This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json) Hash identifier: XUyYvHbIzNkd7vdfmGJISt6d6gm6kj4m1KjGfthYm00= Subject key identifier: 74:C2:F3:9F:D4:A9:62:35:F8:CC:86:27:4C:07:78:F9:23:54:C1:0B Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54 Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54 Certificate serial: 019AF2AD945FE0BEDC3B0E668F7A77253EBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft Manifest number: 0AA5 Signing time: Sat 06 Dec 2025 08:00:53 +0000 Manifest this update: Sat 06 Dec 2025 08:00:53 +0000 Manifest next update: Sun 07 Dec 2025 08:00:53 +0000 Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: QBBlv/Tp5J4w1/kpsAD/SEXxdmx5ShctNO4em7SL1tM=) 2: up0oav0rMtPMOzsYSRDujbJ3KTk.roa (hash: Rkvar+Ei1oJWKXR7rGewiiIwzRWDihGhTVyjbmAYcXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:94:5f:e0:be:dc:3b:0e:66:8f:7a:77:25:3e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54 Validity Not Before: Dec 6 08:00:53 2025 GMT Not After : Dec 7 08:00:53 2025 GMT Subject: CN=74c2f39fd4a96235f8cc86274c0778f92354c10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:c7:f3:70:44:09:f7:13:ec:f8:cf:ba:c3: 37:b8:d8:23:29:ce:19:fc:3d:09:69:05:c4:58:dc: 41:ce:a9:06:fc:f1:60:4a:af:66:95:fa:69:82:75: b2:4a:df:e7:f4:8d:20:2b:77:b1:9c:41:29:af:63: d7:95:d0:05:55:73:d9:4e:2a:c5:62:c0:7c:5f:93: ee:bf:94:90:c5:66:e4:76:9d:70:ea:19:48:a8:df: 6b:a6:76:9c:c6:a9:95:1e:b1:38:b2:10:15:14:2d: c9:90:4b:3d:d8:c2:72:6a:e5:f0:fd:1f:b5:d2:fa: 8b:3e:f7:8f:86:3d:54:09:ca:21:97:82:17:a0:07: 34:a9:d8:c0:f8:22:da:c4:70:03:5b:a6:8e:c8:cc: c0:20:86:9e:b4:d2:8f:46:ac:2d:08:d9:5d:a5:8d: 80:67:c6:e2:95:00:72:10:e9:ae:65:64:fa:fd:44: 05:7e:84:d3:5c:e7:9b:f6:51:7b:0f:75:5c:2a:c5: d4:44:b0:70:1c:72:98:ed:b0:a8:c1:90:e5:b5:d9: ab:9d:ee:a0:63:c7:8a:2f:1f:ed:b1:c6:67:3d:9a: b6:81:39:62:bf:70:fe:7b:c4:a4:ba:62:20:20:56: 6e:6c:e0:c6:92:6a:3c:a7:00:29:49:03:88:f6:5d: 31:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C2:F3:9F:D4:A9:62:35:F8:CC:86:27:4C:07:78:F9:23:54:C1:0B X509v3 Authority Key Identifier: keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:a6:4c:ea:2a:e5:b0:0a:62:68:05:06:cb:d4:d3:a3:1c:ed: 13:00:2d:2a:f0:dc:92:85:6e:cc:a7:3c:76:7c:6e:d7:a8:89: df:c1:d2:6f:4e:e4:31:3e:7c:0f:c8:41:d3:b2:4f:94:4f:81: 0e:8d:5c:7d:98:7c:87:ba:13:c9:7b:73:40:01:63:3a:3d:90: 24:9b:74:23:b7:56:89:8c:b6:a1:04:20:24:4e:6b:c9:64:24: 70:6f:d1:6b:1d:e7:5b:0f:3d:0c:55:c2:4e:dc:4d:f3:be:dc: 87:4d:49:cf:ca:51:24:fa:79:9c:33:94:90:c5:8a:eb:01:b6: 73:4e:b8:37:3e:11:1a:a0:6f:ba:6f:a6:2b:3b:34:44:e0:59: 05:61:f5:fc:4e:83:b3:75:c2:b9:6a:65:1b:b9:76:af:19:82: 73:29:42:0b:97:e7:27:87:9d:6f:83:9a:e9:bf:bf:bf:a0:8b: b0:ef:5c:5f:c5:84:e9:b1:57:68:a1:a8:eb:24:4c:2a:cd:b6: f6:47:f2:8a:6c:45:02:af:6a:b1:ed:1c:fa:0e:15:5f:26:c6: e7:b1:cb:a5:2a:91:5f:04:b8:2c:58:70:fd:b5:57:50:b8:fa: d8:8b:35:db:67:46:43:69:12:1c:82:15:ef:f1:7f:86:a7:aa: 45:34:b9:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZRf4L7cOw5mj3p3JT66MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmM3YTRlOWYwMmIyZjRlNjY0ZDdkMGQ3MmE1MmU1MTI2 MWRlNTQwHhcNMjUxMjA2MDgwMDUzWhcNMjUxMjA3MDgwMDUzWjAzMTEwLwYDVQQD Eyg3NGMyZjM5ZmQ0YTk2MjM1ZjhjYzg2Mjc0YzA3NzhmOTIzNTRjMTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5DH83BECfcT7PjPusM3uNgjKc4Z /D0JaQXEWNxBzqkG/PFgSq9mlfppgnWySt/n9I0gK3exnEEpr2PXldAFVXPZTirF YsB8X5Puv5SQxWbkdp1w6hlIqN9rpnacxqmVHrE4shAVFC3JkEs92MJyauXw/R+1 0vqLPvePhj1UCcohl4IXoAc0qdjA+CLaxHADW6aOyMzAIIaetNKPRqwtCNldpY2A Z8bilQByEOmuZWT6/UQFfoTTXOeb9lF7D3VcKsXURLBwHHKY7bCowZDltdmrne6g Y8eKLx/tscZnPZq2gTliv3D+e8SkumIgIFZubODGkmo8pwApSQOI9l0xQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTC85/UqWI1+MyGJ0wHePkjVMELMB8GA1UdIwQY MBaAFGQsek6fArL05mTX0NcqUuUSYd5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYt NWUwMmM0NjUzZTUwLzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYtNWUwMmM0NjUzZTUw LzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKZM6irl sApiaAUGy9TToxztEwAtKvDckoVuzKc8dnxu16iJ38HSb07kMT58D8hB07JPlE+B Do1cfZh8h7oTyXtzQAFjOj2QJJt0I7dWiYy2oQQgJE5ryWQkcG/Rax3nWw89DFXC TtxN877ch01Jz8pRJPp5nDOUkMWK6wG2c064Nz4RGqBvum+mKzs0ROBZBWH1/E6D s3XCuWplG7l2rxmCcylCC5fnJ4edb4Oa6b+/v6CLsO9cX8WE6bFXaKGo6yRMKs22 9kfyimxFAq9qse0c+g4VXybG57HLpSqRXwS4LFhw/bVXULj62Is122dGQ2kSHIIV 7/F/hqeqRTS52g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:24 2025 by rpki-client