This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft File: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft (raw, json) Hash identifier: 0O7b1Nq8rFB8ZgIYtC9KfDOfvgb2r1pxUXN1CMtBVcY= Subject key identifier: BC:7D:59:3F:3F:DC:94:68:B2:90:7C:A2:36:63:46:0A:2D:69:2A:A5 Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F Certificate issuer: /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f Certificate serial: 019AF42E43763D8BA7D244F77C1BC750B616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 15:01:03 +0000 Manifest this update: Sat 06 Dec 2025 15:01:03 +0000 Manifest next update: Sun 07 Dec 2025 15:01:03 +0000 Files and hashes: 1: 35bIez4DE4f8IctL5QEgdASB-4Y.roa (hash: TCPS2vFGt9j3BHs+mf2M0eQppw/ELA+Rm7h4Oyv00F8=) 2: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl (hash: yLZkED1EF6bPKERhIgTH7uV+G/New/Lz+2fe4BmG75Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:43:76:3d:8b:a7:d2:44:f7:7c:1b:c7:50:b6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f Validity Not Before: Dec 6 15:01:03 2025 GMT Not After : Dec 7 15:01:03 2025 GMT Subject: CN=bc7d593f3fdc9468b2907ca23663460a2d692aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:e7:3c:4d:6b:5a:7f:2d:ec:e5:60:c4:9a: f5:b8:38:a6:27:21:1f:8b:19:7f:ac:59:3a:db:33: 07:85:46:fe:81:18:3f:50:53:82:6b:a6:74:e2:7e: 0f:67:27:23:72:78:51:ce:bf:ce:29:d1:6d:16:98: 74:54:6d:36:35:ae:15:ad:f2:e9:67:c3:2f:32:23: cf:30:a9:f2:50:0d:82:8b:9d:3e:22:40:a5:d6:42: 2e:2f:c9:c9:b6:1f:85:9a:37:e9:42:5a:2e:b0:5b: 0d:e3:77:ec:7b:c7:b7:9b:22:b2:ad:02:d8:31:7e: 02:bf:55:2e:b0:42:9c:b9:b8:22:e9:48:fd:ae:77: 4f:0b:6b:93:b4:97:67:e9:43:f1:04:b4:20:1b:a2: 2b:d4:d4:55:0b:43:64:b8:ef:dd:52:6c:b1:5b:98: 0e:5f:52:fb:96:ac:37:0c:44:23:de:45:8e:50:b2: 96:92:46:e9:1a:11:a8:69:8b:84:ea:86:37:ab:aa: b7:86:4a:8b:66:c6:00:97:5b:a4:d0:ed:12:00:4d: a6:d3:4c:f8:7d:9e:68:0b:1e:be:bc:70:2a:0a:58: 0a:ab:c3:ae:93:74:0d:3d:2c:e9:0a:a9:e0:79:16: 54:e6:36:3d:f6:fc:d0:b0:d8:08:b6:75:94:f4:92: 96:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7D:59:3F:3F:DC:94:68:B2:90:7C:A2:36:63:46:0A:2D:69:2A:A5 X509v3 Authority Key Identifier: keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:84:3a:10:90:f4:d6:91:08:81:8d:25:86:09:de:4d:44:b6: 53:cf:7b:2c:58:84:8d:43:eb:2d:4a:85:b2:87:d0:89:9f:a9: 65:84:8d:44:e4:a2:96:ca:2b:03:11:bc:35:57:cb:58:83:aa: 72:db:0b:d5:6a:1f:25:b2:c9:6a:11:78:c9:40:10:d6:00:98: 0c:13:bd:99:85:e2:30:e0:b1:8f:be:3b:28:35:b9:b2:75:2f: de:9a:37:bb:db:fc:45:77:b2:b7:e6:8c:9d:87:9c:40:c5:1f: 1b:09:c2:3e:fe:62:b7:b8:0b:8e:ac:a0:6f:6a:c1:02:48:c3: 44:fb:4f:c6:4f:be:c1:6a:30:59:2d:1d:39:be:32:34:6f:70: 39:20:dd:f7:7b:a2:a3:6f:86:83:45:af:8e:a0:e8:47:5a:17: 8c:ff:6f:a0:38:bc:5c:36:a1:74:cb:82:06:90:ee:5e:94:d5: c5:40:6c:e2:40:cb:dc:b8:72:cc:ea:84:33:ac:17:bf:c7:52: 95:18:87:12:10:2d:5b:53:93:32:db:d8:72:72:e5:e0:2b:07: a5:bf:55:5e:2c:b9:1f:a7:06:15:9b:a5:19:1c:2f:cd:f4:81: 89:0f:dd:70:0c:bd:da:d4:bd:55:8a:f0:7a:a1:ed:6a:73:89: bb:5e:25:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LkN2PYun0kT3fBvHULYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYmY5NWI0N2FiMmI5OWMyMjJiZmU1NDUyMWVmZDFhYjY3 ZDI2N2YwHhcNMjUxMjA2MTUwMTAzWhcNMjUxMjA3MTUwMTAzWjAzMTEwLwYDVQQD EyhiYzdkNTkzZjNmZGM5NDY4YjI5MDdjYTIzNjYzNDYwYTJkNjkyYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDPnPE1rWn8t7OVgxJr1uDimJyEf ixl/rFk62zMHhUb+gRg/UFOCa6Z04n4PZycjcnhRzr/OKdFtFph0VG02Na4VrfLp Z8MvMiPPMKnyUA2Ci50+IkCl1kIuL8nJth+FmjfpQlousFsN43fse8e3myKyrQLY MX4Cv1UusEKcubgi6Uj9rndPC2uTtJdn6UPxBLQgG6Ir1NRVC0NkuO/dUmyxW5gO X1L7lqw3DEQj3kWOULKWkkbpGhGoaYuE6oY3q6q3hkqLZsYAl1uk0O0SAE2m00z4 fZ5oCx6+vHAqClgKq8Ouk3QNPSzpCqngeRZU5jY99vzQsNgItnWU9JKWGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLx9WT8/3JRospB8ojZjRgotaSqlMB8GA1UdIwQY MBaAFMy/lbR6srmcIiv+VFIe/Rq2fSZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekwtVnRIcXl1WndpS181VVVoNzlHclo5Sm44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMjliOTUtY2NiMy00NjdiLWFiN2Et YWM1YjYxNDkzZTAxLzEvekwtVnRIcXl1WndpS181VVVoNzlHclo5Sm44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hMjliOTUtY2NiMy00NjdiLWFiN2EtYWM1YjYxNDkzZTAx LzEvekwtVnRIcXl1WndpS181VVVoNzlHclo5Sm44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIQ6EJD0 1pEIgY0lhgneTUS2U897LFiEjUPrLUqFsofQiZ+pZYSNROSilsorAxG8NVfLWIOq ctsL1WofJbLJahF4yUAQ1gCYDBO9mYXiMOCxj747KDW5snUv3po3u9v8RXeyt+aM nYecQMUfGwnCPv5it7gLjqygb2rBAkjDRPtPxk++wWowWS0dOb4yNG9wOSDd93ui o2+Gg0WvjqDoR1oXjP9voDi8XDahdMuCBpDuXpTVxUBs4kDL3LhyzOqEM6wXv8dS lRiHEhAtW1OTMtvYcnLl4CsHpb9VXiy5H6cGFZulGRwvzfSBiQ/dcAy92tS9VYrw eqHtanOJu14lyg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:49 2025 by rpki-client