This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json) Hash identifier: woynSCTWYYIqdd21VdxFCwlN0VqaHW5aSzF3Uz28vOo= Subject key identifier: 81:E7:24:AB:AA:E1:D9:37:BD:C3:51:FE:8F:DF:D5:C5:AD:F4:D4:3A Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86 Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086 Certificate serial: 019B31559893462D9C281C016EBB5EA28849 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft Manifest number: 1031 Signing time: Thu 18 Dec 2025 12:00:51 +0000 Manifest this update: Thu 18 Dec 2025 12:00:51 +0000 Manifest next update: Fri 19 Dec 2025 12:00:51 +0000 Files and hashes: 1: WmCvFXCeg0oTa1TckRvrs8RNar8.roa (hash: Mzv2Vj1XxZUvLysQKOIpSBENViQwEO98u/fFHAl/Wq0=) 2: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: aP0x8SUlP6XylXdtgwoIUE84n3U4R+e8N284lGzVIaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:98:93:46:2d:9c:28:1c:01:6e:bb:5e:a2:88:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086 Validity Not Before: Dec 18 12:00:51 2025 GMT Not After : Dec 19 12:00:51 2025 GMT Subject: CN=81e724abaae1d937bdc351fe8fdfd5c5adf4d43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:43:cf:d4:3c:77:63:c5:17:5b:0f:1f:4c: 2b:6e:37:2d:a9:e8:d9:5c:2e:03:29:68:6c:d3:f2: e6:da:36:cf:c6:c1:bd:40:e5:b6:77:26:9c:7a:11: d1:41:35:18:c8:e3:1e:33:07:1d:a3:24:cf:ae:46: 25:a8:d6:d6:2f:75:85:53:59:e1:d2:31:0b:0c:b6: 57:9c:85:56:c9:3e:2a:6a:34:9f:5c:4f:b3:c8:59: 33:d2:c2:62:3c:3f:99:b7:2a:95:d2:28:60:63:5d: ae:46:da:e7:db:38:24:5e:22:04:29:76:2b:f4:27: 53:ed:9a:43:e4:32:00:4b:ee:21:d5:02:5e:03:c1: 8a:62:5c:f9:30:89:83:7a:6f:98:07:65:f1:7b:e9: bd:bd:5c:c7:ab:61:a9:d5:da:2f:7e:5c:0d:0b:f9: 75:2e:3b:a8:77:1c:df:4a:01:ef:eb:f1:0f:81:75: dc:13:da:79:b4:bd:fe:02:f1:ba:a1:f7:e7:71:93: b6:93:75:82:4d:0a:cf:fe:9f:e8:ba:c2:66:74:c9: 38:bd:83:f9:1f:46:ec:95:56:95:71:57:fe:79:a3: ca:df:c2:87:a7:7c:77:d2:1a:e0:99:1a:fa:51:59: 2c:d5:c7:70:75:86:c4:a4:cc:09:1b:56:13:6c:82: e7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E7:24:AB:AA:E1:D9:37:BD:C3:51:FE:8F:DF:D5:C5:AD:F4:D4:3A X509v3 Authority Key Identifier: keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8f:72:8f:2a:30:75:51:16:3a:54:22:ac:c7:d5:f3:d8:0d: 41:1f:2d:54:ca:68:fd:e2:f4:b6:7e:05:09:80:c4:bf:65:fe: 9e:84:a6:dc:b8:15:5b:33:b8:ab:72:86:1e:d4:5f:35:43:26: 81:4d:88:03:45:ba:80:85:57:62:cf:07:5f:99:17:68:f2:78: f5:43:80:d7:cc:e8:ff:d0:b9:6a:e6:77:56:b0:95:8e:2f:33: ee:6d:35:ca:99:43:a4:a5:e8:46:a6:30:40:fa:ca:7c:f9:a6: 1e:86:c8:00:d9:6c:75:50:1c:8d:c7:b9:be:9c:0b:78:db:53: 60:47:fc:d6:33:b9:0c:0b:2f:d2:f7:4c:12:c9:d9:71:13:a4: b3:5c:fa:6f:8b:2a:d6:58:1e:76:fa:2d:fc:04:e9:7b:8f:72: a8:1e:4f:e9:cf:42:f4:16:e0:64:a8:f9:d2:65:a0:3d:28:90: 21:50:b1:40:5b:de:af:84:59:cf:29:3c:16:0e:3a:78:85:3e: 8c:6d:e2:6c:c3:fa:8c:2d:b8:42:c4:22:43:46:28:5f:07:ac: 26:99:97:77:5c:e6:59:87:6b:fc:a3:3a:c2:a0:cb:dd:87:cd: 56:2a:2b:62:19:ea:7a:ae:51:0b:07:18:bc:be:b3:41:d3:12: 6b:b2:11:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVZiTRi2cKBwBbrteoohJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YTcxNTZiOGFhODlmNzZlNGQzOGFmMmMxMDlmYmMxNDkx N2IwODYwHhcNMjUxMjE4MTIwMDUxWhcNMjUxMjE5MTIwMDUxWjAzMTEwLwYDVQQD Eyg4MWU3MjRhYmFhZTFkOTM3YmRjMzUxZmU4ZmRmZDVjNWFkZjRkNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsftDz9Q8d2PFF1sPH0wrbjctqejZ XC4DKWhs0/Lm2jbPxsG9QOW2dyacehHRQTUYyOMeMwcdoyTPrkYlqNbWL3WFU1nh 0jELDLZXnIVWyT4qajSfXE+zyFkz0sJiPD+ZtyqV0ihgY12uRtrn2zgkXiIEKXYr 9CdT7ZpD5DIAS+4h1QJeA8GKYlz5MImDem+YB2Xxe+m9vVzHq2Gp1dovflwNC/l1 LjuodxzfSgHv6/EPgXXcE9p5tL3+AvG6offncZO2k3WCTQrP/p/ousJmdMk4vYP5 H0bslVaVcVf+eaPK38KHp3x30hrgmRr6UVks1cdwdYbEpMwJG1YTbILn/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHnJKuq4dk3vcNR/o/f1cWt9NQ6MB8GA1UdIwQY MBaAFGSnFWuKqJ925NOK8sEJ+8FJF7CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zZGY2MmQtNWQ1Ny00ZDdlLTk0NDQt NTM1MWYxYmRlNzJmLzEvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zZGY2MmQtNWQ1Ny00ZDdlLTk0NDQtNTM1MWYxYmRlNzJm LzEvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKY9yjyow dVEWOlQirMfV89gNQR8tVMpo/eL0tn4FCYDEv2X+noSm3LgVWzO4q3KGHtRfNUMm gU2IA0W6gIVXYs8HX5kXaPJ49UOA18zo/9C5auZ3VrCVji8z7m01yplDpKXoRqYw QPrKfPmmHobIANlsdVAcjce5vpwLeNtTYEf81jO5DAsv0vdMEsnZcROks1z6b4sq 1lgedvot/ATpe49yqB5P6c9C9BbgZKj50mWgPSiQIVCxQFver4RZzyk8Fg46eIU+ jG3ibMP6jC24QsQiQ0YoXwesJpmXd1zmWYdr/KM6wqDL3YfNViorYhnqeq5RCwcY vL6zQdMSa7IR0A== -----END CERTIFICATE-----Generated at Thu Dec 18 18:39:32 2025 by rpki-client