This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json) Hash identifier: yw6kMdh0BHF0Y4ds58uGbp6l/UjgY6cZorQPXwfW5PE= Subject key identifier: FC:DA:B3:CA:A9:8E:83:4D:AF:E6:CB:8B:2C:AC:91:5E:20:C7:4F:A4 Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89 Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489 Certificate serial: 019AF12EDC9FE893C528880272085B3252BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft Manifest number: 0357 Signing time: Sat 06 Dec 2025 01:02:51 +0000 Manifest this update: Sat 06 Dec 2025 01:02:51 +0000 Manifest next update: Sun 07 Dec 2025 01:02:51 +0000 Files and hashes: 1: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (hash: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=) 2: VzQqyrs-uqIcVAV9Qkei6a34wwc.roa (hash: fyOWws5YA8x0adXdJbC1gsHmLihm5Um5wk56YNm2GDk=) 3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: J8rviHWPTOUtTqNCGOv6okHZT4tqzODh41vV5p5X5E4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:dc:9f:e8:93:c5:28:88:02:72:08:5b:32:52:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64c0bc594af811753dfc116af459b1b874471489 Validity Not Before: Dec 6 01:02:51 2025 GMT Not After : Dec 7 01:02:51 2025 GMT Subject: CN=fcdab3caa98e834dafe6cb8b2cac915e20c74fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:aa:f5:52:f3:ce:79:78:e2:db:1f:00:4e: be:ef:8e:84:86:a1:3f:79:5f:a7:bf:f2:a8:13:fe: 68:7e:19:7b:57:82:df:0a:c6:e4:22:59:9e:b4:93: 22:f0:12:10:6a:0d:f3:85:fa:cf:90:c1:ca:d2:1d: ef:14:5b:05:b3:f5:03:3c:e8:89:bf:00:cd:aa:11: 8d:74:ea:e3:1e:64:b8:a9:c1:c6:83:fc:d4:67:e4: 6a:c8:c4:f7:fa:2c:60:cf:17:83:84:92:7f:d7:3f: 78:4b:c0:6f:a7:0c:93:24:fa:c9:01:06:db:9d:7a: ed:52:5c:b4:9e:30:ef:cf:ff:46:a1:70:26:3f:41: 91:20:bf:3f:ff:68:e6:75:74:8d:35:b6:3b:ad:05: 6b:7e:d9:5d:74:54:44:f9:d4:cf:c1:7e:4a:ba:81: ae:42:b1:e1:75:59:22:3a:91:85:01:16:91:4e:43: 15:55:38:62:75:72:8b:e2:46:0a:57:76:7a:36:cc: aa:fa:23:36:67:bf:ef:67:7f:f3:4a:c1:92:ec:e0: 6b:cf:42:2c:2d:4a:ae:54:94:3b:39:a4:db:2f:0b: 0f:85:02:f7:f8:f7:2c:a9:44:05:34:9a:20:9b:43: 2e:49:98:b1:97:02:ff:97:9e:84:ef:8d:a0:97:21: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DA:B3:CA:A9:8E:83:4D:AF:E6:CB:8B:2C:AC:91:5E:20:C7:4F:A4 X509v3 Authority Key Identifier: keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:80:10:41:41:ed:2d:85:45:b5:e5:51:a1:8e:3d:58:9e:ff: 10:86:7f:8d:dc:09:24:e6:2b:8a:e0:e7:54:46:c6:ab:7b:c1: 28:78:00:57:b0:f2:2c:19:3e:c0:8a:0d:44:15:b4:7d:c7:30: cf:f4:a6:9a:8d:8d:01:ee:69:b0:0c:17:c6:7d:ca:22:af:29: 6d:0c:82:4d:d0:e3:8b:1a:e8:b9:37:9b:90:9c:c6:5e:e5:f1: 31:52:a9:5d:d4:05:65:f8:0a:bc:82:8f:d2:1d:a8:8c:bf:86: 42:bb:e5:37:b3:54:7a:a6:aa:85:31:aa:34:f2:9b:5e:99:77: 27:78:4c:35:c8:89:7c:90:d9:c0:2d:04:e0:2a:5f:04:71:a1: 03:ba:31:a7:6d:21:88:90:45:3c:92:52:c3:59:81:2e:f9:e7: 52:ff:36:f6:ca:b8:f3:e4:5a:a1:7c:d4:85:06:c4:ea:07:00: 11:58:90:e7:6b:e1:b3:08:a2:05:8a:83:9c:d1:7e:1c:dc:3f: 43:04:70:07:61:7f:27:c2:63:d2:08:25:c6:c4:30:e0:31:c8: 89:7d:aa:22:57:73:e1:f8:99:95:d2:60:36:a4:89:7d:59:95: bf:73:a7:48:e3:1d:14:22:a7:a8:24:97:0c:24:e2:db:6f:dd: f6:5f:c7:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtyf6JPFKIgCcghbMlK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YzBiYzU5NGFmODExNzUzZGZjMTE2YWY0NTliMWI4NzQ0 NzE0ODkwHhcNMjUxMjA2MDEwMjUxWhcNMjUxMjA3MDEwMjUxWjAzMTEwLwYDVQQD EyhmY2RhYjNjYWE5OGU4MzRkYWZlNmNiOGIyY2FjOTE1ZTIwYzc0ZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpmq9VLzznl44tsfAE6+746EhqE/ eV+nv/KoE/5ofhl7V4LfCsbkIlmetJMi8BIQag3zhfrPkMHK0h3vFFsFs/UDPOiJ vwDNqhGNdOrjHmS4qcHGg/zUZ+RqyMT3+ixgzxeDhJJ/1z94S8BvpwyTJPrJAQbb nXrtUly0njDvz/9GoXAmP0GRIL8//2jmdXSNNbY7rQVrftlddFRE+dTPwX5KuoGu QrHhdVkiOpGFARaRTkMVVThidXKL4kYKV3Z6Nsyq+iM2Z7/vZ3/zSsGS7OBrz0Is LUquVJQ7OaTbLwsPhQL3+PcsqUQFNJogm0MuSZixlwL/l56E742glyF5LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzas8qpjoNNr+bLiyyskV4gx0+kMB8GA1UdIwQY MBaAFGTAvFlK+BF1PfwRavRZsbh0RxSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjIt NDQzMTNiNDNlNTk0LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjItNDQzMTNiNDNlNTk0 LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIAQQUHt LYVFteVRoY49WJ7/EIZ/jdwJJOYriuDnVEbGq3vBKHgAV7DyLBk+wIoNRBW0fccw z/Smmo2NAe5psAwXxn3KIq8pbQyCTdDjixrouTebkJzGXuXxMVKpXdQFZfgKvIKP 0h2ojL+GQrvlN7NUeqaqhTGqNPKbXpl3J3hMNciJfJDZwC0E4CpfBHGhA7oxp20h iJBFPJJSw1mBLvnnUv829sq48+RaoXzUhQbE6gcAEViQ52vhswiiBYqDnNF+HNw/ QwRwB2F/J8Jj0gglxsQw4DHIiX2qIldz4fiZldJgNqSJfVmVv3OnSOMdFCKnqCSX DCTi22/d9l/HNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:18 2025 by rpki-client