This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft File: zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft (raw, json) Hash identifier: KFm7FWQZwhesr5lOZdnFFJWnuWetvuoj6UFtpLtTfa8= Subject key identifier: 61:29:BF:1C:B8:7B:BB:90:DD:F2:AC:84:FA:C8:31:44:23:D0:74:BB Authority key identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B Certificate issuer: /CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b Certificate serial: 019AF5413E82EA8F46EAE77937DE8943CAC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft Manifest number: 0CFF Signing time: Sat 06 Dec 2025 20:01:25 +0000 Manifest this update: Sat 06 Dec 2025 20:01:25 +0000 Manifest next update: Sun 07 Dec 2025 20:01:25 +0000 Files and hashes: 1: 0_tGmdVdpjc2L8zUWyzyW9iPObU.roa (hash: bn84kxibGx4/EOPh2OY0dkRz9RK07gMRfVN7WrprjOg=) 2: zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl (hash: CNJ6NmboI3P+QAJ2ZpU73IGAqWb9inhFod2SQUmcmAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:3e:82:ea:8f:46:ea:e7:79:37:de:89:43:ca:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b Validity Not Before: Dec 6 20:01:25 2025 GMT Not After : Dec 7 20:01:25 2025 GMT Subject: CN=6129bf1cb87bbb90ddf2ac84fac8314423d074bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fd:2f:37:0c:c6:dc:d6:57:e6:18:03:2d:f0: 28:1b:c9:2d:19:26:6e:96:3e:a4:f4:bd:23:20:d0: 1e:d5:aa:5a:67:97:79:9e:f2:25:2b:26:ff:1e:16: 9b:87:16:90:74:a6:86:1c:3c:d5:bf:52:b4:46:bb: 5c:05:f1:3c:22:03:31:cf:9f:b6:90:26:14:01:12: 2f:1c:0f:03:d1:9b:03:1d:d5:2a:da:34:de:bc:a7: 6e:d1:99:46:cc:6e:ff:29:11:79:c6:53:d0:8b:0c: cb:7e:da:f5:55:13:04:b8:86:7f:e2:90:a9:c0:62: 17:79:6b:92:57:10:dc:d6:42:6b:51:53:cc:a6:10: 2f:ea:2a:59:b7:fa:9c:fd:a7:5f:9c:3e:9a:87:05: 85:78:00:3f:41:14:a3:4f:7b:d3:38:05:2b:98:48: fd:4e:41:f8:63:a5:ba:00:85:83:5e:cd:54:b6:ef: 33:c4:af:42:6e:a0:b1:55:d3:07:71:17:1d:ad:50: 4d:7c:d2:0f:e4:55:93:af:e5:3e:4a:53:4d:fe:77: 99:ba:cd:b8:de:08:a6:8e:cf:61:73:d3:46:1d:71: 13:f8:ee:64:e1:df:04:34:e0:ec:ab:f7:c6:7c:03: 8c:69:7c:94:10:f1:9f:08:09:7a:7b:ff:a1:8f:5a: 80:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:29:BF:1C:B8:7B:BB:90:DD:F2:AC:84:FA:C8:31:44:23:D0:74:BB X509v3 Authority Key Identifier: keyid:CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:4a:89:ae:86:01:ee:ee:76:d8:ef:cb:a1:ef:87:21:c4:ed: b1:ad:76:4a:de:8c:a1:45:e3:24:58:20:4a:62:0b:ad:53:a3: 0a:03:43:eb:77:07:d8:38:82:14:86:98:18:ec:65:10:e9:87: d4:15:fd:95:b7:d2:5f:98:6f:53:d2:8a:03:2a:61:39:e3:0a: ff:b0:58:dc:cd:82:e3:b1:d5:5a:ae:58:47:df:3a:59:b3:fb: 89:f6:06:3a:55:4f:42:fa:25:dc:ab:67:44:de:da:0d:aa:c0: 49:15:1b:41:4c:6c:2e:60:b0:d2:85:ae:a0:64:89:11:40:8d: 4c:a6:7e:85:67:4b:89:a6:d7:cf:75:3d:98:3e:6c:74:d5:48: a7:06:82:fe:be:51:e4:88:34:e3:87:ef:9b:e8:0d:5c:75:5d: 3d:47:b4:f2:ec:5c:7f:c9:5a:a7:89:f2:73:0a:24:a5:33:22: 0f:ea:d8:9e:41:7c:41:a9:e4:a3:bb:40:48:80:bb:84:4f:c3: 6f:da:5f:6a:90:bb:68:0f:08:69:4f:58:96:63:95:b9:27:e6: 37:d0:8c:b5:4c:d1:9e:b8:82:a4:be:db:7f:e2:5c:1a:83:63: 2d:7f:51:a2:6b:39:ed:35:e3:fc:8f:0d:f5:7c:c4:5b:c7:11: 5e:8a:a6:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QT6C6o9G6ud5N96JQ8rGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkN2VlNGIwMzI3OTk2MzA0Y2YxOGExMjhlMjY1NTc4MGM5 ZDZiOWIwHhcNMjUxMjA2MjAwMTI1WhcNMjUxMjA3MjAwMTI1WjAzMTEwLwYDVQQD Eyg2MTI5YmYxY2I4N2JiYjkwZGRmMmFjODRmYWM4MzE0NDIzZDA3NGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv0vNwzG3NZX5hgDLfAoG8ktGSZu lj6k9L0jINAe1apaZ5d5nvIlKyb/HhabhxaQdKaGHDzVv1K0RrtcBfE8IgMxz5+2 kCYUARIvHA8D0ZsDHdUq2jTevKdu0ZlGzG7/KRF5xlPQiwzLftr1VRMEuIZ/4pCp wGIXeWuSVxDc1kJrUVPMphAv6ipZt/qc/adfnD6ahwWFeAA/QRSjT3vTOAUrmEj9 TkH4Y6W6AIWDXs1Utu8zxK9CbqCxVdMHcRcdrVBNfNIP5FWTr+U+SlNN/neZus24 3gimjs9hc9NGHXET+O5k4d8ENODsq/fGfAOMaXyUEPGfCAl6e/+hj1qAmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEpvxy4e7uQ3fKshPrIMUQj0HS7MB8GA1UdIwQY MBaAFM1+5LAyeZYwTPGKEo4mVXgMnWubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelg3a3NESjVsakJNOFlvU2ppWlZlQXlkYTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lY2FlYjMtZjQyZi00YmFjLWE0OWUt MjQyZmZkYWEyNjcwLzEvelg3a3NESjVsakJNOFlvU2ppWlZlQXlkYTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9lY2FlYjMtZjQyZi00YmFjLWE0OWUtMjQyZmZkYWEyNjcw LzEvelg3a3NESjVsakJNOFlvU2ppWlZlQXlkYTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkqJroYB 7u522O/Loe+HIcTtsa12St6MoUXjJFggSmILrVOjCgND63cH2DiCFIaYGOxlEOmH 1BX9lbfSX5hvU9KKAyphOeMK/7BY3M2C47HVWq5YR986WbP7ifYGOlVPQvol3Ktn RN7aDarASRUbQUxsLmCw0oWuoGSJEUCNTKZ+hWdLiabXz3U9mD5sdNVIpwaC/r5R 5Ig044fvm+gNXHVdPUe08uxcf8lap4nycwokpTMiD+rYnkF8Qanko7tASIC7hE/D b9pfapC7aA8IaU9YlmOVuSfmN9CMtUzRnriCpL7bf+JcGoNjLX9Roms57TXj/I8N 9XzEW8cRXoqm+A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:59:14 2025 by rpki-client