This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft File: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft (raw, json) Hash identifier: ReXDduoCRWMxAzWWDyawPCRstuxmkbFj7MwWlJNItzg= Subject key identifier: E2:EB:60:23:0C:92:4C:B8:B1:FE:E5:E2:10:99:6B:18:6D:82:CD:C3 Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7 Certificate issuer: /CN=646836c9214faaa16798a93e8773e599534b29d7 Certificate serial: 019B5BD23EF9417FF158619BF9070984140E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft Manifest number: 0905 Signing time: Fri 26 Dec 2025 18:01:03 +0000 Manifest this update: Fri 26 Dec 2025 18:01:03 +0000 Manifest next update: Sat 27 Dec 2025 18:01:03 +0000 Files and hashes: 1: 61Gq7F9HDY76tR6eiEQWqVAvCDc.roa (hash: UnYiE/hrC17fToVR4tEZHFP7UPTNmsiE/lDxvNs6zSU=) 2: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl (hash: kelJjYfcUJ7qcpiz4258ib2Fz6F20d6MpfVHTCQUueI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:3e:f9:41:7f:f1:58:61:9b:f9:07:09:84:14:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7 Validity Not Before: Dec 26 18:01:03 2025 GMT Not After : Dec 27 18:01:03 2025 GMT Subject: CN=e2eb60230c924cb8b1fee5e210996b186d82cdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:24:01:24:ba:1e:74:ae:ba:d2:c2:13:07: 92:3b:2c:fa:49:1d:ba:33:19:63:f5:79:32:37:70: 4b:9d:70:30:5c:05:d4:7e:aa:62:c3:96:4b:55:88: d7:07:1a:f4:2e:1b:39:80:79:54:c0:43:be:01:e1: f5:46:44:c0:ea:8f:ae:27:1e:31:6b:68:b3:14:50: df:96:de:c7:cb:cc:2b:ff:c9:af:6f:03:77:43:68: 24:c6:74:e1:10:5a:e3:84:eb:13:32:72:1f:12:ca: ee:75:b5:09:4b:85:56:90:f4:73:3b:a8:e4:ac:12: 00:5b:fa:a0:70:0a:16:9c:1b:76:4e:33:2c:f9:d0: aa:29:d6:af:e6:a8:88:be:44:38:55:c0:9e:ce:43: 7e:3c:18:e1:46:e5:1a:90:85:0f:a4:26:bc:72:6b: 79:2a:87:e4:21:cc:0f:70:72:c1:cd:7a:5b:1d:5e: b7:4c:82:37:17:c4:1b:15:f8:57:50:e4:2f:c3:b3: 98:79:1d:79:8e:fc:e3:86:b8:5e:fd:35:48:2e:a4: 1c:66:04:b7:43:66:15:6c:9f:02:8c:51:a2:5e:19: 5f:21:9f:c8:0e:09:e9:c1:d3:a5:87:4c:82:ac:ee: ed:13:b4:ed:bb:b2:c2:e6:1a:7c:98:5e:46:bc:19: 37:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EB:60:23:0C:92:4C:B8:B1:FE:E5:E2:10:99:6B:18:6D:82:CD:C3 X509v3 Authority Key Identifier: keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:93:a9:aa:71:95:d0:79:7d:c5:4c:ab:97:0b:1f:95:73:bc: 03:f0:6d:43:1f:8a:29:f0:87:f5:ae:48:4b:d9:3e:dd:fc:90: 86:32:86:f9:4a:7f:20:35:ce:28:08:f7:0b:a6:bb:d9:79:cb: 20:12:78:bf:34:42:1b:2a:4b:13:d9:6c:4a:33:a6:d4:37:60: 56:40:12:04:25:be:9c:e0:81:ba:1d:87:36:fc:27:8e:92:bd: 20:8a:d3:0b:42:5e:58:3c:46:b5:7f:c5:b6:95:9f:4c:7b:e9: 49:2b:c9:5d:bf:3a:f1:c2:d6:c2:7b:f6:45:1a:1b:e5:f2:45: 68:0c:4b:ed:b8:cf:06:7b:01:51:65:d1:a8:55:1d:3f:07:66: e6:b9:cb:25:09:3e:42:01:11:2f:e3:e6:17:15:fd:cf:b5:bd: 70:37:43:a4:dd:92:be:10:d2:d1:cd:0e:16:9e:64:d7:ce:81: e2:b3:84:1d:f5:95:2f:be:68:cb:8a:d2:c8:bf:a9:92:48:56: 89:15:65:e5:47:0d:60:7d:80:1e:72:73:d3:ac:60:83:bd:2d: 33:aa:2c:c7:97:37:24:0c:79:85:ca:7b:bb:e2:40:bf:47:59: d8:e0:63:39:9e:82:3a:b0:97:fe:68:6a:b4:3f:5c:c6:81:ae: 0c:19:ba:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0j75QX/xWGGb+QcJhBQOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NjgzNmM5MjE0ZmFhYTE2Nzk4YTkzZTg3NzNlNTk5NTM0 YjI5ZDcwHhcNMjUxMjI2MTgwMTAzWhcNMjUxMjI3MTgwMTAzWjAzMTEwLwYDVQQD EyhlMmViNjAyMzBjOTI0Y2I4YjFmZWU1ZTIxMDk5NmIxODZkODJjZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcMkASS6HnSuutLCEweSOyz6SR26 Mxlj9XkyN3BLnXAwXAXUfqpiw5ZLVYjXBxr0Lhs5gHlUwEO+AeH1RkTA6o+uJx4x a2izFFDflt7Hy8wr/8mvbwN3Q2gkxnThEFrjhOsTMnIfEsrudbUJS4VWkPRzO6jk rBIAW/qgcAoWnBt2TjMs+dCqKdav5qiIvkQ4VcCezkN+PBjhRuUakIUPpCa8cmt5 KofkIcwPcHLBzXpbHV63TII3F8QbFfhXUOQvw7OYeR15jvzjhrhe/TVILqQcZgS3 Q2YVbJ8CjFGiXhlfIZ/IDgnpwdOlh0yCrO7tE7Ttu7LC5hp8mF5GvBk3UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLrYCMMkky4sf7l4hCZaxhtgs3DMB8GA1UdIwQY MBaAFGRoNskhT6qhZ5ipPodz5ZlTSynXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYt NWU4MjJmMzEwNjM4LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYtNWU4MjJmMzEwNjM4 LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZOpqnGV 0Hl9xUyrlwsflXO8A/BtQx+KKfCH9a5IS9k+3fyQhjKG+Up/IDXOKAj3C6a72XnL IBJ4vzRCGypLE9lsSjOm1DdgVkASBCW+nOCBuh2HNvwnjpK9IIrTC0JeWDxGtX/F tpWfTHvpSSvJXb868cLWwnv2RRob5fJFaAxL7bjPBnsBUWXRqFUdPwdm5rnLJQk+ QgERL+PmFxX9z7W9cDdDpN2SvhDS0c0OFp5k186B4rOEHfWVL75oy4rSyL+pkkhW iRVl5UcNYH2AHnJz06xgg70tM6osx5c3JAx5hcp7u+JAv0dZ2OBjOZ6COrCX/mhq tD9cxoGuDBm6JQ== -----END CERTIFICATE-----Generated at Fri Dec 26 23:11:40 2025 by rpki-client