This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft File: Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft (raw, json) Hash identifier: Bt+RdUmzhbeXSMw1TJVtRlM6fJEUVncuRNfkJGgBLE0= Subject key identifier: 5E:84:85:4E:6D:25:65:77:E3:AF:A1:A5:70:A9:52:D6:A5:D8:E8:42 Authority key identifier: 66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41 Certificate issuer: /CN=667d377dd4c830c246cb48a934699699e4b37741 Certificate serial: 019B3A8FE557D9763367B083D590BB5A820D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft Manifest number: 0FFC Signing time: Sat 20 Dec 2025 07:01:07 +0000 Manifest this update: Sat 20 Dec 2025 07:01:07 +0000 Manifest next update: Sun 21 Dec 2025 07:01:07 +0000 Files and hashes: 1: Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl (hash: /lQq/VuO7f92CfuxFitmTmLxbJUO8lrFux/cv+wYjLg=) 2: gBvfSY4X722osdS0oGwbWca756o.roa (hash: qRD13MOAWh4vkqsKDndu25MB5rnSOvhlh2YKABBiyH4=) 3: x-oHQjnwxvG7zZvcQkuRXWO2h4Q.roa (hash: QRsXLezrt6W9iYwytMlCkOMS0u3CyU/UmS4vgAyjWJg=) 4: yFVTSR_CTrclIRPPye7JgJhB-BE.roa (hash: 02rS4vnA9A+lQ0jM0xxD7zUGWNZmGUrpLvyYuEGWcEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:e5:57:d9:76:33:67:b0:83:d5:90:bb:5a:82:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=667d377dd4c830c246cb48a934699699e4b37741 Validity Not Before: Dec 20 07:01:07 2025 GMT Not After : Dec 21 07:01:07 2025 GMT Subject: CN=5e84854e6d256577e3afa1a570a952d6a5d8e842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:4c:fd:3b:d2:e0:4f:7c:a2:52:c8:ba:f7: 81:60:39:18:f6:c6:e7:e6:02:e4:80:7a:62:a2:32: 1e:70:2e:87:c8:f8:24:e6:c0:7e:a1:14:75:86:ea: 69:88:ec:eb:0c:97:f7:6d:34:45:d7:d9:89:ec:7c: 38:9b:5a:67:f1:f8:60:b9:e7:36:0d:64:a9:76:e0: 14:24:33:4f:07:20:89:cb:ea:b5:0c:9c:cf:42:b8: f9:0e:cc:0c:15:c5:63:d8:d3:90:42:c8:f3:5b:fa: fd:62:31:b1:e3:18:13:67:21:1a:9f:6f:68:36:f6: 7d:61:44:76:49:e3:f5:bd:8a:16:fd:e2:68:fb:be: 30:0d:13:dc:40:88:e3:35:09:12:14:66:5b:a0:09: 46:06:5a:56:38:12:a1:d9:87:99:9f:f2:c2:85:d0: ec:65:3d:fd:93:f2:81:3d:7e:24:51:46:a8:7e:f4: 69:99:aa:e7:ee:cd:17:dd:25:09:cf:ec:d1:5f:a5: 5f:51:55:61:42:ec:5a:f9:9f:ae:12:74:5f:5e:40: 8f:0c:7e:40:ea:5f:79:e2:f4:67:86:f8:35:d3:da: 31:33:81:fb:1a:98:78:d4:ae:fe:55:0d:5e:37:46: 22:3c:a0:da:86:83:d1:01:19:df:19:43:6d:e4:43: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:84:85:4E:6D:25:65:77:E3:AF:A1:A5:70:A9:52:D6:A5:D8:E8:42 X509v3 Authority Key Identifier: