This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft File: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft (raw, json) Hash identifier: Mq8u+P44K/Q6I5ugdbFa8dT2qpgeLiUBFZ+T1wLgoNM= Subject key identifier: 99:E6:D7:EC:BD:BE:AF:6E:DA:50:FD:29:C9:62:7D:C6:22:9F:C3:C0 Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19 Certificate issuer: /CN=66e3ed06e88e5591d9096676951555c0dc535c19 Certificate serial: 019B35D6F5333D1B593726E81408E2CE5569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 09:00:38 +0000 Manifest this update: Fri 19 Dec 2025 09:00:38 +0000 Manifest next update: Sat 20 Dec 2025 09:00:38 +0000 Files and hashes: 1: 6ekzezCQTRRJ6ani1kLlgl9_UEQ.roa (hash: E8YKQ+7oKbQVBsilOuJbTsXN0BQkzpHb4tN03LRQOhY=) 2: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl (hash: 3L0NjAiIuPehyRrWqcRq3Ba8Tjxl4bbqmkLP9YCxkF0=) 3: jjkw7d-vM1Kuz3VrP2qfo9DvNCo.roa (hash: VJTPRYmj0bLLGoSUyYkDz754dQcYj27q2IKg/a+56Gg=) 4: rWTg50lIWr4eBCYZpN1g2rEsvwA.roa (hash: h6askj3XUZ9cNfHdvd89Te7uFDoO162bWotdGeS5FPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:f5:33:3d:1b:59:37:26:e8:14:08:e2:ce:55:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19 Validity Not Before: Dec 19 09:00:38 2025 GMT Not After : Dec 20 09:00:38 2025 GMT Subject: CN=99e6d7ecbdbeaf6eda50fd29c9627dc6229fc3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2d:96:45:f4:03:0e:fe:23:96:8e:70:4b:82: 35:88:be:a5:7e:f2:5b:b3:cb:a4:07:e6:5f:18:26: 84:ba:53:3b:89:b2:9f:ca:de:ad:c0:4b:93:89:0d: 7e:82:62:cb:90:82:06:3a:53:51:e6:a5:bb:7d:0e: 0c:73:65:0c:a1:51:98:54:0d:e4:39:b8:22:b3:bf: 1c:8f:09:13:86:cc:a7:2a:db:89:5e:2d:c7:f1:07: cf:a2:54:7b:0c:6a:72:8d:20:67:27:c4:8a:f1:67: de:eb:20:42:53:42:b5:ba:33:a5:56:32:40:b9:2f: 4b:4d:27:6f:0f:dd:f8:37:ff:78:bc:f1:ea:80:e0: e5:a3:b0:17:73:dc:22:e1:39:b1:e1:53:27:d7:32: 33:54:97:8c:57:6c:3e:89:ba:17:26:ac:66:6c:bb: 18:9b:9e:17:bf:61:2f:fb:32:f6:c5:18:00:36:dd: 18:18:58:d5:00:41:af:11:cc:2f:f0:9d:2b:4f:90: b2:71:e2:db:20:39:b2:67:07:97:6e:18:85:7f:28: 73:4d:9a:2c:3e:38:58:ae:62:50:c6:5d:4b:ee:a2: 94:09:ee:a1:7e:99:d2:62:00:7e:6a:85:4b:7d:81: bb:fb:b4:61:9b:27:15:d6:b9:e0:d9:15:cf:be:1f: 98:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E6:D7:EC:BD:BE:AF:6E:DA:50:FD:29:C9:62:7D:C6:22:9F:C3:C0 X509v3 Authority Key Identifier: keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:2a:b4:f8:ce:ae:03:d7:ea:9c:17:ad:9c:a7:fa:29:8f:33: 