This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json) Hash identifier: Saz4LtCq2RRT8x0NOlFDUdN30JJRMJW5m784H56irjA= Subject key identifier: 35:83:49:CE:09:4E:FE:25:2B:B6:72:A3:41:54:90:4B:E0:69:E0:97 Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44 Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244 Certificate serial: 019B4136B56567E027A066CA2FB16AA71DD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft Manifest number: 070D Signing time: Sun 21 Dec 2025 14:01:02 +0000 Manifest this update: Sun 21 Dec 2025 14:01:02 +0000 Manifest next update: Mon 22 Dec 2025 14:01:02 +0000 Files and hashes: 1: 3tamc3sOw67HPVcPTfi-B2O8yU0.roa (hash: VKiy/+EDaLvbaW8IRlukGidMdNs6XDi7iV1i6VLWYS0=) 2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: N9uZ5TFEjM2zgqxIdTZZ3A+e/snd3NGXCXjQYYiqWww=) 3: oMFhnG_2Z4roWQc3WgoG1HgKdEc.roa (hash: QGs1HFAKixXlw1vT4Oet6ENYZoHU7usshB/hp90M1GI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:b5:65:67:e0:27:a0:66:ca:2f:b1:6a:a7:1d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244 Validity Not Before: Dec 21 14:01:02 2025 GMT Not After : Dec 22 14:01:02 2025 GMT Subject: CN=358349ce094efe252bb672a34154904be069e097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cc:41:c2:32:4b:a6:97:96:c3:5b:04:96:55: 76:21:d7:52:e9:41:e4:d2:a9:78:60:07:b7:b1:5d: c1:68:dd:e0:88:1f:4c:98:73:7a:e3:2d:11:c7:3b: 75:4f:20:0d:49:3e:8f:88:2d:d4:80:a6:16:aa:fd: 44:e5:33:96:2a:5e:0e:b3:54:fd:28:42:4b:f4:8f: a7:d8:3e:ed:c4:fe:e1:1d:18:e6:4f:e8:72:06:89: ca:e4:1a:25:f3:c6:ed:42:39:68:83:c0:c9:e0:b8: bb:47:cd:2d:28:de:d7:f2:ec:65:6a:ac:1e:96:84: e5:a0:20:53:c1:bd:de:08:58:f0:e0:85:8f:23:2c: 28:3b:75:0d:51:5d:f0:56:3e:f3:c5:33:ed:d2:48: de:54:93:22:08:88:04:93:f4:dc:01:ec:2f:31:67: 36:a4:b0:78:a1:91:f5:52:63:7b:b3:98:66:d3:60: ce:45:65:85:d3:eb:a5:07:d6:90:27:5a:5e:b4:2c: 2a:49:8f:26:8e:41:c9:83:57:05:6b:79:88:01:37: a5:e5:41:60:33:f3:55:87:22:e8:ef:57:90:26:00: ad:9d:a0:41:12:c7:08:5c:0d:c3:cb:6e:06:28:ce: 1e:b4:35:53:f5:22:79:68:cf:2c:65:5b:c2:fd:8d: e9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:83:49:CE:09:4E:FE:25:2B:B6:72:A3:41:54:90:4B:E0:69:E0:97 X509v3 Authority Key Identifier: keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:2b:96:b2:51:89:2c:bb:b3:e8:51:ef:f4:6b:92:b9:1a:36: 44:66:a8:71:88:28:39:c7:6d:ff:03:94:0f:1c:5e:77:e1:79: 51:fc:88:e9:2d:87:63:93:e6:20:83:c0:42:f0:b1:b1:89:ea: 54:8d:8a:31:d8:d3:ca:e3:43:b9:4d:f0:a3:29:17:1d:29:07: c5:8a:39:7a:c9:8b:94:7b:85:4d:64:18:0c:51:52:49:b4:4c: 72:28:6b:d7:0a:e7:75:e2:b2:cc:da:17:61:43:2d:43:b8:89: 81:ef:be:4a:07:b7:60:8e:fb:8d:2f:8a:0d:89:20:c2:b0:fc: 94:9e:d1:93:46:5d:7e:a2:46:62:e6:dd:6b:84:90:15:54:87: 6c:41:54:58:c1:86:e1:ce:e3:eb:89:ac:b5:df:bc:8e:29:ce: 33:bb:df:37:f8:48:5d:db:91:44:c4:d6:ef:e0:ad:25:c4:9f: dc:c5:27:34:f4:b2:e8:d5:d4:51:4f:53:25:9f:d5:f8:8c:1a: 75:5b:40:38:89:b1:c8:1b:5d:63:0e:2d:7e:89:fd:a7:41:37: 68:cf:51:9a:5d:5c:31:26:29:21:de:a8:15:b2:7c:fa:a0:33: 1b:44:87:0f:ed:b4:44:2d:d6:ee:b6:ac:43:5b:1e:53:fe:be: 86:7f:b0:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNrVlZ+AnoGbKL7Fqpx3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NGQ5NjY3MmE1OWVjMzg5NWZjMTU4NDdhY2ExYjI5ZGI3 OTEyNDQwHhcNMjUxMjIxMTQwMTAyWhcNMjUxMjIyMTQwMTAyWjAzMTEwLwYDVQQD EygzNTgzNDljZTA5NGVmZTI1MmJiNjcyYTM0MTU0OTA0YmUwNjllMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsxBwjJLppeWw1sEllV2IddS6UHk 0ql4YAe3sV3BaN3giB9MmHN64y0Rxzt1TyANST6PiC3UgKYWqv1E5TOWKl4Os1T9 KEJL9I+n2D7txP7hHRjmT+hyBonK5Bol88btQjlog8DJ4Li7R80tKN7X8uxlaqwe loTloCBTwb3eCFjw4IWPIywoO3UNUV3wVj7zxTPt0kjeVJMiCIgEk/TcAewvMWc2 pLB4oZH1UmN7s5hm02DORWWF0+ulB9aQJ1petCwqSY8mjkHJg1cFa3mIATel5UFg M/NVhyLo71eQJgCtnaBBEscIXA3Dy24GKM4etDVT9SJ5aM8sZVvC/Y3pcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWDSc4JTv4lK7Zyo0FUkEvgaeCXMB8GA1UdIwQY MBaAFGVNlmcqWew4lfwVhHrKGynbeRJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZWJlMzAtZWU4OS00OGRlLTg3NGMt YjQ2OWRiMTBiNjhhLzEvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zZWJlMzAtZWU4OS00OGRlLTg3NGMtYjQ2OWRiMTBiNjhh LzEvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESuWslGJ LLuz6FHv9GuSuRo2RGaocYgoOcdt/wOUDxxed+F5UfyI6S2HY5PmIIPAQvCxsYnq VI2KMdjTyuNDuU3woykXHSkHxYo5esmLlHuFTWQYDFFSSbRMcihr1wrndeKyzNoX YUMtQ7iJge++Sge3YI77jS+KDYkgwrD8lJ7Rk0ZdfqJGYubda4SQFVSHbEFUWMGG 4c7j64mstd+8jinOM7vfN/hIXduRRMTW7+CtJcSf3MUnNPSy6NXUUU9TJZ/V+Iwa dVtAOImxyBtdYw4tfon9p0E3aM9Rml1cMSYpId6oFbJ8+qAzG0SHD+20RC3W7ras Q1seU/6+hn+wRw== -----END CERTIFICATE-----Generated at Sun Dec 21 21:02:51 2025 by rpki-client