This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft File: Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft (raw, json) Hash identifier: QkbJl2qOcVYcAr/1ypZVq5zqCX9nfX2EPE/bZ6TtW3c= Subject key identifier: 2D:C8:21:01:45:95:CB:7C:1D:CC:AB:05:05:EC:B4:D8:21:B7:37:24 Authority key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F Certificate issuer: /CN=6696fa3fe40cf770851c83adcafafb7a4107678f Certificate serial: 019B50A96648F2BB9230A7BC560F1A529145 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft Manifest number: 05B8 Signing time: Wed 24 Dec 2025 14:00:37 +0000 Manifest this update: Wed 24 Dec 2025 14:00:37 +0000 Manifest next update: Thu 25 Dec 2025 14:00:37 +0000 Files and hashes: 1: Z-rlKdaCz1-RtEjMQCm0X_P3rj4.roa (hash: izN3amwMaCwqfjDAXIHwIiin5JKltWskPtpUKmuEZLk=) 2: Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl (hash: 4RxghKe0QaBBn7cK5/+VSVUTZeyis/lWBqV/JaN/g5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:66:48:f2:bb:92:30:a7:bc:56:0f:1a:52:91:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6696fa3fe40cf770851c83adcafafb7a4107678f Validity Not Before: Dec 24 14:00:37 2025 GMT Not After : Dec 25 14:00:37 2025 GMT Subject: CN=2dc821014595cb7c1dccab0505ecb4d821b73724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:30:33:1d:54:a2:8d:31:ef:3a:b6:1f:a5:5a: 75:89:24:81:03:3d:20:9b:d3:6f:b3:27:e2:d8:41: 28:1b:46:57:c1:64:03:23:58:84:f5:79:cf:31:ed: b2:30:36:aa:1d:6b:42:6b:ad:76:92:d1:7b:59:b0: e4:1a:62:cd:cb:a7:b3:3e:a6:3f:33:38:91:e9:1d: e7:4a:24:6a:50:2a:f1:8f:39:df:d4:ed:6b:d4:ec: a0:19:c8:f3:ef:cf:bd:ac:d7:c1:51:82:20:86:70: 11:04:8c:4d:30:43:cc:a5:1a:81:c3:ec:f0:d1:67: f9:27:b9:d4:04:16:4d:61:27:31:65:1a:98:9c:59: 0f:5a:d8:89:9d:e9:d6:3d:d7:04:30:f7:cd:da:18: 7f:6c:be:dd:20:99:f7:e6:2c:aa:5c:5d:51:53:d6: 92:bb:87:e5:ce:ec:f0:fc:42:de:5f:e7:83:0d:c9: 6b:47:11:f1:91:4b:a6:d9:bb:54:25:0c:5e:8b:ed: 21:9d:89:37:42:e2:cc:11:82:65:ab:65:f5:dc:ad: 15:c9:b9:cf:32:dc:fb:53:e9:ba:51:b5:f0:1f:09: e0:42:04:a6:33:d2:e1:40:ee:62:be:dd:41:66:63: c0:5e:10:05:2a:68:ec:64:32:39:dd:ce:64:18:b5: 33:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C8:21:01:45:95:CB:7C:1D:CC:AB:05:05:EC:B4:D8:21:B7:37:24 X509v3 Authority Key Identifier: keyid:66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:41:82:7a:d8:9a:a1:8c:2a:b7:c5:5c:5d:da:56:f7:c9:d2: 