This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft File: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft (raw, json) Hash identifier: +mDV9/inFHGCd9D/2S198dPpqBOYAvfsyAjfWAlmw78= Subject key identifier: DB:0D:DA:CA:EF:BF:65:B3:D0:A7:31:59:AC:97:ED:C6:B3:C4:12:6A Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22 Certificate issuer: /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822 Certificate serial: 019B4882D8B2EBB760AE4CC067ECFDD1F924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft Manifest number: 138B Signing time: Tue 23 Dec 2025 00:01:33 +0000 Manifest this update: Tue 23 Dec 2025 00:01:33 +0000 Manifest next update: Wed 24 Dec 2025 00:01:33 +0000 Files and hashes: 1: YINjBgqke9O6MEFg3LsttnUbivA.roa (hash: FiVOsjs04yLCv34Ov+9Fkl+VTtf648KKXDA45deG6fU=) 2: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl (hash: OOop5DiP6sGscN3NOP8hb/TTKaZYd/uqeJo3U433EMA=) 3: a48ohAuzOYw-D3deAcBdgdbuYdE.roa (hash: s6C2UNG19Y9Btn3B7Z6k8U1vX9nGyhjdM6XWlgIHyig=) 4: tGlHaeP9l4PIJg0VnS_cNRO7zcQ.roa (hash: OUc0RlEHBoBsIR+K/PErkMIbX3pRL0dEZfaQuWCuRDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:d8:b2:eb:b7:60:ae:4c:c0:67:ec:fd:d1:f9:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822 Validity Not Before: Dec 23 00:01:33 2025 GMT Not After : Dec 24 00:01:33 2025 GMT Subject: CN=db0ddacaefbf65b3d0a73159ac97edc6b3c4126a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d7:6b:f6:6f:ab:f0:4a:eb:6d:06:ba:29:83: 7d:bc:0c:70:2d:d8:17:09:d8:f7:6e:2f:78:cf:3d: f4:a9:6b:2b:04:07:a7:95:2c:7a:f2:c6:fe:95:32: 6e:81:47:dd:70:38:d7:63:41:aa:47:61:7c:b6:f6: 00:06:db:4c:e3:ed:f9:08:a3:80:60:ff:6a:f4:5e: d5:d1:a2:5d:ce:3c:2e:78:8b:61:30:81:ed:50:c2: 12:bf:4c:37:69:17:73:95:72:08:f5:6a:6d:db:e0: 00:a8:72:bc:ab:31:57:9b:1e:27:7a:66:fb:46:e3: f0:81:ea:39:6d:b4:89:d7:b3:b6:1d:b1:7f:0b:28: 55:2c:6e:52:a1:df:33:a3:82:c8:0e:1b:25:11:a4: 52:4f:1c:d5:5c:de:13:81:86:99:a1:af:02:3f:ba: c7:92:24:c4:cf:8d:dc:92:34:60:9b:bd:1d:23:25: 88:0a:55:18:3e:5e:e8:53:4b:e7:f3:bb:34:47:71: 56:38:7b:d4:42:5f:5e:30:76:85:7c:28:94:89:b2: 60:8f:e9:50:6d:c2:6d:df:43:d5:38:9a:43:fa:b0: be:1b:93:e2:18:c2:61:95:2e:dd:03:fc:6c:12:82: 07:ed:4b:88:cb:bc:42:91:66:8a:c3:a4:ce:b9:6d: 9c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0D:DA:CA:EF:BF:65:B3:D0:A7:31:59:AC:97:ED:C6:B3:C4:12:6A X509v3 Authority Key