This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft File: ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json) Hash identifier: hNksPA6JXI4Hi7YThFAu9az80x1kcn/4swPtQF2qrVY= Subject key identifier: C8:3E:69:A1:D7:74:D4:D6:E1:8B:DE:E9:F1:8B:A0:74:59:67:EB:66 Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67 Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67 Certificate serial: 019B39EAF8631EA41AF9748D28D0C349C388 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 04:00:58 +0000 Manifest this update: Sat 20 Dec 2025 04:00:58 +0000 Manifest next update: Sun 21 Dec 2025 04:00:58 +0000 Files and hashes: 1: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: 9ryw/tMkQ+2GRuD7tJm4qAw/FoUoj3cXIkNjcDarE/8=) 2: uq1i3QTcOfr9aoUS3uiTj-7_PxQ.roa (hash: TsR7okYr+7CVrm7zPPpfCJyYKvk1uxkHBTpNsw0aMrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:f8:63:1e:a4:1a:f9:74:8d:28:d0:c3:49:c3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67 Validity Not Before: Dec 20 04:00:58 2025 GMT Not After : Dec 21 04:00:58 2025 GMT Subject: CN=c83e69a1d774d4d6e18bdee9f18ba0745967eb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:c6:b3:6b:78:3a:fb:c9:c5:dc:7a:17:32: bf:87:d5:b7:89:1e:47:2b:27:e2:fb:42:36:74:a3: e4:2f:69:6e:45:0e:c9:b3:0c:5b:9c:e2:87:e2:5d: 56:55:7e:8c:64:e0:fa:c5:13:a3:ec:b0:a7:8f:a4: 4c:7e:92:cb:54:16:27:f6:a7:1f:11:01:c6:c2:ca: 72:84:57:18:88:65:5c:e4:17:33:26:0a:1f:1e:57: 57:91:93:30:78:eb:1e:0f:c3:2b:2d:29:39:ac:74: 6a:12:20:ae:43:4a:4a:35:04:55:04:c5:b9:43:ab: 4a:a5:8c:22:3a:87:7b:5f:42:bc:f6:97:51:c9:1c: 3e:4b:a5:44:e6:46:1e:fb:40:60:50:38:48:6e:78: 47:71:69:03:1a:f7:a4:72:f1:71:4e:5a:ca:d9:a2: db:f2:1c:61:0d:d4:eb:7b:ea:b0:e5:4c:0c:9f:ed: 34:46:20:da:f5:88:0a:ae:cb:76:71:bf:c4:f1:f9: ba:3c:93:84:6a:b6:46:25:a9:25:c1:74:37:90:1f: f0:80:49:e5:2e:20:12:43:20:58:20:48:34:28:2c: 2e:c9:97:48:69:9f:70:51:ea:13:98:c5:ea:3e:49: db:8b:cd:3e:10:01:8a:b8:0e:4d:0a:3c:ba:9e:7d: 5c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3E:69:A1:D7:74:D4:D6:E1:8B:DE:E9:F1:8B:A0:74:59:67:EB:66 X509v3 Authority Key Identifier: keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:78:7f:3b:57:69:a6:42:1a:fa:e0:be:70:2a:84:6e:e0:a1: d3:59:a3:2c:f9:5c:dd:60:9d:e4:dc:7f:24:df:26:3a:01:6f: 92:49:fc:b0:4e:27:65:e8:dd:9c:22:cb:35:2d:f1:9d:80:32: e3:47:cd:e1:eb:d6:e6:b6:83:b1:8c:97:31:47:ce:e3:7b:8b: d3:17:00:50:1a:37:50:96:61:eb:13:11:a3:eb:f4:10:0d:9d: d6:58:6b:56:2c:d4:32:67:e5:5a:71:f7:7d:d9:86:e7:f1:aa: 66:22:6b:72:bb:2e:d6:67:b9:bd:14:42:e2:00:17:2c:07:ed: 62:57:b5:24:29:ca:5c:54:ed:f3:79:e6:71:13:15:5a:eb:a7: b6:19:3c:0d:61:08:39:a1:58:e2:33:5d:42:3d:4d:79:42:9a: 53:0a:e3:be:4a:81:7b:93:7c:2d:d8:42:46:e9:0b:23:27:ad: 7e:a0:0a:5d:8d:9e:ae:d6:b2:4a:dc:e0:90:08:0f:74:b3:c2: 9f:3f:28:eb:75:e7:17:f7:27:3b:41:c2:1d:5e:b1:f9:c5:35: d5:7e:78:4e:3f:07:2c:ed:2a:7a:da:f5:f0:8b:1c:1f:90:65: 59:6b:b0:cb:ba:84:41:bf:c9:b1:0b:b8:bd:16:00:a8:80:af: cd:90:45:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56vhjHqQa+XSNKNDDScOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZGVkODVkOWEwNWIxZGY2ODlhOGI2YzMxM2Y4MTI4Yzdh MDBiNjcwHhcNMjUxMjIwMDQwMDU4WhcNMjUxMjIxMDQwMDU4WjAzMTEwLwYDVQQD EyhjODNlNjlhMWQ3NzRkNGQ2ZTE4YmRlZTlmMThiYTA3NDU5NjdlYjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4rGs2t4OvvJxdx6FzK/h9W3iR5H Kyfi+0I2dKPkL2luRQ7JswxbnOKH4l1WVX6MZOD6xROj7LCnj6RMfpLLVBYn9qcf EQHGwspyhFcYiGVc5BczJgofHldXkZMweOseD8MrLSk5rHRqEiCuQ0pKNQRVBMW5 Q6tKpYwiOod7X0K89pdRyRw+S6VE5kYe+0BgUDhIbnhHcWkDGvekcvFxTlrK2aLb 8hxhDdTre+qw5UwMn+00RiDa9YgKrst2cb/E8fm6PJOEarZGJaklwXQ3kB/wgEnl LiASQyBYIEg0KCwuyZdIaZ9wUeoTmMXqPknbi80+EAGKuA5NCjy6nn1ceQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMg+aaHXdNTW4Yve6fGLoHRZZ+tmMB8GA1UdIwQY MBaAFGTe2F2aBbHfaJqLbDE/gSjHoAtnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUt YjllYjg3MWY2ZDk2LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUtYjllYjg3MWY2ZDk2 LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3h/O1dp pkIa+uC+cCqEbuCh01mjLPlc3WCd5Nx/JN8mOgFvkkn8sE4nZejdnCLLNS3xnYAy 40fN4evW5raDsYyXMUfO43uL0xcAUBo3UJZh6xMRo+v0EA2d1lhrVizUMmflWnH3 fdmG5/GqZiJrcrsu1me5vRRC4gAXLAftYle1JCnKXFTt83nmcRMVWuunthk8DWEI OaFY4jNdQj1NeUKaUwrjvkqBe5N8LdhCRukLIyetfqAKXY2ertayStzgkAgPdLPC nz8o63XnF/cnO0HCHV6x+cU11X54Tj8HLO0qetr18IscH5BlWWuwy7qEQb/JsQu4 vRYAqICvzZBF/A== -----END CERTIFICATE-----Generated at Sat Dec 20 10:51:36 2025 by rpki-client