This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json) Hash identifier: lYFDyiMyKyfMm7v6ayUO2329j8UFNHyTJHmWfHeRgY8= Subject key identifier: 28:CE:41:A4:ED:AA:C7:4F:3A:BB:BE:3B:AC:B9:2D:04:BF:D0:0E:CC Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2 Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2 Certificate serial: 019B4B1544991C11C823F93E5F68FA96E1F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft Manifest number: 0BF7 Signing time: Tue 23 Dec 2025 12:00:43 +0000 Manifest this update: Tue 23 Dec 2025 12:00:43 +0000 Manifest next update: Wed 24 Dec 2025 12:00:43 +0000 Files and hashes: 1: DPh5nDPtcpqJ9naux6sZ9u0Dr1s.roa (hash: YTfkEG3kyAd2IQ6e7j/lkPx7FnYmaQ7XszGFKecXlqc=) 2: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: vDH+sElcQUNQ/wG3I7WMx0e5LMCWDWs5Pm2zQ1NW7RU=) 3: hopE5nbQY5r20JQ6uaXH5JYpOWc.roa (hash: fzI2vMoCED9Ide/Md9CqSUe230wfYxn1MlpAm1WYjvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:44:99:1c:11:c8:23:f9:3e:5f:68:fa:96:e1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2 Validity Not Before: Dec 23 12:00:43 2025 GMT Not After : Dec 24 12:00:43 2025 GMT Subject: CN=28ce41a4edaac74f3abbbe3bacb92d04bfd00ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:c3:ca:8b:ee:f5:93:86:91:35:73:b5:28: d4:b9:30:11:b1:73:8b:1c:0c:73:eb:c0:07:4c:b6: ec:fd:ea:fa:d2:9c:ce:74:98:a6:cc:eb:77:e5:ae: 76:33:bc:7c:d8:24:f6:21:02:0c:83:01:c3:73:81: d1:fb:c3:75:36:83:9e:83:ae:40:cd:8f:65:be:43: 43:68:43:0d:54:54:a6:96:b6:b2:23:1a:a1:68:46: 0b:35:01:64:c0:53:20:cc:e6:3f:5b:a4:a2:62:06: 29:69:90:59:90:39:bd:d9:a6:ac:29:35:49:b7:93: 0d:d1:4e:13:07:83:86:95:5b:c4:92:d8:49:54:ef: f3:00:71:c7:f3:10:34:76:ed:37:7b:9e:25:3b:32: 96:70:4b:3e:36:e8:76:a8:28:42:23:4a:da:fd:bf: 3e:45:c3:47:a5:2b:48:e4:fd:ed:db:47:0d:51:46: bc:bd:1b:54:12:06:6e:a7:94:9c:3b:5d:51:c0:7d: ac:53:39:9e:6c:ac:29:79:46:29:85:de:2d:64:99: 68:7f:75:41:d6:4f:d3:fc:57:f6:05:7a:97:bc:bc: 07:50:a0:f4:74:94:99:da:2d:6d:53:56:c5:ab:aa: f0:42:63:c7:85:29:cf:e7:2b:c3:34:5b:c5:ae:5d: a9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CE:41:A4:ED:AA:C7:4F:3A:BB:BE:3B:AC:B9:2D:04:BF:D0:0E:CC X509v3 Authority Key Identifier: keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:10:77:66:fb:4a:2d:be:b7:e9:d4:4f:c7:0c:cf:16:54:8d: 19:6e:09:2b:06:55:52:ea:f0:51:a9:de:5f:f9:d6:3d:af:a5: