This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json) Hash identifier: weNYSz28n50QuV6EPOJAwwmURAr8u5u8M4pyBw0VYGU= Subject key identifier: 51:4A:8E:07:A0:0B:AC:84:46:72:2A:44:08:72:5E:A3:BA:2A:F6:54 Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60 Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460 Certificate serial: 019AF8E65B740BF2AF3648CA443A13292A9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft Manifest number: 0899 Signing time: Sun 07 Dec 2025 13:00:37 +0000 Manifest this update: Sun 07 Dec 2025 13:00:37 +0000 Manifest next update: Mon 08 Dec 2025 13:00:37 +0000 Files and hashes: 1: O6G70f_k228z-ZHm2ohB4tt-ekc.roa (hash: /bGnkVKQw6cLnt6o6jgq/vbGsus5bIRs/NypwJUrJ1g=) 2: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: ZjuJAPBXMtSOaIv9nzOw62+o7ildeLxwcE/4Uyv1GPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:e6:5b:74:0b:f2:af:36:48:ca:44:3a:13:29:2a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460 Validity Not Before: Dec 7 13:00:37 2025 GMT Not After : Dec 8 13:00:37 2025 GMT Subject: CN=514a8e07a00bac8446722a4408725ea3ba2af654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b7:4e:be:28:e6:76:a5:ea:54:53:5e:de:84: 4b:17:d6:0e:94:8e:5e:5d:2e:ef:f5:34:39:7e:1b: fc:14:e6:ab:b1:bf:c9:02:82:85:88:14:76:91:fd: b7:e3:75:3f:54:1d:cc:b1:a4:ac:3c:e5:43:a4:e6: 75:ef:cd:90:e9:d3:f7:f2:83:bb:ea:8f:18:73:ac: 38:22:ea:0e:b0:81:ce:53:1b:a9:76:93:48:85:40: 9c:e1:04:12:a1:c0:34:4d:70:08:2f:50:14:0e:8e: d1:c4:be:00:5d:b1:37:ee:ba:4d:02:67:4a:3a:d7: 88:e6:be:38:5b:c8:07:d8:e2:4c:fa:6e:13:7a:a8: 5c:4d:a9:6f:a4:39:6b:4a:30:e9:45:62:78:b1:9e: 35:25:a2:94:d4:c0:4a:73:2e:0e:6b:36:2f:a5:87: 7c:ad:67:d6:6e:04:7c:32:5c:ef:f1:70:09:f0:65: 7b:43:2d:d9:bf:a6:fb:54:d0:e5:86:d7:6c:69:33: 28:eb:82:09:07:a1:69:75:47:a9:8a:fd:75:e1:fb: 7b:62:71:88:00:3c:f2:20:fa:1f:f3:85:53:3c:08: 37:59:b0:72:96:90:d7:21:59:93:46:ed:94:78:b6: 6d:b7:60:cd:c6:65:1f:14:03:63:a2:bc:d2:d3:db: 17:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4A:8E:07:A0:0B:AC:84:46:72:2A:44:08:72:5E:A3:BA:2A:F6:54 X509v3 Authority Key Identifier: keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:74:16:f6:a5:3a:ff:2e:4f:3e:71:df:92:6a:1a:8b:be:1b: c2:db:14:59:ec:a4:28:36:15:ef:75:ff:4d:5c:2c:23:37:6d: 08:f3:84:87:32:88:fe:85:eb:52:bd:9e:a3:6a:37:da:78:a6: 2e:2b:ea:dd:68:a2:91:d9:32:ba:ae:34:5f:31:89:a7:7d:ff: 7f:23:89:b0:7b:0c:4f:83:36:86:22:32:a5:d3:ce:6e:f6:f4: a8:78:b3:5a:62:8a:5b:f6:41:1a:c8:fc:4b:c7:80:09:a8:76: b2:56:77:9f:e2:d4:68:c5:0e:26:d6:be:98:f5:a4:c0:a1:0e: 0d:d1:f7:14:80:e5:39:25:f0:0e:91:41:ee:94:31:f3:5c:47: 67:22:71:b8:2d:71:4b:ca:10:ee:29:48:1d:3c:0a:82:b0:60: 84:46:e7:4e:1f:2a:f4:e0:18:06:b6:f8:ae:6d:dd:63:f6:cd: 5f:e7:83:ff:f7:9d:8b:46:9d:c8:b7:84:9e:25:4f:65:29:9a: 10:98:91:0e:a9:a0:36:b6:e0:a4:7d:ee:c2:cd:8a:05:97:ec: dc:6b:a3:d7:53:51:b4:e4:59:2d:53:e4:58:26:1a:a8:c6:bf: 7b:3b:d6:9e:89:12:ed:78:a6:3f:37:a0:a5:57:9a:8b:8f:ea: 8e:c9:aa:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr45lt0C/KvNkjKRDoTKSqdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmYyNDFjY2NhMjc4MmI1ZmM0MDdlMWJiYWY3YTk3YTk4 NDc0NjAwHhcNMjUxMjA3MTMwMDM3WhcNMjUxMjA4MTMwMDM3WjAzMTEwLwYDVQQD Eyg1MTRhOGUwN2EwMGJhYzg0NDY3MjJhNDQwODcyNWVhM2JhMmFmNjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LdOvijmdqXqVFNe3oRLF9YOlI5e XS7v9TQ5fhv8FOarsb/JAoKFiBR2kf2343U/VB3MsaSsPOVDpOZ1782Q6dP38oO7 6o8Yc6w4IuoOsIHOUxupdpNIhUCc4QQSocA0TXAIL1AUDo7RxL4AXbE37rpNAmdK OteI5r44W8gH2OJM+m4TeqhcTalvpDlrSjDpRWJ4sZ41JaKU1MBKcy4OazYvpYd8 rWfWbgR8Mlzv8XAJ8GV7Qy3Zv6b7VNDlhtdsaTMo64IJB6FpdUepiv114ft7YnGI ADzyIPof84VTPAg3WbBylpDXIVmTRu2UeLZtt2DNxmUfFANjorzS09sX0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFKjgegC6yERnIqRAhyXqO6KvZUMB8GA1UdIwQY MBaAFGQvJBzMongrX8QH4buvepephHRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGIt MTQ1ZTk1ZThhN2JlLzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGItMTQ1ZTk1ZThhN2Jl LzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0nQW9qU6 /y5PPnHfkmoai74bwtsUWeykKDYV73X/TVwsIzdtCPOEhzKI/oXrUr2eo2o32nim Livq3Wiikdkyuq40XzGJp33/fyOJsHsMT4M2hiIypdPObvb0qHizWmKKW/ZBGsj8 S8eACah2slZ3n+LUaMUOJta+mPWkwKEODdH3FIDlOSXwDpFB7pQx81xHZyJxuC1x S8oQ7ilIHTwKgrBghEbnTh8q9OAYBrb4rm3dY/bNX+eD//edi0adyLeEniVPZSma EJiRDqmgNrbgpH3uws2KBZfs3Guj11NRtORZLVPkWCYaqMa/ezvWnokS7XimPzeg pVeai4/qjsmqXw== -----END CERTIFICATE-----Generated at Sun Dec 7 16:29:28 2025 by rpki-client