This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft File: ZxzQcdyWC9yCmwvn40trYc-LCx4.mft (raw, json) Hash identifier: U7ygFFfBBa4X3SgqsL+0t0GU3NLd+wt9TjtR9HiuISE= Subject key identifier: 62:9B:0E:C3:E8:54:20:71:2D:28:45:82:9F:73:40:B6:05:E3:FC:B4 Authority key identifier: 67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E Certificate issuer: /CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e Certificate serial: 019AF1D1C543C7BA088BDCD82F8C29941AEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft Manifest number: 013A Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: ZxzQcdyWC9yCmwvn40trYc-LCx4.crl (hash: grGdvBfGOM0A0NSnLh0ku/+ExdWwpJJLUGf/s8c+1Lw=) 2: tv0ukI6khIAMOhIHQUwhybvajH8.roa (hash: 15K34MSiCF97LiSsF0K1zSiL3spXFwrQsFzvbUDfnUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c5:43:c7:ba:08:8b:dc:d8:2f:8c:29:94:1a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=671cd071dc960bdc829b0be7e34b6b61cf8b0b1e Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=629b0ec3e85420712d2845829f7340b605e3fcb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:21:8d:40:a0:f9:96:d8:70:87:47:d6:d0:58: dd:c5:4a:3e:e8:dc:39:87:53:ab:93:50:67:13:25: 51:bb:55:88:f6:f6:9e:4f:5d:7a:9f:60:7d:12:dd: f8:b1:0b:df:a0:68:60:5d:f7:34:55:4a:35:be:60: af:94:a1:c2:a8:31:05:8f:e1:d3:d4:32:74:fc:e1: 9f:69:eb:2d:25:02:94:42:9b:1c:e7:47:69:14:85: ff:38:ac:a1:20:f4:c2:ff:d2:3e:c0:62:9b:3d:fe: 86:3c:a4:07:f5:f5:86:2d:1a:6c:ef:ad:fe:89:59: df:2f:b2:f5:01:e7:8b:97:2e:66:46:86:23:f8:c1: cf:1a:35:00:ed:4f:bc:54:9b:2c:e1:76:c8:a4:da: 79:0a:f5:14:30:19:9a:8d:40:ac:5b:bf:fe:69:5c: 48:75:ac:d0:f2:e3:d5:7b:40:1b:4c:11:20:31:09: 33:f1:5c:bf:22:36:13:a3:d4:88:10:30:3c:9d:d4: 3d:e1:d9:e4:ce:ea:58:55:06:0d:b0:d6:a1:5f:db: e6:f5:48:11:ab:10:1f:fe:c4:3e:c8:dc:01:c9:df: 4e:ad:65:f3:ee:bb:be:54:2f:54:4f:81:3e:c7:f4: af:57:55:f8:91:ec:86:21:09:37:84:22:79:79:2e: 0c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9B:0E:C3:E8:54:20:71:2D:28:45:82:9F:73:40:B6:05:E3:FC:B4 X509v3 Authority Key Identifier: keyid:67:1C:D0:71:DC:96:0B:DC:82:9B:0B:E7:E3:4B:6B:61:CF:8B:0B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxzQcdyWC9yCmwvn40trYc-LCx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/35a9a6-60cd-4f24-8ef0-7dc69430d352/1/ZxzQcdyWC9yCmwvn40trYc-LCx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5d:45:4a:60:5d:c5:81:4b:27:81:aa:66:7c:6c:35:cf:42: