This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json) Hash identifier: c6LD5vF3XUF1WbwigyXQuDM+NBtWvbAYqJgeFe88M1w= Subject key identifier: 4B:8D:81:7D:2F:70:0E:F1:CC:9A:36:A1:EA:13:0B:4B:9B:3E:DD:EA Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc Certificate serial: 019AF3F76E169D5AC0E342C81EE2113D220A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:01:10 +0000 Manifest this update: Sat 06 Dec 2025 14:01:10 +0000 Manifest next update: Sun 07 Dec 2025 14:01:10 +0000 Files and hashes: 1: DXSMQQoNY6zl2bbt_Qxl4yUZpo0.roa (hash: W1Qix1yXYt7eEDSw6BnO5hmas15FwfPB8Nypx8uQBss=) 2: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: slnXlDxhD12u2YTLOVYtPTRA72ie8bY5iDCNtINQwiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:6e:16:9d:5a:c0:e3:42:c8:1e:e2:11:3d:22:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc Validity Not Before: Dec 6 14:01:10 2025 GMT Not After : Dec 7 14:01:10 2025 GMT Subject: CN=4b8d817d2f700ef1cc9a36a1ea130b4b9b3eddea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3e:83:cf:77:47:c4:d9:5a:86:b2:52:df:4b: c5:2f:a3:79:7b:57:35:a7:d4:97:3f:d4:f8:82:cb: af:29:b0:d1:2a:2d:7c:03:1f:3c:a9:21:53:75:c0: 95:87:28:ec:30:4d:e7:7c:e1:2f:f2:da:a9:3b:0e: 89:7b:97:9b:d6:a6:c4:14:46:7e:62:29:b3:e8:38: ee:4c:7b:c5:6b:b8:8f:68:bf:94:57:84:8e:fe:d6: 0e:68:95:5e:f3:23:27:5f:e8:46:95:ca:8b:93:2f: 7e:d0:59:e0:21:28:b0:2e:f6:f3:68:7d:eb:52:c6: ad:2c:bc:86:63:d5:87:3b:11:fd:46:5c:ea:45:41: a8:d1:20:55:51:d8:be:ed:21:3e:66:0f:0b:60:9c: b2:62:04:11:12:27:b4:b6:ce:b5:c7:e1:98:04:5c: b1:a6:8e:9a:bc:c8:03:98:91:4c:72:39:aa:55:d8: c6:e6:ff:b1:91:3b:b4:f7:a9:21:77:dc:af:ad:85: 78:a5:5a:86:c1:c7:24:06:27:9d:4f:e7:8a:a9:41: b5:7f:ee:5d:ed:9c:c1:9d:27:c1:20:b0:11:b4:74: 1f:5a:ab:84:d7:00:b8:74:a4:36:f6:5a:fb:39:34: 22:57:58:5b:b0:de:61:ba:20:57:30:d9:d7:bc:9b: 9a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8D:81:7D:2F:70:0E:F1:CC:9A:36:A1:EA:13:0B:4B:9B:3E:DD:EA X509v3 Authority Key Identifier: keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:64:ca:07:21:72:d0:c4:11:ae:32:36:4e:92:74:66:ec:10: 47:e1:44:c8:d3:44:ec:74:55:f5:d2:7b:c3:64:f0:92:42:48: 97:5b:e6:34:65:c9:21:55:4b:7b:c8:2f:71:19:d1:57:35:a5: 81:c1:86:45:76:85:27:45:a9:35:93:d8:4d:94:38:93:5c:4f: f9:83:3d:18:c2:bf:a8:a0:91:84:b7:ed:85:a5:d1:01:21:0b: 45:38:3b:97:f6:44:46:17:f0:f6:9f:18:5b:58:3e:cb:63:4a: 6f:49:ea:78:ca:71:bf:96:44:1d:13:46:c9:19:f2:b3:d3:e9: 73:60:81:bb:d0:2c:87:c4:30:ff:88:55:c9:14:b7:dd:c8:1b: 25:ea:70:02:e0:e8:b3:2a:ad:ea:3e:aa:4d:cc:cb:ee:14:a6: 81:c5:01:e5:28:c4:9e:1f:bd:30:cb:10:2f:24:4a:8b:dc:a9: 8d:bf:db:0c:02:1a:96:fd:c3:06:ef:1e:b4:36:8e:5b:0e:50: 78:c2:c3:c4:e6:2f:9b:20:7d:ca:df:fa:4a:7a:31:25:bf:72: 20:31:d6:68:23:44:a9:58:a8:0e:29:15:47:db:3a:39:7f:6d: 8e:9f:f8:2d:70:08:a6:dc:54:11:42:31:f5:08:ae:2e:28:de: 1e:7f:24:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz924WnVrA40LIHuIRPSIKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YzI5MzM4MGJjNDFmNTJkOTEzMTU4NWE4NTgwMDM4Zjky ZjVkY2MwHhcNMjUxMjA2MTQwMTEwWhcNMjUxMjA3MTQwMTEwWjAzMTEwLwYDVQQD Eyg0YjhkODE3ZDJmNzAwZWYxY2M5YTM2YTFlYTEzMGI0YjliM2VkZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD6Dz3dHxNlahrJS30vFL6N5e1c1 p9SXP9T4gsuvKbDRKi18Ax88qSFTdcCVhyjsME3nfOEv8tqpOw6Je5eb1qbEFEZ+ Yimz6DjuTHvFa7iPaL+UV4SO/tYOaJVe8yMnX+hGlcqLky9+0FngISiwLvbzaH3r UsatLLyGY9WHOxH9RlzqRUGo0SBVUdi+7SE+Zg8LYJyyYgQREie0ts61x+GYBFyx po6avMgDmJFMcjmqVdjG5v+xkTu096khd9yvrYV4pVqGwcckBiedT+eKqUG1f+5d 7ZzBnSfBILARtHQfWquE1wC4dKQ29lr7OTQiV1hbsN5huiBXMNnXvJuarwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuNgX0vcA7xzJo2oeoTC0ubPt3qMB8GA1UdIwQY MBaAFGXCkzgLxB9S2RMVhahYADj5L13MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYt ZmU2ZGMxNzU4M2UzLzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYtZmU2ZGMxNzU4M2Uz LzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmTKByFy 0MQRrjI2TpJ0ZuwQR+FEyNNE7HRV9dJ7w2TwkkJIl1vmNGXJIVVLe8gvcRnRVzWl gcGGRXaFJ0WpNZPYTZQ4k1xP+YM9GMK/qKCRhLfthaXRASELRTg7l/ZERhfw9p8Y W1g+y2NKb0nqeMpxv5ZEHRNGyRnys9Ppc2CBu9Ash8Qw/4hVyRS33cgbJepwAuDo syqt6j6qTczL7hSmgcUB5SjEnh+9MMsQLyRKi9ypjb/bDAIalv3DBu8etDaOWw5Q eMLDxOYvmyB9yt/6SnoxJb9yIDHWaCNEqVioDikVR9s6OX9tjp/4LXAIptxUEUIx 9QiuLijeHn8kxw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:34:35 2025 by rpki-client