This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json) Hash identifier: 7KbMs/oqa5AL+gg0nrVIosu8X0pFKeAEx92ujfBEgfM= Subject key identifier: 1D:2A:78:62:35:5F:93:F1:BE:23:6E:06:61:C3:13:1F:1D:A1:37:9C Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc Certificate serial: 019B4A041E929F96A624823E79622F05A32F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft Manifest number: 0C60 Signing time: Tue 23 Dec 2025 07:02:22 +0000 Manifest this update: Tue 23 Dec 2025 07:02:22 +0000 Manifest next update: Wed 24 Dec 2025 07:02:22 +0000 Files and hashes: 1: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: HjVGvMb2opFToP+IyPewassttLuv2YiwxNskvrpjLdE=) 2: fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa (hash: 6Ji4KJM6oBtjO9Pzhwf19OTNTLmIDSqTSnb+aKfxDkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:1e:92:9f:96:a6:24:82:3e:79:62:2f:05:a3:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc Validity Not Before: Dec 23 07:02:22 2025 GMT Not After : Dec 24 07:02:22 2025 GMT Subject: CN=1d2a7862355f93f1be236e0661c3131f1da1379c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:61:65:c8:10:72:04:2a:af:cb:b0:56:56: ac:8e:16:76:3c:d0:61:a6:68:be:09:3b:36:ba:d6: 81:41:02:57:b2:6c:b0:18:38:41:7a:46:2a:a1:41: 65:61:b0:91:e7:dc:51:67:45:fa:e9:d4:c1:7b:83: 53:2e:5f:62:e5:12:4b:9d:e3:d8:68:10:c4:6c:3e: d1:6a:01:c3:ec:81:2e:36:9f:a4:61:0c:ff:05:0b: 56:4b:35:58:88:dc:8a:d7:9b:45:00:9a:5a:ba:b5: 6f:cd:cb:f0:c5:78:8e:e1:fb:07:40:c0:5b:c5:42: e6:c9:f6:61:c7:14:f4:9e:20:aa:5a:3d:e4:bb:5f: 72:1d:e3:b9:c3:b2:66:6d:64:e8:ab:a7:25:d0:0e: 0e:78:6f:c1:e5:0a:85:66:7e:ba:6a:4c:23:d1:2f: 7f:15:b2:75:7a:a7:12:bb:54:c7:51:a2:ba:f2:cd: d8:03:9f:34:81:6d:f6:ad:74:1b:b7:27:8e:83:25: 7c:b4:c0:e9:69:3f:25:b0:c1:d3:5b:a9:e5:45:8c: 65:c2:78:0e:4b:af:1e:ca:1d:2c:c1:a3:ff:86:73: e4:7e:12:f7:4e:43:24:05:fd:24:7a:39:98:75:dd: 47:87:30:55:61:b2:5d:ee:a4:ac:44:cb:50:61:d4: 33:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2A:78:62:35:5F:93:F1:BE:23:6E:06:61:C3:13:1F:1D:A1:37:9C X509v3 Authority Key Identifier: keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c4:0c:47:38:a5:47:2c:ee:a0:0d:fc:cf:4e:42:76:8c:d7: 21:8b:5a:a6:9d:be:32:87:d9:82:ec:d0:d3:c7:53:07:3f:7f: b4:76:df:71:7e:4b:53:09:8e:21:e0:a4:33:c0:a8:75:69:86: b4:7c:f4:0d:22:9d:8b:72:3a:d7:d7:e5:64:8b:a7:b3:3b:62: 32:d0:ee:14:f2:b5:76:9b:1a:bf:6d:21:08:bc:91:df:cd:f5: d0:e0:94:0a:80:0b:43:dd:c2:21:93:7e:f4:08:91:85:b9:cc: d6:45:19:4e:e1:3e:4b:db:d8:0f:ab:99:20:53:0d:19:7e:0f: 64:50:ca:7a:d3:6d:97:30:a9:45:1e:f4:8f:b0:95:ef:a6:33: 9c:32:09:a1:75:e5:6b:56:92:05:e2:2a:a4:37:31:e6:ae:94: 1d:7f:5a:f8:98:66:41:35:2b:0e:5c:b3:8e:4c:ad:7b:1e:70: 18:ad:ec:c3:3f:75:59:58:81:54:01:5a:68:7c:89:ba:ab:12: f6:03:c3:33:10:a8:17:e1:56:46:f9:fc:63:be:22:4a:94:9d: 2e:25:28:ef:ed:48:e6:d9:36:e3:6a:d7:d7:f0:b7:1f:7b:40: ef:ab:09:31:fe:a4:ca:a4:6f:95:8b:1e:8a:98:4c:7d:6e:da: 12:d4:c8:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBB6Sn5amJII+eWIvBaMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NDY1YThhMWU4ZTQyZjFhNjBkMjc4MTk4YzMyMGFlYzBm M2Y3ZGMwHhcNMjUxMjIzMDcwMjIyWhcNMjUxMjI0MDcwMjIyWjAzMTEwLwYDVQQD EygxZDJhNzg2MjM1NWY5M2YxYmUyMzZlMDY2MWMzMTMxZjFkYTEzNzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7JhZcgQcgQqr8uwVlasjhZ2PNBh pmi+CTs2utaBQQJXsmywGDhBekYqoUFlYbCR59xRZ0X66dTBe4NTLl9i5RJLnePY aBDEbD7RagHD7IEuNp+kYQz/BQtWSzVYiNyK15tFAJpaurVvzcvwxXiO4fsHQMBb xULmyfZhxxT0niCqWj3ku19yHeO5w7JmbWToq6cl0A4OeG/B5QqFZn66akwj0S9/ FbJ1eqcSu1THUaK68s3YA580gW32rXQbtyeOgyV8tMDpaT8lsMHTW6nlRYxlwngO S68eyh0swaP/hnPkfhL3TkMkBf0kejmYdd1HhzBVYbJd7qSsRMtQYdQzHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0qeGI1X5PxviNuBmHDEx8doTecMB8GA1UdIwQY MBaAFGRGWooejkLxpg0ngZjDIK7A8/fcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUt NzBlNjBlZGJjMWU3LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUtNzBlNjBlZGJjMWU3 LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMQMRzil RyzuoA38z05CdozXIYtapp2+MofZguzQ08dTBz9/tHbfcX5LUwmOIeCkM8CodWmG tHz0DSKdi3I619flZIunsztiMtDuFPK1dpsav20hCLyR38310OCUCoALQ93CIZN+ 9AiRhbnM1kUZTuE+S9vYD6uZIFMNGX4PZFDKetNtlzCpRR70j7CV76YznDIJoXXl a1aSBeIqpDcx5q6UHX9a+JhmQTUrDlyzjkytex5wGK3swz91WViBVAFaaHyJuqsS 9gPDMxCoF+FWRvn8Y74iSpSdLiUo7+1I5tk242rX1/C3H3tA76sJMf6kyqRvlYse iphMfW7aEtTIWQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:14:39 2025 by rpki-client