This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json) Hash identifier: lyU76WCbQ3HVXjofl6kjAw+qJSgup/5Wmz43ntFSWcc= Subject key identifier: DB:6B:E6:67:92:46:2A:E1:F3:16:13:C2:4F:E0:FC:59:D4:10:F6:0C Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95 Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695 Certificate serial: 019B3E6C4C45477A05306054BAB0D83711EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft Manifest number: 11C9 Signing time: Sun 21 Dec 2025 01:00:43 +0000 Manifest this update: Sun 21 Dec 2025 01:00:43 +0000 Manifest next update: Mon 22 Dec 2025 01:00:43 +0000 Files and hashes: 1: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: Pw0N0GWXTG/Fx5J6VSOYlkt6voKFUv3FpGN5HsKcyOY=) 2: jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa (hash: LCBAN0N7xGJeaqTX5AAQMXZtcLuwBKPNcwcKiOcd8Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:4c:45:47:7a:05:30:60:54:ba:b0:d8:37:11:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695 Validity Not Before: Dec 21 01:00:43 2025 GMT Not After : Dec 22 01:00:43 2025 GMT Subject: CN=db6be66792462ae1f31613c24fe0fc59d410f60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:70:b9:22:6e:64:a4:52:90:16:9b:f7:16: bc:41:54:f8:7a:c5:70:af:27:4c:1a:1c:79:95:55: 05:00:e3:92:39:4f:01:10:5a:3b:72:0e:17:ea:b8: f3:7e:73:78:44:6b:3f:d4:03:74:7e:96:d9:09:45: 31:6e:20:2a:da:35:c4:65:d3:b3:ff:96:de:4c:0a: 41:bd:0c:53:6f:f3:65:b4:7b:e9:9e:03:7c:60:15: 8b:de:30:0e:b9:f9:9a:19:c0:6f:9f:a9:43:c3:ef: 39:54:22:6d:3f:93:25:b1:11:5b:37:b2:c2:45:6f: 3a:07:f4:49:db:55:a0:4a:d1:15:16:ad:70:19:74: 46:e2:28:b9:54:7a:25:d3:fb:f2:41:c2:7b:88:72: 00:21:8c:2e:90:12:95:c4:cb:82:27:63:c6:27:d5: 5a:d6:d1:eb:52:da:21:09:a2:cc:5f:d9:a0:e4:f3: e9:26:1c:16:f8:e8:56:9e:a1:42:22:31:18:24:3f: 10:ee:70:9a:bf:cf:c1:45:02:52:74:9a:c3:4c:59: ba:6b:8f:37:55:3e:26:1e:e5:8d:9b:e6:37:50:41: 22:c8:05:1a:14:5d:71:c9:a5:3a:95:17:d4:25:93: 7b:27:b3:a7:c1:90:88:af:5a:de:6b:6c:96:fb:a3: 04:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6B:E6:67:92:46:2A:E1:F3:16:13:C2:4F:E0:FC:59:D4:10:F6:0C X509v3 Authority Key Identifier: keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2f:0e:68:64:41:20:02:47:3a:5d:7f:5d:04:da:34:02:7f: 7d:00:37:ba:cb:d3:da:2f:df:7b:b6:21:0a:78:7f:4d:a6:79: a5:00:79:72:ab:3a:13:d4:e4:f1:85:d5:c3:3f:23:5c:c4:e4: e4:3a:36:11:08:fa:e8:c4:5d:f8:87:7d:24:87:bc:16:bb:33: f2:25:8f:b1:40:02:92:26:f2:c4:ec:27:a8:7a:43:81:e9:17: 64:d8:7c:b8:ef:e4:4e:73:6e:dd:28:35:1b:35:5a:4c:f8:cd: 9a:25:b5:02:60:83:31:97:a0:48:4b:2b:2e:2c:48:9c:7e:db: 60:c6:e8:bd:38:8a:75:06:41:63:1d:51:8a:d9:82:06:68:6b: 8e:43:d3:6b:87:76:ee:c7:df:e0:ab:89:2a:cc:1a:ad:b7:06: 13:58:81:1c:3c:1c:4f:e6:27:57:20:eb:b3:66:79:81:43:72: 2d:02:0b:5a:03:23:17:e2:3e:5d:55:d1:8d:e5:5e:04:d8:ee: 26:2d:bc:98:84:ec:ec:34:4a:02:40:40:40:84:7a:d5:b1:44: 30:6b:9c:88:c7:42:38:7c:9a:51:b4:d4:1b:aa:de:a9:ba:47: 6e:02:df:ec:1d:b8:3a:cd:b4:db:29:fc:d6:2e:ae:01:00:e1: f7:49:cf:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bExFR3oFMGBUurDYNxHrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YWVjODAyNGNhYTEwM2E4NDEyNjk2YzdlNzJmNzc4MDNj ZDg2OTUwHhcNMjUxMjIxMDEwMDQzWhcNMjUxMjIyMDEwMDQzWjAzMTEwLwYDVQQD EyhkYjZiZTY2NzkyNDYyYWUxZjMxNjEzYzI0ZmUwZmM1OWQ0MTBmNjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxypwuSJuZKRSkBab9xa8QVT4esVw rydMGhx5lVUFAOOSOU8BEFo7cg4X6rjzfnN4RGs/1AN0fpbZCUUxbiAq2jXEZdOz /5beTApBvQxTb/NltHvpngN8YBWL3jAOufmaGcBvn6lDw+85VCJtP5MlsRFbN7LC RW86B/RJ21WgStEVFq1wGXRG4ii5VHol0/vyQcJ7iHIAIYwukBKVxMuCJ2PGJ9Va 1tHrUtohCaLMX9mg5PPpJhwW+OhWnqFCIjEYJD8Q7nCav8/BRQJSdJrDTFm6a483 VT4mHuWNm+Y3UEEiyAUaFF1xyaU6lRfUJZN7J7OnwZCIr1rea2yW+6MEnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtr5meSRirh8xYTwk/g/FnUEPYMMB8GA1UdIwQY MBaAFGSuyAJMqhA6hBJpbH5y93gDzYaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWks3SUFreXFFRHFFRW1sc2ZuTDNlQVBOaHBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wZjI0ZGQtZWY0YS00ZGJmLWIyMGQt YjAzOWMyNGI5OWNhLzEvWks3SUFreXFFRHFFRW1sc2ZuTDNlQVBOaHBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8wZjI0ZGQtZWY0YS00ZGJmLWIyMGQtYjAzOWMyNGI5OWNh LzEvWks3SUFreXFFRHFFRW1sc2ZuTDNlQVBOaHBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiy8OaGRB IAJHOl1/XQTaNAJ/fQA3usvT2i/fe7YhCnh/TaZ5pQB5cqs6E9Tk8YXVwz8jXMTk 5Do2EQj66MRd+Id9JIe8Frsz8iWPsUACkibyxOwnqHpDgekXZNh8uO/kTnNu3Sg1 GzVaTPjNmiW1AmCDMZegSEsrLixInH7bYMbovTiKdQZBYx1RitmCBmhrjkPTa4d2 7sff4KuJKswarbcGE1iBHDwcT+YnVyDrs2Z5gUNyLQILWgMjF+I+XVXRjeVeBNju Ji28mITs7DRKAkBAQIR61bFEMGuciMdCOHyaUbTUG6reqbpHbgLf7B24Os202yn8 1i6uAQDh90nPNg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:07:38 2025 by rpki-client