This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft File: ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft (raw, json) Hash identifier: wzzMv8NO0VnmlIZ0xecFBE6MGyxFPluLqnC6PSrxu10= Subject key identifier: ED:60:0B:81:84:54:EB:F9:DB:8E:82:3B:79:A1:B9:C9:24:08:C9:9B Authority key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95 Certificate issuer: /CN=64d7f7e174179a133e30c660edfa86e74a40dd95 Certificate serial: 019B34203327412F842174A162A93AD228C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft Manifest number: 177F Signing time: Fri 19 Dec 2025 01:01:23 +0000 Manifest this update: Fri 19 Dec 2025 01:01:23 +0000 Manifest next update: Sat 20 Dec 2025 01:01:23 +0000 Files and hashes: 1: ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl (hash: PLqTjcLtNkPDaz/JNlUBwU7gbbSVOM0XhMg6YCPfR0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:33:27:41:2f:84:21:74:a1:62:a9:3a:d2:28:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d7f7e174179a133e30c660edfa86e74a40dd95 Validity Not Before: Dec 19 01:01:23 2025 GMT Not After : Dec 20 01:01:23 2025 GMT Subject: CN=ed600b818454ebf9db8e823b79a1b9c92408c99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5d:c6:26:52:7f:d5:60:23:e9:f9:53:17:02: 92:3b:11:76:d1:2b:7d:2d:e2:45:aa:69:3c:1d:cc: c5:f5:f7:58:b5:c5:db:2d:fc:34:da:09:89:ff:cb: 8a:e8:73:40:34:29:8d:ac:cf:e9:6d:d7:ce:7c:e9: a1:b9:58:52:0b:f7:83:90:a6:a2:98:f2:77:e6:5a: da:06:37:80:f0:c5:b8:ad:0a:f6:6d:88:f2:5c:af: 3e:95:ef:3a:96:e5:f5:6a:63:4a:4a:da:d8:09:bb: 9e:db:b6:40:b5:35:c6:1c:c0:a3:22:65:0d:f5:a6: a8:84:82:f6:6b:c3:62:de:27:82:ca:18:d6:3c:ca: 19:a6:55:4b:8c:0c:05:d6:a7:4d:4c:bf:04:33:63: 89:8f:1c:81:50:5d:99:21:e8:0a:d1:67:d3:ac:e6: b9:71:8b:fc:68:50:1a:67:7c:80:1f:22:ef:43:6e: 90:ee:9e:cd:41:74:9f:55:65:97:9b:ba:46:b2:74: f2:55:5c:5d:98:b2:4d:11:4b:ce:68:4b:07:cf:f8: 21:a4:2b:1d:dc:dd:d5:9e:60:7a:8d:66:da:00:6e: 3d:8a:4c:5a:05:c8:4e:d0:94:ff:15:3b:52:fd:7f: 9c:c9:bd:ad:33:6b:d9:30:b0:d8:15:f8:af:74:0c: e6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:60:0B:81:84:54:EB:F9:DB:8E:82:3B:79:A1:B9:C9:24:08:C9:9B X509v3 Authority Key Identifier: keyid:64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:e8:45:fe:55:14:5a:a5:ae:ff:2e:70:fd:aa:d1:f8:85:62: 78:3f:04:c6:fb:c8:81:7c:51:f1:e8:be:77:92:a0:af:22:d4: 01:f7:9c:69:c9:eb:c5:17:e5:ba:1e:98:85:19:e2:0e:95:db: 75:e7:21:e5:50:60:21:8a:1b:8e:1d:2c:7b:b6:e0:65:2f:2d: 6a:80:e3:9c:9c:93:cd:2f:00:27:09:40:46:ef:c6:27:52:a1: 83:4a:f3:da:b0:dd:c7:d2:de:ac:26:d6:72:61:25:ed:92:36: ca:f6:45:e7:99:20:ca:0b:b0:4b:27:e6:4e:8f:e1:4a:77:57: 50:33:c8:01:27:5e:08:f7:33:6b:7d:f2:7a:4a:3e:f2:67:9d: 31:d8:78:c9:9c:75:7b:07:3a:8e:cc:ee:ea:e6:f9:c3:eb:86: 35:9c:fd:de:bf:46:6a:13:4d:b1:a7:e9:2a:e5:02:54:eb:15: e4:b4:36:f7:91:2b:e8:b5:8b:08:67:35:bb:1f:c3:8d:72:4c: 0c:db:75:42:7e:33:4c:24:51:f3:58:11:87:71:a0:75:aa:7b: 48:e2:f4:98:3b:16:90:b1:c2:cb:21:17:b2:0f:3a:54:2a:3a: d4:32:88:96:73:96:57:b4:df:49:e9:2e:1a:91:ab:e6:a7:b4: 5b:f8:76:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IDMnQS+EIXShYqk60ijJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDdmN2UxNzQxNzlhMTMzZTMwYzY2MGVkZmE4NmU3NGE0 MGRkOTUwHhcNMjUxMjE5MDEwMTIzWhcNMjUxMjIwMDEwMTIzWjAzMTEwLwYDVQQD EyhlZDYwMGI4MTg0NTRlYmY5ZGI4ZTgyM2I3OWExYjljOTI0MDhjOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo13GJlJ/1WAj6flTFwKSOxF20St9 LeJFqmk8HczF9fdYtcXbLfw02gmJ/8uK6HNANCmNrM/pbdfOfOmhuVhSC/eDkKai mPJ35lraBjeA8MW4rQr2bYjyXK8+le86luX1amNKStrYCbue27ZAtTXGHMCjImUN 9aaohIL2a8Ni3ieCyhjWPMoZplVLjAwF1qdNTL8EM2OJjxyBUF2ZIegK0WfTrOa5 cYv8aFAaZ3yAHyLvQ26Q7p7NQXSfVWWXm7pGsnTyVVxdmLJNEUvOaEsHz/ghpCsd 3N3VnmB6jWbaAG49ikxaBchO0JT/FTtS/X+cyb2tM2vZMLDYFfivdAzm5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1gC4GEVOv5246CO3mhuckkCMmbMB8GA1UdIwQY MBaAFGTX9+F0F5oTPjDGYO36hudKQN2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5mMzRYUVhtaE0tTU1aZzdmcUc1MHBBM1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS85ODNjYWEtZWYwNS00NjBmLWEyMGEt NDE2MjQ2NWI5ODgwLzEvWk5mMzRYUVhtaE0tTU1aZzdmcUc1MHBBM1pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS85ODNjYWEtZWYwNS00NjBmLWEyMGEtNDE2MjQ2NWI5ODgw LzEvWk5mMzRYUVhtaE0tTU1aZzdmcUc1MHBBM1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ehF/lUU WqWu/y5w/arR+IVieD8ExvvIgXxR8ei+d5KgryLUAfecacnrxRfluh6YhRniDpXb dech5VBgIYobjh0se7bgZS8taoDjnJyTzS8AJwlARu/GJ1Khg0rz2rDdx9LerCbW cmEl7ZI2yvZF55kgyguwSyfmTo/hSndXUDPIASdeCPcza33yeko+8medMdh4yZx1 ewc6jszu6ub5w+uGNZz93r9GahNNsafpKuUCVOsV5LQ295Er6LWLCGc1ux/DjXJM DNt1Qn4zTCRR81gRh3Ggdap7SOL0mDsWkLHCyyEXsg86VCo61DKIlnOWV7TfSeku GpGr5qe0W/h2qw== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:23 2025 by rpki-client