This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json) Hash identifier: xyUXzURGrt6kaODqkfvQGLmbZw5E0UxC61HwifvQqQA= Subject key identifier: DB:10:82:03:C4:01:47:39:98:EE:A7:0A:20:36:B1:F7:5B:39:FB:CB Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e Certificate serial: 019B3C7E266B9F55E816E2BA98ECC6F06A88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft Manifest number: 136B Signing time: Sat 20 Dec 2025 16:00:58 +0000 Manifest this update: Sat 20 Dec 2025 16:00:58 +0000 Manifest next update: Sun 21 Dec 2025 16:00:58 +0000 Files and hashes: 1: 8P_S0IiROCk_5OYQ6mxMJ_E_ykg.roa (hash: hKXKA4mluIkjfh1vqK/elg6N0eojlwBUTy51lDcZmFo=) 2: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: TNaUjcTsB0RDkdEgDDdhBFDstuBHdBE400GcPcIEUA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:26:6b:9f:55:e8:16:e2:ba:98:ec:c6:f0:6a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e Validity Not Before: Dec 20 16:00:58 2025 GMT Not After : Dec 21 16:00:58 2025 GMT Subject: CN=db108203c401473998eea70a2036b1f75b39fbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0e:77:1e:3b:c8:e6:21:a1:c7:a3:80:61:75: f5:82:03:66:5c:48:54:91:72:d7:55:7b:13:cb:7d: cb:b3:70:9a:ce:87:7d:34:35:01:9d:3a:20:c3:91: e0:65:4b:00:6b:54:55:81:60:8a:1b:29:be:f1:2d: 07:0c:7b:7c:70:c4:52:a6:26:3e:51:63:e9:3b:25: 6c:c3:e4:52:66:61:58:1a:4a:65:90:01:ef:60:6e: 7f:ba:a7:23:76:f4:f3:7e:dd:d8:51:ad:91:00:e9: f0:ea:be:72:77:8f:be:9b:f8:f9:c4:3d:67:c2:90: 12:fd:86:0c:41:7f:21:d1:3d:2f:a8:d3:44:8d:b5: c8:30:c8:35:b8:23:04:10:7c:7b:99:c0:0a:86:96: d1:10:33:fa:60:1e:7d:54:56:b9:64:26:60:51:93: 69:dc:fa:d8:c0:a8:dc:00:e7:a4:f9:c8:c7:f2:8f: 0d:6a:0f:ae:79:f3:29:9e:69:ac:4d:c3:4d:a5:f1: d7:f6:31:15:42:33:4a:3e:b5:38:fc:e8:e0:70:19: 54:42:63:f6:49:c1:1a:e1:ec:4c:d8:ec:a0:cb:67: 37:64:4b:36:38:99:89:d7:57:c9:26:43:f5:d4:51: 6b:45:40:fd:fd:53:aa:73:0d:41:ba:c1:d3:10:29: 99:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:10:82:03:C4:01:47:39:98:EE:A7:0A:20:36:B1:F7:5B:39:FB:CB X509v3 Authority Key Identifier: keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0f:c4:25:61:1e:bf:02:ae:69:d7:fa:aa:9f:04:63:1f:93: 42:25:be:5c:a0:cf:a0:1e:3c:22:8d:4d:f2:d4:1f:45:6b:f5: 1b:89:3a:53:db:c9:0a:8c:d3:5c:f5:7f:d2:10:73:c8:f5:72: 8e:3f:cd:62:6a:59:55:53:9a:f9:15:31:75:20:94:61:c5:8b: 16:ae:77:be:5b:fa:5f:61:f2:67:4d:2f:2a:be:09:e5:47:3d: 8a:4a:43:cc:f0:8f:2c:63:00:7d:03:8b:6a:8d:c4:09:33:28: 74:d3:94:cb:3f:0b:34:64:27:d1:1a:fa:10:a4:53:8a:44:8b: 7c:bf:28:cf:63:88:11:50:ec:9b:be:03:a7:9e:38:0d:d6:54: d8:c4:68:cf:30:c0:59:e6:bf:f8:16:ab:2e:eb:b2:24:b6:c5: aa:95:88:d2:fc:c9:a5:4a:9c:0a:30:09:98:9a:fa:47:09:55: 0b:b5:72:ab:7d:93:9b:2b:42:f3:63:c1:c5:39:02:88:0c:1c: a3:d6:26:48:b0:2b:df:30:df:f1:e4:86:1a:04:00:a6:30:ac: 54:2c:93:5d:cf:9e:20:f1:b8:e6:f1:5d:c7:f5:16:6c:b4:8c: 1b:d8:c7:56:db:5c:f2:b2:2f:ec:7d:40:8b:8e:89:c3:f4:72: 88:12:e9:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fiZrn1XoFuK6mOzG8GqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NzI5ZjlkMDc4NmY2OGExZWNkNWM1YTkyYmMzOTJkODY5 MTk3NWUwHhcNMjUxMjIwMTYwMDU4WhcNMjUxMjIxMTYwMDU4WjAzMTEwLwYDVQQD EyhkYjEwODIwM2M0MDE0NzM5OThlZWE3MGEyMDM2YjFmNzViMzlmYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g53HjvI5iGhx6OAYXX1ggNmXEhU kXLXVXsTy33Ls3Cazod9NDUBnTogw5HgZUsAa1RVgWCKGym+8S0HDHt8cMRSpiY+ UWPpOyVsw+RSZmFYGkplkAHvYG5/uqcjdvTzft3YUa2RAOnw6r5yd4++m/j5xD1n wpAS/YYMQX8h0T0vqNNEjbXIMMg1uCMEEHx7mcAKhpbREDP6YB59VFa5ZCZgUZNp 3PrYwKjcAOek+cjH8o8Nag+uefMpnmmsTcNNpfHX9jEVQjNKPrU4/OjgcBlUQmP2 ScEa4exM2Oygy2c3ZEs2OJmJ11fJJkP11FFrRUD9/VOqcw1BusHTECmZ1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsQggPEAUc5mO6nCiA2sfdbOfvLMB8GA1UdIwQY MBaAFGZyn50HhvaKHs1cWpK8OS2GkZdeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQt YWQ1MTBlMDVkYTkyLzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQtYWQ1MTBlMDVkYTky LzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAig/EJWEe vwKuadf6qp8EYx+TQiW+XKDPoB48Io1N8tQfRWv1G4k6U9vJCozTXPV/0hBzyPVy jj/NYmpZVVOa+RUxdSCUYcWLFq53vlv6X2HyZ00vKr4J5Uc9ikpDzPCPLGMAfQOL ao3ECTModNOUyz8LNGQn0Rr6EKRTikSLfL8oz2OIEVDsm74Dp544DdZU2MRozzDA Wea/+BarLuuyJLbFqpWI0vzJpUqcCjAJmJr6RwlVC7Vyq32TmytC82PBxTkCiAwc o9YmSLAr3zDf8eSGGgQApjCsVCyTXc+eIPG45vFdx/UWbLSMG9jHVttc8rIv7H1A i46Jw/RyiBLp7g== -----END CERTIFICATE-----Generated at Sat Dec 20 23:56:50 2025 by rpki-client