This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json) Hash identifier: y3YapPix7IUX2x0oKY1eDj0C5n3RnY6Y/pXyo+OIKws= Subject key identifier: DA:72:11:65:41:CD:21:78:DD:2A:8D:4E:8A:5D:ED:2C:C3:1E:BA:A8 Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08 Certificate serial: 019AF23FE0E29EE74AD96B7BE543E75425E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:03 +0000 Manifest this update: Sat 06 Dec 2025 06:01:03 +0000 Manifest next update: Sun 07 Dec 2025 06:01:03 +0000 Files and hashes: 1: Q47WtOQCnZpCmGtfa6Ew40Gy4MM.roa (hash: duMBQWWRYKd9t18S6r0lV3zHXTUBGHlTePHIZBRiz1Q=) 2: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: c8JhOnnaB15/KcO0bfBOXEx7ILD/AjDY9+jealqCQzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e0:e2:9e:e7:4a:d9:6b:7b:e5:43:e7:54:25:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08 Validity Not Before: Dec 6 06:01:03 2025 GMT Not After : Dec 7 06:01:03 2025 GMT Subject: CN=da72116541cd2178dd2a8d4e8a5ded2cc31ebaa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:08:86:6c:66:06:e1:67:05:3a:a6:2a:99: 91:e5:2f:61:76:6a:2e:e0:c1:f8:5e:66:ed:42:5f: fd:2e:15:36:e1:62:37:c3:97:cd:70:b3:4a:c6:76: 0c:cb:24:99:56:29:d0:8f:f3:ab:7b:3c:06:c1:d1: 5f:ab:d5:82:b7:4d:86:04:20:f8:fd:61:80:4d:06: b4:80:98:82:d2:a1:07:d6:1e:a5:b2:a8:14:0e:b0: a4:be:b2:04:9d:b0:f9:2e:69:70:df:a5:70:70:a9: 8e:fa:e0:a4:4d:02:66:ac:df:17:28:18:58:c1:24: 97:01:df:6f:10:7b:32:7d:bb:cc:e6:18:67:1b:d9: 8b:65:64:76:d0:0a:e5:41:6b:a4:d0:6e:9b:eb:17: 12:81:21:dc:bb:94:55:59:0a:ab:29:50:19:fc:5f: e0:03:3a:c6:e0:e3:8e:a3:29:dd:d3:87:e0:c1:55: 1a:da:9a:7b:1d:12:8a:b5:93:36:de:eb:41:9b:ba: f6:e8:96:7c:5b:f9:78:ab:f4:a9:44:96:57:6f:29: c7:2d:54:a1:48:d9:45:59:dd:8e:e0:6a:d6:2f:08: 86:27:cb:2a:55:5e:2e:89:35:9a:6c:31:33:71:c7: 38:6d:9b:d9:49:15:d8:8d:09:2b:52:ee:61:36:c8: ff:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:72:11:65:41:CD:21:78:DD:2A:8D:4E:8A:5D:ED:2C:C3:1E:BA:A8 X509v3 Authority Key Identifier: keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6d:7c:57:d9:1a:a5:4b:69:b4:67:a6:63:6d:9c:79:79:38: 7c:c1:18:5c:52:6b:5d:60:0a:e3:74:4d:9d:cf:0a:1b:00:87: 07:31:d7:e9:49:e1:6c:3d:d8:11:25:0e:a7:bf:b4:19:97:12: 4b:77:18:f1:29:4d:fa:1b:93:55:d1:c1:6e:48:fe:f6:2b:36: 04:b0:1e:aa:96:02:93:4c:d6:30:d2:0f:40:20:d5:06:fd:bf: 3c:5c:c1:e7:70:9c:52:da:c7:4d:1c:a7:65:90:78:81:30:28: 63:fd:53:45:92:ae:fd:bc:52:6a:97:fa:2e:a8:10:00:8f:27: ee:46:54:44:6b:f7:95:b4:6d:a1:32:2d:0d:bb:8e:be:d7:42: 4c:b1:42:77:fc:92:ad:66:93:c5:68:72:8e:af:3b:1f:d7:29: 61:f3:c5:a8:a7:b4:26:49:8f:cd:eb:05:c5:bb:52:47:c9:98: 65:75:0a:bf:de:69:e7:02:d6:a4:a4:e6:29:39:5c:79:05:ab: 51:17:8c:0d:a8:82:ed:b8:0b:c1:73:5f:b0:65:70:fc:5c:49: a4:13:9c:c7:c1:e8:5a:b6:fe:22:af:bf:4f:d5:27:fb:32:c4: 12:ef:b1:4e:1c:0e:c6:44:2c:f7:b6:de:08:fa:6b:e8:0e:29: 06:90:a1:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+DinudK2Wt75UPnVCXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTIxYzNmOTIwN2EzNzM0NWUzODcwMmM4OWQxNzliZjQ0 NGFhMDgwHhcNMjUxMjA2MDYwMTAzWhcNMjUxMjA3MDYwMTAzWjAzMTEwLwYDVQQD EyhkYTcyMTE2NTQxY2QyMTc4ZGQyYThkNGU4YTVkZWQyY2MzMWViYWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0AIhmxmBuFnBTqmKpmR5S9hdmou 4MH4XmbtQl/9LhU24WI3w5fNcLNKxnYMyySZVinQj/OrezwGwdFfq9WCt02GBCD4 /WGATQa0gJiC0qEH1h6lsqgUDrCkvrIEnbD5Lmlw36VwcKmO+uCkTQJmrN8XKBhY wSSXAd9vEHsyfbvM5hhnG9mLZWR20ArlQWuk0G6b6xcSgSHcu5RVWQqrKVAZ/F/g AzrG4OOOoynd04fgwVUa2pp7HRKKtZM23utBm7r26JZ8W/l4q/SpRJZXbynHLVSh SNlFWd2O4GrWLwiGJ8sqVV4uiTWabDEzccc4bZvZSRXYjQkrUu5hNsj/RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpyEWVBzSF43SqNTopd7SzDHrqoMB8GA1UdIwQY MBaAFGUSHD+SB6NzReOHAsidF5v0RKoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYt NDhkM2NhMTYxYmIwLzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYtNDhkM2NhMTYxYmIw LzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKW18V9ka pUtptGemY22ceXk4fMEYXFJrXWAK43RNnc8KGwCHBzHX6UnhbD3YESUOp7+0GZcS S3cY8SlN+huTVdHBbkj+9is2BLAeqpYCk0zWMNIPQCDVBv2/PFzB53CcUtrHTRyn ZZB4gTAoY/1TRZKu/bxSapf6LqgQAI8n7kZURGv3lbRtoTItDbuOvtdCTLFCd/yS rWaTxWhyjq87H9cpYfPFqKe0JkmPzesFxbtSR8mYZXUKv95p5wLWpKTmKTlceQWr UReMDaiC7bgLwXNfsGVw/FxJpBOcx8HoWrb+Iq+/T9Un+zLEEu+xThwOxkQs97be CPpr6A4pBpChhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:58 2025 by rpki-client