This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json) Hash identifier: 4XwZT3PyalhOqiXpoazDZ7k52Uh97Fkb+zNr+BpRH9M= Subject key identifier: 7B:7C:AC:24:B3:19:1C:49:82:2F:3B:53:74:D1:39:AC:3C:7A:D4:39 Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9 Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9 Certificate serial: 019B38D8626D14AAD8B9EA9C153670BF8689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft Manifest number: 1053 Signing time: Fri 19 Dec 2025 23:01:03 +0000 Manifest this update: Fri 19 Dec 2025 23:01:03 +0000 Manifest next update: Sat 20 Dec 2025 23:01:03 +0000 Files and hashes: 1: NyUxlhwtEkrfLySazfcIwYLq2uE.roa (hash: nbUnPx7laXVoJ1K+1QDprr0SXDSN8ACCPbp85TtzNB8=) 2: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: ypWLGEvNjZvQgNsKpjhrgBv/EfqGus0wH6N4yc1aWb4=) 3: v7McWGmC6x_jve8hO4dvjOUzDnU.roa (hash: pEIX+2zdNDbAjQYiraeVFcmiQz+0WDogJaC+EZR5c2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:62:6d:14:aa:d8:b9:ea:9c:15:36:70:bf:86:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9 Validity Not Before: Dec 19 23:01:03 2025 GMT Not After : Dec 20 23:01:03 2025 GMT Subject: CN=7b7cac24b3191c49822f3b5374d139ac3c7ad439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f7:3f:cf:11:b9:90:6f:da:18:33:cb:0d:38: 49:76:d4:f5:00:da:d9:64:a9:b5:4c:05:1d:ae:56: 18:e2:76:5b:66:a7:97:e0:81:d5:48:0b:86:4a:94: 4e:6a:92:4b:35:3e:0f:16:60:0c:25:72:0f:54:56: dd:91:11:fe:96:1d:6d:fc:6f:6e:14:aa:5b:95:e9: 81:74:3e:24:12:c5:74:f4:0d:97:40:83:9d:a8:09: a7:cb:34:82:33:75:bc:fc:ff:65:94:af:3f:8d:21: 86:2c:a7:49:6d:25:73:ab:15:c1:61:78:c8:59:9f: 20:80:3f:48:af:59:b7:3b:0d:1a:a8:b8:d9:b3:19: 12:bf:b4:e6:31:9b:ed:26:d0:09:db:0d:91:3f:e7: 04:03:a1:3b:e4:70:2a:17:45:b2:69:b9:d2:b2:e0: aa:59:b8:b7:9b:2e:f4:a4:34:a8:f9:16:67:dc:26: 33:ba:d6:2e:c8:a5:b8:ab:d3:f8:37:78:b1:37:ce: 74:d8:60:86:9a:4f:07:0e:58:1b:93:e3:2d:bb:0d: 06:77:24:f9:03:94:dc:9a:8a:8a:7d:e1:50:29:bc: c0:15:db:71:24:09:7a:79:57:bd:1e:f5:a7:e0:6f: 0a:b9:e5:7b:99:9f:55:16:19:75:bd:5f:28:08:e9: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7C:AC:24:B3:19:1C:49:82:2F:3B:53:74:D1:39:AC:3C:7A:D4:39 X509v3 Authority Key Identifier: keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:42:b3:0c:39:18:a0:fe:83:ef:c6:25:15:ab:55:17:5d:81: b0:7a:c9:e2:8e:46:fa:94:40:98:87:14:1a:ca:8e:28:37:1e: 77:7c:11:e0:b5:dc:39:db:aa:5b:a8:6a:fa:a1:40:5f:07:98: fc:af:c9:d8:da:6a:51:f0:b2:60:52:25:0b:68:39:1f:ec:54: ff:03:5b:df:05:c5:22:c2:2a:9d:0e:30:a7:1d:ae:f3:8e:2d: 99:89:d9:40:39:a2:a9:11:99:a4:7e:d8:39:ec:e2:00:26:b2: f9:0b:81:fa:d8:03:43:ec:b1:e6:48:07:89:c8:37:86:18:9d: 92:50:f3:0e:8b:a1:d6:15:46:c3:bc:dc:fb:b1:7f:26:51:c9: 99:8e:1a:8e:ce:99:8a:b8:7f:77:65:cf:f7:81:f4:7f:fd:16: 8d:91:73:3d:5c:40:11:74:d8:39:65:1a:6d:59:a0:6c:a3:ab: 1c:ad:70:12:d4:11:7e:d7:46:7d:64:0d:f0:b6:3f:af:01:f8: 1f:d5:42:3f:22:09:fd:e4:b9:43:fd:2e:97:06:d0:bb:bb:06: 7e:ad:4b:8a:35:69:d4:ef:b6:d0:b0:77:62:bb:5a:7f:7a:a8: e7:a3:3d:c9:9d:15:94:d7:89:aa:14:72:fd:f1:b9:b2:53:8f: 10:62:22:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42GJtFKrYueqcFTZwv4aJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YWE0NTFiNzgzZmM5MWEwNGI4MmY4MmYxNTZmMGI0ODk3 MTVkYzkwHhcNMjUxMjE5MjMwMTAzWhcNMjUxMjIwMjMwMTAzWjAzMTEwLwYDVQQD Eyg3YjdjYWMyNGIzMTkxYzQ5ODIyZjNiNTM3NGQxMzlhYzNjN2FkNDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfc/zxG5kG/aGDPLDThJdtT1ANrZ ZKm1TAUdrlYY4nZbZqeX4IHVSAuGSpROapJLNT4PFmAMJXIPVFbdkRH+lh1t/G9u FKpblemBdD4kEsV09A2XQIOdqAmnyzSCM3W8/P9llK8/jSGGLKdJbSVzqxXBYXjI WZ8ggD9Ir1m3Ow0aqLjZsxkSv7TmMZvtJtAJ2w2RP+cEA6E75HAqF0WyabnSsuCq Wbi3my70pDSo+RZn3CYzutYuyKW4q9P4N3ixN8502GCGmk8HDlgbk+Mtuw0GdyT5 A5TcmoqKfeFQKbzAFdtxJAl6eVe9HvWn4G8KueV7mZ9VFhl1vV8oCOlpsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHt8rCSzGRxJgi87U3TROaw8etQ5MB8GA1UdIwQY MBaAFGWqRRt4P8kaBLgvgvFW8LSJcV3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWIt M2JjM2RmN2EyOThhLzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWItM2JjM2RmN2EyOThh LzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkKzDDkY oP6D78YlFatVF12BsHrJ4o5G+pRAmIcUGsqOKDced3wR4LXcOduqW6hq+qFAXweY /K/J2NpqUfCyYFIlC2g5H+xU/wNb3wXFIsIqnQ4wpx2u844tmYnZQDmiqRGZpH7Y OeziACay+QuB+tgDQ+yx5kgHicg3hhidklDzDouh1hVGw7zc+7F/JlHJmY4ajs6Z irh/d2XP94H0f/0WjZFzPVxAEXTYOWUabVmgbKOrHK1wEtQRftdGfWQN8LY/rwH4 H9VCPyIJ/eS5Q/0ulwbQu7sGfq1LijVp1O+20LB3Yrtaf3qo56M9yZ0VlNeJqhRy /fG5slOPEGIijw== -----END CERTIFICATE-----Generated at Sat Dec 20 06:03:42 2025 by rpki-client