7e:87:17:42:d8:f0:2c:d8:f8:36:a8:ce:03:57:ca:a0:68:19: 95:ad:76:bf:41:29:a4:1e:b4:93:ea:08:75:80:01:80:47:e3: 4d:0e:be:89:d5:da:60:01:4a:cf:1d:5f:bf:12:33:1f:08:ce: 15:29:f1:73:fc:ae:8a:3e:8d:ba:f8:7d:54:19:0e:17:c6:6f: 60:cb:92:c6:1a:79:65:04:17:98:3f:7a:9c:8a:c8:f6:97:28: 44:67:99:a4:ab:66:0f:2d:7f:a5:ad:22:b1:3e:e5:98:61:6f: da:f7:f8:35:5d:08:0d:e4:01:9d:48:8c:9c:b1:59:00:24:9b: a6:e7:7c:4f:84:ff:ac:92:b9:a7:fe:ec:c5:26:7d:89:ba:96: 6d:ce:c8:7e:2c:4b:95:06:22:27:22:6d:98:6f:53:be:de:76: 6f:7c:5d:01:3a:0e:66:fa:63:3c:78:38:33:bb:f7:25:4e:d3: 79:0b:80:d4:b0:e5:34:7f:2e:34:c9:3c:0b:45:d9:6b:03:24: 43:fb:bd:0a:70:6f:53:49:a8:a9:e3:b4:a1:8b:ab:dd:48:04: bd:86:c8:77:84:4c:32:43:3a:00:ea:cc:a1:9f:b1:bf:23:38: ec:10:8d:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqWZI8ruSMKe8Vg8aUpFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTZmYTNmZTQwY2Y3NzA4NTFjODNhZGNhZmFmYjdhNDEw NzY3OGYwHhcNMjUxMjI0MTQwMDM3WhcNMjUxMjI1MTQwMDM3WjAzMTEwLwYDVQQD EygyZGM4MjEwMTQ1OTVjYjdjMWRjY2FiMDUwNWVjYjRkODIxYjczNzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zAzHVSijTHvOrYfpVp1iSSBAz0g m9Nvsyfi2EEoG0ZXwWQDI1iE9XnPMe2yMDaqHWtCa612ktF7WbDkGmLNy6ezPqY/ MziR6R3nSiRqUCrxjznf1O1r1OygGcjz78+9rNfBUYIghnARBIxNMEPMpRqBw+zw 0Wf5J7nUBBZNYScxZRqYnFkPWtiJnenWPdcEMPfN2hh/bL7dIJn35iyqXF1RU9aS u4flzuzw/ELeX+eDDclrRxHxkUum2btUJQxei+0hnYk3QuLMEYJlq2X13K0VybnP Mtz7U+m6UbXwHwngQgSmM9LhQO5ivt1BZmPAXhAFKmjsZDI53c5kGLUzhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3IIQFFlct8HcyrBQXstNghtzckMB8GA1UdIwQY MBaAFGaW+j/kDPdwhRyDrcr6+3pBB2ePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBiNlAtUU05M0NGSElPdHl2cjdla0VIWjQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lNjZhZmUtNmUwYi00ZGJkLThkMGQt Y2U2OTE1YjQ3MzZmLzEvWnBiNlAtUU05M0NGSElPdHl2cjdla0VIWjQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lNjZhZmUtNmUwYi00ZGJkLThkMGQtY2U2OTE1YjQ3MzZm LzEvWnBiNlAtUU05M0NGSElPdHl2cjdla0VIWjQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEGCetia oYwqt8VcXdpW98nSfocXQtjwLNj4NqjOA1fKoGgZla12v0EppB60k+oIdYABgEfj TQ6+idXaYAFKzx1fvxIzHwjOFSnxc/yuij6Nuvh9VBkOF8ZvYMuSxhp5ZQQXmD96 nIrI9pcoRGeZpKtmDy1/pa0isT7lmGFv2vf4NV0IDeQBnUiMnLFZACSbpud8T4T/ rJK5p/7sxSZ9ibqWbc7IfixLlQYiJyJtmG9Tvt52b3xdAToOZvpjPHg4M7v3JU7T eQuA1LDlNH8uNMk8C0XZawMkQ/u9CnBvU0moqeO0oYur3UgEvYbId4RMMkM6AOrM oZ+xvyM47BCNow== -----END CERTIFICATE-----Generated at Wed Dec 24 21:59:04 2025 by rpki-client