This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft File: _zfWwfalxKkrv_2FxBQhJ_o-GjA.mft (raw, json) Hash identifier: BjCgdCYQnlL+k8nf+76D6t6u8WvEe9/JLFAjvKtQruY= Subject key identifier: BA:F6:8A:75:39:B3:93:88:51:75:DE:3C:DE:05:62:55:E7:CD:7E:E9 Authority key identifier: FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30 Certificate issuer: /CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30 Certificate serial: 019AF12EC7401ADD65F8BB2D74684B136C58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:02:45 +0000 Manifest this update: Sat 06 Dec 2025 01:02:45 +0000 Manifest next update: Sun 07 Dec 2025 01:02:45 +0000 Files and hashes: 1: 95UilOURLat0lc9QoS7Ws8cK2EA.roa (hash: IqAjP92yfLol/XET3CMcHwom9MrBLP/CZ4kPceWSYnk=) 2: _zfWwfalxKkrv_2FxBQhJ_o-GjA.crl (hash: lXOlNiyp+EMOzDknNEqbwBHqqfXfo3HMT1LV8pBL5Ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c7:40:1a:dd:65:f8:bb:2d:74:68:4b:13:6c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30 Validity Not Before: Dec 6 01:02:45 2025 GMT Not After : Dec 7 01:02:45 2025 GMT Subject: CN=baf68a7539b393885175de3cde056255e7cd7ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:0e:7f:7f:ed:aa:ca:0b:b9:9e:43:1f:47: 77:70:a2:9a:2b:e4:16:52:f1:9f:53:24:00:27:8d: 6d:27:1c:75:c4:e7:08:07:bd:40:8f:c8:23:6c:e8: 9c:7e:04:19:59:43:52:51:38:dd:dc:1f:ff:da:fe: 33:29:90:8d:8a:a9:d8:9f:9c:54:e3:a8:ec:e0:8a: 63:10:a8:dd:d0:95:6a:94:40:c3:75:02:c7:fd:a1: d7:ca:be:e6:2d:40:ff:fa:00:e9:fc:8c:0d:88:53: fa:4a:6a:18:51:41:f4:97:ec:cd:5d:c2:f6:47:3f: fd:70:f3:c7:77:ab:e7:d5:4b:52:93:1a:1d:a7:f4: 0e:0c:b1:e9:5a:f3:f4:09:f3:db:2a:7c:a8:2d:ab: 54:f3:da:dd:c8:ce:b1:09:b7:c0:83:32:38:e0:ce: 7f:6b:2e:20:73:dc:ef:57:26:39:4d:fe:fb:af:3f: 7b:7b:e4:a1:fc:3b:25:48:a1:87:04:19:2a:e6:5c: 68:cc:3f:aa:16:98:19:e2:ef:b9:a4:ae:7c:81:59: 0a:c9:6d:a6:91:bf:f7:94:ba:21:fb:a7:c6:cc:9c: 3d:ac:0f:65:a4:1a:45:0b:c5:73:73:be:55:be:0e: 51:ff:5d:e4:61:7a:82:fb:92:ad:93:c5:a2:92:83: 6a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F6:8A:75:39:B3:93:88:51:75:DE:3C:DE:05:62:55:E7:CD:7E:E9 X509v3 Authority Key Identifier: keyid:FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:59:c4:f2:83:ea:dc:1e:47:d4:6e:55:0f:a4:c8:6f:25:fa: a8:8e:1d:77:7c:8c:07:f2:85:e0:b3:ce:ca:9f:e5:0b:fc:a9: dd:b9:4b:82:36:58:6c:09:dc:b6:74:ee:51:d4:da:35:e1:96: 