This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft File: zPFCMN6e_sYQ_90zngxEgLaLrUU.mft (raw, json) Hash identifier: 3AbCQ7ZWYLIJFV+CvW6ufb4HRrBlR/xSjfDhiKF7MWg= Subject key identifier: 86:6C:81:2D:62:EA:F1:0B:2C:6D:16:20:57:52:A1:06:29:ED:3F:A9 Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45 Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45 Certificate serial: 019AF50A5209954ED697403DFF3B68FEA924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft Manifest number: 046E Signing time: Sat 06 Dec 2025 19:01:25 +0000 Manifest this update: Sat 06 Dec 2025 19:01:25 +0000 Manifest next update: Sun 07 Dec 2025 19:01:25 +0000 Files and hashes: 1: Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa (hash: GAWYOmgt7SjOR4XrYGICCDsdlImXuLIEXBRuDs31QjI=) 2: zPFCMN6e_sYQ_90zngxEgLaLrUU.crl (hash: Nvi0OA/UprIzvJGSIn5VSX0q5nTi764gQVQ3dR/RGuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:52:09:95:4e:d6:97:40:3d:ff:3b:68:fe:a9:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45 Validity Not Before: Dec 6 19:01:25 2025 GMT Not After : Dec 7 19:01:25 2025 GMT Subject: CN=866c812d62eaf10b2c6d16205752a10629ed3fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8c:eb:ea:a1:5b:43:ce:bd:5d:c9:b5:e2:06: fe:fa:05:5b:6c:f9:4e:61:e9:43:d7:80:fd:7d:37: c8:76:c9:bb:85:ca:45:e3:69:21:c9:78:c9:c1:78: 26:ce:89:cd:a6:33:9d:c9:9c:55:ee:e4:37:98:8c: ca:a8:a2:85:0f:e6:3f:44:45:e7:8a:25:df:3d:7c: 3b:38:ca:ed:3a:5d:0e:7a:ec:bb:22:f8:5a:01:db: 80:25:81:62:08:67:93:6b:35:69:4b:d2:7c:c8:90: e0:b6:ab:1e:c1:b5:cd:cd:70:a2:ab:1b:cf:7a:cf: 84:cc:a0:40:29:26:c9:30:f2:10:01:a0:51:5c:15: 37:c8:e0:e8:d2:5a:d7:f7:3d:de:5a:fb:82:a9:03: 92:5f:52:c9:72:39:36:f2:9d:a6:9a:d3:1b:d6:96: 90:2c:f4:d1:02:93:5b:b9:b7:1a:79:40:5a:94:32: 2d:3f:67:74:91:e5:e0:1a:c0:78:4a:d7:6f:a7:4b: ce:93:13:39:13:57:e9:fd:f3:90:0b:77:28:d1:7a: 17:c7:3e:96:33:55:40:d9:0b:6e:5c:cf:f4:75:3d: e2:7a:d9:4d:9c:bd:b3:ad:5d:e9:c3:0e:fe:78:be: 9e:d0:28:ea:f7:5f:7e:06:c1:4e:b3:0c:42:73:78: 1b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6C:81:2D:62:EA:F1:0B:2C:6D:16:20:57:52:A1:06:29:ED:3F:A9 X509v3 Authority Key Identifier: keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:47:fe:e1:ec:fa:98:48:04:bf:6f:fb:8f:dc:54:43:b3:4b: 4f:8c:ae:ec:3f:c4:bf:b3:bc:83:3e:61:0f:e6:96:79:3b:56: aa:40:5a:ad:4a:3a:44:38:e2:e1:f4:fd:da:f6:a7:7e:2f:21: e5:e6:6b:b9:6e:67:14:8c:bc:50:6c:ba:26:e5:34:4f:15:63: 55:c9:5e:ca:9b:13:70:f4:c8:6d:a7:86:1b:6f:1d:7c:94:b4: 69:9a:cf:79:25:33:52:b9:30:87:69:d4:cc:24:12:81:ce:43: 5d:f4:dc:c3:14:ac:08:a4:86:60:7e:f9:39:31:07:38:1c:1c: 04:62:e4:eb:1f:f8:c3:f0:da:b5:be:25:3c:72:73:77:c4:26: 57:c9:0e:85:4e:b4:88:e9:a3:99:6e:dc:01:a6:0c:29:c6:bd: 9b:a9:0e:3f:6d:46:ad:75:47:74:32:b7:23:c3:1c:02:8a:e4: 43:66:48:ba:85:4c:e4:6e:5a:f7:63:37:9e:6f:9b:44:cc:5e: 63:33:fe:50:89:47:51:1e:73:1d:b2:5a:ed:51:2f:9b:e6:e2: 13:39:7a:af:dc:2a:2c:a2:c1:65:ae:88:6f:31:ac:19:76:0b: 93:28:b4:9e:53:12:d8:8b:5a:2d:61:09:64:dd:07:82:f9:52: 3e:b7:94:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ClIJlU7Wl0A9/zto/qkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZjE0MjMwZGU5ZWZlYzYxMGZmZGQzMzllMGM0NDgwYjY4 YmFkNDUwHhcNMjUxMjA2MTkwMTI1WhcNMjUxMjA3MTkwMTI1WjAzMTEwLwYDVQQD Eyg4NjZjODEyZDYyZWFmMTBiMmM2ZDE2MjA1NzUyYTEwNjI5ZWQzZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIzr6qFbQ869Xcm14gb++gVbbPlO YelD14D9fTfIdsm7hcpF42khyXjJwXgmzonNpjOdyZxV7uQ3mIzKqKKFD+Y/REXn iiXfPXw7OMrtOl0Oeuy7IvhaAduAJYFiCGeTazVpS9J8yJDgtqsewbXNzXCiqxvP es+EzKBAKSbJMPIQAaBRXBU3yODo0lrX9z3eWvuCqQOSX1LJcjk28p2mmtMb1paQ LPTRApNbubcaeUBalDItP2d0keXgGsB4Stdvp0vOkxM5E1fp/fOQC3co0XoXxz6W M1VA2QtuXM/0dT3ietlNnL2zrV3pww7+eL6e0Cjq919+BsFOswxCc3gb5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZsgS1i6vELLG0WIFdSoQYp7T+pMB8GA1UdIwQY MBaAFMzxQjDenv7GEP/dM54MRIC2i61FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80ODI2MzMtYzlhOS00NjMzLWIxMzgt YTE3YjgyZTZkNzg2LzEvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80ODI2MzMtYzlhOS00NjMzLWIxMzgtYTE3YjgyZTZkNzg2 LzEvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkf+4ez6 mEgEv2/7j9xUQ7NLT4yu7D/Ev7O8gz5hD+aWeTtWqkBarUo6RDji4fT92vanfi8h 5eZruW5nFIy8UGy6JuU0TxVjVcleypsTcPTIbaeGG28dfJS0aZrPeSUzUrkwh2nU zCQSgc5DXfTcwxSsCKSGYH75OTEHOBwcBGLk6x/4w/Datb4lPHJzd8QmV8kOhU60 iOmjmW7cAaYMKca9m6kOP21GrXVHdDK3I8McAorkQ2ZIuoVM5G5a92M3nm+bRMxe YzP+UIlHUR5zHbJa7VEvm+biEzl6r9wqLKLBZa6IbzGsGXYLkyi0nlMS2ItaLWEJ ZN0HgvlSPreUjg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:47 2025 by rpki-client