Identifier: keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:82:e9:12:ce:a0:51:ad:09:be:7b:3a:8b:c6:fc:ae:ca:0d: 95:2a:a6:2a:b1:11:19:74:73:3a:23:fa:cc:6a:74:ac:52:c6: 54:7b:89:c5:23:26:d2:4b:0b:ab:59:f8:90:05:04:e8:43:7b: fb:2b:f5:09:2a:80:3b:91:2a:92:c4:06:ef:d0:68:18:c0:eb: 0d:ae:a3:43:bc:3e:05:c0:4e:9a:22:4a:27:13:02:08:58:2b: 8d:5f:8e:8d:ac:2e:57:88:5e:f8:62:00:bc:ad:d2:9c:0b:55: 29:39:ba:a8:ef:15:09:7a:de:b2:b7:29:7d:3e:c6:80:7a:38: 1d:a6:47:cc:23:63:a4:43:6b:98:03:a9:26:4b:32:0c:da:a3: 00:ac:4d:e0:9a:d1:12:ce:6b:a4:17:d1:55:cb:cf:41:86:bf: 94:79:22:d9:f3:56:d6:9c:aa:84:49:02:58:ac:9e:57:07:ab: 29:ab:9e:26:e9:e5:fb:36:f4:2f:9c:24:7d:52:f3:56:0b:7f: 10:03:5a:4e:89:31:09:31:d7:e5:b1:e9:65:e2:88:bd:7b:33: 89:86:0b:73:c4:c0:1e:a1:cd:58:67:f5:ee:ae:9e:40:1f:84: a2:0e:7a:d8:4a:d3:39:70:31:eb:88:e2:56:45:6c:ab:f3:89: cc:1b:3e:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgtiy67dgrkzAZ+z90fkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ODljMzk5NWUyNDYxZDVhNTJmZDRmMTAwMDc4MmY5OWE0 ZDQ4MjIwHhcNMjUxMjIzMDAwMTMzWhcNMjUxMjI0MDAwMTMzWjAzMTEwLwYDVQQD EyhkYjBkZGFjYWVmYmY2NWIzZDBhNzMxNTlhYzk3ZWRjNmIzYzQxMjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ndr9m+r8ErrbQa6KYN9vAxwLdgX Cdj3bi94zz30qWsrBAenlSx68sb+lTJugUfdcDjXY0GqR2F8tvYABttM4+35CKOA YP9q9F7V0aJdzjwueIthMIHtUMISv0w3aRdzlXII9Wpt2+AAqHK8qzFXmx4nemb7 RuPwgeo5bbSJ17O2HbF/CyhVLG5Sod8zo4LIDhslEaRSTxzVXN4TgYaZoa8CP7rH kiTEz43ckjRgm70dIyWIClUYPl7oU0vn87s0R3FWOHvUQl9eMHaFfCiUibJgj+lQ bcJt30PVOJpD+rC+G5PiGMJhlS7dA/xsEoIH7UuIy7xCkWaKw6TOuW2cdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsN2srvv2Wz0KcxWayX7cazxBJqMB8GA1UdIwQY MBaAFGaJw5leJGHVpS/U8QAHgvmaTUgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMt NDFlYWExZmRlMTFiLzEvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDY5NjYtMDY5YS00MGIwLWIxNDMtNDFlYWExZmRlMTFi LzEvWm9uRG1WNGtZZFdsTDlUeEFBZUMtWnBOU0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4LpEs6g Ua0Jvns6i8b8rsoNlSqmKrERGXRzOiP6zGp0rFLGVHuJxSMm0ksLq1n4kAUE6EN7 +yv1CSqAO5EqksQG79BoGMDrDa6jQ7w+BcBOmiJKJxMCCFgrjV+OjawuV4he+GIA vK3SnAtVKTm6qO8VCXresrcpfT7GgHo4HaZHzCNjpENrmAOpJksyDNqjAKxN4JrR Es5rpBfRVcvPQYa/lHki2fNW1pyqhEkCWKyeVwerKaueJunl+zb0L5wkfVLzVgt/ EANaTokxCTHX5bHpZeKIvXsziYYLc8TAHqHNWGf17q6eQB+Eog562ErTOXAx64ji VkVsq/OJzBs+XQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:50:56 2025 by rpki-client