e4:6b:bf:45:f1:8c:a2:ff:c3:31:57:d1:ea:ae:73:85:a7:25: cf:ec:80:e7:72:51:59:a5:4f:90:ff:eb:3b:39:3a:bd:ec:cb: 9e:4b:fd:47:fd:6d:b8:8e:a8:ff:6a:53:09:b4:bc:de:bf:ad: 36:52:88:86:f0:02:fb:29:97:27:9a:38:a9:7e:34:97:3a:50: 48:6f:5f:66:12:8f:ea:0a:b6:97:d6:0f:ab:ba:a1:06:64:3c: 94:f3:55:b6:21:3a:ec:87:aa:94:0f:f3:9a:8e:a8:36:49:1a: a6:73:94:6a:80:8f:28:e2:bc:77:09:1d:06:06:a8:22:88:1d: ef:ec:3c:e5:0b:d0:fc:bb:2d:9f:c3:46:28:d6:bd:7d:d5:d4: 81:d1:e6:08:53:a2:8b:cc:98:7e:2c:01:ee:e0:4f:72:2d:31: 22:fb:58:d7:5a:53:e1:21:53:be:89:5c:a9:ce:88:e1:58:cd: 28:23:2a:f5:e2:0a:09:8f:f4:d4:2b:50:28:76:3f:3b:21:74: d0:4c:23:d0:62:88:2a:4e:a8:65:2a:79:42:38:8d:f3:91:0a: d1:7a:1c:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFUSZHBHII/k+X2j6luH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NmQzM2M1ZjE2ZTNjZGQ5NjBhZTA1YzgwZDlmNmYzNmZj NTUzZjIwHhcNMjUxMjIzMTIwMDQzWhcNMjUxMjI0MTIwMDQzWjAzMTEwLwYDVQQD EygyOGNlNDFhNGVkYWFjNzRmM2FiYmJlM2JhY2I5MmQwNGJmZDAwZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1DDyovu9ZOGkTVztSjUuTARsXOL HAxz68AHTLbs/er60pzOdJimzOt35a52M7x82CT2IQIMgwHDc4HR+8N1NoOeg65A zY9lvkNDaEMNVFSmlrayIxqhaEYLNQFkwFMgzOY/W6SiYgYpaZBZkDm92aasKTVJ t5MN0U4TB4OGlVvEkthJVO/zAHHH8xA0du03e54lOzKWcEs+Nuh2qChCI0ra/b8+ RcNHpStI5P3t20cNUUa8vRtUEgZup5ScO11RwH2sUzmebKwpeUYphd4tZJlof3VB 1k/T/Ff2BXqXvLwHUKD0dJSZ2i1tU1bFq6rwQmPHhSnP5yvDNFvFrl2pgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjOQaTtqsdPOru+O6y5LQS/0A7MMB8GA1UdIwQY MBaAFGVtM8XxbjzdlgrgXIDZ9vNvxVPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlcwenhmRnVQTjJXQ3VCY2dObjI4Ml9GVV9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83Y2M2ZWEtNzc0YS00ODc2LTg0Zjkt MzA0ZDIxOTFhNGYzLzEvWlcwenhmRnVQTjJXQ3VCY2dObjI4Ml9GVV9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83Y2M2ZWEtNzc0YS00ODc2LTg0ZjktMzA0ZDIxOTFhNGYz LzEvWlcwenhmRnVQTjJXQ3VCY2dObjI4Ml9GVV9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxB3ZvtK Lb636dRPxwzPFlSNGW4JKwZVUurwUaneX/nWPa+l5Gu/RfGMov/DMVfR6q5zhacl z+yA53JRWaVPkP/rOzk6vezLnkv9R/1tuI6o/2pTCbS83r+tNlKIhvAC+ymXJ5o4 qX40lzpQSG9fZhKP6gq2l9YPq7qhBmQ8lPNVtiE67IeqlA/zmo6oNkkapnOUaoCP KOK8dwkdBgaoIogd7+w85QvQ/Lstn8NGKNa9fdXUgdHmCFOii8yYfiwB7uBPci0x IvtY11pT4SFTvolcqc6I4VjNKCMq9eIKCY/01CtQKHY/OyF00Ewj0GKIKk6oZSp5 QjiN85EK0XocJw== -----END CERTIFICATE-----Generated at Tue Dec 23 20:51:06 2025 by rpki-client