This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json) Hash identifier: G/YrDTxZS1UblWUC46OFod6niJRaEnyiQ3OIHKbd44Y= Subject key identifier: FD:0F:16:02:31:0F:53:E2:4D:10:BC:D0:5A:F6:FF:33:0A:AE:93:69 Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0 Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0 Certificate serial: 019B45B88472CD9794DA83C2D58C98601CD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 11:01:18 +0000 Manifest this update: Mon 22 Dec 2025 11:01:18 +0000 Manifest next update: Tue 23 Dec 2025 11:01:18 +0000 Files and hashes: 1: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: doSyAhzUSUKiRO5ZRqVG3uAZSB/ODIuRjw0D+kKl3ow=) 2: d98mF8VuRmp24iJGNGtsA82Qm3k.roa (hash: St6m9PVExFvayS/533ff6DbQIFfqWRPHTLli6ct6T54=) 3: pxA2emkj1Wi4hN6RLcWYaRGwohw.roa (hash: uZbURZqzj+fL5lJVe1ufQh9sUQe5T2Re+0qL38WwpV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:84:72:cd:97:94:da:83:c2:d5:8c:98:60:1c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0 Validity Not Before: Dec 22 11:01:18 2025 GMT Not After : Dec 23 11:01:18 2025 GMT Subject: CN=fd0f1602310f53e24d10bcd05af6ff330aae9369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bc:8e:65:09:b7:c4:29:07:3c:9a:1d:3b:b5: 74:5e:30:ac:fe:13:90:e4:b3:32:1e:56:38:d5:4d: 94:28:66:34:36:7b:11:c9:4f:22:f4:80:ab:16:8b: d3:73:3f:3e:3d:e2:d2:9b:4f:1f:e5:0a:d0:60:30: 50:e6:bd:8f:9b:15:fb:e3:d9:ec:e1:b3:15:ed:c4: 91:64:52:8d:be:f0:d8:3a:24:b5:5e:9f:07:08:e9: a6:ec:82:55:fa:bc:02:6f:1e:d4:74:7b:a2:45:78: 89:b8:00:dc:f5:1f:c7:d6:ba:98:68:40:63:38:19: 56:a3:50:d4:52:ca:f5:61:17:96:9c:d7:73:f9:05: 3d:c3:2f:57:f9:f4:c7:3c:ab:46:ac:0e:75:94:cd: df:9b:70:27:cc:a8:8b:a1:43:fb:c5:a7:2b:a3:8e: 2f:69:e7:c2:27:36:95:8b:c5:61:85:e1:0f:87:94: 63:2f:b1:7e:a1:6d:5c:a0:f9:17:74:f0:18:ff:b8: b3:e9:a6:79:4d:7e:51:50:52:cb:65:f6:4e:98:88: 8a:9a:23:39:b9:d2:9e:86:87:97:f6:41:bb:2c:b4: c3:3b:5c:5a:43:0d:93:83:1d:0e:e7:e9:53:ce:96: e0:b1:f1:c1:a4:b1:42:49:f1:f3:35:0e:f4:85:3f: aa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0F:16:02:31:0F:53:E2:4D:10:BC:D0:5A:F6:FF:33:0A:AE:93:69 X509v3 Authority Key Identifier: keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0f:d4:d4:e8:a6:8f:12:9a:9f:7f:1d:a0:a7:82:b7:a1:ef: 3b:43:82:1d:8a:25:e8:f3:b0:53:f3:4d:51:e5:b0:d5:29:97: 8f:43:98:29:b9:d0:ca:59:57:4f:ea:d7:b7:e8:d3:dd:46:45: 1e:69:64:12:93:31:14:87:0d:56:42:b3:0c:92:40:4a:b3:38: aa:48:00:62:b6:8f:c2:d1:ad:86:e3:2c:ce:2c:bb:6f:2d:b7: 10:63:11:f3:d5:75:4c:ff:7e:23:16:60:87:e3:c6:1f:ed:90: 7e:29:76:97:f8:18:2e:f2:da:b0:e0:46:01:8e:9a:a7:38:c1: 08:3c:cb:e9:a0:de:c6:5f:1c:e1:0d:53:5a:7e:ee:e2:c8:c7: cf:a9:55:8c:eb:42:65:ad:91:24:55:04:ed:a3:cf:2e:06:54: a3:5f:93:07:25:29:6f:53:bc:77:6a:fa:d1:56:20:79:f8:92: 50:ea:30:c8:d9:fb:b7:f8:90:a8:84:2d:05:62:dc:26:18:27: 02:34:96:33:a4:ca:86:14:0c:eb:2a:72:a4:f0:b7:b1:05:93: 84:b1:4c:9f:e6:fa:3a:75:17:14:43:d6:49:6c:fa:b8:8e:f7: b3:57:4b:b8:af:f8:5a:8c:29:78:a6:f2:53:a1:47:77:3d:cf: df:a0:ff:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuIRyzZeU2oPC1YyYYBzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NjZhZGRmOWNhMGRlNDlhNmVlZjQ5ODU4Mzg0ZjU0ZjQ3 YTU2ZjAwHhcNMjUxMjIyMTEwMTE4WhcNMjUxMjIzMTEwMTE4WjAzMTEwLwYDVQQD EyhmZDBmMTYwMjMxMGY1M2UyNGQxMGJjZDA1YWY2ZmYzMzBhYWU5MzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67yOZQm3xCkHPJodO7V0XjCs/hOQ 5LMyHlY41U2UKGY0NnsRyU8i9ICrFovTcz8+PeLSm08f5QrQYDBQ5r2PmxX749ns 4bMV7cSRZFKNvvDYOiS1Xp8HCOmm7IJV+rwCbx7UdHuiRXiJuADc9R/H1rqYaEBj OBlWo1DUUsr1YReWnNdz+QU9wy9X+fTHPKtGrA51lM3fm3AnzKiLoUP7xacro44v aefCJzaVi8VhheEPh5RjL7F+oW1coPkXdPAY/7iz6aZ5TX5RUFLLZfZOmIiKmiM5 udKehoeX9kG7LLTDO1xaQw2Tgx0O5+lTzpbgsfHBpLFCSfHzNQ70hT+q0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0PFgIxD1PiTRC80Fr2/zMKrpNpMB8GA1UdIwQY MBaAFGVmrd+coN5Jpu70mFg4T1T0elbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZDU2ZDctMzg5OS00MGU1LTk2MTIt M2YyOGI2YWRiZGE5LzEvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iZDU2ZDctMzg5OS00MGU1LTk2MTItM2YyOGI2YWRiZGE5 LzEvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmw/U1Oim jxKan38doKeCt6HvO0OCHYol6POwU/NNUeWw1SmXj0OYKbnQyllXT+rXt+jT3UZF HmlkEpMxFIcNVkKzDJJASrM4qkgAYraPwtGthuMsziy7by23EGMR89V1TP9+IxZg h+PGH+2Qfil2l/gYLvLasOBGAY6apzjBCDzL6aDexl8c4Q1TWn7u4sjHz6lVjOtC Za2RJFUE7aPPLgZUo1+TByUpb1O8d2r60VYgefiSUOowyNn7t/iQqIQtBWLcJhgn AjSWM6TKhhQM6ypypPC3sQWThLFMn+b6OnUXFEPWSWz6uI73s1dLuK/4WowpeKby U6FHdz3P36D/Vw== -----END CERTIFICATE-----Generated at Mon Dec 22 17:50:40 2025 by rpki-client