This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft File: ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft (raw, json) Hash identifier: zxZ4Owc42yh1/OZ5nWEuA0CDC/LSrML0GEBDvVUJcxg= Subject key identifier: 50:2C:66:79:00:AE:BC:F4:A7:54:9E:3E:A1:14:7B:B3:AE:3C:E2:F0 Authority key identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45 Certificate issuer: /CN=66f04275253f967384c4973758a54b7fd085fe45 Certificate serial: 019B311EDD9E9BA9B1DEE58DB3D46846E074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft Manifest number: 15D0 Signing time: Thu 18 Dec 2025 11:01:04 +0000 Manifest this update: Thu 18 Dec 2025 11:01:04 +0000 Manifest next update: Fri 19 Dec 2025 11:01:04 +0000 Files and hashes: 1: 0Iy8NsUXTA0psQPyCINqg9pVI58.roa (hash: yvEGBqidyX57HbZdF/uHS+mpQFnEILAUnlH+f4viPS0=) 2: ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl (hash: G26AfuohjuxMASAKlHhJbD1FhUWGq6zPLM/ssf3hUl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:dd:9e:9b:a9:b1:de:e5:8d:b3:d4:68:46:e0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f04275253f967384c4973758a54b7fd085fe45 Validity Not Before: Dec 18 11:01:04 2025 GMT Not After : Dec 19 11:01:04 2025 GMT Subject: CN=502c667900aebcf4a7549e3ea1147bb3ae3ce2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:f3:8a:ff:4c:71:37:cc:83:20:9c:3a:83: 1d:47:ce:55:e1:fd:02:45:1e:fd:4e:3c:f4:dd:5d: 99:35:42:69:e0:a6:e5:bf:0d:b4:07:62:c4:78:d5: 7b:0a:dd:8e:20:6b:08:5a:26:10:52:ea:56:cb:99: 32:8d:34:a0:b8:39:71:60:51:6f:fe:30:a9:7d:5f: a5:53:b5:de:98:2c:34:7d:18:a7:2f:7b:26:9e:ef: 6f:22:30:33:3d:23:44:dd:86:a2:53:f7:74:34:b2: 78:c0:f1:95:21:5c:cf:81:04:cd:d2:98:c0:dc:9c: 00:be:a4:da:c7:bb:f9:5e:6a:6b:d2:2e:c5:99:80: 9a:50:0f:8d:47:ab:a7:ab:ae:a9:7d:ed:a9:d3:0d: 9e:81:02:54:59:1d:1b:1f:fb:ec:df:96:b9:eb:fd: 38:f8:a4:d1:21:75:38:3c:74:7d:79:1f:71:ad:e5: a2:c8:14:65:ea:7a:a9:9e:f1:a2:ee:42:bf:3b:5f: 6f:09:32:28:4f:68:b1:ae:2a:03:27:6a:65:e2:08: f3:b8:f4:9a:5b:f4:ae:42:f6:4d:66:c7:d3:6c:00: ac:cd:8f:eb:65:d8:7a:5f:0a:9f:b9:20:d6:96:d6: e3:ff:ff:99:05:8c:ae:6a:51:e2:a9:f9:9c:30:7a: cd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2C:66:79:00:AE:BC:F4:A7:54:9E:3E:A1:14:7B:B3:AE:3C:E2:F0 X509v3 Authority Key Identifier: keyid:66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c4:35:a4:05:5d:08:5f:d8:7f:61:d1:7e:1b:ac:29:52:4e: 24:41:fe:95:17:af:70:23:f3:f8:85:cc:b7:d4:4b:5a:69:03: