This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft File: ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json) Hash identifier: OBpGY74+Y/cIH6SGo0ZFFuh7jk6kUoOWW0bDkUHTn1E= Subject key identifier: 4E:A7:68:CE:EB:4B:B7:92:AC:0A:0A:40:12:53:EB:49:CF:76:99:36 Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05 Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405 Certificate serial: 019AF2094C524C6A9B4B0C5442BB980555C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft Manifest number: 0EC8 Signing time: Sat 06 Dec 2025 05:01:26 +0000 Manifest this update: Sat 06 Dec 2025 05:01:26 +0000 Manifest next update: Sun 07 Dec 2025 05:01:26 +0000 Files and hashes: 1: 23ACakt78guGwZL3RTi3BKpWsN0.roa (hash: ghjCo7Sw3s2bis0gLmZ8QzY5m7KOd3dJNA0mX218fws=) 2: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: z1qaatA6/ZtHYdvpd+aA0zvLB4Auu0D/DUIe+Goam+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4c:52:4c:6a:9b:4b:0c:54:42:bb:98:05:55:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405 Validity Not Before: Dec 6 05:01:26 2025 GMT Not After : Dec 7 05:01:26 2025 GMT Subject: CN=4ea768ceeb4bb792ac0a0a401253eb49cf769936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7a:e3:ff:6a:16:18:3f:fd:5c:41:e1:97:94: 28:fe:dd:34:4c:92:4c:62:65:14:9f:56:74:0f:3f: 83:fe:d9:b4:52:dc:07:d3:f0:2f:af:bd:b8:75:9d: ec:9f:4e:e9:bb:0d:47:79:17:c1:9c:f5:2f:5a:7e: d7:aa:26:26:c3:8e:c7:12:07:c8:88:b6:77:5d:93: 5e:91:c8:f4:4e:1a:04:22:b3:9a:9b:cd:db:58:02: 7f:4e:60:7c:38:0e:95:1e:02:42:da:15:b2:c2:ad: 40:3f:bc:af:f8:b5:d0:68:7c:ee:9a:d5:07:68:31: e1:33:6b:5f:76:f1:6c:02:24:f1:dc:ea:3c:44:7a: b5:cf:cb:d7:0e:f5:ac:69:2f:1c:40:da:21:97:b6: d6:e3:11:68:23:8a:11:fa:ed:e6:98:00:00:63:2a: 33:21:e6:88:9f:1e:07:92:e0:c0:01:72:0a:b9:23: f8:47:3e:42:64:63:93:54:09:64:ff:99:f9:c7:2c: 38:13:e4:69:6c:11:c7:ca:05:f7:1e:2d:bc:9c:a3: 03:52:74:0b:22:dc:4e:52:c3:a8:8b:45:c3:e2:bd: 67:77:7d:08:00:b1:ea:8c:3f:b7:97:85:d8:9e:1f: 92:ff:f5:04:5d:51:95:de:36:88:21:c0:4a:c4:09: dc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A7:68:CE:EB:4B:B7:92:AC:0A:0A:40:12:53:EB:49:CF:76:99:36 X509v3 Authority Key Identifier: keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f5:87:59:89:f7:1c:66:a0:cf:09:55:53:4e:b1:9f:3b:a2: b3:e9:df:15:89:46:05:31:94:bb:9e:bb:3e:19:34:cb:1b:12: b7:7f:43:f5:64:ba:b7:70:a4:d8:0b:22:a8:bb:f3:65:23:ac: e7:23:2e:73:08:87:d8:af:26:68:6a:c0:c0:ca:25:07:cc:a6: c7:2c:89:a7:92:76:bc:99:10:04:ac:4e:8f:cd:62:f3:fe:62: 28:65:74:fd:a9:0b:e1:ff:5e:d3:0b:25:fe:c4:5e:21:b9:d5: 19:d6:f6:25:b2:fb:51:88:3f:d7:2f:94:74:41:1c:b3:e7:de: ee:fc:93:52:80:c7:87:9c:75:99:90:90:d9:e1:07:c2:12:05: 0a:26:f7:5d:d8:46:f1:73:fc:ca:7d:fb:f3:d8:2a:b7:44:ed: 28:36:fa:c4:ff:80:7b:0c:a2:71:05:c9:55:7a:ae:4a:66:1e: d1:26:1b:02:97:59:38:bb:d9:85:da:7f:46:09:17:06:51:ba: a8:de:d7:48:02:2d:8e:bd:d3:f2:0c:d3:7a:4b:eb:d0:8c:51: 98:1f:06:91:5a:a1:d0:7d:ef:6b:22:81:25:d6:df:ef:50:34: 9a:50:c0:82:b4:2d:26:bb:8d:a2:06:9f:2e:68:88:65:2d:a3: 4e:a7:be:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUxSTGqbSwxUQruYBVXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1Y2I0ZjZjZDg0ODlmZGRkMTczOTcwYTBlZjQ0ZDRlMTU0 N2E0MDUwHhcNMjUxMjA2MDUwMTI2WhcNMjUxMjA3MDUwMTI2WjAzMTEwLwYDVQQD Eyg0ZWE3NjhjZWViNGJiNzkyYWMwYTBhNDAxMjUzZWI0OWNmNzY5OTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nrj/2oWGD/9XEHhl5Qo/t00TJJM YmUUn1Z0Dz+D/tm0UtwH0/Avr724dZ3sn07puw1HeRfBnPUvWn7XqiYmw47HEgfI iLZ3XZNekcj0ThoEIrOam83bWAJ/TmB8OA6VHgJC2hWywq1AP7yv+LXQaHzumtUH aDHhM2tfdvFsAiTx3Oo8RHq1z8vXDvWsaS8cQNohl7bW4xFoI4oR+u3mmAAAYyoz IeaInx4HkuDAAXIKuSP4Rz5CZGOTVAlk/5n5xyw4E+RpbBHHygX3Hi28nKMDUnQL ItxOUsOoi0XD4r1nd30IALHqjD+3l4XYnh+S//UEXVGV3jaIIcBKxAncbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6naM7rS7eSrAoKQBJT60nPdpk2MB8GA1UdIwQY MBaAFGXLT2zYSJ/d0XOXCg70TU4VR6QFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmN0UGJOaEluOTNSYzVjS0R2Uk5UaFZIcEFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83MzZhNGEtMzllMC00MTE5LWI0Y2It MDgyZDkyNGMyZjMzLzEvWmN0UGJOaEluOTNSYzVjS0R2Uk5UaFZIcEFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS83MzZhNGEtMzllMC00MTE5LWI0Y2ItMDgyZDkyNGMyZjMz LzEvWmN0UGJOaEluOTNSYzVjS0R2Uk5UaFZIcEFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvWHWYn3 HGagzwlVU06xnzuis+nfFYlGBTGUu567Phk0yxsSt39D9WS6t3Ck2AsiqLvzZSOs 5yMucwiH2K8maGrAwMolB8ymxyyJp5J2vJkQBKxOj81i8/5iKGV0/akL4f9e0wsl /sReIbnVGdb2JbL7UYg/1y+UdEEcs+fe7vyTUoDHh5x1mZCQ2eEHwhIFCib3XdhG 8XP8yn3789gqt0TtKDb6xP+AewyicQXJVXquSmYe0SYbApdZOLvZhdp/RgkXBlG6 qN7XSAItjr3T8gzTekvr0IxRmB8GkVqh0H3vayKBJdbf71A0mlDAgrQtJruNogaf LmiIZS2jTqe+Ig== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:11 2025 by rpki-client