This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json) Hash identifier: 7ghLyU7hpgvI8WWp2RS3O0Yho9xNb8Qw1dqd5HT2ntI= Subject key identifier: EA:F8:26:7B:7A:1E:60:BF:43:84:05:08:AB:DD:00:98:4C:FB:6E:A9 Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc Certificate serial: 019B32D67671E6CFB4766EB5FF0A1E3CDF13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft Manifest number: 0C54 Signing time: Thu 18 Dec 2025 19:01:14 +0000 Manifest this update: Thu 18 Dec 2025 19:01:14 +0000 Manifest next update: Fri 19 Dec 2025 19:01:14 +0000 Files and hashes: 1: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: gsbh9B/pe0gQoIj0GQw+/JzqEHkQ9ELSsfr6vJ3QdGg=) 2: fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa (hash: 6Ji4KJM6oBtjO9Pzhwf19OTNTLmIDSqTSnb+aKfxDkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:76:71:e6:cf:b4:76:6e:b5:ff:0a:1e:3c:df:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc Validity Not Before: Dec 18 19:01:14 2025 GMT Not After : Dec 19 19:01:14 2025 GMT Subject: CN=eaf8267b7a1e60bf43840508abdd00984cfb6ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:81:6d:f4:8c:33:b9:b2:ca:24:16:20:2e:fd: dd:a7:1e:53:7f:53:a0:4d:95:2c:b9:bd:bd:a5:a9: c8:0f:0e:f9:5b:06:f7:4f:7b:af:6a:00:fd:81:5e: f4:4d:7d:b0:89:ca:16:72:27:29:52:0c:f2:d2:a9: 4e:ad:55:b5:93:3f:89:cf:48:c5:ed:21:e0:87:4d: 04:07:ad:76:6c:42:27:90:f4:8d:2d:f4:56:a2:99: 1e:96:03:79:92:dd:2e:6a:e7:8d:67:a2:2f:fa:1c: e2:b1:89:b4:36:97:8e:f1:28:53:d3:32:24:9b:e9: 67:3c:72:53:a1:8c:da:58:e4:54:f0:21:4d:d5:b2: 0a:d7:66:76:9a:04:28:0d:7c:1a:09:2d:47:fa:60: 00:55:26:9e:24:7d:40:53:4a:6a:5f:0c:5a:86:43: 5b:45:43:15:ff:3a:7e:10:7f:9d:39:75:34:b3:92: 85:0e:69:51:44:97:ee:49:3c:6e:1b:dd:8c:e6:36: 64:16:a5:bd:4f:21:07:ea:5e:70:00:6a:8a:3b:1d: 71:02:62:b9:a2:e5:76:9f:02:04:0b:6f:c8:cc:53: 39:8a:f4:56:f8:17:b2:16:ef:0c:50:20:a2:b9:c8: 25:6d:a3:02:27:d6:54:5c:c4:3c:96:1b:cd:2a:85: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F8:26:7B:7A:1E:60:BF:43:84:05:08:AB:DD:00:98:4C:FB:6E:A9 X509v3 Authority Key Identifier: keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d8:e1:cb:7a:a9:ee:07:73:7f:aa:8a:ff:9a:c5:3d:c3:cd: 35:cc:8d:63:d3:58:ce:c8:9a:60:db:87:85:64:cd:0d:7d:ce: e3:c7:95:b4:72:a7:23:aa:70:91:f3:5a:50:55:b1:1b:5c:9c: ac:9c:c0:81:01:40:95:37:0b:b8:e8:38:45:df:89:1c:9d:c7: d4:6c:64:e8:b6:9a:de:f3:3f:d9:00:c4:c3:14:47:b0:ae:67: d9:06:6f:ad:95:7d:3e:09:0b:d1:70:31:ad:c5:d4:af:f1:d1: 72:93:b4:46:f8:3c:53:b2:9c:b4:78:bb:1d:24:8d:89:b4:bb: 57:bb:f3:2d:c7:fa:bc:50:54:ec:b6:9d:1f:87:4c:f3:99:f5: ba:b6:19:cd:48:af:d9:55:2b:07:fe:89:c2:cd:6c:e6:6c:67: 43:61:1b:1a:be:eb:83:40:be:20:16:9d:58:38:e3:d8:fa:67: 28:df:dd:b7:d7:04:55:71:10:18:38:c6:28:17:2e:5b:4c:e8: 90:31:01:35:45:40:eb:e2:94:40:eb:2b:0e:b0:be:ff:98:96: 6a:85:79:1a:c9:98:af:15:aa:9d:ec:30:3d:35:48:24:46:29: cb:80:07:fe:bf:4c:92:15:fe:16:f5:e3:32:eb:7a:25:15:b7: f6:fb:c6:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1nZx5s+0dm61/woePN8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NDY1YThhMWU4ZTQyZjFhNjBkMjc4MTk4YzMyMGFlYzBm M2Y3ZGMwHhcNMjUxMjE4MTkwMTE0WhcNMjUxMjE5MTkwMTE0WjAzMTEwLwYDVQQD EyhlYWY4MjY3YjdhMWU2MGJmNDM4NDA1MDhhYmRkMDA5ODRjZmI2ZWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YFt9IwzubLKJBYgLv3dpx5Tf1Og TZUsub29panIDw75Wwb3T3uvagD9gV70TX2wicoWcicpUgzy0qlOrVW1kz+Jz0jF 7SHgh00EB612bEInkPSNLfRWopkelgN5kt0uaueNZ6Iv+hzisYm0NpeO8ShT0zIk m+lnPHJToYzaWORU8CFN1bIK12Z2mgQoDXwaCS1H+mAAVSaeJH1AU0pqXwxahkNb RUMV/zp+EH+dOXU0s5KFDmlRRJfuSTxuG92M5jZkFqW9TyEH6l5wAGqKOx1xAmK5 ouV2nwIEC2/IzFM5ivRW+BeyFu8MUCCiucglbaMCJ9ZUXMQ8lhvNKoU5iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOr4Jnt6HmC/Q4QFCKvdAJhM+26pMB8GA1UdIwQY MBaAFGRGWooejkLxpg0ngZjDIK7A8/fcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUt NzBlNjBlZGJjMWU3LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUtNzBlNjBlZGJjMWU3 LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddjhy3qp 7gdzf6qK/5rFPcPNNcyNY9NYzsiaYNuHhWTNDX3O48eVtHKnI6pwkfNaUFWxG1yc rJzAgQFAlTcLuOg4Rd+JHJ3H1Gxk6Laa3vM/2QDEwxRHsK5n2QZvrZV9PgkL0XAx rcXUr/HRcpO0Rvg8U7KctHi7HSSNibS7V7vzLcf6vFBU7LadH4dM85n1urYZzUiv 2VUrB/6Jws1s5mxnQ2EbGr7rg0C+IBadWDjj2PpnKN/dt9cEVXEQGDjGKBcuW0zo kDEBNUVA6+KUQOsrDrC+/5iWaoV5GsmYrxWqnewwPTVIJEYpy4AH/r9MkhX+FvXj Mut6JRW39vvGZA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:11:35 2025 by rpki-client