This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json) Hash identifier: nBfKG0y/TTXAEl4V6Tay7b/7zgG7GhEQx1IphqcfcDQ= Subject key identifier: 86:02:3F:E8:77:CC:3D:AC:E4:28:0E:76:7F:4A:0D:B4:B4:B6:C5:B7 Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b Certificate serial: 019B3B6B35738FC0B0B9BC6A83C79F8DC349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft Manifest number: 04DE Signing time: Sat 20 Dec 2025 11:00:40 +0000 Manifest this update: Sat 20 Dec 2025 11:00:40 +0000 Manifest next update: Sun 21 Dec 2025 11:00:40 +0000 Files and hashes: 1: 9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa (hash: yFMJTSvXNN5G3iWxcUQycJKuWi+/CwtiHhA9xSKG2JY=) 2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: u5BK2+GQGxOIz+HwPG9oKpPBm3AQb8bEG84y1qHkvKI=) 3: uJJnjUiM_NZxiukKj0SMAuEZu9s.roa (hash: rKuDWrBp0PYOBRz7NFxaGHHnL+VoADNHakfLXL6TQaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:35:73:8f:c0:b0:b9:bc:6a:83:c7:9f:8d:c3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b Validity Not Before: Dec 20 11:00:40 2025 GMT Not After : Dec 21 11:00:40 2025 GMT Subject: CN=86023fe877cc3dace4280e767f4a0db4b4b6c5b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:09:bf:e4:05:45:9d:a7:29:cc:b2:62:83:11: 1e:31:b1:7b:82:3d:d4:57:88:7a:46:fa:e9:14:02: b2:ce:c8:27:71:e9:5a:d4:97:f6:df:dc:ce:7c:93: 5b:9a:83:3f:b4:92:85:db:71:63:51:31:fc:4e:13: 9c:cc:42:d3:a1:bb:95:5e:b2:0c:83:2a:7c:1d:6a: de:66:f0:33:91:8f:74:54:73:1e:c9:cd:01:5b:62: 36:e9:ba:57:1a:3f:e8:ff:c2:ff:6f:f4:87:c8:b2: 25:54:cf:ac:f9:8d:b5:45:db:0a:3b:2d:30:55:0a: 36:d6:8c:87:de:53:7e:c7:e9:12:e5:c6:90:c6:e0: 8f:ae:61:68:d8:c9:d0:f4:b8:98:71:62:3e:10:24: 48:ae:17:73:5d:3a:bb:37:83:69:00:93:67:a0:2d: e9:d4:ff:bd:44:3e:a2:1e:a5:14:3c:6b:a3:88:9a: bb:6a:8a:98:e6:d8:cf:02:7e:3f:19:35:f4:ad:3b: 2f:1f:d0:cb:40:03:94:da:74:ca:6d:31:fb:e5:e6: 63:ae:70:ce:7b:98:65:7d:96:9a:51:a8:5e:f9:81: 85:c3:07:75:29:18:39:8d:8c:d6:99:f2:c7:3b:4b: a2:df:5d:22:9c:1f:b0:91:63:8a:c1:ca:d4:16:4f: 0a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:02:3F:E8:77:CC:3D:AC:E4:28:0E:76:7F:4A:0D:B4:B4:B6:C5:B7 X509v3 Authority Key Identifier: keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d4:77:58:40:10:37:4a:d3:00:68:a4:f8:d5:7e:1e:dc:8b: ec:73:cf:b5:09:4e:aa:65:5e:0b:a4:20:db:4c:c1:23:f4:8f: aa:bf:4b:b6:52:d9:0a:d5:4b:d1:af:f7:8e:c0:95:0d:53:17: d4:21:88:a3:c9:b5:93:28:8a:ba:6d:50:b2:5e:bd:55:23:aa: 48:7e:80:05:d0:dd:59:d6:8d:be:b3:f3:69:be:93:56:14:ae: 5f:58:96:d2:23:d2:50:e9:66:af:7c:1b:0d:bd:92:14:b0:57: c4:10:6a:ac:55:74:94:20:ff:0b:94:0b:9b:83:bc:c6:fc:4f: fc:8e:46:37:a4:6e:c2:f2:e2:3f:eb:74:fd:28:ea:4f:66:55: 03:ab:60:a9:a0:9f:93:b6:16:4a:8e:67:77:b8:68:52:62:f7: 6f:6b:29:9e:dd:58:e6:9a:69:4f:1b:7d:75:27:29:22:b3:95: d1:98:00:51:1b:83:94:1b:be:8e:e3:51:74:55:12:14:c9:61: 8e:35:80:ba:26:62:7c:8d:6f:2f:32:1f:18:04:4e:72:28:9c: d4:00:53:ef:86:20:b7:5a:e6:b5:77:66:cc:8f:50:98:74:b4: 5d:d1:0a:6f:d2:95:53:db:47:e7:b9:73:f7:76:d3:27:14:37: f5:22:34:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7azVzj8Cwubxqg8efjcNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NTljZjM0ZDRjZmM1OTY0MDg2MmQxZTRiNzlkNDhkOWU0 ZDhlN2IwHhcNMjUxMjIwMTEwMDQwWhcNMjUxMjIxMTEwMDQwWjAzMTEwLwYDVQQD Eyg4NjAyM2ZlODc3Y2MzZGFjZTQyODBlNzY3ZjRhMGRiNGI0YjZjNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wm/5AVFnacpzLJigxEeMbF7gj3U V4h6RvrpFAKyzsgncela1Jf239zOfJNbmoM/tJKF23FjUTH8ThOczELTobuVXrIM gyp8HWreZvAzkY90VHMeyc0BW2I26bpXGj/o/8L/b/SHyLIlVM+s+Y21RdsKOy0w VQo21oyH3lN+x+kS5caQxuCPrmFo2MnQ9LiYcWI+ECRIrhdzXTq7N4NpAJNnoC3p 1P+9RD6iHqUUPGujiJq7aoqY5tjPAn4/GTX0rTsvH9DLQAOU2nTKbTH75eZjrnDO e5hlfZaaUahe+YGFwwd1KRg5jYzWmfLHO0ui310inB+wkWOKwcrUFk8KIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYCP+h3zD2s5CgOdn9KDbS0tsW3MB8GA1UdIwQY MBaAFGVZzzTUz8WWQIYtHkt51I2eTY57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAt MTM0MWRlOGFiZTUxLzEvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAtMTM0MWRlOGFiZTUx LzEvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetR3WEAQ N0rTAGik+NV+HtyL7HPPtQlOqmVeC6Qg20zBI/SPqr9LtlLZCtVL0a/3jsCVDVMX 1CGIo8m1kyiKum1Qsl69VSOqSH6ABdDdWdaNvrPzab6TVhSuX1iW0iPSUOlmr3wb Db2SFLBXxBBqrFV0lCD/C5QLm4O8xvxP/I5GN6RuwvLiP+t0/SjqT2ZVA6tgqaCf k7YWSo5nd7hoUmL3b2spnt1Y5pppTxt9dScpIrOV0ZgAURuDlBu+juNRdFUSFMlh jjWAuiZifI1vLzIfGAROciic1ABT74Ygt1rmtXdmzI9QmHS0XdEKb9KVU9tH57lz 93bTJxQ39SI0Dg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:10:39 2025 by rpki-client