This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft File: zixQX3fcqBF-8GJXEHRMs1lzaxk.mft (raw, json) Hash identifier: lp8A00YQ9LeEGd1F/1ZoGxi2v81hJhaeBqjcl9che8s= Subject key identifier: CC:37:B9:9D:67:5D:B1:51:12:DC:68:47:9A:E3:74:71:5F:28:22:C5 Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19 Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19 Certificate serial: 019AF50BBB16FE8AA8FBE30EAFDE16D7C31A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:02:57 +0000 Manifest this update: Sat 06 Dec 2025 19:02:57 +0000 Manifest next update: Sun 07 Dec 2025 19:02:57 +0000 Files and hashes: 1: hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa (hash: h4/9pXQ7Wpk9BBxdxTpq0aRzvgxJkU0Udbbc6bAhob8=) 2: zixQX3fcqBF-8GJXEHRMs1lzaxk.crl (hash: QCiuseHpbbru8/fEWo7v0C6Vt4/Nen1tqHojKA2+f+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:bb:16:fe:8a:a8:fb:e3:0e:af:de:16:d7:c3:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19 Validity Not Before: Dec 6 19:02:57 2025 GMT Not After : Dec 7 19:02:57 2025 GMT Subject: CN=cc37b99d675db15112dc68479ae374715f2822c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:2b:f8:14:ad:d9:40:d6:71:c8:c4:ea:b7: 1b:81:44:bf:55:d0:9a:b5:ff:c2:1c:b6:c9:d3:15: b2:ff:39:af:36:b0:a6:f8:8c:c0:5c:52:9a:9b:43: 3c:16:9f:a6:71:d7:53:07:23:fd:9c:08:c4:64:9f: ae:42:5e:12:c8:32:ee:95:d0:e2:74:3d:67:bc:87: 7f:80:8d:3c:c9:4c:8f:e4:2a:c3:a7:f6:96:3f:d3: df:f9:27:42:3c:3c:fe:9e:79:e5:ad:94:cd:c9:2c: c2:ec:72:f8:86:94:33:c2:f2:0f:62:44:a1:64:12: ef:4a:6f:ab:73:21:ff:c5:4e:3d:b7:f9:a5:72:2e: c5:d4:c1:48:13:2a:c0:f3:b2:e1:7c:00:18:e3:79: dd:44:12:26:bf:1b:cf:a8:d1:7c:f7:9b:c0:80:e7: c7:24:c2:d3:51:72:64:4c:99:10:df:fd:4b:a6:1d: b7:65:1d:4f:c9:45:eb:76:bf:56:9a:be:25:dc:ee: b8:09:90:6e:e7:72:63:59:25:6d:cf:ef:2d:0a:72: cb:20:4e:75:05:52:1b:24:19:7c:56:f1:f5:ce:4b: 72:45:b7:d2:87:90:5c:72:00:c5:00:43:8c:2b:af: 31:a4:f6:51:c3:a4:5e:70:3a:8c:78:f9:1a:c6:1e: 89:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:37:B9:9D:67:5D:B1:51:12:DC:68:47:9A:E3:74:71:5F:28:22:C5 X509v3 Authority Key Identifier: keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:58:83:32:c6:4e:a6:84:4a:43:50:d0:52:f8:e7:ed:61:0d: 5d:41:18:5e:53:0c:1b:3b:e8:2b:52:75:f2:13:79:8a:9f:75: f3:e9:a1:2f:8f:70:ff:fa:06:80:a9:94:f1:9c:aa:45:45:82: bd:88:73:8a:64:7f:9a:81:f1:65:da:62:ba:01:70:c0:27:c4: 77:bf:36:eb:69:f0:18:32:af:0f:24:ec:e0:2f:73:89:cb:7d: ac:f4:84:af:19:74:ef:56:fe:c0:54:fc:30:11:1f:77:21:60: 1e:e8:65:5b:07:c2:ba:52:1a:73:6e:87:95:62:34:4e:21:ae: d3:2b:4a:69:12:5e:ce:5b:cc:48:4b:f0:84:f9:26:cb:b6:d7: 86:3b:71:f0:66:b5:a1:34:80:61:73:cc:29:23:e7:af:eb:41: 1c:1d:a6:11:3e:06:45:97:49:97:33:ea:a0:2b:73:81:f7:52: f7:d5:dd:49:ed:99:13:a6:43:1e:5a:82:13:7d:fa:fc:4c:61: ff:15:03:f2:50:82:d5:0f:c6:be:80:45:f6:b4:cb:d1:37:d9: 98:5b:e2:59:44:1e:e1:bf:32:72:bb:93:90:63:7d:5d:5b:1b: af:19:b8:6a:c7:78:61:5e:f0:52:b0:8b:87:5a:ce:69:b8:68: a8:2b:13:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C7sW/oqo++MOr94W18MaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMmM1MDVmNzdkY2E4MTE3ZWYwNjI1NzEwNzQ0Y2IzNTk3 MzZiMTkwHhcNMjUxMjA2MTkwMjU3WhcNMjUxMjA3MTkwMjU3WjAzMTEwLwYDVQQD EyhjYzM3Yjk5ZDY3NWRiMTUxMTJkYzY4NDc5YWUzNzQ3MTVmMjgyMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Ir+BSt2UDWccjE6rcbgUS/VdCa tf/CHLbJ0xWy/zmvNrCm+IzAXFKam0M8Fp+mcddTByP9nAjEZJ+uQl4SyDLuldDi dD1nvId/gI08yUyP5CrDp/aWP9Pf+SdCPDz+nnnlrZTNySzC7HL4hpQzwvIPYkSh ZBLvSm+rcyH/xU49t/mlci7F1MFIEyrA87LhfAAY43ndRBImvxvPqNF895vAgOfH JMLTUXJkTJkQ3/1Lph23ZR1PyUXrdr9Wmr4l3O64CZBu53JjWSVtz+8tCnLLIE51 BVIbJBl8VvH1zktyRbfSh5BccgDFAEOMK68xpPZRw6RecDqMePkaxh6JnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMw3uZ1nXbFREtxoR5rjdHFfKCLFMB8GA1UdIwQY MBaAFM4sUF933KgRfvBiVxB0TLNZc2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2Et MzNlMjcwNWI0YzNlLzEveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2EtMzNlMjcwNWI0YzNl LzEveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwViDMsZO poRKQ1DQUvjn7WENXUEYXlMMGzvoK1J18hN5ip918+mhL49w//oGgKmU8ZyqRUWC vYhzimR/moHxZdpiugFwwCfEd78262nwGDKvDyTs4C9zict9rPSErxl071b+wFT8 MBEfdyFgHuhlWwfCulIac26HlWI0TiGu0ytKaRJezlvMSEvwhPkmy7bXhjtx8Ga1 oTSAYXPMKSPnr+tBHB2mET4GRZdJlzPqoCtzgfdS99XdSe2ZE6ZDHlqCE336/Exh /xUD8lCC1Q/GvoBF9rTL0TfZmFviWUQe4b8ycruTkGN9XVsbrxm4asd4YV7wUrCL h1rOabhoqCsTUQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:25:05 2025 by rpki-client