This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft File: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json) Hash identifier: a76m4WvS9cGk9va0cXsJHNhrwqRY30J7I434HGJCcvk= Subject key identifier: 38:CD:A2:DA:94:BF:2E:AE:61:41:44:15:24:01:DC:74:9C:D1:23:6C Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9 Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9 Certificate serial: 019B620B2B7DC9968FB00BAB42FA194AB150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft Manifest number: 1102 Signing time: Sat 27 Dec 2025 23:00:57 +0000 Manifest this update: Sat 27 Dec 2025 23:00:57 +0000 Manifest next update: Sun 28 Dec 2025 23:00:57 +0000 Files and hashes: 1: 1M6uqQrJ-H8cZQtvFA1H52Pn6A4.roa (hash: nnfKaOcFHds8X3AM+jMxIYq03nNPy9Dlqx+6UDoHZiY=) 2: GKsMg22mlpLXCVq6Bfh92-dR9A0.roa (hash: vyV6Le4sH8oc7qh9Fe3hr94CnSdMfMjPQP6XmVQxrGc=) 3: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: V4F1e6lb7ztzekxwSu1AlFAsiU2nZs44GUHDwINE3Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0b:2b:7d:c9:96:8f:b0:0b:ab:42:fa:19:4a:b1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9 Validity Not Before: Dec 27 23:00:57 2025 GMT Not After : Dec 28 23:00:57 2025 GMT Subject: CN=38cda2da94bf2eae614144152401dc749cd1236c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:97:fa:09:bd:2e:6c:fd:37:45:d2:d2:20:ce: da:8f:3f:dc:40:3e:d6:6d:62:19:c1:e0:9c:e1:b1: a2:5a:86:3c:af:0f:65:37:cf:d8:a8:49:00:fe:b6: 7a:28:7d:34:8d:fa:9b:a6:05:9a:6c:2e:18:4c:2a: 5b:3e:0e:85:0d:18:68:52:d9:4d:4d:c4:16:6c:e9: 7a:a9:fd:18:62:f3:74:b7:7b:b6:0c:19:a3:a9:0e: db:97:2c:c5:64:6c:72:71:3d:36:07:ba:2d:c9:a7: f4:c8:56:c0:65:c2:d9:f8:dc:b7:9e:89:82:7b:cd: 38:7d:fd:fd:18:7a:28:e6:83:27:c5:b8:ca:6a:69: 3a:30:42:84:ac:4e:7b:dc:ed:ec:a6:9d:fc:fd:08: df:77:4e:ff:a3:92:6c:d2:11:72:9c:8d:3f:71:ab: 07:28:75:de:7d:d3:1b:a0:1e:8d:d7:41:5a:0d:6e: 4a:92:22:a4:45:14:9e:1d:bd:62:b6:9c:fa:6e:d7: 44:9f:65:bc:28:e3:7d:e9:51:14:b9:10:4b:2b:91: 72:2d:a8:06:4c:ae:77:ed:95:ac:03:76:0f:c1:f6: d1:0c:eb:23:90:a4:3f:c7:fa:2a:f3:82:ae:dc:47: ee:f3:a2:40:07:27:d6:c1:c3:74:5c:2d:ae:23:30: f6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CD:A2:DA:94:BF:2E:AE:61:41:44:15:24:01:DC:74:9C:D1:23:6C X509v3 Authority Key Identifier: keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:17:43:e1:96:07:b1:96:06:9f:de:12:fd:8c:3b:24:ea:35: 42:bc:90:b0:ed:65:a4:1c:41:0b:3c:c4:16:8b:ce:14:e0:4f: fb:41:f4:dc:b6:f0:cf:b0:da:dc:d4:c0:df:eb:c4:c3:7a:e0: 38:79:60:67:73:46:1f:fb:b0:5a:54:be:26:8d:e3:d7:93:c2: 11:1e:6a:3f:cb:fb:6f:c1:70:d7:31:87:a6:a5:c9:a4:3a:6d: 19:03:43:01:40:7b:47:76:ed:d5:30:e7:71:c6:00:4a:1f:f6: 85:bc:65:ad:25:bf:d2:7f:7c:bf:a1:14:34:35:80:07:b9:23: aa:cf:f8:93:76:31:52:bf:39:16:00:14:29:86:7d:b3:3e:dc: 0c:67:37:36:c7:dd:6e:f7:6a:34:f7:67:95:ad:d3:9b:70:d7: 10:53:0b:0d:97:3c:57:7e:4c:94:5c:d2:e7:eb:6a:d7:6e:0d: be:69:40:9e:ca:f6:58:2f:e8:ae:4d:bd:fc:0c:1f:31:51:12: 09:87:0b:85:b0:77:26:96:55:6a:f9:04:ba:18:36:db:dd:12: c1:16:a4:1a:27:03:df:22:45:5e:c1:c7:48:f4:f4:34:54:eb: 82:32:50:e5:6a:08:3b:fd:8e:94:10:18:f0:85:26:78:6d:c6: d0:1f:40:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiCyt9yZaPsAurQvoZSrFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YjU5YWU1MjE5NTJkYTU1ZTAzZjc3OWI4ODUwMzFjMGM4 MDljZjkwHhcNMjUxMjI3MjMwMDU3WhcNMjUxMjI4MjMwMDU3WjAzMTEwLwYDVQQD EygzOGNkYTJkYTk0YmYyZWFlNjE0MTQ0MTUyNDAxZGM3NDljZDEyMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Zf6Cb0ubP03RdLSIM7ajz/cQD7W bWIZweCc4bGiWoY8rw9lN8/YqEkA/rZ6KH00jfqbpgWabC4YTCpbPg6FDRhoUtlN TcQWbOl6qf0YYvN0t3u2DBmjqQ7blyzFZGxycT02B7otyaf0yFbAZcLZ+Ny3nomC e804ff39GHoo5oMnxbjKamk6MEKErE573O3spp38/Qjfd07/o5Js0hFynI0/casH KHXefdMboB6N10FaDW5KkiKkRRSeHb1itpz6btdEn2W8KON96VEUuRBLK5FyLagG TK537ZWsA3YPwfbRDOsjkKQ/x/oq84Ku3Efu86JAByfWwcN0XC2uIzD2MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjNotqUvy6uYUFEFSQB3HSc0SNsMB8GA1UdIwQY MBaAFGS1muUhlS2lXgP3ebiFAxwMgJz5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQt NTFhZDAwZTU0MzMyLzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQtNTFhZDAwZTU0MzMy LzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhdD4ZYH sZYGn94S/Yw7JOo1QryQsO1lpBxBCzzEFovOFOBP+0H03Lbwz7Da3NTA3+vEw3rg OHlgZ3NGH/uwWlS+Jo3j15PCER5qP8v7b8Fw1zGHpqXJpDptGQNDAUB7R3bt1TDn ccYASh/2hbxlrSW/0n98v6EUNDWAB7kjqs/4k3YxUr85FgAUKYZ9sz7cDGc3Nsfd bvdqNPdnla3Tm3DXEFMLDZc8V35MlFzS5+tq124NvmlAnsr2WC/ork29/AwfMVES CYcLhbB3JpZVavkEuhg2290SwRakGicD3yJFXsHHSPT0NFTrgjJQ5WoIO/2OlBAY 8IUmeG3G0B9Adg== -----END CERTIFICATE-----Generated at Sun Dec 28 06:22:45 2025 by rpki-client