This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json) Hash identifier: NK0zWW8IUS2mhrQ6ak07DfdI3zLh1/uDovbMEBZUA1A= Subject key identifier: 6B:13:AC:16:81:2C:96:DF:81:70:CE:34:7F:3B:4F:29:87:F6:40:6D Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30 Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230 Certificate serial: 019AF19B494B7EC67C207516CDEC5ADBC5D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:16 +0000 Manifest this update: Sat 06 Dec 2025 03:01:16 +0000 Manifest next update: Sun 07 Dec 2025 03:01:16 +0000 Files and hashes: 1: 1KzANFt0aPj0q7oH7exbtu-amXU.roa (hash: mW2duFDxzUlFHO8La7Ej6q1lO3QaO9KQzC0XOixRqPM=) 2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: 9K/QTZMMD6Lz1S8+2qlOMYnAtFtjQYsDTTopbRhuLwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:49:4b:7e:c6:7c:20:75:16:cd:ec:5a:db:c5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230 Validity Not Before: Dec 6 03:01:16 2025 GMT Not After : Dec 7 03:01:16 2025 GMT Subject: CN=6b13ac16812c96df8170ce347f3b4f2987f6406d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:80:92:d3:02:22:e1:db:b0:ba:5c:a5:06: 0c:67:2e:71:03:82:b6:11:83:95:d7:41:04:68:bf: 2b:f4:28:d0:46:0e:80:79:e8:d7:c8:95:6b:3a:ab: f8:50:fe:6f:09:98:7c:d7:9f:86:a8:78:cd:28:47: 3a:80:52:ac:67:83:2e:59:f5:fb:e5:7a:fe:05:c7: 8c:3a:bb:73:e0:c2:c8:a8:7b:12:35:64:9b:7e:d9: 3d:21:9f:13:a7:30:e1:17:c9:62:de:9d:25:1f:7b: 18:76:04:de:f5:b0:ff:85:19:0b:41:a2:26:0d:a2: 4b:e5:9c:30:66:cd:a9:e9:c7:35:41:24:c9:dd:68: 47:7d:a2:2a:97:41:83:76:35:55:60:fc:30:36:b7: 3b:e5:9e:7f:6f:16:38:79:28:71:42:0d:c6:dd:11: d3:96:71:1e:05:30:5d:1c:ab:53:33:3c:d8:57:44: c6:1a:47:9f:3e:1e:9f:49:38:1f:e1:47:db:f0:a4: d1:e3:72:85:16:cf:86:3c:e3:a6:bb:6f:6b:27:fd: b0:1f:65:ee:44:d4:b4:70:c0:cd:25:b8:fd:de:44: 59:29:33:38:cf:56:44:b9:b9:45:0e:79:ea:77:a0: 23:55:fa:9e:52:2a:42:70:ab:ec:33:95:26:6c:d0: 41:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:13:AC:16:81:2C:96:DF:81:70:CE:34:7F:3B:4F:29:87:F6:40:6D X509v3 Authority Key Identifier: keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b3:54:34:2c:83:55:db:6b:a3:3c:97:76:ac:b4:31:90:22: 48:0e:a1:bd:6d:9c:67:06:3a:10:ab:80:74:cb:91:db:3d:d3: 0b:04:05:46:2f:3f:77:f5:b3:e9:16:66:66:e1:15:54:b2:b2: 68:4f:e0:87:c6:40:6d:5e:14:0d:c4:d7:21:4f:1b:e2:e0:aa: 62:4b:00:6a:4b:18:18:84:34:79:48:13:b3:70:a5:74:d2:bb: a8:99:3d:db:7c:3b:f6:4f:42:84:ea:0a:b0:98:90:71:a4:4a: c6:dc:ad:db:c1:2f:f0:54:a5:13:f7:7e:9a:02:14:b4:54:93: 65:28:cc:ac:2b:e8:76:c0:99:36:04:82:bd:fe:c3:26:6f:29: dd:8e:a9:7e:dd:31:50:e3:ff:41:78:59:c2:ee:0e:6e:d5:f1: bf:ba:3a:20:2f:54:fb:e4:04:ee:6f:af:13:9c:d7:27:10:60: 8c:df:e2:3e:33:07:92:4e:17:88:0d:84:b8:5d:7a:92:d9:16: 5e:57:bf:e0:a0:94:9c:89:e7:be:f6:71:67:cd:59:c1:cc:f9: 1e:31:4a:d1:62:34:33:14:68:eb:10:d4:8d:d0:72:69:cc:94: b6:70:d6:c2:97:68:7e:c4:3c:2d:37:63:09:85:78:2e:97:46: 06:51:f0:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0lLfsZ8IHUWzexa28XTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWM3ODk5NzZkM2I1ODQwMTZjYWMxOWYzNGJiZWRlOTY2 Y2QyMzAwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD Eyg2YjEzYWMxNjgxMmM5NmRmODE3MGNlMzQ3ZjNiNGYyOTg3ZjY0MDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfGAktMCIuHbsLpcpQYMZy5xA4K2 EYOV10EEaL8r9CjQRg6AeejXyJVrOqv4UP5vCZh815+GqHjNKEc6gFKsZ4MuWfX7 5Xr+BceMOrtz4MLIqHsSNWSbftk9IZ8TpzDhF8li3p0lH3sYdgTe9bD/hRkLQaIm DaJL5ZwwZs2p6cc1QSTJ3WhHfaIql0GDdjVVYPwwNrc75Z5/bxY4eShxQg3G3RHT lnEeBTBdHKtTMzzYV0TGGkefPh6fSTgf4Ufb8KTR43KFFs+GPOOmu29rJ/2wH2Xu RNS0cMDNJbj93kRZKTM4z1ZEublFDnnqd6AjVfqeUipCcKvsM5UmbNBB8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsTrBaBLJbfgXDONH87TymH9kBtMB8GA1UdIwQY MBaAFGbseJl207WEAWysGfNLvt6WbNIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wN2JmNWItMDM0MC00MzRlLWE0NDQt ZjA3NjFlMjllNmM0LzEvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8wN2JmNWItMDM0MC00MzRlLWE0NDQtZjA3NjFlMjllNmM0 LzEvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrNUNCyD VdtrozyXdqy0MZAiSA6hvW2cZwY6EKuAdMuR2z3TCwQFRi8/d/Wz6RZmZuEVVLKy aE/gh8ZAbV4UDcTXIU8b4uCqYksAaksYGIQ0eUgTs3CldNK7qJk923w79k9ChOoK sJiQcaRKxtyt28Ev8FSlE/d+mgIUtFSTZSjMrCvodsCZNgSCvf7DJm8p3Y6pft0x UOP/QXhZwu4ObtXxv7o6IC9U++QE7m+vE5zXJxBgjN/iPjMHkk4XiA2EuF16ktkW Xle/4KCUnInnvvZxZ81Zwcz5HjFK0WI0MxRo6xDUjdByacyUtnDWwpdofsQ8LTdj CYV4LpdGBlHwhw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:15 2025 by rpki-client