdveV/gX6RbZAoQD5lxFCqENf udOhsxxC3N4ziXyR1yrG8/mLEPCptEnmolscLe8K+4ZpJnAj1teV59fgi6O6gr7Q YxDmTBEmvvFax3MJHhgeubevn6wE/tXHJ4BqB5LKH5yg6i5jgFVu6+N94NCy2pDQ Y6y+dFGukoSIiI0efmclarTAWqdD2R8K23XuDpp/BAF59ITRUl7iwYe41haDqGOt EhgOk/4opwp34pREJilWNZI6uupAWESZrZ54OhsWwcxBzKKLdAY3M+NlHHc4l1U3 zZ2iEgMKRUFvuY5xIGbpz99DRgATuDO1imUlWuAji6Fq1oi+588RGTiWUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOzDiB323blWtBlpIZVzngjeEriMB8GA1UdIwQY MBaAFGWpBm1basMBnCA39XnRG64aXupzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2Qt MThmMzQzNDg4Mjg2LzEvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2QtMThmMzQzNDg4Mjg2 LzEvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIby29+9P hWzkT13yKax/h3Co7gsAxOFtyr8YISFSWNaxzrutyUNmrpFCyP2texxv9Py7GrZ2 P/S7u0ko2Dx1AiSE0rHgpwCBkh969ZcNAxXi6yWtQsjcg7j6vRGMARf7Okw5It38 3poUq95/wp2jzi+uYYMpiPUSHveIj1KW8K09LJx9zZqbR5cdlpQClt7+b4nwJa2Z msrzFOT5g6C6NGRMFbDgEZGo7AIpVaHp3dKqcUm5D2iDZmM1EKA96OHix/OU0poo 1BuoiQofccFInbLZUJeuRp14vALowXXjfGZFIzYrwNY0JwAxtYwkmEKfqbUmUd8F aXiUvYKRBlnoGg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:37:22 2025 by rpki-client