This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft File: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json) Hash identifier: ivb+I8dtwJxr4tu3W/biL4Tu2E0X/UiYbcAEKm8LdrU= Subject key identifier: 30:4A:22:B8:D9:DE:8F:B1:56:3D:C9:CF:DA:F0:F5:C6:5C:55:7A:03 Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59 Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959 Certificate serial: 019AF23FA2954C18612A52AAE16D66CDA658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:00:47 +0000 Manifest this update: Sat 06 Dec 2025 06:00:47 +0000 Manifest next update: Sun 07 Dec 2025 06:00:47 +0000 Files and hashes: 1: b9174z4yWqv2qp29EN7UCJ94u8o.roa (hash: EWHL6WNb4QtN4LcwWvfPZ7Xgq52KabiWxn9weP+c9oQ=) 2: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: Sd47dwceLJRuuKUmfuERWIk8AGrY5TDeZ9VZq3MOwqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a2:95:4c:18:61:2a:52:aa:e1:6d:66:cd:a6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959 Validity Not Before: Dec 6 06:00:47 2025 GMT Not After : Dec 7 06:00:47 2025 GMT Subject: CN=304a22b8d9de8fb1563dc9cfdaf0f5c65c557a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:98:4b:fc:bc:fc:17:9a:42:cf:c7:b4:3c: 0c:2e:89:df:06:d4:96:6c:00:6e:0c:f9:11:7e:f6: cf:ed:f0:71:b1:1e:da:8d:3e:bf:cb:3d:98:d2:16: aa:08:37:2c:ae:00:7f:31:f8:7a:1d:c9:2c:09:d3: 7a:9e:6c:52:c4:72:72:ac:d3:ab:31:1d:48:b8:be: af:88:e8:f5:ea:f1:fe:02:dc:41:02:61:b6:56:49: 15:21:a0:dc:16:d0:e0:dc:85:bd:70:74:fb:68:d0: 20:a3:29:60:d6:3c:14:58:cc:46:63:cf:67:70:d7: 53:5e:0a:91:6c:44:04:c2:b9:d7:a1:f2:bf:c8:42: 82:c7:3e:ec:87:29:da:1a:6f:b4:38:96:49:c2:de: a1:d6:30:ff:7c:0d:61:8c:14:2a:a4:fe:1b:90:64: 3a:1b:a9:05:a1:22:92:7d:bc:4f:7f:1c:85:1d:a9: 3c:30:41:de:8c:d4:3b:9d:f2:b9:cf:ff:f7:c8:1c: 94:31:0c:16:6f:1f:be:0d:42:ab:60:58:45:ac:5f: e5:28:d6:d7:3e:67:23:22:26:3b:74:1b:3d:3b:a9: 56:d9:ec:47:96:7a:44:62:13:e0:bf:b7:e8:98:bb: 25:33:14:61:5b:8f:90:58:5c:78:c5:04:3b:a2:fc: 9e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4A:22:B8:D9:DE:8F:B1:56:3D:C9:CF:DA:F0:F5:C6:5C:55:7A:03 X509v3 Authority Key Identifier: keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:33:30:71:fa:9b:41:35:24:b8:49:59:10:76:4c:77:47:ac: 44:c6:4f:4c:9c:30:4c:bd:fb:ae:ec:4c:33:af:a8:2e:c9:b3: 3c:85:f4:61:d4:92:43:7d:b2:eb:f2:b9:e0:45:09:36:43:3b: d7:7f:51:58:e6:72:a1:0d:12:cf:8a:12:e9:2e:0c:35:d7:e7: f3:ad:57:69:6d:cb:f0:2b:b1:ed:cb:cd:07:9f:09:3f:b4:69: c4:f5:71:c1:3a:c1:1e:ca:c3:8a:9b:5f:ad:20:5b:65:e1:5a: b0:eb:31:ce:7e:90:b9:43:d5:c3:aa:c8:81:e3:88:31:64:f6: 2c:48:6e:df:95:87:c0:0f:59:a1:b2:df:16:15:56:40:5c:06: da:51:5c:d7:59:86:88:c6:15:1a:36:59:a4:e3:1d:11:70:01: e2:dc:72:64:e6:0c:ee:1c:97:c7:65:57:03:8e:3f:73:bc:55: 96:82:4e:dd:5b:40:13:2a:8f:af:88:50:e2:7b:1d:70:7e:27: 62:aa:0a:ed:21:b9:0d:37:14:f3:6e:79:f7:23:1b:89:0c:fd: 32:88:c4:e3:71:ef:df:ae:51:af:1f:71:fa:47:b4:31:20:31: 01:20:e6:7e:5b:65:3f:66:f7:f3:b0:33:b3:df:91:e6:af:f7: 98:4d:89:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6KVTBhhKlKq4W1mzaZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYmVjZTAzODM3NzY3YWI1OTBjMjQ3NTBiNTYwNzIwM2Nm YTE5NTkwHhcNMjUxMjA2MDYwMDQ3WhcNMjUxMjA3MDYwMDQ3WjAzMTEwLwYDVQQD EygzMDRhMjJiOGQ5ZGU4ZmIxNTYzZGM5Y2ZkYWYwZjVjNjVjNTU3YTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydSYS/y8/BeaQs/HtDwMLonfBtSW bABuDPkRfvbP7fBxsR7ajT6/yz2Y0haqCDcsrgB/Mfh6HcksCdN6nmxSxHJyrNOr MR1IuL6viOj16vH+AtxBAmG2VkkVIaDcFtDg3IW9cHT7aNAgoylg1jwUWMxGY89n cNdTXgqRbEQEwrnXofK/yEKCxz7shynaGm+0OJZJwt6h1jD/fA1hjBQqpP4bkGQ6 G6kFoSKSfbxPfxyFHak8MEHejNQ7nfK5z//3yByUMQwWbx++DUKrYFhFrF/lKNbX PmcjIiY7dBs9O6lW2exHlnpEYhPgv7fomLslMxRhW4+QWFx4xQQ7ovyeYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBKIrjZ3o+xVj3Jz9rw9cZcVXoDMB8GA1UdIwQY MBaAFMy+zgODd2erWQwkdQtWByA8+hlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekw3T0E0TjNaNnRaRENSMUMxWUhJRHo2R1ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jYjE1ZDktMDQzMy00YmQwLTllYWQt NjQ0ZDk4MzBmMGUyLzEvekw3T0E0TjNaNnRaRENSMUMxWUhJRHo2R1ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jYjE1ZDktMDQzMy00YmQwLTllYWQtNjQ0ZDk4MzBmMGUy LzEvekw3T0E0TjNaNnRaRENSMUMxWUhJRHo2R1ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjMwcfqb QTUkuElZEHZMd0esRMZPTJwwTL37ruxMM6+oLsmzPIX0YdSSQ32y6/K54EUJNkM7 139RWOZyoQ0Sz4oS6S4MNdfn861XaW3L8Cux7cvNB58JP7RpxPVxwTrBHsrDiptf rSBbZeFasOsxzn6QuUPVw6rIgeOIMWT2LEhu35WHwA9ZobLfFhVWQFwG2lFc11mG iMYVGjZZpOMdEXAB4txyZOYM7hyXx2VXA44/c7xVloJO3VtAEyqPr4hQ4nsdcH4n YqoK7SG5DTcU82559yMbiQz9MojE43Hv365Rrx9x+ke0MSAxASDmfltlP2b387Az s9+R5q/3mE2JcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:33 2025 by rpki-client