This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft File: zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json) Hash identifier: HfMtartjabBmLhI6Z7avT2Endcf+J/buCLFcdQD+2bQ= Subject key identifier: 83:E9:3E:2C:F8:ED:10:F0:8B:4D:35:CA:D9:03:89:78:B6:E8:A5:94 Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85 Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85 Certificate serial: 019B38A25198C5733DA445411919674E48E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft Manifest number: 12D4 Signing time: Fri 19 Dec 2025 22:02:00 +0000 Manifest this update: Fri 19 Dec 2025 22:02:00 +0000 Manifest next update: Sat 20 Dec 2025 22:02:00 +0000 Files and hashes: 1: DSsF2EpdJres9UlSYZ8ho9OJx-0.roa (hash: kpJLPq3xhLOXcci/pP8gkCb0kvLBcDaZioz977+8mg0=) 2: G9TzS_JKF-xrHisLyJoTKAn4mdM.roa (hash: MxwBJUCTUR/t3ggoItSIruyTquvVzIW04TVN5/t6tE4=) 3: KWVhi7fgtJ1IxHgG78p9PD3RdJ0.roa (hash: KDb4m2ieiCCUnfzXPEKnNf6EnbdlGwtT0gW5l38r8FU=) 4: y-irRafrFET7ueEFRfDBe0Y0btc.roa (hash: vwA7uPcYphRiy+M8uy7NrhUZ1Q14uz25pMwIRfApgPI=) 5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: 35Vv+X76Qj148bxsMET2UxZN68XBNLY7GwR1yOnThUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:51:98:c5:73:3d:a4:45:41:19:19:67:4e:48:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85 Validity Not Before: Dec 19 22:02:00 2025 GMT Not After : Dec 20 22:02:00 2025 GMT Subject: CN=83e93e2cf8ed10f08b4d35cad9038978b6e8a594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6e:16:0f:b7:82:7a:07:13:7a:f5:29:d1:ac: 9e:a2:e7:c1:ac:58:4c:d6:b6:fd:4e:0d:58:e5:74: ad:cd:4b:c0:c4:65:7d:38:63:11:e1:e3:95:ff:c1: 2e:71:b7:c8:d9:6d:7a:30:e5:78:3e:ba:41:c9:6e: ef:1e:a5:3c:4b:33:3c:75:a7:6a:e8:61:8e:3f:cd: 3c:67:1f:0f:6d:57:ad:c0:0d:79:9d:98:7a:f5:4b: f8:0a:a6:88:d1:0d:e2:bb:72:73:a5:c6:bb:73:fe: 03:a0:44:bc:11:f6:d2:32:a3:38:b3:a5:78:9c:6f: ff:1c:6f:f8:c6:5b:f8:7f:bd:03:4d:d8:f0:b0:f8: 11:25:98:d1:03:dd:2d:e5:f9:1b:dc:a0:bf:5a:f2: 38:d3:4f:bc:00:a4:e8:ea:c0:3d:9b:ce:41:91:0e: 58:aa:e3:a7:b8:de:52:ba:e5:cc:84:62:c5:16:d6: cb:0d:65:d8:38:b1:b9:6f:35:29:bb:f3:0f:2b:84: c7:15:b6:b9:22:07:b9:10:7c:18:50:27:6f:60:ba: 97:7f:7b:68:8c:f8:b1:7d:a8:ea:f7:4e:5d:af:69: cd:c3:cb:2f:c4:aa:40:04:6c:29:8d:c0:08:90:ae: a6:f9:a1:04:e6:df:b5:fa:f6:4d:ca:e7:a0:12:98: 98:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E9:3E:2C:F8:ED:10:F0:8B:4D:35:CA:D9:03:89:78:B6:E8:A5:94 