This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json) Hash identifier: L3eBav0pSp1apIayB8zBtttPdtpNEe0/SwvFfS3f47Y= Subject key identifier: F8:68:69:A8:C3:07:66:54:E9:04:B2:32:15:66:64:7E:7E:49:50:B6 Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4 Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4 Certificate serial: 019AF0F5F44254EBC01E774056794FAC9FD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 00:00:41 +0000 Manifest this update: Sat 06 Dec 2025 00:00:41 +0000 Manifest next update: Sun 07 Dec 2025 00:00:41 +0000 Files and hashes: 1: 7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa (hash: EraKJ6RiXoWZD2Rj0FRU/KChelRj7EhOxKUvscIGtvY=) 2: BR1Ii_38AODfT46uM_LQNIk35f0.roa (hash: pnSwgnciRzgnr7iozogNocb3NYdeZrHWudq2Bv1+yUM=) 3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: TIgm3xfSs37zzeHsTkNHInntB56F8FLrs1EIdxtL9Hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f4:42:54:eb:c0:1e:77:40:56:79:4f:ac:9f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4 Validity Not Before: Dec 6 00:00:41 2025 GMT Not After : Dec 7 00:00:41 2025 GMT Subject: CN=f86869a8c3076654e904b2321566647e7e4950b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:77:44:37:3a:49:42:75:cc:56:1b:89:33:22: 7c:43:45:39:b4:8b:fa:2e:40:8c:8e:be:ed:1b:d0: 0b:b2:9c:00:e7:1b:2a:21:41:ad:05:10:95:e4:a1: 25:52:bd:81:e9:da:87:d4:20:68:24:ee:1b:d7:0f: 30:89:ac:62:10:25:45:c0:01:40:fb:8f:d2:72:4e: 77:a7:dd:c4:3a:4b:14:14:ee:a0:e2:bd:00:62:63: b3:b1:c4:18:d9:82:ea:e1:7a:96:5a:50:c6:86:8b: dd:1d:60:74:6a:98:0a:7e:f6:a1:4c:87:36:81:06: ac:f7:3d:7d:64:8a:1e:0d:18:44:50:e0:d8:05:35: 01:c9:c7:d4:e7:6a:9f:30:b7:9d:75:d0:41:af:a9: d8:d6:42:21:d9:39:c4:91:ce:45:db:2b:38:3d:c6: e2:ae:69:0a:6c:f4:43:20:2d:cb:66:7b:56:5e:a2: 0f:af:a2:7b:8b:d4:95:c4:4a:09:fd:15:38:48:31: 0d:d2:6b:d4:1b:85:00:91:5c:21:2f:71:08:9a:48: 01:a4:ac:50:09:0d:93:b9:9d:34:4f:ef:aa:f1:ce: 32:55:5e:f1:7f:da:5f:e0:e4:c3:43:fc:a7:c7:05: 85:c1:d5:00:70:fb:2d:55:36:a0:56:29:3c:d7:7f: b0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:68:69:A8:C3:07:66:54:E9:04:B2:32:15:66:64:7E:7E:49:50:B6 X509v3 Authority Key Identifier: keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:41:a8:4a:88:8d:b6:03:f8:55:e4:3a:05:fa:1b:37:89:3a: c8:ec:81:fc:bf:3c:98:ed:0b:d8:a7:72:cc:7f:a7:81:aa:0a: b0:d8:6d:95:ef:9c:df:40:a2:50:80:67:2a:3b:20:e1:be:0b: b5:58:a4:e3:28:05:f5:13:8b:40:36:b8:55:75:86:52:a7:73: d4:ca:27:63:da:8f:cc:42:45:79:da:3f:20:d7:4d:5a:fa:6e: 75:9b:a3:f8:0c:bc:38:8d:54:6c:9d:01:aa:ea:98:49:c1:93: 91:68:89:62:2e:07:af:df:e1:64:92:d4:0c:e8:9e:cb:8a:48: d7:79:4d:b9:08:32:fa:df:52:64:8c:7d:2f:20:54:85:f2:67: dc:3f:54:d6:65:de:1f:2f:ee:f4:21:bf:b6:6d:f0:6d:56:5d: b3:44:13:f3:69:fd:be:a5:e1:7c:3d:01:75:b1:9b:16:2e:ff: da:f5:bf:9b:5b:80:06:a9:97:0d:d1:0a:24:e0:67:d1:92:b5: c8:a5:d7:fe:d9:05:92:bc:d5:61:1a:a0:79:7b:49:4b:97:51: 68:d6:4f:bf:4c:2e:1f:72:4f:f8:ea:95:56:8f:24:75:6e:7d: a3:41:1d:f2:01:45:27:6c:8b:bb:ba:69:72:f5:f2:35:3e:31: 74:dc:bf:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fRCVOvAHndAVnlPrJ/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkN2Y4Nzg5NDkwMTA3MDk3YjIwY2ZhNmUzZDQ1OWYxMzYy NzRiYTQwHhcNMjUxMjA2MDAwMDQxWhcNMjUxMjA3MDAwMDQxWjAzMTEwLwYDVQQD EyhmODY4NjlhOGMzMDc2NjU0ZTkwNGIyMzIxNTY2NjQ3ZTdlNDk1MGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHdENzpJQnXMVhuJMyJ8Q0U5tIv6 LkCMjr7tG9ALspwA5xsqIUGtBRCV5KElUr2B6dqH1CBoJO4b1w8wiaxiECVFwAFA +4/Sck53p93EOksUFO6g4r0AYmOzscQY2YLq4XqWWlDGhovdHWB0apgKfvahTIc2 gQas9z19ZIoeDRhEUODYBTUBycfU52qfMLedddBBr6nY1kIh2TnEkc5F2ys4Pcbi rmkKbPRDIC3LZntWXqIPr6J7i9SVxEoJ/RU4SDEN0mvUG4UAkVwhL3EImkgBpKxQ CQ2TuZ00T++q8c4yVV7xf9pf4OTDQ/ynxwWFwdUAcPstVTagVik813+wSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhoaajDB2ZU6QSyMhVmZH5+SVC2MB8GA1UdIwQY MBaAFM1/h4lJAQcJeyDPpuPUWfE2J0ukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMt NDk4MGZjYThkMjc3LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMtNDk4MGZjYThkMjc3 LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUGoSoiN tgP4VeQ6BfobN4k6yOyB/L88mO0L2KdyzH+ngaoKsNhtle+c30CiUIBnKjsg4b4L tVik4ygF9ROLQDa4VXWGUqdz1MonY9qPzEJFedo/INdNWvpudZuj+Ay8OI1UbJ0B quqYScGTkWiJYi4Hr9/hZJLUDOiey4pI13lNuQgy+t9SZIx9LyBUhfJn3D9U1mXe Hy/u9CG/tm3wbVZds0QT82n9vqXhfD0BdbGbFi7/2vW/m1uABqmXDdEKJOBn0ZK1 yKXX/tkFkrzVYRqgeXtJS5dRaNZPv0wuH3JP+OqVVo8kdW59o0Ed8gFFJ2yLu7pp cvXyNT4xdNy/mQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:03 2025 by rpki-client