keyid:66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:35:6a:06:0a:75:1c:8b:06:b4:1d:66:85:99:ab:54:0c:16: 44:b6:c7:0e:6d:fc:b4:e6:53:52:2c:89:9f:1d:fe:78:56:f3: 11:d8:c6:a4:54:b0:e5:ad:d7:fa:b0:be:e8:3c:21:2f:bc:c4: e9:2b:70:1f:3c:01:a1:0f:6e:c7:41:91:7d:b9:43:75:eb:76: 91:f1:16:5e:8c:5e:41:ba:74:f8:69:6f:88:83:e6:39:17:3d: d8:dc:0e:61:0d:b7:bc:f7:e1:16:3d:1a:4b:a9:a5:b8:be:44: c7:4b:ff:67:d7:62:86:50:54:78:69:97:be:62:c6:05:f9:48: 72:a0:8e:dd:26:bd:27:78:d2:bb:7d:3e:13:e1:c1:42:6c:83: 12:1d:ab:8d:db:0f:9f:dc:5b:a6:7d:88:c3:a8:1e:47:34:63: cf:40:0c:02:a0:a8:15:09:ac:d6:18:42:3a:78:7b:c7:93:9f: 04:cf:33:5a:f2:89:dc:84:33:68:bd:89:57:5b:68:28:7e:06: 9e:5f:6b:25:d1:c1:9d:46:0f:32:e7:c9:53:9a:a7:1a:61:58: bb:e7:ab:46:12:62:45:d3:db:da:9b:5a:02:a0:ad:ef:a6:25: b3:6a:19:a1:1c:3a:cb:66:6e:e8:1c:7b:4f:cf:94:a7:81:32: de:e6:e1:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j+VX2XYzZ7CD1ZC7WoINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2N2QzNzdkZDRjODMwYzI0NmNiNDhhOTM0Njk5Njk5ZTRi Mzc3NDEwHhcNMjUxMjIwMDcwMTA3WhcNMjUxMjIxMDcwMTA3WjAzMTEwLwYDVQQD Eyg1ZTg0ODU0ZTZkMjU2NTc3ZTNhZmExYTU3MGE5NTJkNmE1ZDhlODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pFM/TvS4E98olLIuveBYDkY9sbn 5gLkgHpiojIecC6HyPgk5sB+oRR1huppiOzrDJf3bTRF19mJ7Hw4m1pn8fhguec2 DWSpduAUJDNPByCJy+q1DJzPQrj5DswMFcVj2NOQQsjzW/r9YjGx4xgTZyEan29o NvZ9YUR2SeP1vYoW/eJo+74wDRPcQIjjNQkSFGZboAlGBlpWOBKh2YeZn/LChdDs ZT39k/KBPX4kUUaofvRpmarn7s0X3SUJz+zRX6VfUVVhQuxa+Z+uEnRfXkCPDH5A 6l954vRnhvg109oxM4H7Gph41K7+VQ1eN0YiPKDahoPRARnfGUNt5EP6XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6EhU5tJWV346+hpXCpUtal2OhCMB8GA1UdIwQY MBaAFGZ9N33UyDDCRstIqTRplpnks3dBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm4wM2ZkVElNTUpHeTBpcE5HbVdtZVN6ZDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lNjgxMmUtOTZhNC00OGI0LWFiNjEt MTIxZmY0NjAxOGYzLzEvWm4wM2ZkVElNTUpHeTBpcE5HbVdtZVN6ZDBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9lNjgxMmUtOTZhNC00OGI0LWFiNjEtMTIxZmY0NjAxOGYz LzEvWm4wM2ZkVElNTUpHeTBpcE5HbVdtZVN6ZDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTVqBgp1 HIsGtB1mhZmrVAwWRLbHDm38tOZTUiyJnx3+eFbzEdjGpFSw5a3X+rC+6DwhL7zE 6StwHzwBoQ9ux0GRfblDdet2kfEWXoxeQbp0+GlviIPmORc92NwOYQ23vPfhFj0a S6mluL5Ex0v/Z9dihlBUeGmXvmLGBflIcqCO3Sa9J3jSu30+E+HBQmyDEh2rjdsP n9xbpn2Iw6geRzRjz0AMAqCoFQms1hhCOnh7x5OfBM8zWvKJ3IQzaL2JV1toKH4G nl9rJdHBnUYPMufJU5qnGmFYu+erRhJiRdPb2ptaAqCt76Yls2oZoRw6y2Zu6Bx7 T8+Up4Ey3ubh+g== -----END CERTIFICATE-----Generated at Sat Dec 20 10:21:07 2025 by rpki-client