This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json) Hash identifier: WufWNgvjQtpv9FJ/OJ5o9OYG2L+erQNpdcTB3YPXrEg= Subject key identifier: F9:34:5A:5C:86:49:34:0E:7D:AA:08:89:86:26:44:07:D2:BF:DA:57 Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19 Certificate issuer: /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19 Certificate serial: 019AF12E0AC2A46E8029A5A53ACAC772A07F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: RWsGUVTx8TgA1WTcnxSjt5vESoqg77VGxHL8QSHXe+Y=) 2: auDMGKuBUFekwr1pbKCTw36W0Cg.roa (hash: Ih8H6tUaVW1XZmrRDrxRFmcbfxbignoEn1fpBpsApWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0a:c2:a4:6e:80:29:a5:a5:3a:ca:c7:72:a0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19 Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=f9345a5c8649340e7daa088986264407d2bfda57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:f3:a7:eb:3d:4f:6a:fb:97:29:60:88:62: 11:ef:e1:94:d8:19:05:57:4c:90:cb:d8:84:1b:c5: 46:d9:32:44:18:1a:38:ac:65:10:a9:a6:eb:5b:a2: 4f:da:db:63:5a:0c:78:c7:2d:13:9f:0a:62:0a:ab: 2b:6d:c9:dd:fe:81:c8:78:83:00:88:43:23:a2:a6: 46:5a:a5:00:d0:ff:b7:04:4d:87:a2:9f:aa:02:c8: 76:90:46:2a:c3:98:75:0e:7a:20:60:9d:e5:42:a6: 08:45:13:03:0d:d1:35:5e:76:2b:cc:0a:45:28:79: f1:10:86:f1:f3:d0:ea:9c:c1:32:e9:02:c1:88:33: 0a:eb:3f:95:5b:a7:37:42:ab:63:48:df:ba:51:00: 23:75:be:04:5a:12:ff:e6:20:59:60:92:10:01:58: ee:ea:e6:87:f1:6b:20:a7:a2:d5:94:0f:cf:27:40: 54:eb:7a:32:a3:a4:26:91:9d:09:cd:20:0e:64:4f: f3:7e:ca:69:b6:51:01:33:36:48:bc:c4:27:b1:7e: 52:3b:26:ca:5b:08:c5:6a:de:74:bc:d8:d0:58:d6: 45:9f:84:7d:7b:25:6d:7c:98:90:ed:f4:fd:2a:2f: e3:fc:1b:5d:48:2d:4e:e5:32:12:63:4b:30:7d:f7: 92:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:34:5A:5C:86:49:34:0E:7D:AA:08:89:86:26:44:07:D2:BF:DA:57 X509v3 Authority Key Identifier: keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b9:35:59:1c:78:6c:64:00:85:72:fd:30:02:4a:0e:4d:77: 34:71:15:2d:5f:39:d1:31:a4:c5:d4:29:86:58:73:f0:ba:dd: af:dc:f6:eb:20:cb:39:11:c8:5c:11:c0:15:37:4d:5c:89:e0: 8c:e9:9c:ad:07:a5:f3:46:57:f5:8e:96:ff:30:79:15:e5:17: a3:bf:b0:5a:2e:d8:0d:72:a9:97:88:61:89:f4:82:31:fe:4a: a4:b9:0d:a0:b4:da:50:f8:2e:9f:be:6a:53:0c:f7:c1:55:1d: e6:4f:8f:6c:60:4d:d0:d4:09:f3:98:75:8e:b8:5a:96:f4:0f: 98:95:57:e6:56:b9:ca:f5:60:55:f0:1c:eb:81:0c:6f:2e:f3: 13:82:1b:87:80:5a:bc:ea:bb:01:11:d6:ad:51:47:58:48:24: f7:10:a6:df:7d:89:3d:67:e6:61:d4:79:a3:d4:cf:d1:59:42: dd:12:6e:6d:7a:82:16:dd:f6:1f:8e:2f:33:08:8e:5b:eb:6a: 02:df:8b:a8:fb:e1:db:8e:ac:cc:ea:22:5f:be:a5:5a:72:0c: eb:ba:e9:92:58:80:d3:74:0a:61:a7:8f:9c:22:d9:b3:66:95: 30:90:2a:e5:b5:96:52:57:bf:a3:07:1b:dd:a3:51:7d:67:55: 71:2e:49:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgrCpG6AKaWlOsrHcqB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1Y2Y5OTk2MmY5ODlmN2I3MzNkYTdhYTcwZWFmOWU0MTA1 MmFlMTkwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD EyhmOTM0NWE1Yzg2NDkzNDBlN2RhYTA4ODk4NjI2NDQwN2QyYmZkYTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptXzp+s9T2r7lylgiGIR7+GU2BkF V0yQy9iEG8VG2TJEGBo4rGUQqabrW6JP2ttjWgx4xy0TnwpiCqsrbcnd/oHIeIMA iEMjoqZGWqUA0P+3BE2Hop+qAsh2kEYqw5h1DnogYJ3lQqYIRRMDDdE1XnYrzApF KHnxEIbx89DqnMEy6QLBiDMK6z+VW6c3QqtjSN+6UQAjdb4EWhL/5iBZYJIQAVju 6uaH8Wsgp6LVlA/PJ0BU63oyo6QmkZ0JzSAOZE/zfspptlEBMzZIvMQnsX5SOybK WwjFat50vNjQWNZFn4R9eyVtfJiQ7fT9Ki/j/BtdSC1O5TISY0swffeSqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPk0WlyGSTQOfaoIiYYmRAfSv9pXMB8GA1UdIwQY MBaAFGXPmZYvmJ97cz2nqnDq+eQQUq4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNTJiMDQtZWZiMC00MTViLTliMWEt NDA5ZWExMjA4OTI2LzEvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hNTJiMDQtZWZiMC00MTViLTliMWEtNDA5ZWExMjA4OTI2 LzEvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7k1WRx4 bGQAhXL9MAJKDk13NHEVLV850TGkxdQphlhz8Lrdr9z26yDLORHIXBHAFTdNXIng jOmcrQel80ZX9Y6W/zB5FeUXo7+wWi7YDXKpl4hhifSCMf5KpLkNoLTaUPgun75q Uwz3wVUd5k+PbGBN0NQJ85h1jrhalvQPmJVX5la5yvVgVfAc64EMby7zE4Ibh4Ba vOq7ARHWrVFHWEgk9xCm332JPWfmYdR5o9TP0VlC3RJubXqCFt32H44vMwiOW+tq At+LqPvh246szOoiX76lWnIM67rpkliA03QKYaePnCLZs2aVMJAq5bWWUle/owcb 3aNRfWdVcS5JIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:52 2025 by rpki-client