This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft File: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft (raw, json) Hash identifier: j4Qj7j3YdU95dFMb5B8GkAsKLYOpYyIchOxvOq264Yo= Subject key identifier: 3E:84:62:36:76:E3:2B:D4:50:08:61:E6:7F:98:49:FE:38:32:61:A5 Authority key identifier: 64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C Certificate issuer: /CN=64a7a6cd583814d393bee2635b545574cc75620c Certificate serial: 019B3C7DC919DACBC774EB321B0923BFCE42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft Manifest number: 13BA Signing time: Sat 20 Dec 2025 16:00:34 +0000 Manifest this update: Sat 20 Dec 2025 16:00:34 +0000 Manifest next update: Sun 21 Dec 2025 16:00:34 +0000 Files and hashes: 1: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl (hash: uYm1ZXUUqSqc0rYaqirPIaPidI6rVoSpG9fg7RBUcwk=) 2: rJRxxRneTTHrBiouHAwe-Vj2hOM.roa (hash: pnxg6ZPXerYJRTKN22NAobx2yMJvSslv4M+/PffiHGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:c9:19:da:cb:c7:74:eb:32:1b:09:23:bf:ce:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a7a6cd583814d393bee2635b545574cc75620c Validity Not Before: Dec 20 16:00:34 2025 GMT Not After : Dec 21 16:00:34 2025 GMT Subject: CN=3e84623676e32bd4500861e67f9849fe383261a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:ed:e0:35:c5:89:18:19:27:07:5d:ac:78: 9f:c1:cc:19:d1:76:85:c2:f6:41:7f:d1:f1:88:75: 21:c1:f8:13:fd:fa:52:39:5f:19:76:67:29:a4:50: 61:c9:c4:19:a6:f3:b5:2c:f6:92:96:60:f9:c0:5d: b0:cb:53:6b:08:be:56:d8:27:88:11:d8:0b:a0:0f: 05:eb:f7:76:2d:b5:55:e2:da:56:c3:60:ec:0d:51: 64:2d:c1:25:f4:20:8c:24:7c:5c:18:10:f3:70:c4: f0:f5:fe:22:6b:96:d1:de:ce:81:19:9a:ff:02:13: 8d:f7:93:50:46:12:6e:7b:76:a6:e1:46:b8:37:42: aa:a6:64:d5:ce:60:02:8c:77:05:5d:5b:db:1a:ca: 76:d5:b0:fb:e5:c2:e2:35:ed:b5:05:19:a0:c0:5d: cb:b1:7e:67:c1:66:c7:d3:4d:09:2d:e6:41:94:24: 9c:ad:27:2c:bf:64:d6:76:78:a8:28:15:48:77:40: ad:80:89:a5:35:23:10:c6:07:ec:6d:7d:c5:60:08: 92:11:fd:6e:6c:2f:0f:ee:d5:83:22:93:e0:1e:25: af:1e:23:7b:1a:9d:8d:58:e4:be:8b:e6:f4:28:83: 80:46:ba:3a:4e:c6:ef:56:9b:e6:91:ec:b9:63:af: 6f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:84:62:36:76:E3:2B:D4:50:08:61:E6:7F:98:49:FE:38:32:61:A5 X509v3 Authority Key Identifier: keyid:64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:07:ca:fc:d1:37:b7:44:2b:38:93:9f:a2:8c:c8:04:e9:e6: 