This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft File: ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json) Hash identifier: XoK5v1RHMUro78bcj22yDzSqWlqCUG6OTeDzFh+w2p4= Subject key identifier: 63:F7:B9:97:7A:C3:3D:D1:EC:AE:95:5E:64:68:7F:8D:2B:AD:40:1E Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c Certificate serial: 019B35693A704F842AEEDEDE0D9F8F085823 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft Manifest number: 1798 Signing time: Fri 19 Dec 2025 07:00:47 +0000 Manifest this update: Fri 19 Dec 2025 07:00:47 +0000 Manifest next update: Sat 20 Dec 2025 07:00:47 +0000 Files and hashes: 1: 4DVldFO5y9KBtzxCTr71AtgC-eU.roa (hash: sBM0L37YAXg4FUlTCLrrPugqQEHySprVmExRuh4Lv3Y=) 2: 6kPkXmlWSAQjjCwMVOC6F-rjNv0.roa (hash: sTc836fo7TkkLRKHAoIO0+HiUzTAeRmVazBYlJks2f4=) 3: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: 5Frv255bCVkrEd7+AYSa3ZoN+QVSTcrGs7UtIvesdAY=) 4: _9bhuNhFLcA0HPv8bquRW0OUHTY.roa (hash: +AAi2JdNKRV5CFL7Yq+UFdnc1nHIGlMicPgKcuKxkmI=) 5: xZI_bvE6JftjTV0B3dxc_5kYW0g.roa (hash: AB1DpoviLX3AxgItOuLbSEQmOM0xIHXrb99sosPXy80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:3a:70:4f:84:2a:ee:de:de:0d:9f:8f:08:58:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c Validity Not Before: Dec 19 07:00:47 2025 GMT Not After : Dec 20 07:00:47 2025 GMT Subject: CN=63f7b9977ac33dd1ecae955e64687f8d2bad401e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:21:12:27:4f:08:1c:ea:d1:af:21:41:6a: c2:bc:af:d4:de:3e:89:30:df:e1:ac:8c:72:b0:3b: 9e:f3:5d:6f:1c:c8:78:c6:ed:ae:95:c0:66:ef:90: d8:ae:03:a3:2d:89:f2:39:bd:bb:2c:ea:1b:d5:47: 13:99:0d:4a:f2:84:7d:19:5b:13:81:82:0e:78:75: cc:d1:28:26:6a:8c:6f:0a:7b:83:6b:b1:cf:b5:66: d9:48:93:23:7b:7e:64:78:d3:47:88:fe:9e:90:6f: 26:e1:29:a0:94:8f:d1:5e:32:87:1b:1f:bb:3c:e9: 07:22:9b:b4:62:b7:19:12:64:10:38:4b:ee:fc:20: a9:a7:5c:cf:65:5e:3f:9e:78:95:f9:b6:01:8b:7c: 15:43:b7:cb:fb:6f:67:cb:4f:a6:e6:bd:6d:fa:04: b3:36:cb:5c:f8:67:af:3e:cd:27:98:c4:7d:c0:fa: 54:d1:3f:87:1b:98:88:20:a8:57:f5:29:a9:06:85: 9b:50:33:bd:af:30:18:eb:44:d7:be:87:4a:a3:2b: d3:ed:08:96:eb:8d:87:eb:86:40:de:88:ef:7f:15: 4e:fc:41:75:56:d6:2b:31:e4:72:87:28:f2:78:78: 76:98:0b:76:99:dd:53:bb:cb:56:7a:d5:ac:bf:53: 72:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F7:B9:97:7A:C3:3D:D1:EC:AE:95:5E:64:68:7F:8D:2B:AD:40:1E X509v3 Authority Key Identifier: keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:21:09:1a:17:28:3b:e8:7b:b5:48:8d:6a:07:17:07:aa:6e: bf:55:ec:8a:44:49:3d:0d:5f:3b:49:d3:b1:5f:a5:19:d9:52: fd:99:16:d3:62:be:03:8e:dc:f2:6e:93:b7:5d:78:f7:84:51: bb:67:f4:c9:0d:8e:e4:dd:78:71:df:1e:9d:e6:b3:04:96:e0: ff:b3:30:a0:d1:ae:cf:ab:95:ff:b7:4a:c1:78:97:31:90:d6: 69:bf:89:06:1d:26:78:d2:00:af:6d:6f:66:87:74:d9:dd:fa: a3:ec:8b:08:20:ed:3c:f7:e5:2c:24:83:e6:28:43:8a:07:e6: 8d:ae:6f:f2:cc:29:5e:02:29:e3:de:96:f2:21:e1:e6:a3:bb: 80:a3:4e:82:f6:dd:0f:37:5d:0d:4d:4b:28:85:a0:40:21:c8: f6:12:7c:46:36:ab:b4:a4:52:d1:a6:5d:38:16:66:2a:eb:87: 7b:cc:ca:9d:8f:d0:4f:24:f8:15:f8:9e:85:c5:ed:1f:cf:60: eb:c8:17:55:ca:8a:57:2b:8e:1c:84:55:f4:fd:b9:3c:98:46: 19:64:02:c5:01:a6:24:b4:70:f6:01:48:8e:b8:97:66:f0:b8: 3f:ce:58:6c:c4:bb:32:a9:a4:64:c6:07:c8:eb:ab:6f:78:db: f0:f4:96:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aTpwT4Qq7t7eDZ+PCFgjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDE3MWY5M2NjMWNhNzE2ZmM4MDZlMzZhNTU4NTJjZGY0 ZjFjMWMwHhcNMjUxMjE5MDcwMDQ3WhcNMjUxMjIwMDcwMDQ3WjAzMTEwLwYDVQQD Eyg2M2Y3Yjk5NzdhYzMzZGQxZWNhZTk1NWU2NDY4N2Y4ZDJiYWQ0MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthEhEidPCBzq0a8hQWrCvK/U3j6J MN/hrIxysDue811vHMh4xu2ulcBm75DYrgOjLYnyOb27LOob1UcTmQ1K8oR9GVsT gYIOeHXM0SgmaoxvCnuDa7HPtWbZSJMje35keNNHiP6ekG8m4SmglI/RXjKHGx+7 POkHIpu0YrcZEmQQOEvu/CCpp1zPZV4/nniV+bYBi3wVQ7fL+29ny0+m5r1t+gSz Nstc+GevPs0nmMR9wPpU0T+HG5iIIKhX9SmpBoWbUDO9rzAY60TXvodKoyvT7QiW 642H64ZA3ojvfxVO/EF1VtYrMeRyhyjyeHh2mAt2md1Tu8tWetWsv1NyEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGP3uZd6wz3R7K6VXmRof40rrUAeMB8GA1UdIwQY MBaAFGTRcfk8wcpxb8gG42pVhSzfTxwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMmQ5ZGYtMTZlYi00NDllLTgzZjAt YTQ2MzVkZjQ3ZDcwLzEvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mMmQ5ZGYtMTZlYi00NDllLTgzZjAtYTQ2MzVkZjQ3ZDcw LzEvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyEJGhco O+h7tUiNagcXB6puv1XsikRJPQ1fO0nTsV+lGdlS/ZkW02K+A47c8m6Tt11494RR u2f0yQ2O5N14cd8eneazBJbg/7MwoNGuz6uV/7dKwXiXMZDWab+JBh0meNIAr21v Zod02d36o+yLCCDtPPflLCSD5ihDigfmja5v8swpXgIp496W8iHh5qO7gKNOgvbd DzddDU1LKIWgQCHI9hJ8RjartKRS0aZdOBZmKuuHe8zKnY/QTyT4FfiehcXtH89g 68gXVcqKVyuOHIRV9P25PJhGGWQCxQGmJLRw9gFIjriXZvC4P85YbMS7MqmkZMYH yOurb3jb8PSWtA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:19:58 2025 by rpki-client