X509v3 Authority Key Identifier: keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:25:08:8d:b9:52:f1:92:35:09:32:60:0c:51:7d:da:a6:a5: 67:f9:b4:4c:18:08:4c:4c:63:54:da:4f:3b:11:51:68:2d:5a: b3:36:3d:13:cf:1d:43:80:13:83:29:d1:16:9f:61:b1:00:e2: 9c:07:9a:9b:3f:28:c9:34:6b:3e:eb:e2:5d:fe:55:9d:21:fb: 84:87:60:26:0d:04:df:2a:7c:21:5c:57:80:0b:80:fe:2f:f2: 8e:bd:89:85:1c:5c:29:82:37:3e:91:72:8d:09:6f:b6:85:ef: 32:22:1a:05:4a:16:c8:a7:5f:71:f7:f0:de:05:9c:50:77:cb: 58:a7:f0:44:de:a6:17:dd:12:f4:e8:d3:1f:c4:57:62:2a:52: 04:0e:bb:c1:88:6d:af:4c:76:80:91:e7:3b:4f:7f:8b:4d:63: 30:18:2b:b8:2d:c2:b0:38:68:35:f3:42:6e:2c:1e:b9:b0:a6: 05:f4:27:c1:31:25:f0:1d:c1:1e:87:49:cd:c2:fb:4e:11:be: f4:db:6f:46:75:c6:ec:ae:8f:e0:a2:3e:d4:95:d4:5f:84:64: ae:a8:0a:88:87:cc:92:de:2c:c0:5d:f6:49:75:8d:2f:e7:1f: 2c:c0:48:ab:91:9d:29:5c:3b:49:be:7f:eb:37:71:40:aa:8f: 8b:b0:ea:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4olGYxXM9pEVBGRlnTkjgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTU4ZjE4MWZiNTA3YTBhMmE4MjE4NTZiOGJlMGQ1NGIx MThiODUwHhcNMjUxMjE5MjIwMjAwWhcNMjUxMjIwMjIwMjAwWjAzMTEwLwYDVQQD Eyg4M2U5M2UyY2Y4ZWQxMGYwOGI0ZDM1Y2FkOTAzODk3OGI2ZThhNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG4WD7eCegcTevUp0ayeoufBrFhM 1rb9Tg1Y5XStzUvAxGV9OGMR4eOV/8EucbfI2W16MOV4PrpByW7vHqU8SzM8dadq 6GGOP808Zx8PbVetwA15nZh69Uv4CqaI0Q3iu3Jzpca7c/4DoES8EfbSMqM4s6V4 nG//HG/4xlv4f70DTdjwsPgRJZjRA90t5fkb3KC/WvI400+8AKTo6sA9m85BkQ5Y quOnuN5SuuXMhGLFFtbLDWXYOLG5bzUpu/MPK4THFba5Ige5EHwYUCdvYLqXf3to jPixfajq905dr2nNw8svxKpABGwpjcAIkK6m+aEE5t+1+vZNyuegEpiYUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPpPiz47RDwi001ytkDiXi26KWUMB8GA1UdIwQY MBaAFM6VjxgftQegoqghhWuL4NVLEYuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUt MGRiYjNiOGRiMTVmLzEvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUtMGRiYjNiOGRiMTVm LzEvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSUIjblS 8ZI1CTJgDFF92qalZ/m0TBgITExjVNpPOxFRaC1aszY9E88dQ4ATgynRFp9hsQDi nAeamz8oyTRrPuviXf5VnSH7hIdgJg0E3yp8IVxXgAuA/i/yjr2JhRxcKYI3PpFy jQlvtoXvMiIaBUoWyKdfcffw3gWcUHfLWKfwRN6mF90S9OjTH8RXYipSBA67wYht r0x2gJHnO09/i01jMBgruC3CsDhoNfNCbiweubCmBfQnwTEl8B3BHodJzcL7ThG+ 9NtvRnXG7K6P4KI+1JXUX4RkrqgKiIfMkt4swF32SXWNL+cfLMBIq5GdKVw7Sb5/ 6zdxQKqPi7DqxQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:26:52 2025 by rpki-client