This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json) Hash identifier: s2jHYKcXcNVU9BrT14dYob4emtJvKmfoAkZXtk0x8tQ= Subject key identifier: A3:F0:8E:78:84:26:2C:0A:B1:74:87:30:10:0B:B5:B8:1F:9B:76:DD Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9 Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9 Certificate serial: 019AF465547D9B7463AA3188BEFEB17EDBCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft Manifest number: 0F7F Signing time: Sat 06 Dec 2025 16:01:12 +0000 Manifest this update: Sat 06 Dec 2025 16:01:12 +0000 Manifest next update: Sun 07 Dec 2025 16:01:12 +0000 Files and hashes: 1: 7EbuG3-0BaX89LTHJW4crEKXOgE.roa (hash: JIvKyqKrpPXGWekxvpmbylJZltK1pz01V4vTqb0PGqw=) 2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: EZZB6WBEAAaygTvBwIpmWpe5yC9TixXbSaB0lpCKx74=) 3: o17-yma_5t9exYXoXM4y9yk2rGc.roa (hash: 21brSGZYsEDJcaoR6r/SPKw0TZMGaiZDGKvCII90PgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:54:7d:9b:74:63:aa:31:88:be:fe:b1:7e:db:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9 Validity Not Before: Dec 6 16:01:12 2025 GMT Not After : Dec 7 16:01:12 2025 GMT Subject: CN=a3f08e7884262c0ab1748730100bb5b81f9b76dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:f1:30:9c:c7:66:77:cc:cb:6b:cc:13:06: 2f:c3:ef:77:ce:b7:be:24:e4:5b:9c:5a:d0:47:47: 97:2a:44:99:1b:a2:71:b4:47:bf:49:7a:ff:05:8b: 73:3d:1a:c0:7e:71:48:f3:40:ee:45:b6:59:a2:c0: ef:df:75:6f:aa:f8:6d:67:65:86:55:b8:38:26:96: e6:78:5e:dc:2a:4a:ef:4d:2f:e4:39:a8:e5:4c:8b: 82:1e:a4:dc:3e:e7:55:0a:ed:d5:9b:38:10:5e:2a: 07:eb:63:6d:cb:34:72:9e:67:3c:2b:93:ed:87:ba: 7a:12:46:31:11:d3:e1:5a:e4:d1:e5:3a:85:38:45: 7e:31:b7:d9:a2:80:7b:21:db:be:49:06:c4:55:84: f0:d9:c2:b7:f9:34:16:42:64:da:cf:03:12:62:29: 9b:11:c6:29:87:14:69:67:75:28:54:17:62:45:01: fe:ee:71:b4:5d:35:0d:93:6e:30:e1:d9:1f:32:cd: 07:7e:30:db:42:49:34:97:93:71:2d:c3:5b:6e:54: 2e:e0:64:2e:71:7a:55:9c:93:6e:f1:81:e0:62:1a: 53:be:b6:00:32:20:bc:a2:d7:aa:48:90:e9:26:42: cc:95:ed:e3:84:0f:8c:6e:37:e1:3c:46:84:ec:74: 52:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F0:8E:78:84:26:2C:0A:B1:74:87:30:10:0B:B5:B8:1F:9B:76:DD X509v3 Authority Key Identifier: keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e6:66:75:18:e6:86:fb:d6:80:8b:ce:ce:90:9c:d0:be:a6: 91:ff:a5:f7:26:72:40:5d:73:fc:32:5f:e7:f4:10:0b:9d:37: 