This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json) Hash identifier: RBPvMLKfNXhfKx2yDovwverinIDpbdytuou8w6JkR14= Subject key identifier: 21:C6:F4:53:53:C8:DE:4E:BE:86:B5:D5:62:D7:A9:4B:47:92:8F:9C Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e Certificate serial: 019B6EB4B19B41567F6B7F68077AFB0AC534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft Manifest number: 1385 Signing time: Tue 30 Dec 2025 10:01:34 +0000 Manifest this update: Tue 30 Dec 2025 10:01:34 +0000 Manifest next update: Wed 31 Dec 2025 10:01:34 +0000 Files and hashes: 1: 8P_S0IiROCk_5OYQ6mxMJ_E_ykg.roa (hash: hKXKA4mluIkjfh1vqK/elg6N0eojlwBUTy51lDcZmFo=) 2: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: 9Y7V9KsYDTnEBDb015zupGNrMuh5aAezwk8JTLe/Lhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:b1:9b:41:56:7f:6b:7f:68:07:7a:fb:0a:c5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e Validity Not Before: Dec 30 10:01:34 2025 GMT Not After : Dec 31 10:01:34 2025 GMT Subject: CN=21c6f45353c8de4ebe86b5d562d7a94b47928f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:53:05:38:fa:e7:5f:14:c2:ad:fa:9a:57:f0: 06:a8:e3:7c:ad:5f:da:24:96:2d:73:cb:b5:63:77: c2:d1:4e:cf:00:a4:5e:07:b8:8f:52:9b:86:fe:51: ea:02:7e:76:68:93:c2:c0:66:ef:a1:a7:72:77:d8: a9:f8:01:58:3f:62:ce:80:e3:f9:c3:4d:f4:41:05: 72:27:67:4d:b3:41:dc:56:e5:fd:89:67:3b:81:d0: 6a:b3:7c:20:31:c8:95:15:c3:57:50:91:ea:6a:e5: 57:bd:aa:67:ad:8c:8f:1e:3d:ed:d9:e1:18:0e:d8: be:53:7f:39:39:d3:80:41:61:c9:33:fa:d7:cb:2c: fe:0f:6a:37:ab:12:04:f6:45:ec:33:57:9f:ab:7e: ac:2f:a7:27:63:b6:03:e1:e2:5f:ee:2c:2f:f5:4e: 85:88:df:c2:64:49:2b:6d:92:52:63:ba:91:46:67: d5:5c:32:06:0c:21:b0:2f:fb:18:a9:a5:19:09:ea: 63:5a:65:81:d8:ee:d2:3d:c0:f9:03:30:14:63:dd: 77:d5:48:85:0a:07:b7:18:a4:99:0d:70:20:7a:e0: c8:f2:a9:d1:9d:32:5e:05:3c:7d:19:c6:8f:a9:3a: ef:42:78:2b:81:6b:c9:b7:4d:10:6a:e2:29:79:73: e7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C6:F4:53:53:C8:DE:4E:BE:86:B5:D5:62:D7:A9:4B:47:92:8F:9C X509v3 Authority Key Identifier: keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:5e:82:da:ce:a2:0d:50:c3:89:af:2a:0e:98:26:33:21:57: b1:75:61:77:51:64:5a:68:0e:03:dc:ba:6d:21:33:ee:4d:af: fd:38:29:df:29:cd:65:4a:ba:7c:4e:6f:cf:a2:c1:c7:c4:3d: 20:ca:96:82:84:9e:e2:15:8f:78:ed:bf:c6:cc:ae:de:4c:06: cd:87:60:61:99:2d:c5:2b:26:dd:1d:2a:11:21:23:03:1f:b7: 4d:12:bb:c3:c2:e7:e0:23:d3:b8:a1:89:c7:d4:c7:99:94:0d: 51:e0:ea:8a:1c:1a:0d:d0:cd:2f:67:83:d2:03:20:87:64:71: e6:38:a2:19:16:82:4f:e7:43:78:5e:61:c1:ec:b7:44:0f:31: bc:81:e6:13:06:4b:1a:d5:53:34:64:37:6d:ea:21:1b:c6:9d: 58:f2:f8:3e:b6:16:9f:7c:19:2d:58:2c:ff:48:a2:c0:d3:fa: 55:60:a1:d5:c2:21:ab:73:89:3f:7b:65:45:ce:98:16:9a:12: 25:71:98:d8:47:22:5a:8b:1c:8f:9a:ef:58:43:87:62:6d:60: cd:a4:21:01:8c:e4:e6:d4:e1:1d:50:7e:91:e3:66:61:0a:6a: 93:dc:4d:a0:05:02:93:26:e0:73:c8:0d:8a:0f:76:1d:a6:ad: fe:bf:c0:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutLGbQVZ/a39oB3r7CsU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NzI5ZjlkMDc4NmY2OGExZWNkNWM1YTkyYmMzOTJkODY5 MTk3NWUwHhcNMjUxMjMwMTAwMTM0WhcNMjUxMjMxMTAwMTM0WjAzMTEwLwYDVQQD EygyMWM2ZjQ1MzUzYzhkZTRlYmU4NmI1ZDU2MmQ3YTk0YjQ3OTI4ZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lMFOPrnXxTCrfqaV/AGqON8rV/a JJYtc8u1Y3fC0U7PAKReB7iPUpuG/lHqAn52aJPCwGbvoadyd9ip+AFYP2LOgOP5 w030QQVyJ2dNs0HcVuX9iWc7gdBqs3wgMciVFcNXUJHqauVXvapnrYyPHj3t2eEY Dti+U385OdOAQWHJM/rXyyz+D2o3qxIE9kXsM1efq36sL6cnY7YD4eJf7iwv9U6F iN/CZEkrbZJSY7qRRmfVXDIGDCGwL/sYqaUZCepjWmWB2O7SPcD5AzAUY9131UiF Cge3GKSZDXAgeuDI8qnRnTJeBTx9GcaPqTrvQngrgWvJt00QauIpeXPnDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHG9FNTyN5Ovoa11WLXqUtHko+cMB8GA1UdIwQY MBaAFGZyn50HhvaKHs1cWpK8OS2GkZdeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQt YWQ1MTBlMDVkYTkyLzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQtYWQ1MTBlMDVkYTky LzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX16C2s6i DVDDia8qDpgmMyFXsXVhd1FkWmgOA9y6bSEz7k2v/Tgp3ynNZUq6fE5vz6LBx8Q9 IMqWgoSe4hWPeO2/xsyu3kwGzYdgYZktxSsm3R0qESEjAx+3TRK7w8Ln4CPTuKGJ x9THmZQNUeDqihwaDdDNL2eD0gMgh2Rx5jiiGRaCT+dDeF5hwey3RA8xvIHmEwZL GtVTNGQ3beohG8adWPL4PrYWn3wZLVgs/0iiwNP6VWCh1cIhq3OJP3tlRc6YFpoS JXGY2EciWoscj5rvWEOHYm1gzaQhAYzk5tThHVB+keNmYQpqk9xNoAUCkybgc8gN ig92Haat/r/Ahg== -----END CERTIFICATE-----Generated at Tue Dec 30 15:00:23 2025 by rpki-client