This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft File: ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json) Hash identifier: HgjTUaQgSCoNEs64HeQRscpnn8SFELy+3Fu7Lcfrh9c= Subject key identifier: 63:99:FB:5E:89:69:F0:74:8C:29:E9:31:4E:6B:0B:50:A9:81:6D:BD Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a Certificate serial: 019B39B43080B6496F93949574E5B1BFFFDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft Manifest number: 0F7A Signing time: Sat 20 Dec 2025 03:01:08 +0000 Manifest this update: Sat 20 Dec 2025 03:01:08 +0000 Manifest next update: Sun 21 Dec 2025 03:01:08 +0000 Files and hashes: 1: EQLAmwce-4qvK6GmwcFTOhIRkwQ.roa (hash: JsjgQjAnTuCMbWUsyWPVoy0ThBVMbRkRSyV5BIOaYsk=) 2: VBFGSZe25hk515GWxj1O9wYFsPI.roa (hash: cO/lLoWMHsASPsdz4OnLCXsIfZY9ylovdO0mqXRc+eM=) 3: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: UhR9nrQZz3V7YTmY3VxDiMSkZIQgu97EwPCvaN46Sdg=) 4: t_lJAzfvjWKMyLKQMrioEk5d_0w.roa (hash: wl26VQmURsOv+pvsAOIbkvKehkFtkmgC21ZsAlFMTv4=) 5: wqvUrg3ytAmyescNq7O97CA45e8.roa (hash: e+ouxKVrzJBnu8qX3QbAYldaZ2LWrtwIg9cy15dfuBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:30:80:b6:49:6f:93:94:95:74:e5:b1:bf:ff:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a Validity Not Before: Dec 20 03:01:08 2025 GMT Not After : Dec 21 03:01:08 2025 GMT Subject: CN=6399fb5e8969f0748c29e9314e6b0b50a9816dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9f:4b:19:7e:0d:93:70:ee:19:b2:e2:92:b7: b5:96:1e:83:03:06:c1:02:30:54:3c:6f:bc:92:43: 79:da:3c:51:3a:03:a6:cc:be:d9:db:2b:27:f1:fb: e1:bb:b9:20:9d:8b:d1:92:ed:27:c6:56:7b:06:2b: 1e:2c:e8:53:11:b7:cb:52:a4:74:15:32:18:46:0f: 53:d3:24:ae:70:32:84:00:ec:26:8e:d2:bf:a4:55: f5:8a:d9:b8:9f:d6:96:ef:32:52:a0:2f:30:3a:e4: 5c:c8:f5:6a:1a:db:3c:95:79:a1:cf:dc:0c:f1:a8: 53:91:ca:f5:f9:5f:59:6c:d2:40:4c:a0:5e:4f:53: bb:b1:09:e2:ae:d8:21:4b:32:87:40:ba:bd:74:61: 9b:18:ee:7e:06:c7:72:83:4a:78:f2:ed:58:47:e2: ff:a2:0a:4f:a1:4f:4a:84:27:7f:87:c6:70:13:97: e2:9e:2f:09:3c:5f:5d:ab:37:bc:84:d4:10:ce:ce: b8:26:da:c8:3d:89:b3:30:13:c0:ca:27:6b:b5:16: d9:88:ca:f6:8b:fe:20:af:5b:43:70:d3:98:e2:f6: 7e:46:5c:86:f7:dd:2b:b9:7c:40:b9:2b:a5:62:66: 23:61:2e:30:02:22:ff:21:73:0c:a4:54:d3:f3:28: 1a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:99:FB:5E:89:69:F0:74:8C:29:E9:31:4E:6B:0B:50:A9:81:6D:BD