5f:97:94:20:46:ec:ca:9d:c2:7a:a2:2a:c9:31:ff:4c:d3:2b: f9:31:f4:64:87:a0:d3:0d:f2:72:22:2e:77:e5:e6:1b:9a:73: b8:c8:fc:cc:c5:d2:9b:e5:90:fb:18:a0:d6:02:de:35:d6:63: 42:21:bf:cd:04:07:26:a1:0b:ab:57:46:32:1a:4e:e1:61:36: 0e:b2:f9:24:8e:ca:11:88:2b:ff:44:a6:d0:ef:67:10:aa:64: ea:16:b0:75:27:92:45:90:53:64:fa:6b:47:7f:66:82:4e:aa: 43:0b:cf:d6:80:65:b2:63:45:d6:21:6d:c8:82:2c:12:de:3f: 46:26:77:29:67:9a:b7:b6:27:42:d3:43:ea:da:5c:50:eb:48: e8:2a:70:3a:e8:09:1a:c8:ea:b5:49:55:7a:6e:09:b1:06:78: 16:3b:0a:e2:77:ce:f8:ef:a2:22:b1:ab:a6:da:fd:05:8e:39: 30:9a:13:17:ff:bb:23:f8:25:81:bb:12:8d:43:ca:73:3e:f2: 3a:ff:a7:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsdAGt1l+LstdGhLE2xYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzdkNmMxZjZhNWM0YTkyYmJmZmQ4NWM0MTQyMTI3ZmEz ZTFhMzAwHhcNMjUxMjA2MDEwMjQ1WhcNMjUxMjA3MDEwMjQ1WjAzMTEwLwYDVQQD EyhiYWY2OGE3NTM5YjM5Mzg4NTE3NWRlM2NkZTA1NjI1NWU3Y2Q3ZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruoOf3/tqsoLuZ5DH0d3cKKaK+QW UvGfUyQAJ41tJxx1xOcIB71Aj8gjbOicfgQZWUNSUTjd3B//2v4zKZCNiqnYn5xU 46js4IpjEKjd0JVqlEDDdQLH/aHXyr7mLUD/+gDp/IwNiFP6SmoYUUH0l+zNXcL2 Rz/9cPPHd6vn1UtSkxodp/QODLHpWvP0CfPbKnyoLatU89rdyM6xCbfAgzI44M5/ ay4gc9zvVyY5Tf77rz97e+Sh/DslSKGHBBkq5lxozD+qFpgZ4u+5pK58gVkKyW2m kb/3lLoh+6fGzJw9rA9lpBpFC8Vzc75Vvg5R/13kYXqC+5Ktk8WikoNqwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLr2inU5s5OIUXXePN4FYlXnzX7pMB8GA1UdIwQY MBaAFP831sH2pcSpK7/9hcQUISf6PhowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pmV3dmYWx4S2tydl8yRnhCUWhKX28tR2pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84N2Q0M2MtZTBlZC00OGIzLWI0ZTMt MDVlZDg2NzM1MzA2LzEvX3pmV3dmYWx4S2tydl8yRnhCUWhKX28tR2pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84N2Q0M2MtZTBlZC00OGIzLWI0ZTMtMDVlZDg2NzM1MzA2 LzEvX3pmV3dmYWx4S2tydl8yRnhCUWhKX28tR2pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVnE8oPq 3B5H1G5VD6TIbyX6qI4dd3yMB/KF4LPOyp/lC/yp3blLgjZYbAnctnTuUdTaNeGW X5eUIEbsyp3CeqIqyTH/TNMr+TH0ZIeg0w3yciIud+XmG5pzuMj8zMXSm+WQ+xig 1gLeNdZjQiG/zQQHJqELq1dGMhpO4WE2DrL5JI7KEYgr/0Sm0O9nEKpk6hawdSeS RZBTZPprR39mgk6qQwvP1oBlsmNF1iFtyIIsEt4/RiZ3KWeat7YnQtND6tpcUOtI 6CpwOugJGsjqtUlVem4JsQZ4FjsK4nfO+O+iIrGrptr9BY45MJoTF/+7I/glgbsS jUPKcz7yOv+n4g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:12 2025 by rpki-client