This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json) Hash identifier: 2+NdxY6BCquv69mrBvRap78D783edpuZ6144T3zsTRs= Subject key identifier: AE:26:51:F8:5B:50:CA:41:75:21:FD:ED:DC:5A:76:B7:2A:59:31:4E Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8 Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8 Certificate serial: 019B27405720E7754639DB0D6B88A5CDDC85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft Manifest number: 1782 Signing time: Tue 16 Dec 2025 13:01:26 +0000 Manifest this update: Tue 16 Dec 2025 13:01:26 +0000 Manifest next update: Wed 17 Dec 2025 13:01:26 +0000 Files and hashes: 1: Wi8TeX6HlCf6UscTIz-eiQunz20.roa (hash: iC2va1BTrYFKnldJrvaufKukdaOfozas1t65U+xf85Q=) 2: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: UJOPZyKlBiLGpC9cSrVxYYuqTPaVGnFviNth3SdX5Z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:57:20:e7:75:46:39:db:0d:6b:88:a5:cd:dc:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8 Validity Not Before: Dec 16 13:01:26 2025 GMT Not After : Dec 17 13:01:26 2025 GMT Subject: CN=ae2651f85b50ca417521fdeddc5a76b72a59314e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:ea:46:b5:ec:f3:3b:31:d8:9b:8a:23:eb: b1:03:a2:61:d1:a9:df:1e:2b:b6:7c:a5:66:ec:d4: b9:7b:c9:79:d8:60:40:6d:3e:a1:97:6b:eb:41:50: 41:ba:6c:74:af:f2:c3:08:53:b3:ac:78:4b:2d:34: b8:30:9e:27:55:a1:65:f2:15:58:f8:10:36:7c:c4: 03:bc:4a:25:7b:55:bb:43:0f:a0:84:6c:6b:85:e2: f2:f8:83:b4:40:31:1e:88:d1:2d:a4:01:55:0f:dd: c9:2a:0c:1e:94:85:3e:28:32:31:c5:2e:90:57:f1: b0:9a:8d:fe:3d:a1:43:ba:8c:c3:a5:47:37:c3:89: e1:73:fd:67:31:11:d8:7a:c7:5f:00:3b:97:38:c9: 07:37:79:ef:46:f5:ef:02:cf:02:79:d9:f4:4a:a4: a5:6d:ee:8b:d6:05:80:be:59:b4:ba:2b:1d:f5:e5: 5c:e0:a4:85:bb:d8:2e:5a:85:46:2e:31:10:0b:f2: e3:f6:c1:e1:ed:d0:74:8e:68:5b:19:cc:c0:c3:a5: 51:91:f6:bc:12:f1:f6:96:26:82:b7:eb:25:c0:19: ad:a4:f4:47:43:60:0f:38:19:40:ea:97:94:da:a8: a6:f9:f8:f7:c8:80:ba:5c:77:ca:c6:da:69:58:13: 91:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:26:51:F8:5B:50:CA:41:75:21:FD:ED:DC:5A:76:B7:2A:59:31:4E X509v3 Authority Key Identifier: keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:32:44:b7:db:e2:8f:97:25:9b:f5:87:de:c7:e6:d9:08:28: 8b:22:65:94:f5:a3:31:f9:26:aa:ab:5f:e8:1d:d0:c6:ae:8b: 79:1b:50:58:e2:d1:f2:29:6d:50:c2:90:49:6b:db:cd:67:88: 70:89:2b:28:17:f6:8b:99:b2:04:6b:0d:6e:86:fa:9f:86:cf: de:cc:e6:89:7c:a6:cf:b2:a4:d7:52:c7:17:94:76:ae:ab:96: 80:3a:ad:fd:eb:6f:5a:05:48:66:48:e9:6e:8f:53:3a:33:60: a3:30:91:67:60:04:2e:46:e1:85:a4:a9:d2:6d:f9:24:58:20: c4:24:56:5a:13:d0:17:9f:d6:df:47:a1:1e:e3:ca:2d:b9:2f: 1a:05:f6:cd:dc:b1:5a:6e:46:c6:30:eb:ed:12:84:cf:5d:cd: 88:39:89:48:8e:d7:6c:c8:59:3c:1f:a6:b9:6f:48:e0:22:f0: 19:d4:b0:98:6e:54:2d:40:c0:71:f8:1f:33:22:94:6d:3c:ab: 1f:8d:00:79:f5:3a:0c:de:24:cd:bf:5a:13:65:a0:ba:42:a2: 79:bc:ca:1e:0d:4a:90:c9:ae:a1:d5:4d:55:b9:20:8f:75:79: e1:25:5e:c1:ef:80:9e:ed:32:bd:ac:f3:08:0b:cb:82:01:e0: 39:48:ab:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQFcg53VGOdsNa4ilzdyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1N2VkNmY1YmJhNjMzZDU1MjY5ZmRkMDU2YmNmNjBjNjhj N2IyYjgwHhcNMjUxMjE2MTMwMTI2WhcNMjUxMjE3MTMwMTI2WjAzMTEwLwYDVQQD EyhhZTI2NTFmODViNTBjYTQxNzUyMWZkZWRkYzVhNzZiNzJhNTkzMTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCvqRrXs8zsx2JuKI+uxA6Jh0anf Hiu2fKVm7NS5e8l52GBAbT6hl2vrQVBBumx0r/LDCFOzrHhLLTS4MJ4nVaFl8hVY +BA2fMQDvEole1W7Qw+ghGxrheLy+IO0QDEeiNEtpAFVD93JKgwelIU+KDIxxS6Q V/Gwmo3+PaFDuozDpUc3w4nhc/1nMRHYesdfADuXOMkHN3nvRvXvAs8Cedn0SqSl be6L1gWAvlm0uisd9eVc4KSFu9guWoVGLjEQC/Lj9sHh7dB0jmhbGczAw6VRkfa8 EvH2liaCt+slwBmtpPRHQ2APOBlA6peU2qim+fj3yIC6XHfKxtppWBORswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4mUfhbUMpBdSH97dxadrcqWTFOMB8GA1UdIwQY MBaAFGV+1vW7pjPVUmn90Fa89gxox7K4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8wNjRmYWMtZWRkZC00OTAzLWExM2Qt MGI5Yzc2YzBkOTFjLzEvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8wNjRmYWMtZWRkZC00OTAzLWExM2QtMGI5Yzc2YzBkOTFj LzEvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjJEt9vi j5clm/WH3sfm2QgoiyJllPWjMfkmqqtf6B3Qxq6LeRtQWOLR8iltUMKQSWvbzWeI cIkrKBf2i5myBGsNbob6n4bP3szmiXymz7Kk11LHF5R2rquWgDqt/etvWgVIZkjp bo9TOjNgozCRZ2AELkbhhaSp0m35JFggxCRWWhPQF5/W30ehHuPKLbkvGgX2zdyx Wm5GxjDr7RKEz13NiDmJSI7XbMhZPB+muW9I4CLwGdSwmG5ULUDAcfgfMyKUbTyr H40AefU6DN4kzb9aE2WgukKiebzKHg1KkMmuodVNVbkgj3V54SVewe+Anu0yvazz CAvLggHgOUirzw== -----END CERTIFICATE-----Generated at Tue Dec 16 22:33:44 2025 by rpki-client