This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft File: ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft (raw, json) Hash identifier: O0f41F8Cgrj4SmMaEVbKyt1ZYkqQdpYkNUV6/1sjTVU= Subject key identifier: 42:43:7B:8A:DE:D6:99:55:1E:88:24:94:F5:8C:20:37:68:FE:80:50 Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20 Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20 Certificate serial: 019B3F7ED158FCB8A8AC8DCA994CF0853CB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 06:00:34 +0000 Manifest this update: Sun 21 Dec 2025 06:00:34 +0000 Manifest next update: Mon 22 Dec 2025 06:00:34 +0000 Files and hashes: 1: ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl (hash: oLcfZ0d3M53ZRILN4X+R1+4fGkToHzeUHSeN9m7ootI=) 2: dTuqgfHkWKRx6zDRFyr7wfbH78A.roa (hash: 2z0kuCT+rZ4YZMUscZu87PyQoyge5s4ineDLZLosNXs=) 3: ev4qAZxPyDVe1fzvmsra_eujOoU.roa (hash: HFLW2F6W7JxQUwoPI2JmRMt/NzyrebxUZlSAcm1ib6I=) 4: fIP9DV3xwP6qq9iBmxJ7rd6ytwk.roa (hash: FiX7MCMvjPDZE/cImOvH2wlf9CnqJcDrYSZ+kARwu7c=) 5: pERg8oiWPMLUHsmGEshAuW_aqRs.roa (hash: zmESXdehojS6eaz2GF04+HNwgLED8OdvpzfNZhfer0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:d1:58:fc:b8:a8:ac:8d:ca:99:4c:f0:85:3c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20 Validity Not Before: Dec 21 06:00:34 2025 GMT Not After : Dec 22 06:00:34 2025 GMT Subject: CN=42437b8aded699551e882494f58c203768fe8050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:4f:0a:ea:c0:3b:3d:4d:3c:41:60:98:19: 35:4f:dd:d1:68:8c:c3:97:6f:96:be:7a:70:db:6c: 14:82:9a:34:d4:8d:2f:37:e0:96:fb:f5:ac:ed:d9: 17:7c:e6:2e:da:b9:9b:bf:ce:0a:98:2d:a2:78:76: e7:ef:69:22:86:b0:51:9a:5f:3e:46:15:88:d6:6a: e5:01:d3:ef:c8:83:32:79:3f:c8:23:b9:16:27:07: ba:28:bd:b2:8a:2d:af:9c:85:d2:f2:4c:86:d2:b7: 40:83:c3:a2:7a:50:85:56:da:e6:e0:d0:c9:fc:aa: 5c:21:13:30:a0:ce:a4:88:3d:b5:23:68:68:91:d0: 38:e0:ce:5b:d3:11:95:1f:b5:00:2c:21:c7:ca:78: 74:ee:0b:87:94:f6:42:20:57:f5:b9:df:58:f0:80: c8:a4:96:ca:52:54:4a:29:5b:a4:06:22:4c:5d:83: 4a:4f:78:69:3d:3c:3c:75:c0:cb:12:50:3c:09:f8: 6a:61:fb:2b:ba:c3:43:3f:d7:53:46:aa:71:3d:fc: 6a:53:02:c3:4d:0d:32:95:6d:3f:f2:b1:b7:02:ec: cf:bd:18:71:0a:f9:de:da:c0:4a:58:47:fe:52:90: 0d:64:bb:28:eb:7c:82:3b:17:94:e8:ca:38:ed:b0: 3b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:43:7B:8A:DE:D6:99:55:1E:88:24:94:F5:8C:20:37:68:FE:80:50 X509v3 Authority Key Identifier: keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ce:4e:73:ea:09:02:1e:24:f5:7a:15:7b:2d:a6:c6:96:f9: c8:2c:e8:fc:83:9c:ba:2b:d4:66:e1:05:b3:9e:ec:b4:b7:a6: ca:07:0c:0f:54:a9:56:70:68:41:9b:f6:56:df:ff:58:00:96: 43:78:5d:0c:87:d9:7a:d9:b3:a8:1a:60:e2:21:62:c4:73:b2: b1:97:7c:72:b7:4c:94:f5:10:e6:1f:63:af:da:b4:fd:2f:62: 4b:16:05:da:aa:1a:3e:77:d3:19:bf:f2:9f:d6:67:fc:47:10: 46:21:94:01:92:43:9a:b8:4b:66:c8:1e:64:d4:0e:89:bf:a1: 22:2a:01:62:a7:01:a5:58:1e:b2:90:04:5c:8a:f9:21:a2:30: 01:f1:51:e5:9e:fd:01:40:d6:0a:f4:d9:68:5a:2f:5f:98:14: f3:43:72:b7:b4:2b:fb:e0:3a:e3:e4:07:3e:15:b9:35:22:58: bc:dc:07:7d:87:22:82:fd:7f:f9:58:26:36:3f:e7:13:e5:0c: bd:21:23:f8:c2:b6:39:06:09:35:86:00:3f:9f:64:89:a6:17: 1c:bb:77:fd:cd:ec:ca:5d:ed:59:48:f1:7b:79:d5:42:be:37: c5:50:4f:08:2b:3b:e4:7c:4c:bf:76:91:5a:13:b3:1f:c9:d6: 17:78:37:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ftFY/LiorI3KmUzwhTywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZjQ3Yzk4NDQwZjEwMzgyNWM4ZWE1MDc0Mjk4YjE4Y2Mx MTNlMjAwHhcNMjUxMjIxMDYwMDM0WhcNMjUxMjIyMDYwMDM0WjAzMTEwLwYDVQQD Eyg0MjQzN2I4YWRlZDY5OTU1MWU4ODI0OTRmNThjMjAzNzY4ZmU4MDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2pPCurAOz1NPEFgmBk1T93RaIzD l2+Wvnpw22wUgpo01I0vN+CW+/Ws7dkXfOYu2rmbv84KmC2ieHbn72kihrBRml8+ RhWI1mrlAdPvyIMyeT/II7kWJwe6KL2yii2vnIXS8kyG0rdAg8OielCFVtrm4NDJ /KpcIRMwoM6kiD21I2hokdA44M5b0xGVH7UALCHHynh07guHlPZCIFf1ud9Y8IDI pJbKUlRKKVukBiJMXYNKT3hpPTw8dcDLElA8CfhqYfsrusNDP9dTRqpxPfxqUwLD TQ0ylW0/8rG3AuzPvRhxCvne2sBKWEf+UpANZLso63yCOxeU6Mo47bA78QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJDe4re1plVHogklPWMIDdo/oBQMB8GA1UdIwQY MBaAFGT0fJhEDxA4JcjqUHQpixjMET4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTlhZWItYzcxMy00MmY4LTkxZDYt Mzg0NDc4NTVkNjY5LzEvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTlhZWItYzcxMy00MmY4LTkxZDYtMzg0NDc4NTVkNjY5 LzEvWlBSOG1FUVBFRGdseU9wUWRDbUxHTXdSUGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMc5Oc+oJ Ah4k9XoVey2mxpb5yCzo/IOcuivUZuEFs57stLemygcMD1SpVnBoQZv2Vt//WACW Q3hdDIfZetmzqBpg4iFixHOysZd8crdMlPUQ5h9jr9q0/S9iSxYF2qoaPnfTGb/y n9Zn/EcQRiGUAZJDmrhLZsgeZNQOib+hIioBYqcBpVgespAEXIr5IaIwAfFR5Z79 AUDWCvTZaFovX5gU80Nyt7Qr++A64+QHPhW5NSJYvNwHfYcigv1/+VgmNj/nE+UM vSEj+MK2OQYJNYYAP59kiaYXHLt3/c3syl3tWUjxe3nVQr43xVBPCCs75HxMv3aR WhOzH8nWF3g3rA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:47:32 2025 by rpki-client