ed:87:d7:d6:d7:f9:53:eb:fd:fb:6a:a4:cc:e6:e2:94:d5:c8: 7b:2b:e7:5f:79:bb:51:e5:61:a0:48:41:d0:ec:21:59:a9:06: 29:c1:ee:e4:ce:ef:7e:68:20:99:ef:59:bb:bd:a3:b0:cc:5f: 5d:23:99:b9:9b:ce:b0:8e:98:2a:0e:5c:e9:0c:f2:69:ef:db: 5b:7f:92:9c:96:a4:d6:16:ab:21:f9:ff:17:6f:12:43:b7:65: 38:fe:ec:ed:d9:3f:99:7f:36:02:a2:2a:4b:c6:19:5d:f6:e6: f4:c2:a8:e1:f6:85:2c:8a:10:e5:05:0f:18:7d:8d:4a:b2:4c: 8b:be:d7:8c:d8:f3:62:c3:e7:2e:56:47:85:23:a6:0d:42:44: c9:6a:69:70:ca:87:dd:24:1b:d5:2f:57:51:7e:ff:02:93:2c: c5:0f:5b:82:56:4f:91:cc:3e:ea:94:a8:47:c3:12:ff:7b:42: 31:85:30:50:a8:1c:28:b8:60:7c:4c:cf:31:57:50:13:c4:f9: bb:95:b5:84:2e:ac:9e:5a:88:6c:bf:e2:83:30:70:40:e1:8a: d5:ca:3f:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHt2em6mx3uWNs9RoRuB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjA0Mjc1MjUzZjk2NzM4NGM0OTczNzU4YTU0YjdmZDA4 NWZlNDUwHhcNMjUxMjE4MTEwMTA0WhcNMjUxMjE5MTEwMTA0WjAzMTEwLwYDVQQD Eyg1MDJjNjY3OTAwYWViY2Y0YTc1NDllM2VhMTE0N2JiM2FlM2NlMmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3Lziv9McTfMgyCcOoMdR85V4f0C RR79Tjz03V2ZNUJp4Kblvw20B2LEeNV7Ct2OIGsIWiYQUupWy5kyjTSguDlxYFFv /jCpfV+lU7XemCw0fRinL3smnu9vIjAzPSNE3YaiU/d0NLJ4wPGVIVzPgQTN0pjA 3JwAvqTax7v5Xmpr0i7FmYCaUA+NR6unq66pfe2p0w2egQJUWR0bH/vs35a56/04 +KTRIXU4PHR9eR9xreWiyBRl6nqpnvGi7kK/O19vCTIoT2ixrioDJ2pl4gjzuPSa W/SuQvZNZsfTbACszY/rZdh6XwqfuSDWltbj//+ZBYyualHiqfmcMHrNPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAsZnkArrz0p1SePqEUe7OuPOLwMB8GA1UdIwQY MBaAFGbwQnUlP5ZzhMSXN1ilS3/Qhf5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZCQ2RTVV9sbk9FeEpjM1dLVkxmOUNGX2tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85ZTE2ZDItZDNiOS00ZWZhLTljM2Qt ZTQ5NjE4NTJjOGI2LzEvWnZCQ2RTVV9sbk9FeEpjM1dLVkxmOUNGX2tVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85ZTE2ZDItZDNiOS00ZWZhLTljM2QtZTQ5NjE4NTJjOGI2 LzEvWnZCQ2RTVV9sbk9FeEpjM1dLVkxmOUNGX2tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcQ1pAVd CF/Yf2HRfhusKVJOJEH+lRevcCPz+IXMt9RLWmkD7YfX1tf5U+v9+2qkzObilNXI eyvnX3m7UeVhoEhB0OwhWakGKcHu5M7vfmggme9Zu72jsMxfXSOZuZvOsI6YKg5c 6Qzyae/bW3+SnJak1harIfn/F28SQ7dlOP7s7dk/mX82AqIqS8YZXfbm9MKo4faF LIoQ5QUPGH2NSrJMi77XjNjzYsPnLlZHhSOmDUJEyWppcMqH3SQb1S9XUX7/ApMs xQ9bglZPkcw+6pSoR8MS/3tCMYUwUKgcKLhgfEzPMVdQE8T5u5W1hC6snlqIbL/i gzBwQOGK1co/lw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:06:14 2025 by rpki-client