14:5b:25:65:3c:2f:5b:12:88:e3:e4:1b:94:dd:e7:88:48:e2: b9:5f:3a:f8:7b:77:5f:06:2c:84:1e:96:13:b5:ae:55:2d:1e: 1d:55:26:f8:e3:b9:21:8b:a0:fc:3e:54:05:45:0d:e1:50:9c: 52:e0:dc:b2:03:9c:ff:bf:2c:2a:96:48:72:08:48:c7:98:9b: 0b:e6:b4:fc:7c:e4:f6:c8:2a:b9:97:85:7a:40:17:78:17:66: 5a:a2:ac:0d:89:b5:02:9e:71:e5:c3:cf:a8:5c:84:dc:2b:48: 1a:ac:30:3c:dc:6a:7d:ca:7d:0b:88:13:dc:36:d5:c5:1a:a5: 4e:75:c3:6b:dd:92:7f:37:79:8e:c8:dd:ef:33:34:04:09:88: 6d:84:81:9c:f1:4e:7a:d4:60:6e:30:eb:d2:be:5a:b2:4d:e6: 8c:64:35:64:4c:64:3e:50:13:84:58:a4:fa:f1:16:bd:02:a1: 54:b7:f6:ac:d4:4b:d9:11:7d:30:95:c6:3f:e5:5d:df:c4:f3: d9:3e:e2:65:31:ac:88:b1:e0:ba:54:12:d3:ea:16:2f:55:14: 8e:3e:52:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZVR9m3RjqjGIvv6xftvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YzVkYWQ1NDRkZjQ5NzE2MDg1ZWJlODBkYmU4MmViNjhh MjA5YzkwHhcNMjUxMjA2MTYwMTEyWhcNMjUxMjA3MTYwMTEyWjAzMTEwLwYDVQQD EyhhM2YwOGU3ODg0MjYyYzBhYjE3NDg3MzAxMDBiYjViODFmOWI3NmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjTxMJzHZnfMy2vMEwYvw+93zre+ JORbnFrQR0eXKkSZG6JxtEe/SXr/BYtzPRrAfnFI80DuRbZZosDv33VvqvhtZ2WG Vbg4JpbmeF7cKkrvTS/kOajlTIuCHqTcPudVCu3VmzgQXioH62NtyzRynmc8K5Pt h7p6EkYxEdPhWuTR5TqFOEV+MbfZooB7Idu+SQbEVYTw2cK3+TQWQmTazwMSYimb EcYphxRpZ3UoVBdiRQH+7nG0XTUNk24w4dkfMs0HfjDbQkk0l5NxLcNbblQu4GQu cXpVnJNu8YHgYhpTvrYAMiC8oteqSJDpJkLMle3jhA+MbjfhPEaE7HRSqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPwjniEJiwKsXSHMBALtbgfm3bdMB8GA1UdIwQY MBaAFGXF2tVE30lxYIXr6A2+gutoognJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmNYYTFVVGZTWEZnaGV2b0RiNkM2MmlpQ2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81Y2ZkMzgtNWUzNy00M2FmLWExYjAt YWQwMTJhZmY1MTcyLzEvWmNYYTFVVGZTWEZnaGV2b0RiNkM2MmlpQ2NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny81Y2ZkMzgtNWUzNy00M2FmLWExYjAtYWQwMTJhZmY1MTcy LzEvWmNYYTFVVGZTWEZnaGV2b0RiNkM2MmlpQ2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuZmdRjm hvvWgIvOzpCc0L6mkf+l9yZyQF1z/DJf5/QQC503FFslZTwvWxKI4+QblN3niEji uV86+Ht3XwYshB6WE7WuVS0eHVUm+OO5IYug/D5UBUUN4VCcUuDcsgOc/78sKpZI cghIx5ibC+a0/Hzk9sgquZeFekAXeBdmWqKsDYm1Ap5x5cPPqFyE3CtIGqwwPNxq fcp9C4gT3DbVxRqlTnXDa92Sfzd5jsjd7zM0BAmIbYSBnPFOetRgbjDr0r5ask3m jGQ1ZExkPlAThFik+vEWvQKhVLf2rNRL2RF9MJXGP+Vd38Tz2T7iZTGsiLHgulQS 0+oWL1UUjj5SdA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:15 2025 by rpki-client