This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft File: fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json) Hash identifier: BWllxbQXQSQF63qqN+i//vlxJnDU1uhPm0fv7JRfIl4= Subject key identifier: 68:33:13:86:4D:85:1B:78:55:A9:3D:91:51:C4:88:86:1A:0A:36:A4 Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86 Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586 Certificate serial: 019AF12EF086F00AEABE49604CB3E41C7A5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft Manifest number: 0CC2 Signing time: Sat 06 Dec 2025 01:02:56 +0000 Manifest this update: Sat 06 Dec 2025 01:02:56 +0000 Manifest next update: Sun 07 Dec 2025 01:02:56 +0000 Files and hashes: 1: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: TCbWSFYXYRA30Qy3RBFGR+6q6BBstVNsuq0MR2AOa+s=) 2: mXWmJZwIRdfowUzFV6EabzHZO1M.roa (hash: k+dckJef8uAl2tggOKFrpt5ypzOEodrfcc+zZEAtNyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:f0:86:f0:0a:ea:be:49:60:4c:b3:e4:1c:7a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d9656d5867b43ce506445290bba705722260586 Validity Not Before: Dec 6 01:02:56 2025 GMT Not After : Dec 7 01:02:56 2025 GMT Subject: CN=683313864d851b7855a93d9151c488861a0a36a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:31:13:b4:72:f2:b9:0d:05:a1:b8:4f:18:f7: 4e:90:7a:ae:a0:44:bd:f8:a7:ac:b6:63:73:6d:eb: 79:56:2f:d9:13:bd:2c:44:2f:97:b1:28:b7:f5:39: e2:5d:f4:bb:8d:21:1d:1c:6c:7e:1d:a5:e5:4c:f6: c6:03:98:b8:7e:e4:0c:b3:9d:b8:cf:c6:58:38:7f: 9a:cf:0a:48:15:12:b9:a5:93:d5:ef:e6:65:fe:77: 43:7d:fd:83:3a:30:57:68:0c:2f:04:eb:c2:5d:a7: 99:a3:77:7e:29:e9:18:82:1c:ba:04:cc:c9:3a:54: 41:b1:52:7b:5d:53:e0:85:b3:a4:eb:a8:9d:5f:cf: 11:80:64:4d:66:cd:b6:04:f5:03:7e:44:c6:37:f6: b2:03:89:0b:9f:bc:ac:a2:b4:8d:a3:96:39:33:05: d2:2d:74:0d:19:36:60:43:d6:3b:96:f6:9d:6c:b9: e3:00:7d:5a:8e:ca:83:41:0b:87:87:8d:e6:53:f9: a8:3d:17:93:22:aa:f7:03:bb:e1:15:d6:45:ce:b9: 6b:6f:4c:41:a6:86:c0:0e:75:81:80:4e:97:98:aa: 79:69:f4:06:ad:f0:58:c5:c2:6c:fe:0a:ed:a4:a6: 54:9c:4f:b4:cb:6a:6c:92:3e:e8:f6:e4:c3:fc:d8: 79:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:33:13:86:4D:85:1B:78:55:A9:3D:91:51:C4:88:86:1A:0A:36:A4 X509v3 Authority Key Identifier: keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:40:9c:89:89:f5:91:17:18:58:80:57:08:37:9a:70:24:53: 18:0a:8e:0c:b2:7a:a7:9a:69:44:ef:e1:f1:dd:5d:35:1d:90: 38:af:9f:d7:21:20:36:37:23:e4:12:29:bb:7f:f2:b4:98:38: db:7f:69:16:b6:78:b9:63:34:8d:51:60:89:c4:6e:d0:09:74: 96:93:46:c3:de:0b:34:a7:5c:8b:4a:af:4d:f9:89:f8:0f:5e: 34:05:4a:c7:f2:95:97:66:29:d9:3a:54:3a:dc:17:2d:63:20: bc:b1:6d:1e:8f:bd:d9:70:12:02:8f:1e:d1:95:37:60:aa:9c: 23:8d:cf:24:ab:38:bf:cf:df:be:41:37:59:e7:ad:74:f9:5b: 72:6f:d1:5c:47:91:eb:a0:1d:c3:f8:67:12:af:38:13:13:8d: 68:29:02:a9:c5:ef:61:ba:8d:89:97:08:0e:14:1e:79:99:c0: 3f:dc:94:93:f2:87:91:ef:84:ae:8d:6a:05:c7:66:d3:7e:62: e1:dd:f3:cc:26:3e:95:4d:00:d5:1d:a4:bf:7f:47:0a:b7:d8: 11:10:cf:c4:c1:02:8d:36:ef:1c:4b:83:41:15:0e:04:b2:cd: 86:11:26:15:5a:9c:80:ab:87:ef:14:77:f9:75:b0:89:1e:d4: 00:cf:6a:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvCG8ArqvklgTLPkHHpdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOTY1NmQ1ODY3YjQzY2U1MDY0NDUyOTBiYmE3MDU3MjIy NjA1ODYwHhcNMjUxMjA2MDEwMjU2WhcNMjUxMjA3MDEwMjU2WjAzMTEwLwYDVQQD Eyg2ODMzMTM4NjRkODUxYjc4NTVhOTNkOTE1MWM0ODg4NjFhMGEzNmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizETtHLyuQ0FobhPGPdOkHquoES9 +KestmNzbet5Vi/ZE70sRC+XsSi39TniXfS7jSEdHGx+HaXlTPbGA5i4fuQMs524 z8ZYOH+azwpIFRK5pZPV7+Zl/ndDff2DOjBXaAwvBOvCXaeZo3d+KekYghy6BMzJ OlRBsVJ7XVPghbOk66idX88RgGRNZs22BPUDfkTGN/ayA4kLn7ysorSNo5Y5MwXS LXQNGTZgQ9Y7lvadbLnjAH1ajsqDQQuHh43mU/moPReTIqr3A7vhFdZFzrlrb0xB pobADnWBgE6XmKp5afQGrfBYxcJs/grtpKZUnE+0y2pskj7o9uTD/Nh5JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgzE4ZNhRt4Vak9kVHEiIYaCjakMB8GA1UdIwQY MBaAFH2WVtWGe0POUGRFKQu6cFciJgWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlpaVzFZWjdRODVRWkVVcEM3cHdWeUltQllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iMGYzMWQtYjRiZi00NTBkLTlhY2Qt MGE2YjUzNmM0Mzk0LzEvZlpaVzFZWjdRODVRWkVVcEM3cHdWeUltQllZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iMGYzMWQtYjRiZi00NTBkLTlhY2QtMGE2YjUzNmM0Mzk0 LzEvZlpaVzFZWjdRODVRWkVVcEM3cHdWeUltQllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgECciYn1 kRcYWIBXCDeacCRTGAqODLJ6p5ppRO/h8d1dNR2QOK+f1yEgNjcj5BIpu3/ytJg4 239pFrZ4uWM0jVFgicRu0Al0lpNGw94LNKdci0qvTfmJ+A9eNAVKx/KVl2Yp2TpU OtwXLWMgvLFtHo+92XASAo8e0ZU3YKqcI43PJKs4v8/fvkE3WeetdPlbcm/RXEeR 66Adw/hnEq84ExONaCkCqcXvYbqNiZcIDhQeeZnAP9yUk/KHke+Ero1qBcdm035i 4d3zzCY+lU0A1R2kv39HCrfYERDPxMECjTbvHEuDQRUOBLLNhhEmFVqcgKuH7xR3 +XWwiR7UAM9qzw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:09 2025 by rpki-client