This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft File: Zs01lGjIuqmPw8ou8tkFg6aeABY.mft (raw, json) Hash identifier: mz+yEuj+gfJvzhDPej77ilO9AaB2RVotrm4e0KjD06k= Subject key identifier: 18:35:0D:35:B4:FC:D3:16:A2:9C:5A:1D:61:3A:0E:97:58:51:CD:C3 Authority key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16 Certificate issuer: /CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016 Certificate serial: 019B3CB4C510CF32FC052CB7F287AC060C34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft Manifest number: 0B Signing time: Sat 20 Dec 2025 17:00:38 +0000 Manifest this update: Sat 20 Dec 2025 17:00:38 +0000 Manifest next update: Sun 21 Dec 2025 17:00:38 +0000 Files and hashes: 1: L8_Hiciu_EJrED5cKw6rKtLIHKM.roa (hash: JdyJZRZAJIQuomVPk5aG0AO5/HvEyb8WafzR9TrUnZk=) 2: Zs01lGjIuqmPw8ou8tkFg6aeABY.crl (hash: QJ+4yITW+Kjy9RYGyZt+aq3A6lWWZ83d5kqwd71skL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:c5:10:cf:32:fc:05:2c:b7:f2:87:ac:06:0c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016 Validity Not Before: Dec 20 17:00:38 2025 GMT Not After : Dec 21 17:00:38 2025 GMT Subject: CN=18350d35b4fcd316a29c5a1d613a0e975851cdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:d2:72:1e:6a:00:7d:8a:20:c4:de:2d:1a: ef:5a:ce:ce:9f:71:63:aa:ed:3b:c9:21:75:f0:39: 4d:02:f4:9c:d9:e5:f0:48:39:ea:b0:df:17:fe:fd: b4:cf:5c:ba:b3:8c:5c:9d:8b:a6:9d:a8:8a:c2:cf: 97:bf:28:2a:99:51:e8:fe:71:bf:62:00:bd:95:2c: 70:71:a0:3e:7d:18:59:a9:37:27:24:7e:6b:c3:c7: ed:04:1b:86:1a:3f:5b:b0:f0:f9:71:32:a1:a5:cd: ca:78:38:d4:c2:62:3d:92:3b:69:79:c2:70:78:7f: 9c:a4:61:c8:cd:83:e0:bb:7c:bb:1a:07:60:fd:6d: 97:d4:af:21:58:8d:eb:06:56:1c:3b:fd:84:32:8a: 2e:b0:aa:26:2c:40:23:9f:44:a0:4e:33:be:7c:c9: 23:39:5e:27:03:a1:e9:ab:da:ba:68:08:32:f1:51: c5:9b:ed:6a:5a:f3:76:13:0c:d1:8c:08:f5:5f:f7: 7c:38:11:ac:44:45:97:b8:78:2b:39:5b:f5:cb:80: 31:b1:54:f4:29:5d:7d:fd:2a:c5:68:29:01:72:9f: f6:eb:e9:88:20:b1:1b:8a:70:83:02:d9:f0:44:3e: ae:06:dd:d4:95:8a:5b:37:19:c4:e4:ef:7f:11:e7: b8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:35:0D:35:B4:FC:D3:16:A2:9C:5A:1D:61:3A:0E:97:58:51:CD:C3 X509v3 Authority Key Identifier: keyid:66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:73:7f:38:00:ac:77:c0:bc:e4:b9:e3:ae:5a:89:c6:2d:c8: 89:c8:7a:86:68:61:c3:4b:58:46:92:e6:69:e9:af:6d:86:06: