This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json) Hash identifier: 2JeiaIKOXuPXPfkZYwwIT/x6tYAFfYW2XXjfg4dy/mc= Subject key identifier: A8:C2:6F:2B:10:3C:7E:03:87:CD:CD:CC:37:90:35:66:38:B8:15:58 Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29 Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629 Certificate serial: 019AF5411D9B2273D7139924B069F1C4891F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft Manifest number: 0D11 Signing time: Sat 06 Dec 2025 20:01:16 +0000 Manifest this update: Sat 06 Dec 2025 20:01:16 +0000 Manifest next update: Sun 07 Dec 2025 20:01:16 +0000 Files and hashes: 1: KciWQRUUKA8G37qpiXIJOStEILw.roa (hash: YmPZf2aHwh91FO6k/J1ZnsKw+UadvZ5IXF9CJ4jQgGc=) 2: onkr1ceIBIpKPgL3tDwWHACVi7M.roa (hash: EEvxEqVipQPJzVBh5cB6I21KRgxyU4/cw+o/6DWEUyk=) 3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: bF/1JQQ6aMMnG5NqPLRSfiSiUSotApYLJO+FJRcf+Tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:1d:9b:22:73:d7:13:99:24:b0:69:f1:c4:89:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629 Validity Not Before: Dec 6 20:01:16 2025 GMT Not After : Dec 7 20:01:16 2025 GMT Subject: CN=a8c26f2b103c7e0387cdcdcc3790356638b81558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:10:bc:8e:0e:93:31:c2:4d:dd:92:a5:c8:dd: 88:63:12:e8:7b:78:dd:0c:2d:e1:ac:3a:1e:05:6c: 06:35:44:bc:66:27:60:7e:3a:38:1d:3d:77:73:f6: 29:80:6b:ee:1e:42:60:14:86:1a:d0:2a:ca:8c:fd: 85:f1:63:7c:78:60:a4:cb:0e:2a:06:3c:45:05:4a: 1a:33:61:c5:90:5d:e4:ce:6f:cb:40:de:61:40:b9: ab:46:19:75:4c:a5:d0:84:9d:90:95:b3:13:ce:4d: 6a:c1:8a:29:95:8a:01:48:78:94:f1:f5:4e:e7:1b: b6:2e:c1:0f:dc:b3:a3:6c:a2:4c:c0:7c:ba:81:98: 43:a9:08:69:d1:3b:99:0c:23:54:7f:d3:65:dc:d4: 09:ff:70:26:9f:e8:c0:22:37:77:16:d7:63:87:23: e8:32:eb:89:a0:75:d9:93:bb:b1:b8:89:54:66:7c: 12:b8:57:01:1e:de:8e:77:36:c0:ed:75:81:01:d8: 78:c8:de:a9:0f:6e:75:54:3d:62:33:f5:f9:eb:d6: 26:b7:1f:2f:09:9b:51:43:f1:28:97:49:10:a3:34: 71:b5:38:3d:d0:66:7d:53:55:de:49:11:44:e6:50: 58:dd:f6:1e:13:71:a3:8e:5e:7f:69:f4:4b:04:60: 74:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C2:6F:2B:10:3C:7E:03:87:CD:CD:CC:37:90:35:66:38:B8:15:58 X509v3 Authority Key Identifier: keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:59:2c:d8:5c:6c:b6:3e:47:54:00:7f:a5:0c:b1:ed:4a:12: 1c:d0:96:77:75:37:1d:d4:d9:47:f9:b9:58:fa:90:40:95:35: a8:76:51:37:9b:d2:47:ae:d3:1d:98:a3:f3:f0:d3:96:70:b9: f5:6e:21:e7:3b:0b:0a:b2:d2:9b:90:c4:10:36:41:a1:35:53: a8:b7:7f:42:6e:fa:b4:78:97:eb:49:a9:b0:d2:25:f0:f7:18: bd:4c:56:d5:cf:47:d5:c1:48:cc:a7:6b:a5:aa:25:9e:fe:e7: da:a0:51:4b:cd:b1:a3:bf:25:11:55:8f:a3:db:bf:2d:d3:ac: b0:5d:72:e1:81:61:20:d6:b4:95:ff:72:45:37:ac:5d:d6:2c: 7e:10:9d:3d:40:32:ad:8d:3c:d1:24:a5:a1:87:4c:a5:01:a3: 21:c5:22:6c:12:45:ae:13:c3:46:6b:79:a4:72:5e:e6:79:5a: 53:a3:57:39:75:24:39:ff:e6:0b:62:88:b1:1f:96:5e:58:b4: 53:89:1f:a9:31:88:48:db:e4:8a:28:bb:14:42:c5:43:83:e2: a2:4f:c2:d1:a6:e2:15:ce:f6:9c:9d:c5:a1:ae:7a:c3:ad:2e: 5e:24:82:a2:dd:b0:b4:d1:85:ce:25:d4:5d:bc:53:a9:ca:3d: c6:a6:8b:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QR2bInPXE5kksGnxxIkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNjUzMjY0OWE2YWVmNDcxNDg0MWI5YzhmNTQ2NjBkODg5 YjA2MjkwHhcNMjUxMjA2MjAwMTE2WhcNMjUxMjA3MjAwMTE2WjAzMTEwLwYDVQQD EyhhOGMyNmYyYjEwM2M3ZTAzODdjZGNkY2MzNzkwMzU2NjM4YjgxNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRC8jg6TMcJN3ZKlyN2IYxLoe3jd DC3hrDoeBWwGNUS8Zidgfjo4HT13c/YpgGvuHkJgFIYa0CrKjP2F8WN8eGCkyw4q BjxFBUoaM2HFkF3kzm/LQN5hQLmrRhl1TKXQhJ2QlbMTzk1qwYoplYoBSHiU8fVO 5xu2LsEP3LOjbKJMwHy6gZhDqQhp0TuZDCNUf9Nl3NQJ/3Amn+jAIjd3FtdjhyPo MuuJoHXZk7uxuIlUZnwSuFcBHt6OdzbA7XWBAdh4yN6pD251VD1iM/X569Ymtx8v CZtRQ/Eol0kQozRxtTg90GZ9U1XeSRFE5lBY3fYeE3Gjjl5/afRLBGB0CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjCbysQPH4Dh83NzDeQNWY4uBVYMB8GA1UdIwQY MBaAFMxlMmSaau9HFIQbnI9UZg2ImwYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2Mt NjQ4ZjUwMWFmYWU1LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2MtNjQ4ZjUwMWFmYWU1 LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFks2Fxs tj5HVAB/pQyx7UoSHNCWd3U3HdTZR/m5WPqQQJU1qHZRN5vSR67THZij8/DTlnC5 9W4h5zsLCrLSm5DEEDZBoTVTqLd/Qm76tHiX60mpsNIl8PcYvUxW1c9H1cFIzKdr paolnv7n2qBRS82xo78lEVWPo9u/LdOssF1y4YFhINa0lf9yRTesXdYsfhCdPUAy rY080SSloYdMpQGjIcUibBJFrhPDRmt5pHJe5nlaU6NXOXUkOf/mC2KIsR+WXli0 U4kfqTGISNvkiii7FELFQ4Piok/C0abiFc72nJ3Foa56w60uXiSCot2wtNGFziXU XbxTqco9xqaLgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:17 2025 by rpki-client