This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json) Hash identifier: sxxvOLMRV/q6xZDU9MeCPKaOg/x34bVgrZrVwOMIpaU= Subject key identifier: 9B:B4:AE:74:EC:6E:0B:CE:D2:A2:AA:F0:33:60:26:F4:A6:34:FD:7E Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff Certificate serial: 019B273FCC38BD3AE693AF4FA4016569B8C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft Manifest number: 08F4 Signing time: Tue 16 Dec 2025 13:00:50 +0000 Manifest this update: Tue 16 Dec 2025 13:00:50 +0000 Manifest next update: Wed 17 Dec 2025 13:00:50 +0000 Files and hashes: 1: OBgfNHwDlYtlqjjhJRFUWeZDTUY.roa (hash: 6sPRuYPKeEviFfVQ52vvMVNq0j09JkQvr2PG17VGRJU=) 2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: 1lrOW+n3Q8tBgQhUkpN0ftmX2/UbiLfeQeGlSkVlNtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:cc:38:bd:3a:e6:93:af:4f:a4:01:65:69:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff Validity Not Before: Dec 16 13:00:50 2025 GMT Not After : Dec 17 13:00:50 2025 GMT Subject: CN=9bb4ae74ec6e0bced2a2aaf0336026f4a634fd7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:9c:c6:f4:33:31:dd:0e:f5:01:20:9d:df: da:7c:9e:96:0e:3b:ef:d7:a5:99:5d:f8:25:dc:29: e6:27:5f:41:29:26:04:74:09:9a:65:1d:91:7a:41: ee:0c:42:68:c4:d6:d6:88:99:e0:70:48:16:ec:e1: ba:5d:69:22:e5:99:fa:f0:18:70:3a:e3:1b:8f:72: c7:73:06:28:de:7a:bd:27:ec:47:72:f6:c2:14:2e: ab:18:84:32:c5:38:37:84:c6:7d:f8:1f:43:bc:f5: 5a:e3:fe:54:b0:da:19:96:89:94:e4:78:cb:5e:29: 0d:3b:24:d4:54:4b:a7:40:2c:d8:32:ba:9c:76:92: c9:67:d6:42:ff:3d:6c:a7:12:ff:38:db:e5:08:1f: 4b:3f:e4:11:56:39:1e:90:0b:6a:6b:4e:2a:5c:82: 0a:b4:dc:4a:7e:c2:bc:c1:7c:d8:69:8d:b8:42:29: 04:0a:6a:e7:ee:d0:95:c9:0d:47:74:d7:d3:e7:e3: dc:4f:66:c8:da:47:a3:1d:b0:4d:8f:f0:98:2a:6d: 90:9a:41:05:88:b1:84:61:59:76:05:5b:84:7d:93: 9f:60:ea:95:a7:da:a4:52:52:de:21:e2:7a:b0:78: 6c:93:a3:59:a5:eb:a7:24:6b:7d:5f:53:d1:14:01: 8f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B4:AE:74:EC:6E:0B:CE:D2:A2:AA:F0:33:60:26:F4:A6:34:FD:7E X509v3 Authority Key Identifier: keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:db:3d:83:20:b6:6a:86:83:75:fd:cc:c3:3f:94:66:f2:71: 07:9f:61:d3:0a:51:64:f9:90:14:8c:02:67:fe:16:33:8d:f1: 4d:37:71:9d:ac:e5:77:85:bc:3e:22:5d:47:15:80:7d:65:b8: 17:df:5a:22:a8:9b:50:a0:b2:14:35:9c:a6:de:6d:a7:37:63: d2:7b:f6:27:4e:ed:9d:14:c6:21:e9:32:3e:ae:b7:04:97:28: 9b:f5:5e:54:bd:1c:f5:b0:54:30:b7:82:85:d7:52:e7:2b:b0: db:ed:38:b8:c1:10:a6:b5:e2:22:a7:67:5c:00:b2:a9:09:8d: 51:af:38:4e:1e:a6:55:db:da:3d:88:63:f7:3a:5d:12:08:c2: e1:f2:f3:04:fa:89:e5:db:84:05:ff:b2:ea:6f:6c:96:63:be: bc:55:c5:b0:e5:1f:a8:2d:b3:d1:07:be:a8:7f:3b:2d:c4:8e: 45:8e:39:36:a5:e8:ea:5d:4c:cd:53:12:2f:25:74:a3:45:e5: c4:fe:65:54:c5:07:c3:cd:da:93:e6:e1:c6:57:67:7a:cc:e7: b5:34:0c:40:8b:7a:4d:2f:c5:ee:65:0f:b9:ed:da:3f:1c:2d: 82:28:4d:ac:48:02:21:09:4e:0d:09:29:99:07:cf:03:29:be: 57:c6:1e:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP8w4vTrmk69PpAFlabjAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTNmMmIwNGViODViNmEyYTZlMjFjMDNjZmJiNzcyODdh NDVhZmYwHhcNMjUxMjE2MTMwMDUwWhcNMjUxMjE3MTMwMDUwWjAzMTEwLwYDVQQD Eyg5YmI0YWU3NGVjNmUwYmNlZDJhMmFhZjAzMzYwMjZmNGE2MzRmZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKmcxvQzMd0O9QEgnd/afJ6WDjvv 16WZXfgl3CnmJ19BKSYEdAmaZR2RekHuDEJoxNbWiJngcEgW7OG6XWki5Zn68Bhw OuMbj3LHcwYo3nq9J+xHcvbCFC6rGIQyxTg3hMZ9+B9DvPVa4/5UsNoZlomU5HjL XikNOyTUVEunQCzYMrqcdpLJZ9ZC/z1spxL/ONvlCB9LP+QRVjkekAtqa04qXIIK tNxKfsK8wXzYaY24QikECmrn7tCVyQ1HdNfT5+PcT2bI2kejHbBNj/CYKm2QmkEF iLGEYVl2BVuEfZOfYOqVp9qkUlLeIeJ6sHhsk6NZpeunJGt9X1PRFAGPrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJu0rnTsbgvO0qKq8DNgJvSmNP1+MB8GA1UdIwQY MBaAFGaT8rBOuFtqKm4hwDz7t3KHpFr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zMDdiZTgtNWUxMS00MTEwLWExZDMt M2E5YzBmYmM4YTBhLzEvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8zMDdiZTgtNWUxMS00MTEwLWExZDMtM2E5YzBmYmM4YTBh LzEvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOts9gyC2 aoaDdf3Mwz+UZvJxB59h0wpRZPmQFIwCZ/4WM43xTTdxnazld4W8PiJdRxWAfWW4 F99aIqibUKCyFDWcpt5tpzdj0nv2J07tnRTGIekyPq63BJcom/VeVL0c9bBUMLeC hddS5yuw2+04uMEQprXiIqdnXACyqQmNUa84Th6mVdvaPYhj9zpdEgjC4fLzBPqJ 5duEBf+y6m9slmO+vFXFsOUfqC2z0Qe+qH87LcSORY45NqXo6l1MzVMSLyV0o0Xl xP5lVMUHw83ak+bhxldneszntTQMQIt6TS/F7mUPue3aPxwtgihNrEgCIQlODQkp mQfPAym+V8Ye7Q== -----END CERTIFICATE-----Generated at Tue Dec 16 22:36:07 2025 by rpki-client