ef:da:28:77:72:69:49:c2:6a:1c:03:19:7e:2b:04:cc:98:ef: 55:b4:5d:f0:41:5c:b9:8d:4b:a6:fd:5e:cd:3f:64:9b:d4:2a: 1b:c8:4d:8e:58:85:42:2f:29:fa:32:5b:a4:ae:e2:da:1b:b0: ee:ce:69:18:de:1b:12:42:b8:27:7d:f6:10:0d:ca:9a:59:9f: 37:6b:fc:82:f4:f1:7d:3d:b5:2b:bb:8c:43:0a:42:68:6a:93: b4:86:ef:02:c9:47:5b:14:de:6f:51:b5:dc:22:44:b0:37:ba: a6:0f:c5:3a:77:f8:b5:6b:eb:5b:12:b2:ed:61:21:f7:a0:33: c3:5d:9d:a1:9e:8b:6f:5e:bc:f4:d5:7c:c3:3d:6d:60:1e:62: 82:b1:e5:d0:94:d2:a2:6b:03:99:e7:f5:4a:42:27:be:dc:a1: b3:2e:a9:04:73:90:61:17:7b:8a:db:d5:28:f8:a7:6d:c9:70: d8:96:f6:22:6b:e4:67:d7:a6:9f:e8:26:85:61:94:3b:ae:6c: 13:44:8e:57:5f:36:34:2b:82:5b:48:9d:4e:dd:cb:48:b4:a0: da:c8:5f:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tMUQzzL8BSy38oesBgw0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2Y2QzNTk0NjhjOGJhYTk4ZmMzY2EyZWYyZDkwNTgzYTY5 ZTAwMTYwHhcNMjUxMjIwMTcwMDM4WhcNMjUxMjIxMTcwMDM4WjAzMTEwLwYDVQQD EygxODM1MGQzNWI0ZmNkMzE2YTI5YzVhMWQ2MTNhMGU5NzU4NTFjZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSXSch5qAH2KIMTeLRrvWs7On3Fj qu07ySF18DlNAvSc2eXwSDnqsN8X/v20z1y6s4xcnYumnaiKws+XvygqmVHo/nG/ YgC9lSxwcaA+fRhZqTcnJH5rw8ftBBuGGj9bsPD5cTKhpc3KeDjUwmI9kjtpecJw eH+cpGHIzYPgu3y7Ggdg/W2X1K8hWI3rBlYcO/2EMoousKomLEAjn0SgTjO+fMkj OV4nA6Hpq9q6aAgy8VHFm+1qWvN2EwzRjAj1X/d8OBGsREWXuHgrOVv1y4AxsVT0 KV19/SrFaCkBcp/26+mIILEbinCDAtnwRD6uBt3UlYpbNxnE5O9/Eee4rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBg1DTW0/NMWopxaHWE6DpdYUc3DMB8GA1UdIwQY MBaAFGbNNZRoyLqpj8PKLvLZBYOmngAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnMwMWxHakl1cW1QdzhvdTh0a0ZnNmFlQUJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MzcwYzQtZTRjZC00ZGIzLTliODYt ZTM1OWFlMGE2ODM4LzEvWnMwMWxHakl1cW1QdzhvdTh0a0ZnNmFlQUJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83MzcwYzQtZTRjZC00ZGIzLTliODYtZTM1OWFlMGE2ODM4 LzEvWnMwMWxHakl1cW1QdzhvdTh0a0ZnNmFlQUJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHN/OACs d8C85LnjrlqJxi3Iich6hmhhw0tYRpLmaemvbYYG79ood3JpScJqHAMZfisEzJjv VbRd8EFcuY1Lpv1ezT9km9QqG8hNjliFQi8p+jJbpK7i2huw7s5pGN4bEkK4J332 EA3KmlmfN2v8gvTxfT21K7uMQwpCaGqTtIbvAslHWxTeb1G13CJEsDe6pg/FOnf4 tWvrWxKy7WEh96Azw12doZ6Lb1689NV8wz1tYB5igrHl0JTSomsDmef1SkInvtyh sy6pBHOQYRd7itvVKPinbclw2Jb2ImvkZ9emn+gmhWGUO65sE0SOV182NCuCW0id Tt3LSLSg2shfFg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:41:43 2025 by rpki-client