This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json) Hash identifier: pVxT0LddedgVcUG8iZygDcNEngXwv7EbukQuxIIMtsw= Subject key identifier: 7A:48:50:07:84:33:11:85:28:29:62:19:22:DD:C8:D4:88:B1:F4:23 Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38 Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238 Certificate serial: 019AF23F6ED59643A7643C3CAD21F11C3375 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft Manifest number: 16FC Signing time: Sat 06 Dec 2025 06:00:34 +0000 Manifest this update: Sat 06 Dec 2025 06:00:34 +0000 Manifest next update: Sun 07 Dec 2025 06:00:34 +0000 Files and hashes: 1: 3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa (hash: r9nE6BN+YAUaWRC/VJWHKz/x1whGDYTMWiwj3TDgzA0=) 2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: 0JKmrb21vyneWAsCRLTkllbwGQHza8U8o9SIC7Di6CA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6e:d5:96:43:a7:64:3c:3c:ad:21:f1:1c:33:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238 Validity Not Before: Dec 6 06:00:34 2025 GMT Not After : Dec 7 06:00:34 2025 GMT Subject: CN=7a485007843311852829621922ddc8d488b1f423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:88:18:53:df:b1:33:10:b3:a5:65:c7:d8: 9b:68:0e:29:b8:13:ae:9c:d1:8f:18:ae:98:98:c5: 01:15:09:d3:09:2d:75:29:39:32:78:da:e3:db:5c: 5a:5d:b5:ce:54:6a:0b:25:c6:79:37:92:19:0b:85: d3:ee:88:70:8c:7f:c9:26:f9:cd:ce:a1:ef:d1:bf: b4:54:05:df:d3:c1:f8:af:8d:d8:57:a6:a0:6b:32: 5d:55:e1:8b:12:64:45:11:a6:d0:99:3a:e3:32:7c: c9:45:51:db:aa:00:9a:f8:f9:e4:71:66:11:6c:a4: b6:c9:fa:58:e9:87:7c:ba:80:25:a5:f7:c5:79:d8: 50:50:11:18:f3:8c:aa:de:1d:d0:dc:ea:21:8d:93: a3:3a:cb:c6:5e:29:17:a0:44:66:e6:88:ca:e2:8b: fd:28:1e:38:b7:3f:86:8c:d5:22:f9:64:06:1d:ae: 51:8f:8d:2d:75:1e:77:ad:16:ba:2a:6a:99:5d:c3: 9b:33:32:1b:ce:0a:04:68:db:85:72:51:c4:10:19: 2d:17:d0:62:0d:ac:b3:bc:25:03:8b:55:43:3c:25: 9e:ff:35:f2:64:42:a6:3c:7b:79:e4:26:4e:3e:02: 73:17:94:eb:6f:31:c2:04:54:23:7f:18:69:1e:39: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:48:50:07:84:33:11:85:28:29:62:19:22:DD:C8:D4:88:B1:F4:23 X509v3 Authority Key Identifier: keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:82:40:99:50:5b:08:83:7e:f3:16:ca:68:8e:0c:d8:e4:22: 17:2e:6c:0e:d7:59:7c:94:7f:74:ef:9b:be:a8:e5:77:92:28: 19:a2:cc:71:63:0f:a3:78:c4:83:90:d0:89:e7:59:52:09:bb: 17:de:05:09:42:f2:5a:e3:86:63:dc:70:47:e7:bf:21:ce:32: ad:8e:69:d4:1a:bf:5d:7b:34:4b:51:ae:54:72:61:40:cc:b2: cf:27:77:89:31:13:a5:05:67:00:c9:52:e2:a5:cb:d9:0c:76: 69:ef:82:9d:97:65:6e:d0:63:3f:54:b2:62:3a:41:2d:78:f9: 4c:49:5b:4e:8d:bb:86:7a:f0:28:24:28:a0:77:63:a8:b9:29: 4e:c4:3c:b9:d7:07:80:89:19:78:ca:5f:c4:03:a8:dc:f2:7b: ea:93:9f:8c:15:db:33:87:d6:fe:5e:30:22:a5:be:c1:99:34: 1d:61:93:5e:88:9b:24:90:8a:22:e2:58:90:f1:3d:d2:ba:9a: 9b:40:f0:4f:04:27:25:cd:21:b3:40:66:62:36:ca:f0:76:e1: 65:7b:4b:08:fd:92:84:2f:53:1b:5b:1b:bf:66:d7:be:8d:af: ad:23:48:33:42:fd:1c:5c:fb:1f:8d:0f:a6:b0:1d:61:34:82: 2d:f9:26:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP27VlkOnZDw8rSHxHDN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMjgzNDBhMjA5YjJiYTEyYWU5MDNhNzRjYmI1ZTJlMjNh ZWQyMzgwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD Eyg3YTQ4NTAwNzg0MzMxMTg1MjgyOTYyMTkyMmRkYzhkNDg4YjFmNDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNuIGFPfsTMQs6Vlx9ibaA4puBOu nNGPGK6YmMUBFQnTCS11KTkyeNrj21xaXbXOVGoLJcZ5N5IZC4XT7ohwjH/JJvnN zqHv0b+0VAXf08H4r43YV6agazJdVeGLEmRFEabQmTrjMnzJRVHbqgCa+PnkcWYR bKS2yfpY6Yd8uoAlpffFedhQUBEY84yq3h3Q3OohjZOjOsvGXikXoERm5ojK4ov9 KB44tz+GjNUi+WQGHa5Rj40tdR53rRa6KmqZXcObMzIbzgoEaNuFclHEEBktF9Bi DayzvCUDi1VDPCWe/zXyZEKmPHt55CZOPgJzF5TrbzHCBFQjfxhpHjm8ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpIUAeEMxGFKCliGSLdyNSIsfQjMB8GA1UdIwQY MBaAFM4oNAogmyuhKukDp0y7Xi4jrtI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMt YjFmYzU0N2I3MzIyLzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMtYjFmYzU0N2I3MzIy LzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYJAmVBb CIN+8xbKaI4M2OQiFy5sDtdZfJR/dO+bvqjld5IoGaLMcWMPo3jEg5DQiedZUgm7 F94FCULyWuOGY9xwR+e/Ic4yrY5p1Bq/XXs0S1GuVHJhQMyyzyd3iTETpQVnAMlS 4qXL2Qx2ae+CnZdlbtBjP1SyYjpBLXj5TElbTo27hnrwKCQooHdjqLkpTsQ8udcH gIkZeMpfxAOo3PJ76pOfjBXbM4fW/l4wIqW+wZk0HWGTXoibJJCKIuJYkPE90rqa m0DwTwQnJc0hs0BmYjbK8HbhZXtLCP2ShC9TG1sbv2bXvo2vrSNIM0L9HFz7H40P prAdYTSCLfkmiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:36 2025 by rpki-client