This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft File: g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json) Hash identifier: zfU6LhdrCL35RUb5f2lc/8i90YrZM7gGZOHWg/hPnpo= Subject key identifier: 9A:B4:55:F9:9E:A3:97:8F:46:65:81:24:14:5F:A0:F2:8D:B3:6D:55 Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80 Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780 Certificate serial: 019B3CB4D635AC86AE6AD6D6751BBD64B1B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft Manifest number: 127B Signing time: Sat 20 Dec 2025 17:00:42 +0000 Manifest this update: Sat 20 Dec 2025 17:00:42 +0000 Manifest next update: Sun 21 Dec 2025 17:00:42 +0000 Files and hashes: 1: Z__qWjsTqKN6H6Uy48R_joDrg6A.roa (hash: hy+rnvr7Ps+zzGaNk6QHsEt8A1/U9k/JFaxCitWq0s8=) 2: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: IBv+TNQHRkhpYEzpHoNtsBtYqz+WaEqHD5USjtCYMOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:d6:35:ac:86:ae:6a:d6:d6:75:1b:bd:64:b1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780 Validity Not Before: Dec 20 17:00:42 2025 GMT Not After : Dec 21 17:00:42 2025 GMT Subject: CN=9ab455f99ea3978f46658124145fa0f28db36d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:ad:0e:a5:59:8a:dc:a7:3b:c9:ad:bc:b6: 3a:cd:4e:ac:36:be:54:d3:29:09:72:a3:4d:ee:0b: dd:9f:d8:9f:d0:35:fb:90:4e:0b:5a:70:5e:3e:6c: c2:4c:56:78:d9:93:d2:8f:ed:02:5f:c2:b2:65:20: aa:a0:90:7e:d4:cd:60:63:4e:a0:08:40:8f:00:a0: 60:3a:84:4c:ea:ce:f4:d3:3a:1c:ca:8b:38:fa:e1: 6a:85:94:ce:0f:dd:67:45:e1:39:12:3c:89:ed:df: b4:b6:bc:02:f0:f2:68:69:de:21:85:be:1a:4a:ae: f7:5e:7d:4a:41:29:27:15:9c:89:86:3f:20:46:99: bd:96:d5:9d:7b:b7:20:c5:fb:fa:6d:aa:46:71:66: 5e:8f:37:8d:29:14:3e:3b:44:de:bf:a9:a6:65:36: d6:7d:c0:61:c1:fd:5e:52:92:44:fb:c4:1d:2e:ec: f0:51:7a:ea:79:c9:12:23:87:43:78:e7:95:fd:6a: 91:69:c0:c2:a5:f2:2e:6e:cb:7c:31:74:f8:d8:d7: df:6e:04:20:f5:df:df:0f:ee:84:d2:d5:28:c8:32: d3:13:16:92:81:85:43:38:d9:1b:52:4f:7f:fe:0a: 62:31:c9:f3:96:11:72:a9:4d:b9:35:f3:06:e8:81: 9e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B4:55:F9:9E:A3:97:8F:46:65:81:24:14:5F:A0:F2:8D:B3:6D:55 X509v3 Authority Key Identifier: keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:72:66:8f:e6:38:9c:66:46:f7:c3:2b:cc:04:26:7d:b5:91: d7:da:77:c8:36:d9:1b:f0:83:f1:b2:04:74:c8:07:c1:75:77: 9e:5e:b5:9d:14:6b:4a:5f:e7:06:c9:2c:38:77:3a:1d:c1:8c: 4e:50:7c:7a:cb:f0:f8:1a:ee:d8:e5:28:72:25:ea:72:c9:e3: 06:45:ed:e5:c6:5a:0c:24:d9:33:27:31:da:c6:13:ee:d6:d4: d7:0e:ec:89:0d:14:ba:ca:9b:8c:f2:3f:75:50:a0:fd:e9:f4: 31:fd:c6:3b:a7:f7:18:9c:50:2c:78:3a:e7:d1:47:5b:60:26: d1:77:37:81:e9:57:02:fb:6a:c0:24:93:d7:a7:3e:d2:70:13: 9a:5c:cb:1b:70:34:4a:d1:60:89:d7:20:3c:82:05:ce:c1:2d: ca:b5:4f:34:b0:44:2b:d6:d3:15:c6:ec:b7:75:33:ff:66:5e: 63:20:8d:71:0f:ab:af:e0:1f:6f:dd:9b:35:66:32:88:3d:b2: 10:7f:21:5d:fa:48:8c:5d:0a:c8:c6:24:c9:b8:1d:5d:d7:be: 08:a1:51:40:f1:0c:23:43:6d:8f:b1:84:5e:8e:1b:35:34:10: 21:dd:c6:00:9f:59:9a:fb:16:86:1b:da:20:66:74:8e:15:04: 32:ee:0a:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tNY1rIauatbWdRu9ZLG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTY0MDNjZjczMjIxYzExN2VhNDliYzkyMzRmZTZmNGEx MWQ3ODAwHhcNMjUxMjIwMTcwMDQyWhcNMjUxMjIxMTcwMDQyWjAzMTEwLwYDVQQD Eyg5YWI0NTVmOTllYTM5NzhmNDY2NTgxMjQxNDVmYTBmMjhkYjM2ZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuputDqVZitynO8mtvLY6zU6sNr5U 0ykJcqNN7gvdn9if0DX7kE4LWnBePmzCTFZ42ZPSj+0CX8KyZSCqoJB+1M1gY06g CECPAKBgOoRM6s700zocyos4+uFqhZTOD91nReE5EjyJ7d+0trwC8PJoad4hhb4a Sq73Xn1KQSknFZyJhj8gRpm9ltWde7cgxfv6bapGcWZejzeNKRQ+O0Tev6mmZTbW fcBhwf1eUpJE+8QdLuzwUXrqeckSI4dDeOeV/WqRacDCpfIubst8MXT42NffbgQg 9d/fD+6E0tUoyDLTExaSgYVDONkbUk9//gpiMcnzlhFyqU25NfMG6IGeswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJq0Vfmeo5ePRmWBJBRfoPKNs21VMB8GA1UdIwQY MBaAFIPmQDz3MiHBF+pJvJI0/m9KEdeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1aQVBQY3lJY0VYNmttOGtqVC1iMG9SMTRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wOWMzYjEtNzJlYi00MzNhLTk2Y2It NDg3NzdhYTk2MWU5LzEvZy1aQVBQY3lJY0VYNmttOGtqVC1iMG9SMTRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8wOWMzYjEtNzJlYi00MzNhLTk2Y2ItNDg3NzdhYTk2MWU5 LzEvZy1aQVBQY3lJY0VYNmttOGtqVC1iMG9SMTRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnJmj+Y4 nGZG98MrzAQmfbWR19p3yDbZG/CD8bIEdMgHwXV3nl61nRRrSl/nBsksOHc6HcGM TlB8esvw+Bru2OUociXqcsnjBkXt5cZaDCTZMycx2sYT7tbU1w7siQ0UusqbjPI/ dVCg/en0Mf3GO6f3GJxQLHg659FHW2Am0Xc3gelXAvtqwCST16c+0nATmlzLG3A0 StFgidcgPIIFzsEtyrVPNLBEK9bTFcbst3Uz/2ZeYyCNcQ+rr+Afb92bNWYyiD2y EH8hXfpIjF0KyMYkybgdXde+CKFRQPEMI0Ntj7GEXo4bNTQQId3GAJ9ZmvsWhhva IGZ0jhUEMu4KtQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:23:40 2025 by rpki-client