This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json) Hash identifier: mEsXsz6wG0tULCQvyNQ1NasIK8vzsFq4W00kxyIymOg= Subject key identifier: 59:90:C0:35:EE:38:89:23:E2:E0:2B:09:54:40:E0:1C:2B:A2:8E:B6 Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea Certificate serial: 019AF3F7E08623BDC3554F0BA081AF2EB517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft Manifest number: 1306 Signing time: Sat 06 Dec 2025 14:01:39 +0000 Manifest this update: Sat 06 Dec 2025 14:01:39 +0000 Manifest next update: Sun 07 Dec 2025 14:01:39 +0000 Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: H+PePKV4kkKwP6Gx/hT2Oq1Nkgy3bng+Sab4/LECsvA=) 2: fWdcwSs6zepV4nyngmDbMNEhJgc.roa (hash: xKdKIOHrNEbxshe+Nt7u4EYPgDXnCkWil6RpBaiRPJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:e0:86:23:bd:c3:55:4f:0b:a0:81:af:2e:b5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea Validity Not Before: Dec 6 14:01:39 2025 GMT Not After : Dec 7 14:01:39 2025 GMT Subject: CN=5990c035ee388923e2e02b095440e01c2ba28eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:00:74:f4:da:12:21:c5:8e:1f:3d:e9:2b:1e: e0:39:0b:17:2a:db:69:8e:90:98:24:8c:bf:47:59: 57:d1:5f:68:00:d0:0d:29:0e:6f:4d:be:c4:a2:db: 6f:26:ec:24:6e:ad:68:51:c0:e4:c3:2f:a9:b0:50: 13:37:71:ea:88:76:9c:04:f1:cd:34:7e:c4:1a:f6: 0d:e6:c7:e8:c3:14:de:7f:ec:ad:72:1c:35:cc:7f: 1a:8d:a2:6f:48:bc:f3:e3:d7:e9:ab:cc:e2:d8:e0: b9:cc:bc:7c:2c:68:22:bb:84:6e:fd:8b:f9:68:28: 4a:17:61:d4:d7:82:b6:a4:25:03:d2:99:e7:01:9d: a6:e9:06:77:06:70:60:6f:e8:f9:69:a2:c5:ab:f9: 14:81:4d:c4:7b:ad:79:a8:32:88:78:0e:78:bb:e0: dd:82:8b:bc:03:d4:14:a7:38:16:64:2b:63:82:d5: a5:68:69:50:f2:3f:ae:66:ba:87:2a:b9:4c:ee:a8: 94:f8:2d:df:93:38:87:69:e9:b0:0b:fe:70:57:a4: 3c:93:ce:c9:f6:c6:66:2b:ff:9d:2d:bc:92:43:dc: c7:6d:29:00:33:9f:d1:2e:cf:8b:1a:47:c6:b3:9f: fb:cb:b4:6c:82:50:13:48:b6:e8:e5:9f:5b:6c:f3: d4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:90:C0:35:EE:38:89:23:E2:E0:2B:09:54:40:E0:1C:2B:A2:8E:B6 X509v3 Authority Key Identifier: keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:2e:bf:97:ee:9e:08:4d:3d:2a:6f:29:12:5d:f3:6e:83:ce: c6:c9:29:32:d8:07:c4:90:02:46:c1:21:22:43:cd:43:5e:d6: 01:f3:5a:19:4d:76:db:ef:5b:62:c2:fe:38:06:91:fc:4d:14: e9:5a:56:f4:39:23:bd:10:66:15:2d:f5:fe:c7:e6:f5:ac:ee: 64:ec:26:c4:22:8b:a3:13:a1:1c:73:7e:08:8a:8c:dc:34:6b: e7:30:dc:4b:9c:6d:a7:99:93:65:ff:52:b0:42:64:0f:f5:4e: 8f:14:57:ef:06:68:d5:fe:aa:d8:8b:a1:b1:e2:08:a9:4e:67: ef:aa:fc:c1:88:d4:11:36:b1:ae:b7:51:fa:0e:8e:80:43:c3: 8a:b0:e6:24:a6:9d:21:6d:5c:64:73:56:f4:85:52:cb:77:7a: dd:88:1a:a7:be:7d:3d:22:5c:4c:02:6c:15:b5:c1:5e:27:53: ba:8c:d7:b6:db:34:f1:c8:32:49:73:b1:6b:9b:9b:08:a1:62: dd:e9:31:ae:4d:36:1a:73:5c:92:8d:2a:ef:84:21:9c:6e:d9: 3b:24:d8:b3:f1:ab:fb:1c:50:9a:c4:96:3e:47:84:de:94:b4: 0a:59:72:0f:10:0f:18:47:3a:45:44:6e:0c:9b:ce:84:9b:ae: bd:91:79:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+CGI73DVU8LoIGvLrUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YzkyMGEyN2UzZTUzYTM2N2Y5ZWE5NmRiN2JhZjdiZDY1 YTgzZWEwHhcNMjUxMjA2MTQwMTM5WhcNMjUxMjA3MTQwMTM5WjAzMTEwLwYDVQQD Eyg1OTkwYzAzNWVlMzg4OTIzZTJlMDJiMDk1NDQwZTAxYzJiYTI4ZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wB09NoSIcWOHz3pKx7gOQsXKttp jpCYJIy/R1lX0V9oANANKQ5vTb7EottvJuwkbq1oUcDkwy+psFATN3HqiHacBPHN NH7EGvYN5sfowxTef+ytchw1zH8ajaJvSLzz49fpq8zi2OC5zLx8LGgiu4Ru/Yv5 aChKF2HU14K2pCUD0pnnAZ2m6QZ3BnBgb+j5aaLFq/kUgU3Ee615qDKIeA54u+Dd gou8A9QUpzgWZCtjgtWlaGlQ8j+uZrqHKrlM7qiU+C3fkziHaemwC/5wV6Q8k87J 9sZmK/+dLbySQ9zHbSkAM5/RLs+LGkfGs5/7y7RsglATSLbo5Z9bbPPUVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmQwDXuOIkj4uArCVRA4Bwroo62MB8GA1UdIwQY MBaAFGXJIKJ+PlOjZ/nqltt7r3vWWoPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMmRkMDAtYTYyMS00OWE5LWJiYWIt MzdmOWJmNzg2MWI2LzEvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iMmRkMDAtYTYyMS00OWE5LWJiYWItMzdmOWJmNzg2MWI2 LzEvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcy6/l+6e CE09Km8pEl3zboPOxskpMtgHxJACRsEhIkPNQ17WAfNaGU122+9bYsL+OAaR/E0U 6VpW9DkjvRBmFS31/sfm9azuZOwmxCKLoxOhHHN+CIqM3DRr5zDcS5xtp5mTZf9S sEJkD/VOjxRX7wZo1f6q2IuhseIIqU5n76r8wYjUETaxrrdR+g6OgEPDirDmJKad IW1cZHNW9IVSy3d63Ygap759PSJcTAJsFbXBXidTuozXtts08cgySXOxa5ubCKFi 3ekxrk02GnNcko0q74QhnG7ZOyTYs/Gr+xxQmsSWPkeE3pS0CllyDxAPGEc6RURu DJvOhJuuvZF5yA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:18 2025 by rpki-client