This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft File: zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json) Hash identifier: 8Eyuzxs2Zjt8S1HUKmGrOgejCL8A6m+CslneVCtbOzk= Subject key identifier: 76:04:D9:17:61:F7:5C:2E:E1:05:DB:84:01:7C:E8:11:38:50:63:8D Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80 Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480 Certificate serial: 019AF49BC18F9828BF999FD4ADDD7874FF99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft Manifest number: 0C58 Signing time: Sat 06 Dec 2025 17:00:39 +0000 Manifest this update: Sat 06 Dec 2025 17:00:39 +0000 Manifest next update: Sun 07 Dec 2025 17:00:39 +0000 Files and hashes: 1: VEgZIBYWjoldzkGuakwy0OuiD_g.roa (hash: /UHAw/sksRIzZ9d6cBH90oCHv9WV9PgycAVZrQjs45g=) 2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: zuTIE+cjCNuwlwnr+VVqYliD8yyT179OZNsZUqNFBIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:c1:8f:98:28:bf:99:9f:d4:ad:dd:78:74:ff:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480 Validity Not Before: Dec 6 17:00:39 2025 GMT Not After : Dec 7 17:00:39 2025 GMT Subject: CN=7604d91761f75c2ee105db84017ce8113850638d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:80:43:ca:b6:c7:f2:8c:8c:f4:19:3b:5d:d7: 60:eb:da:90:1c:06:66:3e:29:65:94:11:eb:64:25: ee:42:aa:f3:59:68:b7:ee:70:e3:80:f8:9c:c4:b8: 15:06:5b:e4:f8:e9:2f:b3:a9:f0:cf:9b:b4:62:74: 85:76:01:e6:d4:53:d5:c1:5f:0f:87:6a:b0:0a:10: 3d:56:53:06:0c:bb:58:32:59:6b:db:9e:b8:46:49: a4:9b:7b:68:81:9e:22:e7:ac:33:a4:c5:19:85:d0: f8:14:0a:43:a8:5a:4f:72:04:b9:4b:e7:d6:01:63: 23:51:f7:3f:49:c4:a7:34:2e:64:c6:5c:22:cf:60: 68:a0:07:59:3c:81:d2:cb:65:02:9b:4a:52:8c:2d: 77:17:38:47:77:c5:e0:14:e8:9a:f5:42:41:f3:03: 40:5f:82:d7:68:5b:7d:3e:8f:ac:02:88:50:83:25: e7:f7:9d:4c:b2:6c:1c:17:2d:86:15:15:b5:e1:58: a1:83:bb:f4:c1:80:80:f3:4f:48:b4:86:fa:54:92: ac:31:01:d6:1f:c1:e3:c8:a2:5c:72:69:57:48:4b: 20:04:1c:e8:28:58:26:4a:c9:c1:c2:41:06:db:50: 35:f0:75:88:cd:ee:b7:88:c1:6d:3d:d4:b4:15:7b: d4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:04:D9:17:61:F7:5C:2E:E1:05:DB:84:01:7C:E8:11:38:50:63:8D X509v3 Authority Key Identifier: keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:2b:6b:8a:de:2c:69:6c:16:06:ea:61:71:06:5b:c1:71:34: 35:6f:18:3e:f3:12:06:f0:1c:15:3f:a9:de:7e:43:a6:93:b4: 95:6a:c7:9b:55:94:94:17:d1:37:81:f7:71:12:bd:74:1b:c0: 7b:c1:c5:91:04:8d:5d:d0:79:96:28:5f:c5:65:db:19:fd:cd: 43:0a:ca:4e:36:37:a7:22:a7:e3:8f:21:d3:55:cf:09:65:e9: 38:12:dc:3c:3f:f4:a1:20:64:f5:84:38:5b:d7:8c:95:ea:06: e5:a5:89:17:77:e4:56:bd:9c:bc:d2:39:f7:5d:ae:e6:16:62: a4:fe:4e:33:10:d7:53:c6:ba:f1:f7:d1:8c:ab:1b:5b:20:aa: ca:09:a4:64:3c:86:fd:31:b1:93:ba:4c:ce:ac:6b:70:ba:f3: f7:ab:c4:5c:b4:52:e0:cd:25:50:70:b8:30:68:b0:79:8f:33: 1d:a5:15:66:2f:92:1a:e9:5b:bf:c2:13:66:8a:68:9a:a7:b7: 93:6e:65:93:b7:2d:5e:e0:72:5c:83:78:cd:cd:4f:8b:aa:1c: d2:e9:05:77:95:42:b7:79:dc:4e:b6:61:6e:ad:77:b0:57:07: 8a:9a:25:86:b4:e0:b9:a4:8b:93:80:f3:07:4a:ea:d0:17:d5: 91:ee:1c:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m8GPmCi/mZ/Urd14dP+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjUxYTdiNGM1YjI0NTgwMjkyYjhjNGFhNmFhOWMzMjU2 NjU0ODAwHhcNMjUxMjA2MTcwMDM5WhcNMjUxMjA3MTcwMDM5WjAzMTEwLwYDVQQD Eyg3NjA0ZDkxNzYxZjc1YzJlZTEwNWRiODQwMTdjZTgxMTM4NTA2MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoBDyrbH8oyM9Bk7Xddg69qQHAZm PilllBHrZCXuQqrzWWi37nDjgPicxLgVBlvk+Okvs6nwz5u0YnSFdgHm1FPVwV8P h2qwChA9VlMGDLtYMllr2564Rkmkm3togZ4i56wzpMUZhdD4FApDqFpPcgS5S+fW AWMjUfc/ScSnNC5kxlwiz2BooAdZPIHSy2UCm0pSjC13FzhHd8XgFOia9UJB8wNA X4LXaFt9Po+sAohQgyXn951MsmwcFy2GFRW14Vihg7v0wYCA809ItIb6VJKsMQHW H8HjyKJccmlXSEsgBBzoKFgmSsnBwkEG21A18HWIze63iMFtPdS0FXvUkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYE2Rdh91wu4QXbhAF86BE4UGONMB8GA1UdIwQY MBaAFM31GntMWyRYApK4xKpqqcMlZlSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yNzI5ODYtODhhOS00NzdjLWEyNzct YTU1YjU4MGIwZWEzLzEvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8yNzI5ODYtODhhOS00NzdjLWEyNzctYTU1YjU4MGIwZWEz LzEvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZStrit4s aWwWBuphcQZbwXE0NW8YPvMSBvAcFT+p3n5DppO0lWrHm1WUlBfRN4H3cRK9dBvA e8HFkQSNXdB5lihfxWXbGf3NQwrKTjY3pyKn448h01XPCWXpOBLcPD/0oSBk9YQ4 W9eMleoG5aWJF3fkVr2cvNI5912u5hZipP5OMxDXU8a68ffRjKsbWyCqygmkZDyG /TGxk7pMzqxrcLrz96vEXLRS4M0lUHC4MGiweY8zHaUVZi+SGulbv8ITZopomqe3 k25lk7ctXuByXIN4zc1Pi6oc0ukFd5VCt3ncTrZhbq13sFcHipolhrTguaSLk4Dz B0rq0BfVke4ceQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:52 2025 by rpki-client