This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json) Hash identifier: 4Alm3T1JxFRr+69NDp9AffgX2QKiVzp8pSOAQ3bMShE= Subject key identifier: E4:C0:BD:F6:8F:92:5D:87:11:A9:59:A9:5A:4A:3A:4E:83:7B:9E:0F Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd Certificate serial: 019B69C4E01F962A8A553EC394E2171F2702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft Manifest number: 07B3 Signing time: Mon 29 Dec 2025 11:01:08 +0000 Manifest this update: Mon 29 Dec 2025 11:01:08 +0000 Manifest next update: Tue 30 Dec 2025 11:01:08 +0000 Files and hashes: 1: 0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa (hash: Hj5Q/2Hh05YJsbHPFQES6qthisRibSra+MQ4aeEku0g=) 2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: 7iGj3bmcaEWA4dz79UlBm4I/uU5OJF7rMUSvoB8189A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c4:e0:1f:96:2a:8a:55:3e:c3:94:e2:17:1f:27:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd Validity Not Before: Dec 29 11:01:08 2025 GMT Not After : Dec 30 11:01:08 2025 GMT Subject: CN=e4c0bdf68f925d8711a959a95a4a3a4e837b9e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d2:ab:7d:15:89:6e:0e:26:d6:03:be:cd:52: a4:74:46:57:a7:79:a1:d3:53:2c:5b:3f:59:fa:ce: b6:19:71:00:8d:6e:b9:98:e9:25:2c:7e:84:3c:35: bd:96:5e:41:65:b5:23:99:47:11:2d:19:f2:fe:a8: b5:e4:5e:d0:e4:c2:ea:d3:ff:57:9b:9d:2f:45:80: 25:50:10:28:53:1a:8c:17:e1:ed:d1:d8:07:2c:33: 0e:06:94:3d:09:b6:79:65:20:85:49:45:07:d5:ba: 9f:81:7d:6b:f8:3b:38:b2:0b:61:9f:63:26:1e:61: 43:92:7e:0a:bc:9e:69:a6:a7:40:9f:81:f5:c0:8b: 2e:9e:50:c6:c8:81:4b:52:ac:ce:05:9b:2e:89:4a: 63:c4:0d:e3:bd:b7:62:b9:64:77:28:c6:78:4f:7d: b4:80:7d:b9:3b:b1:6c:fd:5e:47:8d:7e:98:2d:40: 76:6c:67:db:85:32:f1:77:f8:bf:ab:00:b2:b5:30: 4b:bf:6a:40:32:81:54:05:cb:af:bd:90:99:f1:7c: 55:a2:8c:1a:38:2c:dd:b4:5a:05:f3:ca:6c:ab:48: 3f:b9:c1:96:53:ba:a0:61:fe:32:02:8c:e7:37:2e: 12:46:a3:0f:c5:25:58:b0:e5:0b:17:1d:43:e7:02: 1c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C0:BD:F6:8F:92:5D:87:11:A9:59:A9:5A:4A:3A:4E:83:7B:9E:0F X509v3 Authority Key Identifier: keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:c9:ba:9d:ef:6c:7f:86:ba:c2:65:de:e0:4d:ad:d6:4e:d4: bc:59:8d:05:ff:a3:b6:9a:b7:fe:f0:0b:c5:83:1d:58:9e:c1: 5c:9b:cf:b7:dc:07:cc:4f:d2:f4:a7:86:bd:28:97:b6:72:f7: 65:86:17:30:5f:ef:95:e7:0e:3e:09:12:af:dd:2b:cf:d8:0b: ab:84:8f:d5:75:39:d5:35:21:1e:aa:d0:4a:26:1b:64:24:67: da:96:a1:67:8e:5b:56:77:3d:af:16:dd:d8:b2:a7:f1:1c:ab: 11:2d:a8:e0:96:5f:86:13:49:79:be:7e:b0:ec:85:f3:40:5b: c8:49:cf:7b:09:e3:79:44:b4:63:a9:4f:8e:01:dd:ca:61:55: 42:e9:27:b6:7b:24:a7:70:75:3f:02:be:91:f2:a6:ba:f4:19: 8e:6c:b1:9d:a9:24:fc:4d:42:be:ec:87:91:9a:ec:41:c6:0f: 27:86:ec:c2:d8:17:23:cf:ab:bb:83:72:16:fb:54:2d:69:19: 0e:28:fe:81:f4:9a:cc:a6:40:e9:9d:3d:db:00:35:87:b0:66: d3:18:51:04:1f:0a:db:59:11:b1:03:0b:c5:8f:1c:25:67:aa: 13:c8:eb:c2:cb:a9:20:00:04:4b:5a:48:26:75:6b:04:c8:b1: 2e:b4:90:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxOAfliqKVT7DlOIXHycCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOWQwNjQ3ZGMxNzE0MWQ4NDJiMzJmNTExNWQ5OWFhOWM5 ZjMzZGQwHhcNMjUxMjI5MTEwMTA4WhcNMjUxMjMwMTEwMTA4WjAzMTEwLwYDVQQD EyhlNGMwYmRmNjhmOTI1ZDg3MTFhOTU5YTk1YTRhM2E0ZTgzN2I5ZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9KrfRWJbg4m1gO+zVKkdEZXp3mh 01MsWz9Z+s62GXEAjW65mOklLH6EPDW9ll5BZbUjmUcRLRny/qi15F7Q5MLq0/9X m50vRYAlUBAoUxqMF+Ht0dgHLDMOBpQ9CbZ5ZSCFSUUH1bqfgX1r+Ds4sgthn2Mm HmFDkn4KvJ5ppqdAn4H1wIsunlDGyIFLUqzOBZsuiUpjxA3jvbdiuWR3KMZ4T320 gH25O7Fs/V5HjX6YLUB2bGfbhTLxd/i/qwCytTBLv2pAMoFUBcuvvZCZ8XxVoowa OCzdtFoF88psq0g/ucGWU7qgYf4yAoznNy4SRqMPxSVYsOULFx1D5wIcMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTAvfaPkl2HEalZqVpKOk6De54PMB8GA1UdIwQY MBaAFM6dBkfcFxQdhCsy9RFdmaqcnzPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGIt ODBmYWVjYTljMmVlLzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGItODBmYWVjYTljMmVl LzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMm6ne9s f4a6wmXe4E2t1k7UvFmNBf+jtpq3/vALxYMdWJ7BXJvPt9wHzE/S9KeGvSiXtnL3 ZYYXMF/vlecOPgkSr90rz9gLq4SP1XU51TUhHqrQSiYbZCRn2pahZ45bVnc9rxbd 2LKn8RyrES2o4JZfhhNJeb5+sOyF80BbyEnPewnjeUS0Y6lPjgHdymFVQukntnsk p3B1PwK+kfKmuvQZjmyxnakk/E1CvuyHkZrsQcYPJ4bswtgXI8+ru4NyFvtULWkZ Dij+gfSazKZA6Z092wA1h7Bm0xhRBB8K21kRsQMLxY8cJWeqE8jrwsupIAAES1pI JnVrBMixLrSQYw== -----END CERTIFICATE-----Generated at Mon Dec 29 13:23:15 2025 by rpki-client