This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft File: zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json) Hash identifier: fhQ6wF5sJP1VlVJol4+wsKTk60SD4z3CQfbmM9nolDE= Subject key identifier: C7:F2:0A:4B:AD:4F:8A:72:39:43:53:53:FB:98:14:72:C4:E8:72:60 Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa Certificate serial: 019AF12DB7755D1323F84D5D6DA15C306EBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft Manifest number: 0C26 Signing time: Sat 06 Dec 2025 01:01:36 +0000 Manifest this update: Sat 06 Dec 2025 01:01:36 +0000 Manifest next update: Sun 07 Dec 2025 01:01:36 +0000 Files and hashes: 1: 6FMleRn7QE-uKMdEakcsOaCZ1ss.roa (hash: mcv6vhN3tb3ONM9bZ3O2URAWmhAYPv+UUje7yYCRo5U=) 2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: gx3xMzylgeR2Z6BkF3Hpu0l3BjsexlZk/ebpn7beTa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b7:75:5d:13:23:f8:4d:5d:6d:a1:5c:30:6e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa Validity Not Before: Dec 6 01:01:36 2025 GMT Not After : Dec 7 01:01:36 2025 GMT Subject: CN=c7f20a4bad4f8a7239435353fb981472c4e87260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d4:fe:20:09:98:ae:1e:db:b5:21:33:b8:68: 7d:9c:ee:7c:c6:3d:4f:6b:78:16:3f:aa:8d:24:de: 48:a1:e4:ce:12:2a:c9:1b:a5:3e:da:41:9a:3e:88: f8:9c:4e:df:9f:70:cc:33:8f:9b:1d:10:8d:e1:c6: 78:67:29:2b:ad:9f:24:e7:73:38:e1:8b:13:41:86: a1:c5:e3:cc:e2:57:ac:c3:91:4b:aa:d7:e2:1a:c2: 05:bc:01:99:65:47:ad:4a:ef:91:4a:56:30:57:7c: f5:75:d7:89:f1:d0:2e:c1:b1:fc:b4:9d:aa:87:ee: d9:60:88:30:f1:74:8f:19:7e:10:d8:50:1e:e3:57: 46:5a:69:23:6b:68:53:e1:40:b4:6b:66:e3:ad:5a: 70:0f:32:a6:20:60:c7:5f:2e:fd:22:79:d1:f9:3e: ae:06:95:24:ec:d4:d7:69:48:89:83:0e:c4:c9:41: 86:a9:e1:7c:c5:d0:99:34:8c:be:bd:b4:15:f5:4d: 1d:d4:dc:6d:54:c9:76:f4:52:34:2a:c2:2c:84:7b: da:b0:e4:e0:fe:18:5b:e0:18:fe:7a:5b:6a:e8:2e: cd:9c:f7:5e:f6:1b:32:91:c8:ff:23:0f:63:11:f8: a1:ef:73:3e:4d:2b:fc:c2:69:aa:80:00:2c:ea:96: eb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F2:0A:4B:AD:4F:8A:72:39:43:53:53:FB:98:14:72:C4:E8:72:60 X509v3 Authority Key Identifier: keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:39:9f:6f:21:2f:33:8d:cc:f3:9b:ad:eb:dc:7c:d5:d8:d1: ec:69:07:29:0e:03:a2:5a:1e:eb:52:e4:cd:de:b1:40:7e:96: bc:50:be:0c:48:9f:95:0a:b4:6c:23:c4:2b:f3:bd:cd:9d:22: 28:df:e6:65:4c:32:f8:ed:e7:fa:96:90:bd:a8:ed:19:6d:d2: 57:0d:23:63:0c:20:21:bf:71:52:13:03:eb:a0:79:e5:3c:5d: f1:25:75:35:0c:d1:b0:e9:1f:0a:b9:6e:e2:7f:a3:18:4b:8f: f6:65:00:d0:ac:57:b0:29:0f:04:81:15:77:e5:78:53:cc:b2: 97:d2:19:0d:65:58:1e:04:09:93:4d:85:12:15:50:24:51:53: 24:99:5e:ac:49:f9:50:43:2f:c8:58:cb:38:9a:fd:8d:bb:7a: 54:52:ca:66:7a:f8:3f:67:75:cd:7e:02:78:58:75:9e:86:53: 5c:a9:72:c7:8b:40:3e:70:a8:20:05:82:86:ea:2f:21:37:09: 14:17:15:c0:6b:86:5a:f4:fc:eb:21:78:db:2b:25:5a:d5:e2: b4:fc:fc:1b:b6:a7:2d:95:31:6f:99:20:14:59:be:da:3a:28: 8a:07:1b:5b:3f:01:83:95:72:d8:5f:86:bc:6f:82:38:16:46: 09:e3:79:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbd1XRMj+E1dbaFcMG6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWJiMWFhMGM5M2I3OTE4YzJmZDI0MzNiNDFjMjFkNzlk NDRkYWEwHhcNMjUxMjA2MDEwMTM2WhcNMjUxMjA3MDEwMTM2WjAzMTEwLwYDVQQD EyhjN2YyMGE0YmFkNGY4YTcyMzk0MzUzNTNmYjk4MTQ3MmM0ZTg3MjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNT+IAmYrh7btSEzuGh9nO58xj1P a3gWP6qNJN5IoeTOEirJG6U+2kGaPoj4nE7fn3DMM4+bHRCN4cZ4ZykrrZ8k53M4 4YsTQYahxePM4lesw5FLqtfiGsIFvAGZZUetSu+RSlYwV3z1ddeJ8dAuwbH8tJ2q h+7ZYIgw8XSPGX4Q2FAe41dGWmkja2hT4UC0a2bjrVpwDzKmIGDHXy79InnR+T6u BpUk7NTXaUiJgw7EyUGGqeF8xdCZNIy+vbQV9U0d1NxtVMl29FI0KsIshHvasOTg /hhb4Bj+eltq6C7NnPde9hsykcj/Iw9jEfih73M+TSv8wmmqgAAs6pbrZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfyCkutT4pyOUNTU/uYFHLE6HJgMB8GA1UdIwQY MBaAFM8bsaoMk7eRjC/SQztBwh151E2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenh1eHFneVR0NUdNTDlKRE8wSENIWG5VVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mMmYyNmEtMTU0Ny00M2YzLWEyMzkt YzlmMDlhZjcyOWNmLzEvenh1eHFneVR0NUdNTDlKRE8wSENIWG5VVGFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9mMmYyNmEtMTU0Ny00M2YzLWEyMzktYzlmMDlhZjcyOWNm LzEvenh1eHFneVR0NUdNTDlKRE8wSENIWG5VVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDmfbyEv M43M85ut69x81djR7GkHKQ4Doloe61Lkzd6xQH6WvFC+DEiflQq0bCPEK/O9zZ0i KN/mZUwy+O3n+paQvajtGW3SVw0jYwwgIb9xUhMD66B55Txd8SV1NQzRsOkfCrlu 4n+jGEuP9mUA0KxXsCkPBIEVd+V4U8yyl9IZDWVYHgQJk02FEhVQJFFTJJlerEn5 UEMvyFjLOJr9jbt6VFLKZnr4P2d1zX4CeFh1noZTXKlyx4tAPnCoIAWChuovITcJ FBcVwGuGWvT86yF42yslWtXitPz8G7anLZUxb5kgFFm+2jooigcbWz8Bg5Vy2F+G vG+COBZGCeN5sQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:09 2025 by rpki-client