This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json) Hash identifier: mcWZilIl3XVnEoaXV/49aSmoYmu8Q/doBvdA8SFLRHc= Subject key identifier: 80:9B:07:F5:93:11:6E:3A:D3:A4:23:0A:74:8A:F1:9D:B5:48:42:7C Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29 Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629 Certificate serial: 019AF3529B88A50D0275452D57B126F21E4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft Manifest number: 0D10 Signing time: Sat 06 Dec 2025 11:01:08 +0000 Manifest this update: Sat 06 Dec 2025 11:01:08 +0000 Manifest next update: Sun 07 Dec 2025 11:01:08 +0000 Files and hashes: 1: KciWQRUUKA8G37qpiXIJOStEILw.roa (hash: YmPZf2aHwh91FO6k/J1ZnsKw+UadvZ5IXF9CJ4jQgGc=) 2: onkr1ceIBIpKPgL3tDwWHACVi7M.roa (hash: EEvxEqVipQPJzVBh5cB6I21KRgxyU4/cw+o/6DWEUyk=) 3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: iPaXAWyfihGUsru5mDDPF1Eji2nQHP6VCFVhTjLFPiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:9b:88:a5:0d:02:75:45:2d:57:b1:26:f2:1e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629 Validity Not Before: Dec 6 11:01:08 2025 GMT Not After : Dec 7 11:01:08 2025 GMT Subject: CN=809b07f593116e3ad3a4230a748af19db548427c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:26:a2:f2:44:92:92:1f:89:1f:3e:ca:01: bf:47:c5:e6:0f:9c:c0:bd:61:8c:2a:a9:63:89:bd: d0:38:f3:69:c1:54:93:0d:64:c6:85:c6:bd:cf:18: 44:74:e6:f3:8d:36:b1:db:d9:f6:80:c4:5e:94:f1: 72:99:e4:ae:c4:bb:c4:5b:a7:ef:6a:ea:7e:86:31: 50:5f:70:8b:33:47:83:c7:8b:5b:e7:6b:2d:5e:1a: f4:75:de:14:b4:e8:ea:0a:fe:0d:79:56:a2:06:c3: 6d:e6:af:77:9b:9d:60:e1:f0:0d:65:c3:ff:fc:a2: fe:d4:b3:83:6b:60:fe:d4:6d:fb:0b:03:8d:7d:7d: 87:e2:e2:9d:59:7a:ec:08:97:3b:fd:f6:09:df:ee: ae:d3:7e:6c:f6:80:38:b7:16:09:16:0b:50:f6:3f: ac:da:79:43:12:aa:c5:04:6f:6a:2c:aa:75:96:e7: a0:4e:5f:a8:cb:72:13:10:c9:d3:a7:10:81:5e:51: 65:f7:2e:ce:cd:8e:01:fe:62:4c:40:1f:2e:1e:dd: ff:99:f3:7e:b3:9a:45:2c:2c:d3:14:67:74:5f:09: 28:78:16:02:48:7a:08:68:2a:d6:b4:0c:41:b3:72: 09:dc:df:56:60:9a:7d:25:59:75:b8:2b:65:00:68: 8b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9B:07:F5:93:11:6E:3A:D3:A4:23:0A:74:8A:F1:9D:B5:48:42:7C X509v3 Authority Key Identifier: keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b1:cc:00:68:65:94:a4:87:ff:7c:c7:6d:0a:7b:36:1a:ee: fc:80:c0:dd:55:a9:03:49:69:33:50:97:6c:3d:e7:ae:22:ef: 37:f7:1c:de:33:c4:ba:d0:3a:29:e0:c5:f2:12:d0:08:2b:40: 9e:42:6b:99:36:61:8a:9c:d4:9e:d5:d1:9a:d8:c9:b7:31:9e: f4:d0:91:96:03:9a:91:1e:7e:78:c4:74:97:c1:d0:26:aa:84: 48:4f:15:0e:06:46:fb:ee:3e:8d:bb:1b:23:30:5b:34:0c:8f: 71:58:b0:59:3a:4c:2c:e1:a2:99:a6:00:d1:9e:15:40:cb:7c: ca:95:c7:6a:cb:b2:0d:0e:b7:79:46:cf:b0:b6:74:bf:2f:4e: 7f:aa:14:75:f3:a2:aa:76:f6:3c:f3:46:d0:41:a3:ee:17:dc: f9:e7:e6:b5:28:16:ec:e2:e0:f7:0f:9f:99:80:07:f1:2b:0c: cd:32:87:f6:36:79:b1:d1:f1:8a:19:8c:8b:65:10:ce:f1:95: 70:fd:37:f6:88:e6:76:79:c7:e6:a0:f6:7d:d8:5c:fd:ca:fc: 41:d3:a8:26:6a:d5:b6:c5:80:29:74:bf:65:1d:6b:97:ba:71: cf:41:e6:09:18:32:14:30:75:b9:ce:48:6e:13:58:67:c1:00: 91:b4:c7:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpuIpQ0CdUUtV7Em8h5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNjUzMjY0OWE2YWVmNDcxNDg0MWI5YzhmNTQ2NjBkODg5 YjA2MjkwHhcNMjUxMjA2MTEwMTA4WhcNMjUxMjA3MTEwMTA4WjAzMTEwLwYDVQQD Eyg4MDliMDdmNTkzMTE2ZTNhZDNhNDIzMGE3NDhhZjE5ZGI1NDg0MjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8EmovJEkpIfiR8+ygG/R8XmD5zA vWGMKqljib3QOPNpwVSTDWTGhca9zxhEdObzjTax29n2gMRelPFymeSuxLvEW6fv aup+hjFQX3CLM0eDx4tb52stXhr0dd4UtOjqCv4NeVaiBsNt5q93m51g4fANZcP/ /KL+1LODa2D+1G37CwONfX2H4uKdWXrsCJc7/fYJ3+6u035s9oA4txYJFgtQ9j+s 2nlDEqrFBG9qLKp1luegTl+oy3ITEMnTpxCBXlFl9y7OzY4B/mJMQB8uHt3/mfN+ s5pFLCzTFGd0XwkoeBYCSHoIaCrWtAxBs3IJ3N9WYJp9JVl1uCtlAGiLJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICbB/WTEW4606QjCnSK8Z21SEJ8MB8GA1UdIwQY MBaAFMxlMmSaau9HFIQbnI9UZg2ImwYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2Mt NjQ4ZjUwMWFmYWU1LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2MtNjQ4ZjUwMWFmYWU1 LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrHMAGhl lKSH/3zHbQp7Nhru/IDA3VWpA0lpM1CXbD3nriLvN/cc3jPEutA6KeDF8hLQCCtA nkJrmTZhipzUntXRmtjJtzGe9NCRlgOakR5+eMR0l8HQJqqESE8VDgZG++4+jbsb IzBbNAyPcViwWTpMLOGimaYA0Z4VQMt8ypXHasuyDQ63eUbPsLZ0vy9Of6oUdfOi qnb2PPNG0EGj7hfc+efmtSgW7OLg9w+fmYAH8SsMzTKH9jZ5sdHxihmMi2UQzvGV cP039ojmdnnH5qD2fdhc/cr8QdOoJmrVtsWAKXS/ZR1rl7pxz0HmCRgyFDB1uc5I bhNYZ8EAkbTH9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:37 2025 by rpki-client