This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json) Hash identifier: xOU0OOnonP6okvSJJoyjVCmSoXtfZhtezGcJd7lTGPY= Subject key identifier: 31:29:D0:39:B2:2C:E7:75:FC:C8:BA:A6:2D:AF:A3:1F:01:73:A1:D4 Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea Certificate serial: 019B3BA22B6C7CA2217E42A56C20CD59D25B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft Manifest number: 0C3E Signing time: Sat 20 Dec 2025 12:00:42 +0000 Manifest this update: Sat 20 Dec 2025 12:00:42 +0000 Manifest next update: Sun 21 Dec 2025 12:00:42 +0000 Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: KywtIdVol/S0mQRzJr5Xxe0SnWiiawWBhfVr9wwX+1k=) 2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=) 3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:2b:6c:7c:a2:21:7e:42:a5:6c:20:cd:59:d2:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea Validity Not Before: Dec 20 12:00:42 2025 GMT Not After : Dec 21 12:00:42 2025 GMT Subject: CN=3129d039b22ce775fcc8baa62dafa31f0173a1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c3:2e:7e:93:83:ee:20:4e:c7:9b:9f:40:56: 92:d4:b6:dd:a4:1a:45:4f:f1:c8:ee:5c:04:7a:9c: 5a:a8:6b:4b:3b:34:aa:95:cd:5f:f9:10:29:c0:ff: 62:f2:d1:31:f1:d0:7d:1c:9f:2c:49:9e:70:a0:06: 8a:5f:1a:be:10:a4:fc:52:ae:41:16:85:a3:20:da: 8d:e5:1d:47:7e:df:94:53:ce:7d:7c:f1:b4:9c:28: fc:9a:6c:f8:bf:54:74:a0:47:3f:7d:9d:73:6e:82: 64:d7:8f:f6:c4:84:27:b7:eb:70:cc:5f:61:70:ba: d4:72:72:e6:a4:7b:18:f9:24:33:92:7d:ec:c8:98: 99:92:f7:27:8d:ec:a6:b5:22:c6:16:78:6d:81:9c: 61:c7:60:e3:2f:99:6d:84:e4:fa:bb:42:a0:29:65: eb:ec:db:76:28:ba:c6:25:d2:a2:f9:f5:ce:9b:ff: 49:a9:4b:48:45:b5:46:45:c9:f9:ec:05:76:2c:12: d9:eb:bc:ce:00:ca:3f:45:f7:3d:ca:8a:15:e3:b9: e3:d5:75:f3:4f:ba:8d:3d:f5:66:2a:32:f5:d9:17: 4a:e4:e9:d3:bc:b9:3c:bd:5c:1f:5a:59:90:12:3b: 8c:57:dd:fd:cd:c5:b8:b5:b4:0d:53:3c:42:b5:e2: a7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:29:D0:39:B2:2C:E7:75:FC:C8:BA:A6:2D:AF:A3:1F:01:73:A1:D4 X509v3 Authority Key Identifier: keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:be:c5:e4:1b:de:7d:2c:2a:41:0a:fe:2d:88:0e:fc:78:66: 25:cd:eb:fb:ff:cf:0b:e7:5b:66:84:44:5e:3d:f4:78:01:54: 3a:87:5c:c6:12:56:46:aa:8b:a9:0b:9c:e6:ab:09:42:93:e8: 25:0d:57:19:24:fb:ff:11:98:01:5d:7b:6b:db:6a:fd:08:49: 0e:86:52:e6:a5:b6:bc:20:7c:25:1d:fc:e2:ff:b0:69:77:7f: fc:ab:ac:93:a1:6b:3a:5d:80:7e:75:eb:9b:13:a7:7c:01:08: 50:4b:25:ef:bc:ee:5f:eb:5f:3c:12:6f:69:db:de:b7:cf:ac: 4c:3a:5b:9b:47:bc:d6:75:a2:65:bc:aa:fc:89:a4:30:60:ee: dc:5b:a3:b6:1b:86:f8:26:c2:13:59:74:31:66:c4:98:35:d9: 22:19:f0:5a:5a:31:b0:54:b4:75:f3:77:25:ee:39:94:d7:62: 35:6f:7c:5b:01:b5:ab:d0:f9:73:e2:6c:cb:0d:98:1f:e3:b1: 1b:d4:55:b4:2e:35:53:c7:5c:2b:3c:22:f8:69:16:8b:c3:d4: b7:bd:e6:7b:02:99:5d:60:d3:ac:9c:dc:40:8b:a7:ee:7b:00: 79:35:b0:cd:19:96:0e:07:d5:ca:a3:b2:7d:66:4b:c4:3c:79: cd:59:2a:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oitsfKIhfkKlbCDNWdJbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmZiMzA5YzI4OWFjZmZjMWJlMzRhNmYwYjY2NzVjMDAx NzEzZWEwHhcNMjUxMjIwMTIwMDQyWhcNMjUxMjIxMTIwMDQyWjAzMTEwLwYDVQQD EygzMTI5ZDAzOWIyMmNlNzc1ZmNjOGJhYTYyZGFmYTMxZjAxNzNhMWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MMufpOD7iBOx5ufQFaS1LbdpBpF T/HI7lwEepxaqGtLOzSqlc1f+RApwP9i8tEx8dB9HJ8sSZ5woAaKXxq+EKT8Uq5B FoWjINqN5R1Hft+UU859fPG0nCj8mmz4v1R0oEc/fZ1zboJk14/2xIQnt+twzF9h cLrUcnLmpHsY+SQzkn3syJiZkvcnjeymtSLGFnhtgZxhx2DjL5lthOT6u0KgKWXr 7Nt2KLrGJdKi+fXOm/9JqUtIRbVGRcn57AV2LBLZ67zOAMo/Rfc9yooV47nj1XXz T7qNPfVmKjL12RdK5OnTvLk8vVwfWlmQEjuMV939zcW4tbQNUzxCteKniQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEp0DmyLOd1/Mi6pi2vox8Bc6HUMB8GA1UdIwQY MBaAFGT/swnCiaz/wb40pvC2Z1wAFxPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUt Y2E0NDQ3MDQ0MTZmLzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUtY2E0NDQ3MDQ0MTZm LzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdL7F5Bve fSwqQQr+LYgO/HhmJc3r+//PC+dbZoREXj30eAFUOodcxhJWRqqLqQuc5qsJQpPo JQ1XGST7/xGYAV17a9tq/QhJDoZS5qW2vCB8JR384v+waXd//Kusk6FrOl2AfnXr mxOnfAEIUEsl77zuX+tfPBJvadvet8+sTDpbm0e81nWiZbyq/ImkMGDu3FujthuG +CbCE1l0MWbEmDXZIhnwWloxsFS0dfN3Je45lNdiNW98WwG1q9D5c+Jsyw2YH+Ox G9RVtC41U8dcKzwi+GkWi8PUt73mewKZXWDTrJzcQIun7nsAeTWwzRmWDgfVyqOy fWZLxDx5zVkqmw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:55 2025 by rpki-client