This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft File: cZhnMZJb6FUaUwka_m0Jct-jgH4.mft (raw, json) Hash identifier: ccbEWy1k4pIjPa4F4KGNE2AHlu46CI/JcuTM0znAiWA= Subject key identifier: 8F:3C:C2:59:27:6C:0A:F2:B8:1B:6E:0C:F2:55:A2:1A:B0:D7:92:81 Authority key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E Certificate issuer: /CN=71986731925be8551a53091afe6d0972dfa3807e Certificate serial: 019AF3C0937BC62732975713014C75D8634F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft Manifest number: 0825 Signing time: Sat 06 Dec 2025 13:01:15 +0000 Manifest this update: Sat 06 Dec 2025 13:01:15 +0000 Manifest next update: Sun 07 Dec 2025 13:01:15 +0000 Files and hashes: 1: cZhnMZJb6FUaUwka_m0Jct-jgH4.crl (hash: iWQDoab1UEdHTS0o9etrsZRguDeEDRxUIPWnd6dx+Fc=) 2: izKyNN07Ux3U5xT_e0LwmSxlm3g.roa (hash: 5sHxaNHhFHbIzK2JB6pJOwwX7f4oOth8b9V4EgOV6Mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:93:7b:c6:27:32:97:57:13:01:4c:75:d8:63:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71986731925be8551a53091afe6d0972dfa3807e Validity Not Before: Dec 6 13:01:15 2025 GMT Not After : Dec 7 13:01:15 2025 GMT Subject: CN=8f3cc259276c0af2b81b6e0cf255a21ab0d79281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ae:fe:c9:53:4d:5b:d3:44:c0:f4:1c:7a:3f: e7:ad:be:cb:2b:1f:b8:e9:2e:32:83:8a:67:6f:97: d2:27:2b:18:32:b8:c0:d3:1a:79:de:5a:36:4a:a7: 0d:aa:e7:73:e2:96:00:13:02:87:df:f6:25:4d:b5: 8d:59:c9:39:7c:8f:49:0c:1e:13:78:1b:d4:44:2b: bf:1a:24:12:73:e8:eb:61:66:69:01:55:d4:06:b9: cf:ed:8b:1d:d0:c2:73:14:39:e1:4b:7b:16:54:1f: 28:ab:f8:3a:45:87:c0:a5:86:9a:d0:49:b5:90:ac: dd:cf:6f:b3:85:25:6e:18:9a:ca:49:19:c2:86:36: c5:3a:f5:e6:a5:38:c3:fc:c4:50:d0:a6:ae:0f:7a: c8:72:fd:fe:2c:18:1c:c5:73:5a:f6:ce:55:7b:7e: 6d:bc:ab:f2:65:10:05:26:b6:3f:ba:8c:1b:66:dc: 82:7b:cc:1c:d3:03:6b:5b:15:68:eb:32:b1:ad:d5: c1:3e:76:95:ef:4b:61:ef:69:77:02:8a:03:f6:51: 5c:56:52:cb:6b:1e:08:19:9c:53:77:70:b5:09:ed: 5b:c8:19:57:c2:30:18:3d:ec:21:88:7d:66:d5:c7: 7e:39:a9:d5:ca:3b:6d:0e:37:2c:2a:cd:98:61:5f: 4a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3C:C2:59:27:6C:0A:F2:B8:1B:6E:0C:F2:55:A2:1A:B0:D7:92:81 X509v3 Authority Key Identifier: keyid:71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:7c:f1:9d:c2:1d:f0:18:a4:9f:cc:fb:74:c5:c5:a8:aa:a7: df:13:de:15:70:76:9a:de:2f:fc:36:97:c7:8e:9f:79:41:74: 