This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json) Hash identifier: D3wcdmz6ykl/k3OaTAkPhluSQAG8draxYUVmozRcb2E= Subject key identifier: 3B:34:18:56:2E:06:2C:D3:F2:66:69:8B:D1:0C:96:59:61:C6:83:E6 Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60 Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60 Certificate serial: 019AF31D534F115F434C72280FC42B653491 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft Manifest number: 0BC7 Signing time: Sat 06 Dec 2025 10:02:56 +0000 Manifest this update: Sat 06 Dec 2025 10:02:56 +0000 Manifest next update: Sun 07 Dec 2025 10:02:56 +0000 Files and hashes: 1: cin36IkcVIQMWPjd44GqXKLQuWQ.roa (hash: OwdXlpnQGHCbD8dLSbClcbklFBICkGpHdsNc3VSAeno=) 2: xJ066uLw5CBis8gyryLoKkqRKLI.roa (hash: WiY+5aheCWzt8o2WuBVa4kjZbzzagp24qPWKgNtl8EM=) 3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: NNZXG5tD176eaSkCW/59Vvr/1YZt/raNV3pZrmTh+Es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:53:4f:11:5f:43:4c:72:28:0f:c4:2b:65:34:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60 Validity Not Before: Dec 6 10:02:56 2025 GMT Not After : Dec 7 10:02:56 2025 GMT Subject: CN=3b3418562e062cd3f266698bd10c965961c683e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:13:9a:9c:0d:55:fd:cf:40:d7:d3:b4:8a:70: b1:a3:40:44:68:aa:8f:fa:fe:ef:09:62:d2:43:44: ca:8b:98:cb:bf:da:7d:d5:bb:c7:6e:7a:98:0e:5f: b6:18:68:d8:79:c8:aa:56:cb:e8:17:03:17:c1:28: f3:06:b2:ff:29:03:19:c2:a5:78:31:79:03:37:34: b2:29:06:1b:cc:eb:c1:eb:06:92:65:68:e3:98:5e: b9:80:f0:f0:81:8c:1b:d2:11:c8:d5:9b:5e:03:af: 9d:13:4f:40:e8:7a:71:bd:1f:5c:b4:e2:54:84:6e: c8:d2:13:c3:b1:e0:bd:da:ba:d5:25:d7:b9:0e:8c: fb:4a:15:7f:e0:fd:0a:23:c1:ab:9c:a5:85:b6:1e: 3e:7d:29:91:5f:5d:8d:25:13:74:3f:af:7d:64:dd: 51:57:54:02:75:cb:b5:20:9e:1f:1f:bd:b1:6e:c0: 2e:a3:0b:f9:70:d0:52:7c:36:e0:83:e3:b2:fd:be: 1f:fb:fe:b1:1d:43:ef:b9:5f:4a:83:be:23:a0:47: 08:9a:d2:15:bf:10:13:23:cf:f3:a1:9f:2e:9d:ea: 53:3d:9b:a1:df:2e:50:05:6c:ba:de:36:a4:29:64: db:8f:fc:e4:97:d3:84:1a:11:35:a0:b5:fb:8b:b4: 5d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:34:18:56:2E:06:2C:D3:F2:66:69:8B:D1:0C:96:59:61:C6:83:E6 X509v3 Authority Key Identifier: keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:67:5c:9f:0e:d6:9f:82:f0:67:5e:5d:1a:f5:de:35:20:f9: 71:7e:69:c9:e5:df:a7:04:41:16:d5:7a:ec:b7:46:3b:a2:f7: 66:13:0d:0b:5b:67:3d:72:28:99:8c:41:93:f5:13:64:86:3c: e9:89:53:8d:68:32:37:3d:c2:6a:78:0a:8c:8b:2b:4b:9b:8b: 99:c8:91:ed:ec:3f:00:63:f4:b9:2a:fe:5a:fe:b6:7e:de:b2: 63:67:20:71:69:47:1f:72:45:83:09:67:32:19:43:2e:83:42: 03:91:00:d4:68:a6:cf:d3:44:ab:ff:21:f6:58:cd:81:c7:36: 5a:10:ae:6e:60:1a:8d:e3:d1:fc:12:ce:ea:db:01:8b:d6:69: 3b:8b:9b:60:44:a3:30:21:ea:9b:3e:dc:fb:fa:cf:8b:0a:cb: cf:03:4d:e2:db:da:a4:1f:81:8b:6c:df:be:d4:76:67:53:90: 58:ab:e3:9e:dc:69:33:d1:0c:4c:58:7d:5a:36:11:6e:81:e5: b6:d3:20:90:02:d5:23:fe:f7:0e:48:e2:b3:d9:58:0e:ae:ee: 8a:7e:ef:9c:96:49:d8:59:73:0e:36:c6:0e:98:4c:87:8d:87: c4:08:e9:f1:24:e0:8b:3c:9b:24:16:bb:56:12:5c:11:75:e1: 06:de:9e:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVNPEV9DTHIoD8QrZTSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMWU3YzQ2YjgxZGRhYjI3NDQyNzBjNWJhZDk4NmFmODZk ZjRmNjAwHhcNMjUxMjA2MTAwMjU2WhcNMjUxMjA3MTAwMjU2WjAzMTEwLwYDVQQD EygzYjM0MTg1NjJlMDYyY2QzZjI2NjY5OGJkMTBjOTY1OTYxYzY4M2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBOanA1V/c9A19O0inCxo0BEaKqP +v7vCWLSQ0TKi5jLv9p91bvHbnqYDl+2GGjYeciqVsvoFwMXwSjzBrL/KQMZwqV4 MXkDNzSyKQYbzOvB6waSZWjjmF65gPDwgYwb0hHI1ZteA6+dE09A6HpxvR9ctOJU hG7I0hPDseC92rrVJde5Doz7ShV/4P0KI8GrnKWFth4+fSmRX12NJRN0P699ZN1R V1QCdcu1IJ4fH72xbsAuowv5cNBSfDbgg+Oy/b4f+/6xHUPvuV9Kg74joEcImtIV vxATI8/zoZ8unepTPZuh3y5QBWy63jakKWTbj/zkl9OEGhE1oLX7i7RdzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDs0GFYuBizT8mZpi9EMlllhxoPmMB8GA1UdIwQY MBaAFMwefEa4HdqydEJwxbrZhq+G309gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUt Mzk5YjdhM2IyMGNmLzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUtMzk5YjdhM2IyMGNm LzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWdcnw7W n4LwZ15dGvXeNSD5cX5pyeXfpwRBFtV67LdGO6L3ZhMNC1tnPXIomYxBk/UTZIY8 6YlTjWgyNz3CangKjIsrS5uLmciR7ew/AGP0uSr+Wv62ft6yY2cgcWlHH3JFgwln MhlDLoNCA5EA1Gimz9NEq/8h9ljNgcc2WhCubmAajePR/BLO6tsBi9ZpO4ubYESj MCHqmz7c+/rPiwrLzwNN4tvapB+Bi2zfvtR2Z1OQWKvjntxpM9EMTFh9WjYRboHl ttMgkALVI/73Dkjis9lYDq7uin7vnJZJ2FlzDjbGDphMh42HxAjp8STgizybJBa7 VhJcEXXhBt6eBw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:45 2025 by rpki-client