This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft File: ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft (raw, json) Hash identifier: yNJeJnWxVxY3aSOPFXPIF1CgVS+ADgZD0dZbYkJSHrw= Subject key identifier: 50:65:F0:3F:E3:25:98:D5:B3:10:D2:92:33:A3:21:27:0A:26:D2:36 Authority key identifier: 64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F Certificate issuer: /CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f Certificate serial: 019B43CA04419CB95BA6B0F83FC57752788A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft Manifest number: 11B8 Signing time: Mon 22 Dec 2025 02:01:11 +0000 Manifest this update: Mon 22 Dec 2025 02:01:11 +0000 Manifest next update: Tue 23 Dec 2025 02:01:11 +0000 Files and hashes: 1: ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl (hash: jP5tVdsvcBsTLoftCOBKroFZq3ZsjqVTJIXVkI3KfcI=) 2: natM_WPGOslxNGy-WWG31EWqeRQ.roa (hash: tw5Pi8YXZ8+HgAyIg5gw92v0qWpZtmlxf2AnJMSdWBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:ca:04:41:9c:b9:5b:a6:b0:f8:3f:c5:77:52:78:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64e67f7ebc0a810b88c0aad340c26edcb45de65f Validity Not Before: Dec 22 02:01:11 2025 GMT Not After : Dec 23 02:01:11 2025 GMT Subject: CN=5065f03fe32598d5b310d29233a321270a26d236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:dd:ad:cf:41:01:f6:4e:c6:45:ce:06:62: 9c:f0:94:77:69:36:bc:d3:77:06:3a:78:b5:ac:6b: b6:02:de:a8:9c:0b:01:51:ec:94:88:61:42:d2:2a: 1d:e1:47:72:bb:24:9d:ce:90:15:66:1e:7f:be:01: de:c9:70:f1:14:18:d5:83:2c:2e:da:6b:8b:47:c3: 29:e3:70:75:c1:d4:84:49:d1:3e:39:e8:f5:25:e6: de:b4:ef:19:d9:da:77:58:c2:67:bb:34:6e:80:a5: 40:0b:2c:16:ef:8a:7d:4c:ea:55:b9:8c:d7:6f:df: 96:65:f0:ca:e4:9a:f4:d7:cc:29:50:b8:c9:2d:8d: 12:86:73:6c:1e:48:a3:7c:b9:85:94:fe:2a:46:dd: d7:17:e8:96:7b:4e:fe:dd:ae:32:9c:18:1f:20:94: c9:86:f6:8f:f3:b9:e3:7b:88:c1:4d:5b:91:c7:0a: 56:2b:53:7b:ef:c2:28:22:40:10:4b:c6:13:52:c0: 2a:1e:5e:74:73:ca:f5:39:51:ed:44:9a:2c:b3:7c: 15:dd:89:d8:68:68:ee:7f:d9:ef:8a:03:de:c9:5a: 14:c6:c5:e3:54:9a:ed:f6:82:af:c4:13:70:a9:32: 5a:4d:51:2d:3f:bc:9c:a0:36:4f:84:bb:1f:5b:b7: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:65:F0:3F:E3:25:98:D5:B3:10:D2:92:33:A3:21:27:0A:26:D2:36 X509v3 Authority Key Identifier: keyid:64:E6:7F:7E:BC:0A:81:0B:88:C0:AA:D3:40:C2:6E:DC:B4:5D:E6:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cab79f-abc1-4a62-bc69-442299f412fd/1/ZOZ_frwKgQuIwKrTQMJu3LRd5l8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:8c:ca:8b:06:9f:bf:9f:ec:02:de:5e:41:8b:9e:5e:dc:d2: b9:5d:4a:47:0b:ce:11:38:f2:a0:3a:ad:d4:8b:18:a2:ac:78: 7a:fe:f9:58:e1:94:a6:12:5b:ea:8c:8d:e1:f8:fa:68:a2:0b: 7f:79:5a:f8:68:cc:6c:54:95:8c:fe:cf:b3:2b:cf:e8:74:1f: 33:0a:01:02:10:83:4a:2c:27:2a:9e:d1:04:06:e8:51:79:ed: e9:d7:01:e3:18:4d:7b:a8:d3:c2:a0:94:64:a5:c2:21:d1:40: 96:a9:92:f8:49:e2:74:39:eb:02:41:a9:c2:94:b3:1c:ab:5f: 45:83:74:39:73:e9:b8:18:9d:9e:c1:a7:db:9b:4c:9c:c2:26: 99:c6:2a:55:7c:d7:c2:68:ff:c6:da:43:4c:3f:72:6f:d0:68: 57:8a:31:42:d3:6a:73:c0:b1:eb:31:1d:54:9e:85:76:35:8e: 3c:bc:7f:e9:7f:81:e0:f7:e3:13:3e:f3:06:1c:d7:36:14:c4: b2:a6:90:ab:3a:ae:84:bf:38:83:27:27:86:ed:6a:63:a4:cf: 13:55:81:1e:e3:99:6f:8a:46:67:47:a7:26:4b:4e:38:14:1b: da:cb:b6:5a:54:42:4c:f3:e4:76:3e:f1:60:dc:fb:a1:ed:00: 55:22:2b:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDygRBnLlbprD4P8V3UniKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZTY3ZjdlYmMwYTgxMGI4OGMwYWFkMzQwYzI2ZWRjYjQ1 ZGU2NWYwHhcNMjUxMjIyMDIwMTExWhcNMjUxMjIzMDIwMTExWjAzMTEwLwYDVQQD Eyg1MDY1ZjAzZmUzMjU5OGQ1YjMxMGQyOTIzM2EzMjEyNzBhMjZkMjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUjdrc9BAfZOxkXOBmKc8JR3aTa8 03cGOni1rGu2At6onAsBUeyUiGFC0iod4UdyuySdzpAVZh5/vgHeyXDxFBjVgywu 2muLR8Mp43B1wdSESdE+Oej1JebetO8Z2dp3WMJnuzRugKVACywW74p9TOpVuYzX b9+WZfDK5Jr018wpULjJLY0ShnNsHkijfLmFlP4qRt3XF+iWe07+3a4ynBgfIJTJ hvaP87nje4jBTVuRxwpWK1N778IoIkAQS8YTUsAqHl50c8r1OVHtRJoss3wV3YnY aGjuf9nvigPeyVoUxsXjVJrt9oKvxBNwqTJaTVEtP7ycoDZPhLsfW7eaoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBl8D/jJZjVsxDSkjOjIScKJtI2MB8GA1UdIwQY MBaAFGTmf368CoELiMCq00DCbty0XeZfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk9aX2Zyd0tnUXVJd0tyVFFNSnUzTFJkNWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYWI3OWYtYWJjMS00YTYyLWJjNjkt NDQyMjk5ZjQxMmZkLzEvWk9aX2Zyd0tnUXVJd0tyVFFNSnUzTFJkNWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jYWI3OWYtYWJjMS00YTYyLWJjNjktNDQyMjk5ZjQxMmZk LzEvWk9aX2Zyd0tnUXVJd0tyVFFNSnUzTFJkNWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuozKiwaf v5/sAt5eQYueXtzSuV1KRwvOETjyoDqt1IsYoqx4ev75WOGUphJb6oyN4fj6aKIL f3la+GjMbFSVjP7PsyvP6HQfMwoBAhCDSiwnKp7RBAboUXnt6dcB4xhNe6jTwqCU ZKXCIdFAlqmS+EnidDnrAkGpwpSzHKtfRYN0OXPpuBidnsGn25tMnMImmcYqVXzX wmj/xtpDTD9yb9BoV4oxQtNqc8Cx6zEdVJ6FdjWOPLx/6X+B4PfjEz7zBhzXNhTE sqaQqzquhL84gycnhu1qY6TPE1WBHuOZb4pGZ0enJktOOBQb2su2WlRCTPPkdj7x YNz7oe0AVSIrZg== -----END CERTIFICATE-----Generated at Mon Dec 22 03:46:49 2025 by rpki-client