53:d1:41:f1:4e:bb:4d:50:93:66:fd:7d:c6:5b:45:ae:25:ca: 28:3a:c6:19:ef:f9:6e:1e:b4:2f:3f:2b:c8:27:3a:ab:5e:9f: 27:fa:1a:01:5b:96:16:74:86:5b:7c:ce:47:16:3e:7e:ff:41: f6:91:3e:81:22:11:f9:b2:b9:ef:6e:b1:a7:93:fb:8d:90:1b: 61:0f:2c:19:d8:b2:20:ab:85:d1:69:5e:82:f0:67:12:b2:74: 5a:c7:f7:f0:46:28:29:3e:89:7c:1c:fb:15:74:15:c3:f1:7d: 4a:48:6b:dd:bd:69:72:d2:de:69:e0:b7:a0:ce:51:60:d9:48: cf:aa:a7:33:bb:de:82:c8:ef:3a:8c:1b:c1:ff:e3:17:fb:ff: 48:77:93:8d:35:bc:37:8a:fd:53:0d:a1:58:28:77:61:9e:0e: fd:f4:04:86:86:17:60:dc:bd:80:c9:20:71:e1:5b:ce:3c:4a: 6b:55:3e:4a:9d:de:2f:9f:d3:97:f2:46:12:7a:1f:1f:7c:f1: 04:25:d2:36:22:b0:8d:71:a9:6e:13:c6:5b:93:ad:7f:71:02: b6:f0:9b:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwJN7xicyl1cTAUx12GNPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTg2NzMxOTI1YmU4NTUxYTUzMDkxYWZlNmQwOTcyZGZh MzgwN2UwHhcNMjUxMjA2MTMwMTE1WhcNMjUxMjA3MTMwMTE1WjAzMTEwLwYDVQQD Eyg4ZjNjYzI1OTI3NmMwYWYyYjgxYjZlMGNmMjU1YTIxYWIwZDc5MjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx67+yVNNW9NEwPQcej/nrb7LKx+4 6S4yg4pnb5fSJysYMrjA0xp53lo2SqcNqudz4pYAEwKH3/YlTbWNWck5fI9JDB4T eBvURCu/GiQSc+jrYWZpAVXUBrnP7Ysd0MJzFDnhS3sWVB8oq/g6RYfApYaa0Em1 kKzdz2+zhSVuGJrKSRnChjbFOvXmpTjD/MRQ0KauD3rIcv3+LBgcxXNa9s5Ve35t vKvyZRAFJrY/uowbZtyCe8wc0wNrWxVo6zKxrdXBPnaV70th72l3AooD9lFcVlLL ax4IGZxTd3C1Ce1byBlXwjAYPewhiH1m1cd+OanVyjttDjcsKs2YYV9K5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI88wlknbAryuBtuDPJVohqw15KBMB8GA1UdIwQY MBaAFHGYZzGSW+hVGlMJGv5tCXLfo4B+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pobk1aSmI2RlVhVXdrYV9tMEpjdC1qZ0g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85YTEwYzMtMjEyZi00YzVlLTk3YmIt ZTBkNTc2YTU0NTBlLzEvY1pobk1aSmI2RlVhVXdrYV9tMEpjdC1qZ0g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85YTEwYzMtMjEyZi00YzVlLTk3YmItZTBkNTc2YTU0NTBl LzEvY1pobk1aSmI2RlVhVXdrYV9tMEpjdC1qZ0g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXzxncId 8Bikn8z7dMXFqKqn3xPeFXB2mt4v/DaXx46feUF0U9FB8U67TVCTZv19xltFriXK KDrGGe/5bh60Lz8ryCc6q16fJ/oaAVuWFnSGW3zORxY+fv9B9pE+gSIR+bK5726x p5P7jZAbYQ8sGdiyIKuF0WlegvBnErJ0Wsf38EYoKT6JfBz7FXQVw/F9Skhr3b1p ctLeaeC3oM5RYNlIz6qnM7vegsjvOowbwf/jF/v/SHeTjTW8N4r9Uw2hWCh3YZ4O /fQEhoYXYNy9gMkgceFbzjxKa1U+Sp3eL5/Tl/JGEnofH3zxBCXSNiKwjXGpbhPG W5Otf3ECtvCbrA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:49:37 2025 by rpki-client