This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json) Hash identifier: VM4KuweeKpS6OWQbE9Eteq6EJshryfXDI9JfDseCT1A= Subject key identifier: 31:B3:04:DC:12:32:5A:16:E7:F7:F6:21:78:C6:66:B6:C6:61:DB:4C Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40 Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40 Certificate serial: 019AF12CE46CEBD2B339B4D3707D0DC384E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft Manifest number: 0DBF Signing time: Sat 06 Dec 2025 01:00:42 +0000 Manifest this update: Sat 06 Dec 2025 01:00:42 +0000 Manifest next update: Sun 07 Dec 2025 01:00:42 +0000 Files and hashes: 1: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (hash: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=) 2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: Z2YoFpv/1/gkrTuN2jew2yfHLbm8Pn0J0V+w92SG9KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e4:6c:eb:d2:b3:39:b4:d3:70:7d:0d:c3:84:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40 Validity Not Before: Dec 6 01:00:42 2025 GMT Not After : Dec 7 01:00:42 2025 GMT Subject: CN=31b304dc12325a16e7f7f62178c666b6c661db4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:ab:3f:ef:fd:ed:60:0a:a4:3c:58:ab:f8: d4:4b:3d:33:4b:80:ae:d6:ed:00:e8:44:27:ee:69: 87:3b:78:38:d4:b2:c0:60:74:fc:11:97:86:71:92: ba:07:de:aa:c0:da:1b:66:b5:2b:f0:b3:9b:f0:0c: bc:fc:cf:a4:c8:e4:7c:93:b0:ff:92:01:be:4d:98: 37:ed:09:7c:c6:50:55:e5:bb:16:95:c5:01:2d:38: 17:0c:84:cc:42:57:c7:d1:0b:f5:80:44:73:30:43: 38:df:6b:c7:57:34:c4:33:a8:9f:6f:ca:a8:f8:a0: 09:ed:36:2b:c2:39:de:39:b7:17:3c:77:c8:96:d4: 97:30:f1:ae:6d:9d:0d:00:c9:0a:7b:90:e1:cf:54: b3:9f:f5:44:ef:7a:c4:a8:5e:00:ad:4a:2e:82:cd: ba:f5:09:29:22:4c:78:dc:48:8d:fa:8e:a4:f2:95: 3f:67:9d:bd:b9:46:66:c2:47:61:9d:3e:8b:6b:04: 7e:f5:44:cb:48:2f:36:01:91:bc:60:5f:6a:c0:5b: 7d:64:1e:fc:64:b4:0f:13:51:fe:f0:3a:70:36:01: e6:6e:7b:c7:35:26:34:71:16:99:80:b9:18:ba:cc: a7:ad:1a:a1:df:66:11:e0:2f:bf:c2:d3:5f:a4:1a: 2a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B3:04:DC:12:32:5A:16:E7:F7:F6:21:78:C6:66:B6:C6:61:DB:4C X509v3 Authority Key Identifier: keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:42:b3:1c:c5:fe:3e:bc:13:3c:02:fa:9f:10:ef:b6:92:6e: e1:99:2f:5c:75:a7:3d:4d:fd:8d:a8:7f:10:f7:0b:29:cd:09: be:22:dd:f4:58:1b:11:21:f7:72:ab:19:6e:56:88:d0:09:54: 2f:a5:b9:93:9c:5a:5a:a1:79:3b:a2:a8:2d:a9:75:75:30:ae: 28:db:a0:c8:58:33:55:d0:c8:00:e5:c6:ad:ea:d7:57:68:1f: 7d:c1:e6:32:28:fc:98:62:23:d5:af:5d:35:4a:17:8f:d6:ae: 78:d6:bc:5d:ee:ce:fe:86:e7:94:f6:05:d9:38:25:63:a1:2e: 5f:e3:3a:76:3a:f6:9b:5d:d3:ee:f0:05:64:72:35:83:a8:2a: fa:2b:12:8c:62:00:29:83:9a:b2:fa:a2:2f:9b:96:27:f5:24: 74:09:56:cb:2b:9d:4d:a8:e1:f5:93:0c:12:b8:a1:cd:00:05: a1:d0:f2:7e:1d:b0:31:19:2a:63:6f:d7:eb:17:cb:c5:1c:0c: 90:4e:e4:92:9c:66:e8:3a:23:2c:60:ad:c5:2d:3e:d0:78:a4: 1a:2a:88:24:30:f7:7a:68:fa:46:a2:83:e4:77:8d:93:02:d1: ba:8e:84:48:b1:58:a8:ec:79:71:fb:82:fe:a4:0d:1d:bb:05: 93:23:00:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLORs69KzObTTcH0Nw4TnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMDA3MmRhOTgxMTQxOTNjMTA0Y2UxYTYwOWQ5MmE2OTc2 ZjljNDAwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD EygzMWIzMDRkYzEyMzI1YTE2ZTdmN2Y2MjE3OGM2NjZiNmM2NjFkYjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgGrP+/97WAKpDxYq/jUSz0zS4Cu 1u0A6EQn7mmHO3g41LLAYHT8EZeGcZK6B96qwNobZrUr8LOb8Ay8/M+kyOR8k7D/ kgG+TZg37Ql8xlBV5bsWlcUBLTgXDITMQlfH0Qv1gERzMEM432vHVzTEM6ifb8qo +KAJ7TYrwjneObcXPHfIltSXMPGubZ0NAMkKe5Dhz1Szn/VE73rEqF4ArUougs26 9QkpIkx43EiN+o6k8pU/Z529uUZmwkdhnT6LawR+9UTLSC82AZG8YF9qwFt9ZB78 ZLQPE1H+8DpwNgHmbnvHNSY0cRaZgLkYusynrRqh32YR4C+/wtNfpBoqGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGzBNwSMloW5/f2IXjGZrbGYdtMMB8GA1UdIwQY MBaAFMwActqYEUGTwQTOGmCdkqaXb5xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQt YzBlYzhiOTVhYjc3LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQtYzBlYzhiOTVhYjc3 LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEKzHMX+ PrwTPAL6nxDvtpJu4ZkvXHWnPU39jah/EPcLKc0JviLd9FgbESH3cqsZblaI0AlU L6W5k5xaWqF5O6KoLal1dTCuKNugyFgzVdDIAOXGrerXV2gffcHmMij8mGIj1a9d NUoXj9aueNa8Xe7O/obnlPYF2TglY6EuX+M6djr2m13T7vAFZHI1g6gq+isSjGIA KYOasvqiL5uWJ/UkdAlWyyudTajh9ZMMErihzQAFodDyfh2wMRkqY2/X6xfLxRwM kE7kkpxm6DojLGCtxS0+0HikGiqIJDD3emj6RqKD5HeNkwLRuo6ESLFYqOx5cfuC /qQNHbsFkyMAiA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:05 2025 by rpki-client