This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json) Hash identifier: A+P+J40OT3oE1cauxo8/23MmW5kjLSD5Xnm2I9LSnP4= Subject key identifier: 1A:4E:B1:E0:92:55:B9:4F:BF:59:B9:F0:6C:BB:97:BA:6D:B0:7D:79 Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e Certificate serial: 019B32D69ECF32506541D810839642B1DC5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft Manifest number: 1643 Signing time: Thu 18 Dec 2025 19:01:24 +0000 Manifest this update: Thu 18 Dec 2025 19:01:24 +0000 Manifest next update: Fri 19 Dec 2025 19:01:24 +0000 Files and hashes: 1: AuI1_5gu81vs3cIDXIzNbaWND-I.roa (hash: lsSEgLcY/ack618oc/9NRlphXCxEIj/Wq+gUEc772OI=) 2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: 1SlDm6RtHEStlydz45pvhRojCc/2Jeo6kuUTqaNFv90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:9e:cf:32:50:65:41:d8:10:83:96:42:b1:dc:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e Validity Not Before: Dec 18 19:01:24 2025 GMT Not After : Dec 19 19:01:24 2025 GMT Subject: CN=1a4eb1e09255b94fbf59b9f06cbb97ba6db07d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f5:44:0b:6a:ce:91:34:b2:93:41:d3:9d:83: 87:ae:f4:63:d9:eb:b1:d1:72:d3:d6:10:73:ee:d8: de:72:fa:ef:bc:58:10:56:e2:d6:d3:de:a1:11:60: bf:e7:8e:01:07:43:7e:8c:da:aa:47:1b:19:ea:6b: a9:9f:c9:a7:88:eb:cd:35:bf:2b:c4:65:61:36:55: 2d:37:35:cd:9c:0c:ad:88:81:29:e6:4d:c0:9c:b2: 7e:dc:37:12:22:cc:f1:e5:e6:19:10:aa:89:8c:45: 62:5d:9c:51:af:83:b7:c1:7c:2c:69:1a:4c:dc:b0: 38:63:e1:fa:39:5e:97:cc:ff:5f:0b:12:0e:aa:24: e0:95:36:ab:f0:83:e0:6a:6d:05:72:91:e8:d9:be: 79:43:65:4d:b2:0c:45:29:1b:a0:7f:51:48:90:37: 0c:18:42:5e:e7:92:cf:ab:3a:9d:fb:1a:41:f9:b2: 26:93:53:08:38:c0:29:29:c3:12:ae:87:67:56:a9: 37:10:01:07:9a:fb:69:10:58:0b:94:ba:ff:91:80: d6:c7:86:6a:84:37:5b:87:12:06:e4:eb:a6:26:45: 2c:a0:63:42:f9:c3:5d:8a:a3:d1:7b:8c:38:10:4c: 4e:20:4a:b2:b4:7d:19:2b:41:40:27:c8:58:d7:66: 7c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4E:B1:E0:92:55:B9:4F:BF:59:B9:F0:6C:BB:97:BA:6D:B0:7D:79 X509v3 Authority Key Identifier: keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:9b:9a:05:68:fb:ea:68:0f:f2:f2:ea:c5:a9:75:7f:10:0e: 27:bf:4a:2d:99:64:81:c0:6d:0a:32:4e:19:04:bd:49:ee:b9: 0a:4e:f1:92:dc:de:92:6c:ff:0a:e2:e7:9b:68:f2:12:88:19: 23:e3:b1:a0:6d:5e:3c:ad:bd:ee:1c:bb:2b:bb:99:9c:c8:eb: f5:e0:fc:98:26:82:7e:9e:42:e4:9f:5f:d6:19:96:5a:49:4b: bb:18:b2:6a:a4:b6:31:db:85:4b:16:66:ad:fb:77:90:25:cf: b6:94:01:10:a2:5f:d9:03:fa:39:c2:7d:a7:88:3b:5a:ac:54: 28:a1:54:c7:5e:49:5b:9c:11:9c:2b:46:df:c6:dc:c2:17:84: 75:f0:d3:73:8a:e0:0d:a6:22:08:97:e2:6a:70:47:f7:5b:93: 74:61:cd:34:64:fa:6d:1c:cb:45:3e:23:be:e3:dc:fd:c7:64: e1:13:56:6e:0b:9f:9a:cb:4a:a4:45:7f:4a:a5:71:f6:be:f5: a4:e0:9a:19:6e:a2:6a:4a:8a:7c:c8:b6:90:50:c9:59:3c:06: bf:a3:a9:13:23:83:cc:b1:cb:37:79:21:7e:69:36:29:f6:7d: ac:a4:aa:cf:c6:44:74:82:f0:53:82:af:c8:05:d4:1d:d9:d9: 5c:89:fc:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1p7PMlBlQdgQg5ZCsdxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YWI1MWU4ZTU4Y2MxNGVkOWNiMzU3MzFhZjFkMDExZGJl MmUxMmUwHhcNMjUxMjE4MTkwMTI0WhcNMjUxMjE5MTkwMTI0WjAzMTEwLwYDVQQD EygxYTRlYjFlMDkyNTViOTRmYmY1OWI5ZjA2Y2JiOTdiYTZkYjA3ZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fVEC2rOkTSyk0HTnYOHrvRj2eux 0XLT1hBz7tjecvrvvFgQVuLW096hEWC/544BB0N+jNqqRxsZ6mupn8mniOvNNb8r xGVhNlUtNzXNnAytiIEp5k3AnLJ+3DcSIszx5eYZEKqJjEViXZxRr4O3wXwsaRpM 3LA4Y+H6OV6XzP9fCxIOqiTglTar8IPgam0FcpHo2b55Q2VNsgxFKRugf1FIkDcM GEJe55LPqzqd+xpB+bImk1MIOMApKcMSrodnVqk3EAEHmvtpEFgLlLr/kYDWx4Zq hDdbhxIG5OumJkUsoGNC+cNdiqPRe4w4EExOIEqytH0ZK0FAJ8hY12Z8uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpOseCSVblPv1m58Gy7l7ptsH15MB8GA1UdIwQY MBaAFGWrUejljMFO2cs1cxrx0BHb4uEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jZWZmMWEtZWM2Ni00ZDQ1LWJhOWYt NDg4YTIyMjk5Y2ExLzEvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9jZWZmMWEtZWM2Ni00ZDQ1LWJhOWYtNDg4YTIyMjk5Y2Ex LzEvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJuaBWj7 6mgP8vLqxal1fxAOJ79KLZlkgcBtCjJOGQS9Se65Ck7xktzekmz/CuLnm2jyEogZ I+OxoG1ePK297hy7K7uZnMjr9eD8mCaCfp5C5J9f1hmWWklLuxiyaqS2MduFSxZm rft3kCXPtpQBEKJf2QP6OcJ9p4g7WqxUKKFUx15JW5wRnCtG38bcwheEdfDTc4rg DaYiCJfianBH91uTdGHNNGT6bRzLRT4jvuPc/cdk4RNWbgufmstKpEV/SqVx9r71 pOCaGW6iakqKfMi2kFDJWTwGv6OpEyODzLHLN3khfmk2KfZ9rKSqz8ZEdILwU4Kv yAXUHdnZXIn8GA== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:02 2025 by rpki-client