This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft File: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft (raw, json) Hash identifier: ziYZzvGAUfF2tBqsCkIYhR/1QLfS2M2P34KZoDVrKjM= Subject key identifier: F2:D2:2C:21:54:FF:CA:BD:3A:36:17:11:61:35:26:BB:B1:40:E9:30 Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22 Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222 Certificate serial: 019B5F41D3485959DEE6B172A89A6918BB15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft Manifest number: 0F35 Signing time: Sat 27 Dec 2025 10:01:47 +0000 Manifest this update: Sat 27 Dec 2025 10:01:47 +0000 Manifest next update: Sun 28 Dec 2025 10:01:47 +0000 Files and hashes: 1: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl (hash: zohDEeNk+r5zIaolM9tqwprow0r9GiQJgpt60K/STGk=) 2: bmxfR1YI28e9AvruScrILUTRG3I.roa (hash: cqN9qg0IAUOQT2Uuvb3v+aRnSBYZJQOZClfPWFzUISg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:41:d3:48:59:59:de:e6:b1:72:a8:9a:69:18:bb:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222 Validity Not Before: Dec 27 10:01:47 2025 GMT Not After : Dec 28 10:01:47 2025 GMT Subject: CN=f2d22c2154ffcabd3a361711613526bbb140e930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:30:3e:e3:b2:f5:4c:6d:4f:83:32:de:59: b2:c1:1b:16:f6:28:aa:c2:9d:b2:2c:4b:30:64:31: bb:5f:64:ce:ef:d3:57:43:42:da:9b:68:af:c7:2f: 63:ea:65:d3:0b:ac:48:ea:73:e0:f4:ba:00:f7:36: a4:57:98:68:ec:e8:d1:b2:84:27:76:59:0a:2a:6c: 2e:d7:7c:c6:0a:38:72:f7:5d:76:90:8f:3c:e7:06: 3c:b4:9b:e0:c8:84:b2:be:13:16:fd:83:4c:c2:56: 8d:05:42:43:bd:3b:63:ee:79:bf:83:3e:f2:68:80: e7:6c:35:2e:1c:d8:ed:8a:85:7a:8a:e2:75:a3:29: 9d:f5:30:fa:35:fe:7d:90:4c:a6:f4:65:89:1a:ee: 3e:8f:3a:e2:15:de:f4:3a:18:65:cf:89:66:46:b3: ca:73:d1:58:bc:cc:f1:7f:06:8a:a1:d5:0b:c0:cb: d4:37:49:70:cb:dd:6a:50:cb:62:9c:d3:93:12:7d: 62:1c:00:57:f1:ab:e0:31:01:07:9c:65:aa:06:94: 3e:8c:a9:51:f8:3a:a6:df:d9:4e:5f:85:e6:5c:6f: a0:68:22:22:78:3e:83:27:7e:d8:d9:6b:32:fc:ac: f4:33:8c:ee:c4:99:d9:a8:9b:e2:aa:43:b1:35:25: 0a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D2:2C:21:54:FF:CA:BD:3A:36:17:11:61:35:26:BB:B1:40:E9:30 X509v3 Authority Key Identifier: keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:57:06:74:35:0f:de:7a:1b:d8:ed:ab:cd:8b:84:5d:15:05: df:d7:ff:2e:b1:d9:43:7f:02:eb:09:ab:78:3c:e3:9c:19:72: 4f:ee:1b:78:dc:e3:51:28:f6:90:27:24:58:cb:82:75:8e:8e: 21:dc:54:61:59:01:51:ad:ba:65:c3:3a:10:88:c7:5a:7e:5a: c6:61:6a:ec:54:06:59:f6:31:89:4c:94:ce:1b:52:48:44:53: 00:f9:39:4b:e0:f6:cd:b3:02:44:2c:d0:3e:5f:2c:df:7b:bc: b1:1f:c0:9b:2e:31:ac:1a:73:e5:84:52:1f:ba:17:7e:d5:41: 65:60:c6:2d:91:7e:25:5a:38:0f:ed:96:02:e9:4a:0c:d9:67: 3c:56:75:d8:be:7d:0a:61:92:4e:19:3a:d4:f9:2f:ff:99:25: 16:66:68:c1:70:f7:48:77:4c:4c:2d:7c:76:f8:88:32:02:5f: e8:09:40:aa:15:eb:cd:30:f3:a6:0f:9e:ea:21:5b:cb:53:11: 67:6b:35:26:27:42:f9:56:61:14:1d:bf:15:3d:84:3c:52:70: 68:a6:f3:d0:95:c9:17:82:0e:95:8c:80:23:d4:a7:25:3f:81: d4:28:e5:34:88:82:69:e3:8b:d7:e2:e4:a7:f7:2f:73:64:e1: c5:63:0f:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQdNIWVne5rFyqJppGLsVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MDQ3Yjk4N2JlOTc0Mjc4NWJhOGU4YjMzYWMwNzdiZjlj N2EyMjIwHhcNMjUxMjI3MTAwMTQ3WhcNMjUxMjI4MTAwMTQ3WjAzMTEwLwYDVQQD EyhmMmQyMmMyMTU0ZmZjYWJkM2EzNjE3MTE2MTM1MjZiYmIxNDBlOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVQwPuOy9UxtT4My3lmywRsW9iiq wp2yLEswZDG7X2TO79NXQ0Lam2ivxy9j6mXTC6xI6nPg9LoA9zakV5ho7OjRsoQn dlkKKmwu13zGCjhy9112kI885wY8tJvgyISyvhMW/YNMwlaNBUJDvTtj7nm/gz7y aIDnbDUuHNjtioV6iuJ1oymd9TD6Nf59kEym9GWJGu4+jzriFd70Ohhlz4lmRrPK c9FYvMzxfwaKodULwMvUN0lwy91qUMtinNOTEn1iHABX8avgMQEHnGWqBpQ+jKlR +Dqm39lOX4XmXG+gaCIieD6DJ37Y2Wsy/Kz0M4zuxJnZqJviqkOxNSUK0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLSLCFU/8q9OjYXEWE1JruxQOkwMB8GA1UdIwQY MBaAFGcEe5h76XQnhbqOizOsB3v5x6IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYt ZThlZGYyOTI0NWMwLzEvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYtZThlZGYyOTI0NWMw LzEvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlcGdDUP 3nob2O2rzYuEXRUF39f/LrHZQ38C6wmreDzjnBlyT+4beNzjUSj2kCckWMuCdY6O IdxUYVkBUa26ZcM6EIjHWn5axmFq7FQGWfYxiUyUzhtSSERTAPk5S+D2zbMCRCzQ Pl8s33u8sR/Amy4xrBpz5YRSH7oXftVBZWDGLZF+JVo4D+2WAulKDNlnPFZ12L59 CmGSThk61Pkv/5klFmZowXD3SHdMTC18dviIMgJf6AlAqhXrzTDzpg+e6iFby1MR Z2s1JidC+VZhFB2/FT2EPFJwaKbz0JXJF4IOlYyAI9SnJT+B1CjlNIiCaeOL1+Lk p/cvc2ThxWMPIA== -----END CERTIFICATE-----Generated at Sat Dec 27 15:55:58 2025 by rpki-client