X509v3 Authority Key Identifier: keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:7a:c1:8a:44:82:17:7c:6c:71:d2:11:93:51:c7:10:8b:c2: 7f:e1:07:02:7a:74:77:d6:b4:bd:24:bb:72:41:f7:8a:45:90: fd:79:b2:3e:2b:ce:d9:a6:e2:20:b5:b0:e8:8c:68:cf:ad:f4: 91:36:d7:ea:bf:0e:0d:63:4c:7f:ac:fa:db:27:be:a9:70:19: f3:56:6e:c2:cc:27:d9:1f:68:0a:4a:6d:f8:c6:a3:e1:fe:30: cd:21:09:70:b0:a5:bf:20:be:a2:cf:80:81:6d:68:15:b3:e7: d0:49:5b:78:dd:74:fa:d3:ee:85:e6:e8:76:fb:e6:fc:45:b2: 58:3b:69:c3:46:c6:79:61:59:84:d2:aa:62:78:cb:82:b4:ee: e3:48:d0:93:84:94:ba:50:19:4c:19:e3:3c:f5:4c:6d:0c:99: f6:11:60:7b:88:f4:01:69:94:b4:48:59:8d:e5:c6:70:f9:ce: ff:04:37:ff:cb:d2:a7:07:0d:21:d8:b9:0a:07:58:b1:bd:0f: 47:e7:63:0c:22:56:15:d4:36:5e:0a:8b:cc:5c:5a:48:d6:aa: b3:a6:4a:8a:45:35:12:2e:35:47:cd:d1:42:c5:72:d9:ca:86: 51:e7:bf:ce:1a:4a:e1:f6:99:06:d8:01:4d:98:ba:20:21:d2: e4:63:04:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tDCAtklvk5SVdOWxv//dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OWMzNTY2MzMzODhlOWJkODk3ZDAwMGEzZjM4YmMxZTU0 NmVmNGEwHhcNMjUxMjIwMDMwMTA4WhcNMjUxMjIxMDMwMTA4WjAzMTEwLwYDVQQD Eyg2Mzk5ZmI1ZTg5NjlmMDc0OGMyOWU5MzE0ZTZiMGI1MGE5ODE2ZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ9LGX4Nk3DuGbLikre1lh6DAwbB AjBUPG+8kkN52jxROgOmzL7Z2ysn8fvhu7kgnYvRku0nxlZ7BiseLOhTEbfLUqR0 FTIYRg9T0ySucDKEAOwmjtK/pFX1itm4n9aW7zJSoC8wOuRcyPVqGts8lXmhz9wM 8ahTkcr1+V9ZbNJATKBeT1O7sQnirtghSzKHQLq9dGGbGO5+Bsdyg0p48u1YR+L/ ogpPoU9KhCd/h8ZwE5fini8JPF9dqze8hNQQzs64JtrIPYmzMBPAyidrtRbZiMr2 i/4gr1tDcNOY4vZ+RlyG990ruXxAuSulYmYjYS4wAiL/IXMMpFTT8ygaxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOZ+16JafB0jCnpMU5rC1CpgW29MB8GA1UdIwQY MBaAFGWcNWYzOI6b2JfQAKPzi8HlRu9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt M2M3ZTRmOTNlNDJiLzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi LzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3rBikSC F3xscdIRk1HHEIvCf+EHAnp0d9a0vSS7ckH3ikWQ/XmyPivO2abiILWw6Ixoz630 kTbX6r8ODWNMf6z62ye+qXAZ81Zuwswn2R9oCkpt+Maj4f4wzSEJcLClvyC+os+A gW1oFbPn0ElbeN10+tPuhebodvvm/EWyWDtpw0bGeWFZhNKqYnjLgrTu40jQk4SU ulAZTBnjPPVMbQyZ9hFge4j0AWmUtEhZjeXGcPnO/wQ3/8vSpwcNIdi5CgdYsb0P R+djDCJWFdQ2XgqLzFxaSNaqs6ZKikU1Ei41R83RQsVy2cqGUee/zhpK4faZBtgB TZi6ICHS5GMEow== -----END CERTIFICATE-----Generated at Sat Dec 20 07:30:53 2025 by rpki-client