58:53:8d:7e:3d:2b:8c:b0:88:63:72:9b:a9:68:86:6c:02:9f: b8:1b:a0:48:64:97:b1:bd:42:1b:96:b5:b9:15:38:76:39:93: 31:30:bc:ac:9a:c0:2d:1f:53:b9:e5:6a:5b:fe:63:66:78:e3: 32:02:94:72:3b:7f:8c:c5:23:a9:4c:9f:ff:1a:f8:98:4e:a5: 3c:9d:1a:57:a5:31:9a:58:f7:90:86:db:e5:18:5a:a0:0d:e9: 02:06:0c:bb:37:3e:51:d0:87:f1:2d:87:a1:51:8d:95:f7:13: 4d:4b:28:38:91:5b:d0:43:22:bf:b0:af:57:da:09:33:05:a6: 92:f4:4d:4d:d1:47:c2:fe:0e:d8:2a:67:2c:ea:15:df:4f:f9: 74:0b:71:e1:d2:cf:6c:16:a3:ca:89:18:69:d2:73:94:89:db: 5b:95:23:5a:bf:5b:79:b6:ac:1e:de:1d:b7:17:71:be:33:c5: 61:05:a0:5f:c6:3d:62:6f:66:86:5d:3b:ae:e7:31:42:e3:d3: e1:84:a9:5d:f9:6a:d5:73:db:cb:c6:02:27:23:b8:56:3e:2d: 95:e4:b6:fe:d5:23:b4:86:71:bf:3b:0b:7b:67:b2:06:db:a6: 45:d6:1d:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fckZ2svHdOsyGwkjv85CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YTdhNmNkNTgzODE0ZDM5M2JlZTI2MzViNTQ1NTc0Y2M3 NTYyMGMwHhcNMjUxMjIwMTYwMDM0WhcNMjUxMjIxMTYwMDM0WjAzMTEwLwYDVQQD EygzZTg0NjIzNjc2ZTMyYmQ0NTAwODYxZTY3Zjk4NDlmZTM4MzI2MWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshjt4DXFiRgZJwddrHifwcwZ0XaF wvZBf9HxiHUhwfgT/fpSOV8ZdmcppFBhycQZpvO1LPaSlmD5wF2wy1NrCL5W2CeI EdgLoA8F6/d2LbVV4tpWw2DsDVFkLcEl9CCMJHxcGBDzcMTw9f4ia5bR3s6BGZr/ AhON95NQRhJue3am4Ua4N0KqpmTVzmACjHcFXVvbGsp21bD75cLiNe21BRmgwF3L sX5nwWbH000JLeZBlCScrScsv2TWdnioKBVId0CtgImlNSMQxgfsbX3FYAiSEf1u bC8P7tWDIpPgHiWvHiN7Gp2NWOS+i+b0KIOARro6TsbvVpvmkey5Y69vxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6EYjZ24yvUUAhh5n+YSf44MmGlMB8GA1UdIwQY MBaAFGSnps1YOBTTk77iY1tUVXTMdWIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWktlbXpWZzRGTk9UdnVKalcxUlZkTXgxWWd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84ZDZmMWEtZDMzNC00MThmLWI3MjYt NmY1ZDhhNzRhMGU0LzEvWktlbXpWZzRGTk9UdnVKalcxUlZkTXgxWWd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi84ZDZmMWEtZDMzNC00MThmLWI3MjYtNmY1ZDhhNzRhMGU0 LzEvWktlbXpWZzRGTk9UdnVKalcxUlZkTXgxWWd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQfK/NE3 t0QrOJOfoozIBOnmWFONfj0rjLCIY3KbqWiGbAKfuBugSGSXsb1CG5a1uRU4djmT MTC8rJrALR9TueVqW/5jZnjjMgKUcjt/jMUjqUyf/xr4mE6lPJ0aV6Uxmlj3kIbb 5RhaoA3pAgYMuzc+UdCH8S2HoVGNlfcTTUsoOJFb0EMiv7CvV9oJMwWmkvRNTdFH wv4O2CpnLOoV30/5dAtx4dLPbBajyokYadJzlInbW5UjWr9bebasHt4dtxdxvjPF YQWgX8Y9Ym9mhl07rucxQuPT4YSpXflq1XPby8YCJyO4Vj4tleS2/tUjtIZxvzsL e2eyBtumRdYdXw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:36:17 2025 by rpki-client