f2:dc:24:8e:a7:2c:49:59:33:bf:c0:f0:c5:12:1c:91:f1:7a: 5e:4f:51:30:26:ea:23:d1:4d:62:69:62:a7:ed:0c:e7:51:cc: 6e:92:7e:93:2d:f1:48:90:1f:61:ef:6f:45:c6:7d:2b:ae:30: c9:57:ca:bb:0f:83:37:06:1e:e9:1d:ea:b2:01:58:85:57:2d: e3:ce:68:0c:3b:13:4b:8f:b9:7a:2c:39:83:6f:1b:35:17:7c: 64:c9:90:be:66:24:21:0a:e1:93:fb:c4:59:18:c0:12:ca:6c: ba:6a:2b:4d:d4:a2:db:09:84:67:9e:6b:fd:2f:66:95:08:0d: 2e:c7:c8:d4:8c:05:5b:05:c4:ab:b6:b9:4d:6d:44:0e:f4:7a: bb:2d:2e:93:19:fa:f6:2b:b4:5f:7e:8d:76:cd:29:19:d0:0c: fa:ab:f6:63:01:aa:e4:68:df:d5:3b:d6:69:22:f9:65:f2:18: c2:4d:99:bb:ee:a3:9f:93:fe:ef:2e:7e:86:33:55:47:06:7e: e4:72:ed:86:cf:99:fb:db:ff:12:d4:67:2d:e2:78:cb:13:88: 4a:46:52:cd:59:52:1d:7f:b5:fb:85:d8:28:36:6a:82:fb:fb: 34:20:b0:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cVDx7oIi9zYL4wplBrvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MWNkMDcxZGM5NjBiZGM4MjliMGJlN2UzNGI2YjYxY2Y4 YjBiMWUwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD Eyg2MjliMGVjM2U4NTQyMDcxMmQyODQ1ODI5ZjczNDBiNjA1ZTNmY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyGNQKD5lthwh0fW0FjdxUo+6Nw5 h1Ork1BnEyVRu1WI9vaeT116n2B9Et34sQvfoGhgXfc0VUo1vmCvlKHCqDEFj+HT 1DJ0/OGfaestJQKUQpsc50dpFIX/OKyhIPTC/9I+wGKbPf6GPKQH9fWGLRps763+ iVnfL7L1AeeLly5mRoYj+MHPGjUA7U+8VJss4XbIpNp5CvUUMBmajUCsW7/+aVxI dazQ8uPVe0AbTBEgMQkz8Vy/IjYTo9SIEDA8ndQ94dnkzupYVQYNsNahX9vm9UgR qxAf/sQ+yNwByd9OrWXz7ru+VC9UT4E+x/SvV1X4keyGIQk3hCJ5eS4MAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKbDsPoVCBxLShFgp9zQLYF4/y0MB8GA1UdIwQY MBaAFGcc0HHclgvcgpsL5+NLa2HPiwseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnh6UWNkeVdDOXlDbXd2bjQwdHJZYy1MQ3g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zNWE5YTYtNjBjZC00ZjI0LThlZjAt N2RjNjk0MzBkMzUyLzEvWnh6UWNkeVdDOXlDbXd2bjQwdHJZYy1MQ3g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8zNWE5YTYtNjBjZC00ZjI0LThlZjAtN2RjNjk0MzBkMzUy LzEvWnh6UWNkeVdDOXlDbXd2bjQwdHJZYy1MQ3g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH11FSmBd xYFLJ4GqZnxsNc9C8twkjqcsSVkzv8DwxRIckfF6Xk9RMCbqI9FNYmlip+0M51HM bpJ+ky3xSJAfYe9vRcZ9K64wyVfKuw+DNwYe6R3qsgFYhVct485oDDsTS4+5eiw5 g28bNRd8ZMmQvmYkIQrhk/vEWRjAEspsumorTdSi2wmEZ55r/S9mlQgNLsfI1IwF WwXEq7a5TW1EDvR6uy0ukxn69iu0X36Nds0pGdAM+qv2YwGq5Gjf1TvWaSL5ZfIY wk2Zu+6jn5P+7y5+hjNVRwZ+5HLths+Z+9v/EtRnLeJ4yxOISkZSzVlSHX+1+4XY KDZqgvv7NCCwyA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:01 2025 by rpki-client