This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json) Hash identifier: HpUgscjpNsNI0+OoJ0gsqjKNDhNnPzzsJmpUyOxtTkk= Subject key identifier: 11:61:7D:0A:48:7A:7D:19:2A:2A:BB:E8:40:49:97:15:9D:F9:1E:63 Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44 Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244 Certificate serial: 019B262D6EC26B07F3193A3BD69FB2B23D38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft Manifest number: 06FF Signing time: Tue 16 Dec 2025 08:01:10 +0000 Manifest this update: Tue 16 Dec 2025 08:01:10 +0000 Manifest next update: Wed 17 Dec 2025 08:01:10 +0000 Files and hashes: 1: 3tamc3sOw67HPVcPTfi-B2O8yU0.roa (hash: VKiy/+EDaLvbaW8IRlukGidMdNs6XDi7iV1i6VLWYS0=) 2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: t3KOdN2mBnrzIS7Ud/9rm9b4COuy0XHWuw2bImq/T/4=) 3: oMFhnG_2Z4roWQc3WgoG1HgKdEc.roa (hash: QGs1HFAKixXlw1vT4Oet6ENYZoHU7usshB/hp90M1GI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:6e:c2:6b:07:f3:19:3a:3b:d6:9f:b2:b2:3d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244 Validity Not Before: Dec 16 08:01:10 2025 GMT Not After : Dec 17 08:01:10 2025 GMT Subject: CN=11617d0a487a7d192a2abbe8404997159df91e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9e:8b:94:23:2b:83:03:8c:4f:eb:ab:54:f6: 6d:06:c2:6b:50:98:fa:52:ab:f9:09:e8:dd:6d:89: 8e:c0:e5:97:50:55:3c:53:7b:02:13:ef:6f:21:19: 2d:d2:58:50:33:31:26:83:72:60:fa:a3:56:a3:f6: 67:bf:cc:ac:52:0e:80:f6:72:48:e2:3c:68:d9:c9: 9c:3a:60:ad:61:47:ca:ca:34:b8:91:41:89:45:f8: 1f:4c:70:65:3e:87:46:d1:69:90:e2:89:03:9b:a0: c3:46:05:24:4b:66:64:a9:87:fe:2d:26:13:94:00: 25:3c:68:1f:b7:fa:9a:fd:0e:55:9d:a7:98:ec:f6: fe:e2:db:12:6d:a8:0b:b3:09:77:ef:4c:e7:78:1f: 42:33:f1:c6:13:0d:21:a0:f4:39:72:07:af:ed:1b: 87:a8:b6:29:19:31:d1:c2:35:5f:16:ac:33:7e:88: ce:a6:7d:8c:6f:1b:23:a6:f9:50:36:4a:7e:e4:49: 26:75:60:3b:8f:31:d9:ae:c4:05:2c:af:fd:da:e6: 14:ee:71:26:94:cb:84:da:7f:7f:41:a1:07:d8:51: 8d:6f:89:24:8e:e1:12:68:a1:df:7e:e9:50:0c:ca: 90:f9:64:42:b9:da:48:e3:85:a8:bd:d5:0e:38:17: 4c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:61:7D:0A:48:7A:7D:19:2A:2A:BB:E8:40:49:97:15:9D:F9:1E:63 X509v3 Authority Key Identifier: keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:61:b6:fe:98:d3:52:65:62:b8:04:7c:74:76:3d:c7:4a:9b: 5c:93:ee:2c:58:4a:b6:fb:06:3d:63:9c:fe:da:47:00:01:88: f8:0a:bf:56:e0:f6:4e:00:2d:05:57:82:26:fb:c2:9b:e6:c3: 4e:6c:36:95:5f:22:6e:b2:4d:b3:d1:88:e2:70:ec:12:41:63: 4d:e7:af:f0:2a:36:a6:62:1b:f5:65:46:65:ec:a6:ec:c5:95: 93:95:b5:18:f0:a1:9e:b3:ab:e7:fd:4b:0f:03:11:7c:83:46: 3a:f0:16:3c:70:f5:a2:69:8b:e6:e3:1e:89:b6:e8:3a:16:1c: 69:62:39:43:4b:0d:49:42:c0:34:41:ed:aa:91:d3:ee:ce:78: ce:5a:58:71:8f:a5:6b:08:30:cb:50:6f:de:9c:18:7f:f9:e8: e9:4a:b0:09:e3:e2:78:e6:5f:5a:a1:64:5e:4f:f2:2d:b2:5c: dc:25:f5:c2:7b:e2:94:e6:a0:4a:db:c6:54:cd:6c:a2:66:8c: b5:10:2a:fe:1a:dc:35:af:86:8d:e4:04:1d:38:1f:33:87:b1: de:d6:c3:f8:08:ae:33:67:62:da:28:ab:7d:3c:22:77:6d:29: d1:c3:1b:2d:ed:93:61:50:73:ad:55:55:17:94:83:08:ed:e3: 30:27:9b:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLW7CawfzGTo71p+ysj04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NGQ5NjY3MmE1OWVjMzg5NWZjMTU4NDdhY2ExYjI5ZGI3 OTEyNDQwHhcNMjUxMjE2MDgwMTEwWhcNMjUxMjE3MDgwMTEwWjAzMTEwLwYDVQQD EygxMTYxN2QwYTQ4N2E3ZDE5MmEyYWJiZTg0MDQ5OTcxNTlkZjkxZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7J6LlCMrgwOMT+urVPZtBsJrUJj6 Uqv5CejdbYmOwOWXUFU8U3sCE+9vIRkt0lhQMzEmg3Jg+qNWo/Znv8ysUg6A9nJI 4jxo2cmcOmCtYUfKyjS4kUGJRfgfTHBlPodG0WmQ4okDm6DDRgUkS2ZkqYf+LSYT lAAlPGgft/qa/Q5VnaeY7Pb+4tsSbagLswl370zneB9CM/HGEw0hoPQ5cgev7RuH qLYpGTHRwjVfFqwzfojOpn2MbxsjpvlQNkp+5EkmdWA7jzHZrsQFLK/92uYU7nEm lMuE2n9/QaEH2FGNb4kkjuESaKHffulQDMqQ+WRCudpI44WovdUOOBdMtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFhfQpIen0ZKiq76EBJlxWd+R5jMB8GA1UdIwQY MBaAFGVNlmcqWew4lfwVhHrKGynbeRJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZWJlMzAtZWU4OS00OGRlLTg3NGMt YjQ2OWRiMTBiNjhhLzEvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zZWJlMzAtZWU4OS00OGRlLTg3NGMtYjQ2OWRiMTBiNjhh LzEvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWG2/pjT UmViuAR8dHY9x0qbXJPuLFhKtvsGPWOc/tpHAAGI+Aq/VuD2TgAtBVeCJvvCm+bD Tmw2lV8ibrJNs9GI4nDsEkFjTeev8Co2pmIb9WVGZeym7MWVk5W1GPChnrOr5/1L DwMRfINGOvAWPHD1ommL5uMeibboOhYcaWI5Q0sNSULANEHtqpHT7s54zlpYcY+l awgwy1Bv3pwYf/no6UqwCePieOZfWqFkXk/yLbJc3CX1wnvilOagStvGVM1somaM tRAq/hrcNa+GjeQEHTgfM4ex3tbD+AiuM2di2iirfTwid20p0cMbLe2TYVBzrVVV F5SDCO3jMCebQQ== -----END CERTIFICATE-----Generated at Tue Dec 16 10:53:50 2025 by rpki-client