This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft File: zxNuAf-vhT27Klz8_l0bZ9IMILU.mft (raw, json) Hash identifier: evkHwgVq5om0gveyJ3lCGpG7QxoWbCmm4vdAbkObVf4= Subject key identifier: 51:F7:2F:13:26:9C:00:50:2D:B2:C8:D9:B6:1C:78:F3:52:7A:BE:6E Authority key identifier: CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5 Certificate issuer: /CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5 Certificate serial: 019AF1D1E3AD527FB1F51CE4C38094725F69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft Manifest number: 11EB Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: OmwRoJ3JPu5X08Xp_X1_3qE1I7k.roa (hash: Adg8t51EAwBbzjl4kDJAi92mlZw1Om+k918pc8UAy2M=) 2: zxNuAf-vhT27Klz8_l0bZ9IMILU.crl (hash: FrSFp1+KEg7JyyTnsdkucKPvSYxdM831C+LLqJlIt8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e3:ad:52:7f:b1:f5:1c:e4:c3:80:94:72:5f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5 Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=51f72f13269c00502db2c8d9b61c78f3527abe6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e2:4c:18:d1:1b:a0:d0:3e:3b:03:a1:ed:82: 36:7e:df:02:36:f7:b6:e4:c1:a7:62:99:02:fc:03: 58:b7:30:8e:9d:f3:53:ae:a7:cb:2a:12:02:41:a5: c6:53:72:90:c6:5e:37:3d:c7:72:0b:c9:66:df:87: 48:aa:11:40:dd:cc:a5:68:e8:fa:fc:26:a9:e5:32: 4b:d5:7c:44:cd:6b:73:c7:bc:64:63:a3:c3:10:6b: 97:33:b7:bc:03:48:a0:b9:40:e3:fc:89:d3:69:b7: 25:46:41:c7:bc:0d:dc:63:d2:6d:60:e8:b9:a7:6d: 0c:4c:27:f4:3c:00:29:dd:4a:e8:28:01:df:ac:49: b6:75:86:dd:6b:3e:0e:01:03:e1:d9:ed:46:dd:82: d2:65:2f:7b:1c:f6:de:38:db:9b:a5:0f:e3:18:09: c5:15:88:7a:cb:81:56:37:27:49:ce:34:9b:d6:8e: 0b:07:52:e6:75:df:06:5b:21:a5:4d:fc:5b:03:88: 3c:33:20:10:70:00:6f:a7:91:cf:aa:79:87:3e:84: 0d:df:9c:55:66:8d:51:ee:36:33:ea:08:6f:35:54: 5b:c9:d1:f0:a0:35:b2:b9:7d:b8:87:37:a0:90:31: 7e:64:63:8d:79:00:85:2e:5f:7a:a0:fb:d7:56:52: f9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F7:2F:13:26:9C:00:50:2D:B2:C8:D9:B6:1C:78:F3:52:7A:BE:6E X509v3 Authority Key Identifier: keyid:CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f4:6e:06:49:a2:e1:2f:70:81:5e:33:f8:e5:6b:80:9d:1e: ea:72:cf:62:d3:d0:92:d3:20:fa:51:b5:0b:13:47:d9:28:ac: a4:47:62:1c:c1:4b:83:4c:24:5a:d8:84:7c:4e:fa:51:0d:db: 34:33:e0:f3:e2:35:5d:ff:29:ed:a5:1f:c8:9e:f0:0a:34:c8: 63:b5:d3:1d:e8:e5:09:89:83:44:05:4c:23:60:c9:27:70:31: 23:66:f5:c9:e0:98:8d:0c:eb:c3:a6:08:5a:9b:65:b8:4b:a7: 22:e0:dd:94:b2:f5:7f:cc:27:4f:13:a6:75:c6:d8:f1:86:ee: a8:65:8e:ab:bb:05:cf:68:fe:ae:10:74:13:8c:3c:9f:c5:e1: c3:62:7e:98:b0:45:16:d5:7a:54:c1:0b:55:b7:98:aa:43:81: 56:06:59:09:0d:e9:d2:f5:14:23:83:8e:b2:24:b1:27:46:c1: 57:a9:95:bb:4f:5a:ad:7a:ab:fd:07:99:62:e6:5f:a5:91:52: 98:c1:f4:fc:40:45:13:15:be:8c:b6:44:5f:19:15:18:aa:43: 30:53:c3:6b:e2:16:4c:c1:72:fb:97:46:c1:3c:3d:33:5c:62: 00:74:48:3c:4e:c1:dc:b3:b3:ea:54:95:80:4c:f8:0c:7d:79: bb:84:34:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eOtUn+x9Rzkw4CUcl9pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTM2ZTAxZmZhZjg1M2RiYjJhNWNmY2ZlNWQxYjY3ZDIw YzIwYjUwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD Eyg1MWY3MmYxMzI2OWMwMDUwMmRiMmM4ZDliNjFjNzhmMzUyN2FiZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeJMGNEboNA+OwOh7YI2ft8CNve2 5MGnYpkC/ANYtzCOnfNTrqfLKhICQaXGU3KQxl43PcdyC8lm34dIqhFA3cylaOj6 /Cap5TJL1XxEzWtzx7xkY6PDEGuXM7e8A0iguUDj/InTabclRkHHvA3cY9JtYOi5 p20MTCf0PAAp3UroKAHfrEm2dYbdaz4OAQPh2e1G3YLSZS97HPbeONubpQ/jGAnF FYh6y4FWNydJzjSb1o4LB1Lmdd8GWyGlTfxbA4g8MyAQcABvp5HPqnmHPoQN35xV Zo1R7jYz6ghvNVRbydHwoDWyuX24hzegkDF+ZGONeQCFLl96oPvXVlL55QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFH3LxMmnABQLbLI2bYcePNSer5uMB8GA1UdIwQY MBaAFM8TbgH/r4U9uypc/P5dG2fSDCC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhOdUFmLXZoVDI3S2x6OF9sMGJaOUlNSUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MDI1NjQtNTBhNS00ZmFkLWExMmYt NjVkYmE2M2IxYTgyLzEvenhOdUFmLXZoVDI3S2x6OF9sMGJaOUlNSUxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy83MDI1NjQtNTBhNS00ZmFkLWExMmYtNjVkYmE2M2IxYTgy LzEvenhOdUFmLXZoVDI3S2x6OF9sMGJaOUlNSUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvRuBkmi 4S9wgV4z+OVrgJ0e6nLPYtPQktMg+lG1CxNH2SispEdiHMFLg0wkWtiEfE76UQ3b NDPg8+I1Xf8p7aUfyJ7wCjTIY7XTHejlCYmDRAVMI2DJJ3AxI2b1yeCYjQzrw6YI WptluEunIuDdlLL1f8wnTxOmdcbY8YbuqGWOq7sFz2j+rhB0E4w8n8Xhw2J+mLBF FtV6VMELVbeYqkOBVgZZCQ3p0vUUI4OOsiSxJ0bBV6mVu09arXqr/QeZYuZfpZFS mMH0/EBFExW+jLZEXxkVGKpDMFPDa+IWTMFy+5dGwTw9M1xiAHRIPE7B3LOz6lSV gEz4DH15u4Q0ew== -----END CERTIFICATE-----Generated at Sat Dec 6 12:36:29 2025 by rpki-client