This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft File: ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json) Hash identifier: +HTiaeTtQlMELaEcmgxVqtRiap00Ha93kmnV2Ic9mcs= Subject key identifier: A8:BB:CF:C5:CD:2A:DF:7B:5E:C6:45:14:79:A3:BD:5B:07:9A:7D:D1 Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F Certificate issuer: /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f Certificate serial: 019B3A900FD10405BBDA189E7A53F46BA02E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft Manifest number: 12D0 Signing time: Sat 20 Dec 2025 07:01:18 +0000 Manifest this update: Sat 20 Dec 2025 07:01:18 +0000 Manifest next update: Sun 21 Dec 2025 07:01:18 +0000 Files and hashes: 1: 6awQ5vvLp2COkdyExVIfOWpcf0U.roa (hash: x8eRoJ1IMK9tcKhwbrAHFnXzsVa+tGQZBHOMDWjY4g4=) 2: ZQpO1aPpN8R6g2nPkZCJTaDtLDo.roa (hash: jW7tnAUthIc+57WN8d2CU9YQ1bHY6ehX+0z6UW+dFyI=) 3: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: Kyv5sZMr71EJ2gWIcQ/KSBYAiRY8B/hYtb6vXdbxcng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:0f:d1:04:05:bb:da:18:9e:7a:53:f4:6b:a0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f Validity Not Before: Dec 20 07:01:18 2025 GMT Not After : Dec 21 07:01:18 2025 GMT Subject: CN=a8bbcfc5cd2adf7b5ec6451479a3bd5b079a7dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:20:aa:2e:ff:1f:8e:7b:85:cd:9e:d6:81:85: 50:ae:d5:da:f9:66:93:b5:01:6d:74:18:a8:94:9c: 59:b6:21:ad:50:78:41:3f:8a:5d:2b:94:88:d2:a6: 9c:c2:73:4a:43:4e:56:d8:74:6b:b2:db:ce:bf:50: 02:09:49:f3:d5:cd:02:05:bc:73:ae:5d:87:de:d5: 7d:cb:73:f2:46:1c:cb:b2:80:6c:d1:c1:0a:d8:61: 61:08:c7:4c:51:76:cb:11:6a:ed:39:f6:8c:83:f7: 64:1d:6e:e1:71:9e:0a:f3:1e:f0:e1:e4:11:a7:0d: 6e:1b:14:d9:3c:c5:e0:df:68:c4:67:80:d4:91:3a: 27:1d:8e:c1:4f:3a:fa:5e:b1:1f:e2:fa:65:d0:ca: 91:d7:d7:e5:a3:be:be:87:62:6e:95:be:e8:09:fb: 93:fa:2d:65:cb:85:0e:0e:9a:4b:22:27:9e:8d:51: 60:2a:45:19:3d:c8:95:49:66:bc:07:2d:55:a4:a0: 28:9c:79:75:81:cb:15:ec:00:f7:35:7b:80:a1:6c: 3e:cc:d3:07:be:16:7e:bf:38:b6:16:80:7a:22:f9: 37:94:7c:83:41:7a:70:77:e9:2c:50:eb:cd:a1:18: aa:0f:7c:54:3c:60:fb:39:10:84:46:16:a3:96:91: e9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BB:CF:C5:CD:2A:DF:7B:5E:C6:45:14:79:A3:BD:5B:07:9A:7D:D1 X509v3 Authority Key Identifier: keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f5:12:6d:b1:f0:b0:a3:77:c3:d1:b1:45:21:30:be:ec:72: 37:31:01:fc:b0:aa:2e:0b:fd:58:81:62:ed:ce:c4:dc:0c:ec: 8d:e1:c5:ef:42:a5:51:8c:43:cd:3b:6e:1f:42:cd:dd:0f:ed: 63:4f:39:3a:8e:42:64:97:45:8a:b8:e7:92:96:73:5c:29:5d: ed:ed:f4:71:6d:14:82:21:c5:d9:4f:79:e7:46:73:10:cc:bd: c7:f0:b0:f2:63:8e:ce:62:40:45:69:1f:46:3a:ec:e0:36:70: 52:5f:0b:b1:28:27:4f:b7:ee:3e:9a:35:55:8e:92:0c:e3:0d: 19:c9:20:9c:99:a2:b0:e2:44:a3:72:69:d9:cc:9b:0c:d2:2d: b2:42:02:fc:b1:c9:b3:cd:5d:81:1e:25:cf:be:34:ac:ae:d8: 76:f5:cf:4b:64:c5:e1:88:83:c4:d9:fe:41:30:31:ab:88:83: 62:29:19:65:19:5c:f7:c9:8a:32:4c:1c:2e:b0:9b:35:45:36: 95:f5:eb:bd:87:37:7e:89:48:03:d8:95:f6:43:57:d3:c1:fd: 0b:ac:a1:52:10:88:e7:bb:8f:73:57:b6:e5:14:92:73:71:92: e5:44:61:a1:1e:ad:94:c9:cd:ca:5b:96:fc:6d:a1:f8:f1:4c: 9e:f6:d4:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kA/RBAW72hieelP0a6AuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NWFlZjNjZWYzZDlhZmEwMjdkYjMzNTc5ZjRhMWZlOGFk OTFjNmYwHhcNMjUxMjIwMDcwMTE4WhcNMjUxMjIxMDcwMTE4WjAzMTEwLwYDVQQD EyhhOGJiY2ZjNWNkMmFkZjdiNWVjNjQ1MTQ3OWEzYmQ1YjA3OWE3ZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriCqLv8fjnuFzZ7WgYVQrtXa+WaT tQFtdBiolJxZtiGtUHhBP4pdK5SI0qacwnNKQ05W2HRrstvOv1ACCUnz1c0CBbxz rl2H3tV9y3PyRhzLsoBs0cEK2GFhCMdMUXbLEWrtOfaMg/dkHW7hcZ4K8x7w4eQR pw1uGxTZPMXg32jEZ4DUkTonHY7BTzr6XrEf4vpl0MqR19flo76+h2Julb7oCfuT +i1ly4UODppLIieejVFgKkUZPciVSWa8By1VpKAonHl1gcsV7AD3NXuAoWw+zNMH vhZ+vzi2FoB6Ivk3lHyDQXpwd+ksUOvNoRiqD3xUPGD7ORCERhajlpHppwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKi7z8XNKt97XsZFFHmjvVsHmn3RMB8GA1UdIwQY MBaAFGVa7zzvPZr6An2zNXn0of6K2RxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUt ZWY2YmQyNmEwMzA1LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUtZWY2YmQyNmEwMzA1 LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPUSbbHw sKN3w9GxRSEwvuxyNzEB/LCqLgv9WIFi7c7E3AzsjeHF70KlUYxDzTtuH0LN3Q/t Y085Oo5CZJdFirjnkpZzXCld7e30cW0UgiHF2U9550ZzEMy9x/Cw8mOOzmJARWkf Rjrs4DZwUl8LsSgnT7fuPpo1VY6SDOMNGckgnJmisOJEo3Jp2cybDNItskIC/LHJ s81dgR4lz740rK7YdvXPS2TF4YiDxNn+QTAxq4iDYikZZRlc98mKMkwcLrCbNUU2 lfXrvYc3folIA9iV9kNX08H9C6yhUhCI57uPc1e25RSSc3GS5URhoR6tlMnNyluW /G2h+PFMnvbUBw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:27 2025 by rpki-client