This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft File: ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json) Hash identifier: urEk94/WpchIFZj6S5FhPYzoDXBBeW8gBRscrfRgPek= Subject key identifier: 43:A6:A9:F3:D3:88:D7:EC:76:C2:2E:A1:9C:70:72:80:4F:66:BE:79 Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c Certificate serial: 019B42EE5CC14BBF45BF7B7E9758BAF1E8F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft Manifest number: 179F Signing time: Sun 21 Dec 2025 22:01:16 +0000 Manifest this update: Sun 21 Dec 2025 22:01:16 +0000 Manifest next update: Mon 22 Dec 2025 22:01:16 +0000 Files and hashes: 1: 4DVldFO5y9KBtzxCTr71AtgC-eU.roa (hash: sBM0L37YAXg4FUlTCLrrPugqQEHySprVmExRuh4Lv3Y=) 2: 6kPkXmlWSAQjjCwMVOC6F-rjNv0.roa (hash: sTc836fo7TkkLRKHAoIO0+HiUzTAeRmVazBYlJks2f4=) 3: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: 5h4sN7j+zeAg6bVmmMRN90M9TMgIthSdDa+MfP+3cCo=) 4: _9bhuNhFLcA0HPv8bquRW0OUHTY.roa (hash: +AAi2JdNKRV5CFL7Yq+UFdnc1nHIGlMicPgKcuKxkmI=) 5: xZI_bvE6JftjTV0B3dxc_5kYW0g.roa (hash: AB1DpoviLX3AxgItOuLbSEQmOM0xIHXrb99sosPXy80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:5c:c1:4b:bf:45:bf:7b:7e:97:58:ba:f1:e8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c Validity Not Before: Dec 21 22:01:16 2025 GMT Not After : Dec 22 22:01:16 2025 GMT Subject: CN=43a6a9f3d388d7ec76c22ea19c7072804f66be79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:45:ac:48:08:9f:cf:fa:cb:6d:c6:bc:cf: 5a:43:fa:6a:05:8f:cc:72:a6:f4:20:2c:8d:af:a8: 8c:b2:36:8f:13:3e:8c:14:a7:3c:16:3e:cc:9c:fa: d3:51:1c:03:47:cb:f3:58:b3:4f:f1:28:28:78:e9: 3c:53:6c:bb:9a:bb:a8:52:59:75:d5:4b:af:38:53: 13:4f:f7:10:f7:e2:f5:da:ad:94:e1:6b:00:33:b4: 7e:64:4e:ea:81:12:2a:74:57:c2:6c:ec:00:cf:55: d4:59:de:6f:bb:1d:e3:58:46:dc:73:b4:d2:ec:89: e0:10:77:41:e3:96:3e:73:32:58:16:3e:a7:a9:29: 8c:21:29:68:87:47:47:55:48:1d:c5:99:73:73:ed: db:80:85:89:71:3a:55:ea:00:80:8a:71:f6:f4:ee: 55:c6:ea:5c:0d:ca:a8:dd:26:d3:d9:7c:fa:20:72: 53:f1:d8:b0:58:49:13:8f:26:e7:81:48:f4:7b:20: 55:ca:ab:80:09:b7:68:d4:c4:21:98:ca:82:40:b6: ee:7d:e2:a7:a6:56:1a:e7:e1:d8:ca:91:b2:15:fd: a5:f5:0d:20:55:25:91:95:a9:bb:61:a7:1d:4b:b4: 6b:f9:58:b8:34:07:a4:ed:89:ed:56:cd:58:01:d0: fe:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A6:A9:F3:D3:88:D7:EC:76:C2:2E:A1:9C:70:72:80:4F:66:BE:79 X509v3 Authority Key Identifier: keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3e:74:4a:0a:a1:14:30:74:ba:b7:99:ab:10:d5:bd:7e:8a: 37:82:69:b3:e0:88:4e:8f:6a:cf:ee:13:49:77:5a:df:06:dc: e9:4e:81:25:34:c5:06:b8:dd:a8:ba:88:f7:8c:22:e2:b9:bb: ac:1a:d7:79:52:84:de:d3:d4:72:88:fd:05:c7:56:79:52:34: 45:e1:e4:5d:53:8c:ea:03:94:ca:18:f6:e6:ac:25:06:d6:6c: 49:8f:a4:ae:78:b1:03:ec:87:13:2e:14:97:50:22:9d:8e:30: 29:4b:ed:ba:05:6e:81:8d:82:c6:ee:f4:8f:40:45:a3:f2:34: 85:6c:e9:f4:9e:f1:12:3c:08:16:fc:1e:a8:2d:8f:8c:ec:9e: 1b:55:fb:a0:7f:bf:44:36:98:48:a6:6a:07:09:47:3b:3f:c4: 80:56:7e:4e:7a:c9:53:73:69:4f:73:9f:eb:0e:fb:12:80:70: c3:56:6c:c7:57:74:c3:a2:19:39:b3:a7:54:dc:0e:76:9d:bc: d3:15:4c:30:3e:97:ac:d7:99:a1:cf:74:fb:d9:a3:58:7b:53: 29:0a:79:cf:50:6e:32:c7:82:ce:4e:d3:e3:c8:45:d8:80:bb: b9:9b:83:48:d3:9f:47:0b:e1:75:56:90:b3:a2:31:e3:f0:8e: aa:c2:5f:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7lzBS79Fv3t+l1i68ej5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDE3MWY5M2NjMWNhNzE2ZmM4MDZlMzZhNTU4NTJjZGY0 ZjFjMWMwHhcNMjUxMjIxMjIwMTE2WhcNMjUxMjIyMjIwMTE2WjAzMTEwLwYDVQQD Eyg0M2E2YTlmM2QzODhkN2VjNzZjMjJlYTE5YzcwNzI4MDRmNjZiZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxFFrEgIn8/6y23GvM9aQ/pqBY/M cqb0ICyNr6iMsjaPEz6MFKc8Fj7MnPrTURwDR8vzWLNP8SgoeOk8U2y7mruoUll1 1UuvOFMTT/cQ9+L12q2U4WsAM7R+ZE7qgRIqdFfCbOwAz1XUWd5vux3jWEbcc7TS 7IngEHdB45Y+czJYFj6nqSmMISloh0dHVUgdxZlzc+3bgIWJcTpV6gCAinH29O5V xupcDcqo3SbT2Xz6IHJT8diwWEkTjybngUj0eyBVyquACbdo1MQhmMqCQLbufeKn plYa5+HYypGyFf2l9Q0gVSWRlam7YacdS7Rr+Vi4NAek7YntVs1YAdD+PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOmqfPTiNfsdsIuoZxwcoBPZr55MB8GA1UdIwQY MBaAFGTRcfk8wcpxb8gG42pVhSzfTxwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMmQ5ZGYtMTZlYi00NDllLTgzZjAt YTQ2MzVkZjQ3ZDcwLzEvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mMmQ5ZGYtMTZlYi00NDllLTgzZjAtYTQ2MzVkZjQ3ZDcw LzEvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAED50Sgqh FDB0ureZqxDVvX6KN4Jps+CITo9qz+4TSXda3wbc6U6BJTTFBrjdqLqI94wi4rm7 rBrXeVKE3tPUcoj9BcdWeVI0ReHkXVOM6gOUyhj25qwlBtZsSY+krnixA+yHEy4U l1AinY4wKUvtugVugY2Cxu70j0BFo/I0hWzp9J7xEjwIFvweqC2PjOyeG1X7oH+/ RDaYSKZqBwlHOz/EgFZ+TnrJU3NpT3Of6w77EoBww1Zsx1d0w6IZObOnVNwOdp28 0xVMMD6XrNeZoc90+9mjWHtTKQp5z1BuMseCzk7T48hF2IC7uZuDSNOfRwvhdVaQ s6Ix4/COqsJfYw== -----END CERTIFICATE-----Generated at Mon Dec 22 07:53:32 2025 by rpki-client