9f:71:49:ba:6c:18:43:72:77:7c:a0:83:b5:6a:65:25:a4:0b: d4:e6:6c:0d:ad:27:05:cb:2f:c9:bd:2a:eb:4f:67:4a:8d:9d: fe:cf:8c:d9:f0:30:da:e7:e0:46:f2:75:55:be:52:c9:cf:a4: 2f:62:3a:65:78:25:6c:1a:c6:c2:cd:13:9b:b3:3d:78:71:6c: b2:47:b8:01:a3:67:aa:7a:e0:43:ca:3f:46:35:93:70:fc:f2: ad:b1:84:aa:d1:8c:18:aa:72:a9:b8:50:d2:51:87:b1:f7:da: cb:19:6f:fc:5b:7f:39:c7:03:8b:13:e3:e5:a0:c9:d2:60:d9: 08:90:27:0e:07:2a:16:25:ac:fc:f2:fa:d6:2a:4a:bd:eb:a7: 19:cf:bd:fe:ab:ed:72:bd:ea:fa:dd:a6:3b:d3:1b:f6:4e:9a: 4a:cd:ba:db:ae:2f:ce:47:78:34:df:ac:2d:2c:31:86:d7:34: c8:92:22:5f:0a:b5:91:90:5c:bf:5b:69:c0:09:9e:71:4d:13: ba:14:6d:3d:c3:c1:de:66:11:9a:0d:58:2b:e1:45:93:e5:6b: 0e:87:a9:47:53:c6:26:97:44:fd:ce:50:66:f3:ff:c9:b8:87: ff:15:16:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11vUzPRtZNyboFAjizlVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZTNlZDA2ZTg4ZTU1OTFkOTA5NjY3Njk1MTU1NWMwZGM1 MzVjMTkwHhcNMjUxMjE5MDkwMDM4WhcNMjUxMjIwMDkwMDM4WjAzMTEwLwYDVQQD Eyg5OWU2ZDdlY2JkYmVhZjZlZGE1MGZkMjljOTYyN2RjNjIyOWZjM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2y2WRfQDDv4jlo5wS4I1iL6lfvJb s8ukB+ZfGCaEulM7ibKfyt6twEuTiQ1+gmLLkIIGOlNR5qW7fQ4Mc2UMoVGYVA3k Obgis78cjwkThsynKtuJXi3H8QfPolR7DGpyjSBnJ8SK8Wfe6yBCU0K1ujOlVjJA uS9LTSdvD934N/94vPHqgODlo7AXc9wi4Tmx4VMn1zIzVJeMV2w+iboXJqxmbLsY m54Xv2Ev+zL2xRgANt0YGFjVAEGvEcwv8J0rT5CyceLbIDmyZweXbhiFfyhzTZos PjhYrmJQxl1L7qKUCe6hfpnSYgB+aoVLfYG7+7RhmycV1rng2RXPvh+YpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnm1+y9vq9u2lD9KclifcYin8PAMB8GA1UdIwQY MBaAFGbj7QbojlWR2QlmdpUVVcDcU1wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnVQdEJ1aU9WWkhaQ1daMmxSVlZ3TnhUWEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZDc1NDgtMDc1My00MGRjLThmYmIt ZGUyMWY1ZmVlM2RiLzEvWnVQdEJ1aU9WWkhaQ1daMmxSVlZ3TnhUWEJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni84ZDc1NDgtMDc1My00MGRjLThmYmItZGUyMWY1ZmVlM2Ri LzEvWnVQdEJ1aU9WWkhaQ1daMmxSVlZ3TnhUWEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiq0+M6u A9fqnBetnKf6KY8zn3FJumwYQ3J3fKCDtWplJaQL1OZsDa0nBcsvyb0q609nSo2d /s+M2fAw2ufgRvJ1Vb5Syc+kL2I6ZXglbBrGws0Tm7M9eHFsske4AaNnqnrgQ8o/ RjWTcPzyrbGEqtGMGKpyqbhQ0lGHsffayxlv/Ft/OccDixPj5aDJ0mDZCJAnDgcq FiWs/PL61ipKveunGc+9/qvtcr3q+t2mO9Mb9k6aSs26264vzkd4NN+sLSwxhtc0 yJIiXwq1kZBcv1tpwAmecU0TuhRtPcPB3mYRmg1YK+FFk+VrDoepR1PGJpdE/c5Q ZvP/ybiH/xUWvg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:28:53 2025 by rpki-client