This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft File: zn_f9IC7kN2LJtKCMJrxYEVeyws.mft (raw, json) Hash identifier: pxVEmQRG2krTKVddqowkS8FliV9XfhFR2JT5iWuSbkM= Subject key identifier: DB:65:1F:28:04:63:D7:79:C7:0A:08:D9:65:13:07:A0:BE:CA:B2:19 Authority key identifier: CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B Certificate issuer: /CN=ce7fdff480bb90dd8b26d282309af160455ecb0b Certificate serial: 019B4F60713FC70D330F4B20F14E635E84BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft Manifest number: 02A1 Signing time: Wed 24 Dec 2025 08:01:18 +0000 Manifest this update: Wed 24 Dec 2025 08:01:18 +0000 Manifest next update: Thu 25 Dec 2025 08:01:18 +0000 Files and hashes: 1: SQJJoXqFqNGjLH2o_g2vHuBkV6k.roa (hash: nQwkpZGomRtyEWqgatsYZovUvrMoig7TXoDGcNqHozM=) 2: zn_f9IC7kN2LJtKCMJrxYEVeyws.crl (hash: XouJ5ugFNibMcZjXPu5lPqetnF6m2HVvGuXgrfJvzeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:71:3f:c7:0d:33:0f:4b:20:f1:4e:63:5e:84:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce7fdff480bb90dd8b26d282309af160455ecb0b Validity Not Before: Dec 24 08:01:18 2025 GMT Not After : Dec 25 08:01:18 2025 GMT Subject: CN=db651f280463d779c70a08d9651307a0becab219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f5:b5:94:17:0e:ff:59:ec:13:d3:35:ed:20: 52:c9:15:b6:c9:37:a6:e1:9e:00:9d:c2:55:6f:22: fe:01:a0:b0:af:de:cd:a7:ac:56:31:b3:84:41:5b: 45:e4:0c:bc:b5:74:a5:14:39:0d:c9:d1:9f:00:90: 7b:d1:40:eb:4f:16:2c:05:59:b0:9f:5f:a4:74:45: 5e:6a:1f:56:29:e3:87:b6:b1:4b:26:1b:85:44:d1: e7:dd:7e:a6:21:94:ba:0a:09:3e:9c:af:16:65:94: e4:03:cb:99:ce:7d:41:ae:e9:d2:a7:20:fb:ea:6d: ef:92:62:cf:45:79:5d:db:8a:20:c8:41:8c:08:0c: 42:0c:09:c6:f9:a9:1f:0b:70:2a:b5:30:d6:f6:74: 59:7f:e5:d7:4b:82:94:96:7a:2b:25:cf:04:bb:63: df:6e:b8:cb:76:6c:0e:21:88:87:0e:ce:91:53:38: 49:ec:5f:52:72:2c:72:05:2a:c6:a0:08:a9:75:b5: a1:0f:1b:a2:0b:01:cc:00:05:d4:5f:4f:1c:6b:93: d2:03:f5:ff:40:fa:e8:ab:3b:44:5a:df:35:19:d6: ad:f9:0f:48:a0:8b:b0:3e:dd:b2:da:ed:6f:4a:e0: 29:15:21:d5:25:64:7c:57:f5:fe:92:d1:8d:fe:84: 7b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:65:1F:28:04:63:D7:79:C7:0A:08:D9:65:13:07:A0:BE:CA:B2:19 X509v3 Authority Key Identifier: keyid:CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7c:72:c2:4d:1c:77:a7:c4:3c:75:62:d8:be:71:18:15:c6: 9c:e7:23:6d:e7:fd:ab:7c:c3:58:8e:e3:9a:30:46:fe:8d:23: 69:19:c4:17:a7:09:fc:25:68:1b:ea:e1:9a:14:91:7e:7c:e3: 38:61:85:13:ae:03:c3:72:d0:91:8d:8b:51:1d:e6:15:3c:b3: 22:fe:3f:a0:04:73:69:04:8b:5a:b0:fa:65:43:1c:20:ee:6f: 12:aa:8e:7f:68:f3:f5:f0:4e:a2:d4:b3:3f:af:f1:3d:34:f9: 05:1f:69:13:26:9c:64:ed:62:71:da:3c:f4:a3:31:46:47:a0: d3:69:af:1c:18:f0:08:ef:6c:21:53:27:5c:56:a8:a8:40:b7: 33:7d:ac:e0:ba:26:56:c0:55:c6:d9:a7:33:19:b2:f7:73:8a: f7:2c:74:24:78:e0:f1:0d:81:c8:4e:81:d2:39:83:42:72:f5: 93:ae:07:6d:91:d9:5f:b2:21:fa:b3:36:a2:34:42:43:b7:7c: 74:6f:a4:26:ea:e1:ca:44:bf:71:3f:e4:23:a8:c4:98:a9:18: 01:94:bb:12:07:08:f8:6f:f2:a7:ef:67:3e:49:6d:8a:b3:25: a3:d6:60:2d:9f:12:c9:5b:e0:41:50:02:79:a5:7a:34:4e:3c: 48:85:d2:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYHE/xw0zD0sg8U5jXoS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlN2ZkZmY0ODBiYjkwZGQ4YjI2ZDI4MjMwOWFmMTYwNDU1 ZWNiMGIwHhcNMjUxMjI0MDgwMTE4WhcNMjUxMjI1MDgwMTE4WjAzMTEwLwYDVQQD EyhkYjY1MWYyODA0NjNkNzc5YzcwYTA4ZDk2NTEzMDdhMGJlY2FiMjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/W1lBcO/1nsE9M17SBSyRW2yTem 4Z4AncJVbyL+AaCwr97Np6xWMbOEQVtF5Ay8tXSlFDkNydGfAJB70UDrTxYsBVmw n1+kdEVeah9WKeOHtrFLJhuFRNHn3X6mIZS6Cgk+nK8WZZTkA8uZzn1BrunSpyD7 6m3vkmLPRXld24ogyEGMCAxCDAnG+akfC3AqtTDW9nRZf+XXS4KUlnorJc8Eu2Pf brjLdmwOIYiHDs6RUzhJ7F9ScixyBSrGoAipdbWhDxuiCwHMAAXUX08ca5PSA/X/ QProqztEWt81Gdat+Q9IoIuwPt2y2u1vSuApFSHVJWR8V/X+ktGN/oR75wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtlHygEY9d5xwoI2WUTB6C+yrIZMB8GA1UdIwQY MBaAFM5/3/SAu5DdiybSgjCa8WBFXssLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMt ZTEyZDE2ZjQ0MTUzLzEvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMtZTEyZDE2ZjQ0MTUz LzEvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXxywk0c d6fEPHVi2L5xGBXGnOcjbef9q3zDWI7jmjBG/o0jaRnEF6cJ/CVoG+rhmhSRfnzj OGGFE64Dw3LQkY2LUR3mFTyzIv4/oARzaQSLWrD6ZUMcIO5vEqqOf2jz9fBOotSz P6/xPTT5BR9pEyacZO1icdo89KMxRkeg02mvHBjwCO9sIVMnXFaoqEC3M32s4Lom VsBVxtmnMxmy93OK9yx0JHjg8Q2ByE6B0jmDQnL1k64HbZHZX7Ih+rM2ojRCQ7d8 dG+kJurhykS/cT/kI6jEmKkYAZS7EgcI+G/yp+9nPkltirMlo9ZgLZ8SyVvgQVAC eaV6NE48SIXSWQ== -----END CERTIFICATE-----Generated at Wed Dec 24 13:55:59 2025 by rpki-client