This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft File: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft (raw, json) Hash identifier: ChnheErB/V1H1tHp3ujMNOykK82v1z7Zz8aYHf429A0= Subject key identifier: 05:41:C7:FC:08:10:93:D0:13:89:72:21:16:8C:CA:7A:96:C2:13:B8 Authority key identifier: 67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC Certificate issuer: /CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac Certificate serial: 019B27777006A6E9678344DD75FB53ECF164 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft Manifest number: 129C Signing time: Tue 16 Dec 2025 14:01:37 +0000 Manifest this update: Tue 16 Dec 2025 14:01:37 +0000 Manifest next update: Wed 17 Dec 2025 14:01:37 +0000 Files and hashes: 1: 4nY9ANf4EVr4RYiqxYiIP5YrsGA.roa (hash: KpMPrAJwKfQpF/Ebmkogzzx0/khONPsTM4gj0VRrnV8=) 2: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl (hash: kjEC1OzW2SAzw+Z90hPwnxssWJ3PMS+Sm2mtsWlVkOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:70:06:a6:e9:67:83:44:dd:75:fb:53:ec:f1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac Validity Not Before: Dec 16 14:01:37 2025 GMT Not After : Dec 17 14:01:37 2025 GMT Subject: CN=0541c7fc081093d013897221168cca7a96c213b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c6:d4:73:26:79:00:ea:9f:0f:b8:e5:b3:36: 52:b6:01:ff:c2:de:4e:f3:80:e3:9f:e6:f8:7d:62: bd:51:e0:4e:e9:99:9a:48:25:ee:b4:44:8d:d7:30: 1c:8a:68:84:d1:89:d7:9e:4d:95:86:c2:61:00:3d: b5:41:ee:2a:ae:c8:75:fe:38:0a:02:3c:7f:b6:be: ac:77:c4:df:b1:9f:fd:7b:b1:85:85:0d:74:7e:a1: 62:92:23:7f:cb:0d:f6:1d:09:a4:3b:31:e5:49:88: 85:4b:9a:34:65:b4:b9:70:3f:d2:d0:fc:aa:21:2a: fd:26:4f:25:a8:fb:a2:52:1b:23:a0:f4:9d:54:e8: ae:ce:54:77:41:87:91:cc:a2:7f:f4:37:c0:93:fd: b5:73:cf:82:ab:00:14:86:38:64:cf:a4:19:da:fa: f7:40:14:32:aa:92:db:6d:60:8f:6e:8d:46:03:69: 6c:9a:3b:c0:22:f8:6c:0c:39:68:6e:89:6d:28:c9: 7e:86:6d:e4:ba:7d:fb:9b:a5:10:a6:c5:ce:9f:fe: 14:66:6c:22:c7:9c:24:00:9e:96:a9:44:6b:0c:d9: 78:de:3a:89:fe:07:f0:65:77:04:f4:59:81:16:98: 9d:8b:bc:53:87:0b:cb:46:6a:23:bf:09:00:28:7b: 53:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:41:C7:FC:08:10:93:D0:13:89:72:21:16:8C:CA:7A:96:C2:13:B8 X509v3 Authority Key Identifier: keyid:67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ef:ae:d9:ba:cd:dd:83:c4:24:d3:78:77:c6:d4:dd:63:36: 8c:75:55:9e:21:46:df:83:2b:60:e2:b5:75:50:ba:0f:f4:78: d2:a4:ac:47:0f:e3:a9:27:bf:a1:de:5a:da:b0:00:0a:cd:ca: d0:4d:b3:a8:0e:fe:19:8f:72:d5:1e:d6:c2:86:e9:df:78:aa: dd:db:54:e5:c5:f2:fa:68:8e:fe:0d:7c:71:0e:db:1a:10:cd: ec:dd:78:8c:20:68:fa:62:bb:38:62:8b:c1:5a:7f:1c:e0:68: 10:5e:c8:f5:d4:d5:3d:1b:db:15:73:23:04:af:a8:29:ce:c4: 69:19:76:2a:58:8d:42:6e:a1:84:8c:f7:4a:c6:1d:77:df:4f: c1:b3:3b:37:34:d7:4e:72:05:09:67:75:3e:22:fe:4f:45:09: 9f:e8:0c:5e:c0:d8:99:a0:9c:84:c5:9d:51:7c:11:8b:2f:59: 14:1a:77:e2:95:13:f7:91:49:fb:c2:87:4e:dd:53:3b:96:00: 52:c4:05:de:9e:1a:43:ce:87:71:87:8f:db:cf:f4:51:a5:89: c4:43:41:69:b8:f4:0c:f4:f8:a0:24:e8:72:3c:ac:83:d9:ba: cc:0f:a9:35:1c:31:b0:d3:32:b6:33:34:d4:78:da:32:10:96: ef:92:a4:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnd3AGpulng0TddftT7PFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MTNiOWMwNGNhNjk4YzBiN2ZhZmQxZDE3ZmMwNjhiNzA5 OWY2YWMwHhcNMjUxMjE2MTQwMTM3WhcNMjUxMjE3MTQwMTM3WjAzMTEwLwYDVQQD EygwNTQxYzdmYzA4MTA5M2QwMTM4OTcyMjExNjhjY2E3YTk2YzIxM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MbUcyZ5AOqfD7jlszZStgH/wt5O 84Djn+b4fWK9UeBO6ZmaSCXutESN1zAcimiE0YnXnk2VhsJhAD21Qe4qrsh1/jgK Ajx/tr6sd8TfsZ/9e7GFhQ10fqFikiN/yw32HQmkOzHlSYiFS5o0ZbS5cD/S0Pyq ISr9Jk8lqPuiUhsjoPSdVOiuzlR3QYeRzKJ/9DfAk/21c8+CqwAUhjhkz6QZ2vr3 QBQyqpLbbWCPbo1GA2lsmjvAIvhsDDloboltKMl+hm3kun37m6UQpsXOn/4UZmwi x5wkAJ6WqURrDNl43jqJ/gfwZXcE9FmBFpidi7xThwvLRmojvwkAKHtTcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVBx/wIEJPQE4lyIRaMynqWwhO4MB8GA1UdIwQY MBaAFGcTucBMppjAt/r9HRf8BotwmfasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81MGY5ZTUtOTEzYy00YmU2LTk5NDkt NGM4YWQ3YzQ2MjAzLzEvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS81MGY5ZTUtOTEzYy00YmU2LTk5NDktNGM4YWQ3YzQ2MjAz LzEvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUe+u2brN 3YPEJNN4d8bU3WM2jHVVniFG34MrYOK1dVC6D/R40qSsRw/jqSe/od5a2rAACs3K 0E2zqA7+GY9y1R7Wwobp33iq3dtU5cXy+miO/g18cQ7bGhDN7N14jCBo+mK7OGKL wVp/HOBoEF7I9dTVPRvbFXMjBK+oKc7EaRl2KliNQm6hhIz3SsYdd99PwbM7NzTX TnIFCWd1PiL+T0UJn+gMXsDYmaCchMWdUXwRiy9ZFBp34pUT95FJ+8KHTt1TO5YA UsQF3p4aQ86HcYeP28/0UaWJxENBabj0DPT4oCTocjysg9m6zA+pNRwxsNMytjM0 1HjaMhCW75Kk5g== -----END CERTIFICATE-----Generated at Tue Dec 16 17:58:24 2025 by rpki-client