This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft File: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft (raw, json) Hash identifier: SLVeANbsnWaxEZmyw+zZpdzEzR+CpM+en7slLDSlNOA= Subject key identifier: DD:01:1D:E1:F8:57:DB:9A:5D:1B:DE:A5:83:B1:36:BF:5C:4C:18:5D Authority key identifier: 67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC Certificate issuer: /CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac Certificate serial: 019AF164400C40F0BF7B4F0CC4ECA83C66C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft Manifest number: 1280 Signing time: Sat 06 Dec 2025 02:01:10 +0000 Manifest this update: Sat 06 Dec 2025 02:01:10 +0000 Manifest next update: Sun 07 Dec 2025 02:01:10 +0000 Files and hashes: 1: 4nY9ANf4EVr4RYiqxYiIP5YrsGA.roa (hash: KpMPrAJwKfQpF/Ebmkogzzx0/khONPsTM4gj0VRrnV8=) 2: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl (hash: FujR9CqJW5Ej5Xbc5R7iWNALSkii6hTPv4T58Dg9+/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:40:0c:40:f0:bf:7b:4f:0c:c4:ec:a8:3c:66:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac Validity Not Before: Dec 6 02:01:10 2025 GMT Not After : Dec 7 02:01:10 2025 GMT Subject: CN=dd011de1f857db9a5d1bdea583b136bf5c4c185d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:4d:19:db:12:ac:6a:9a:d7:3a:57:aa:9d: d3:5d:08:94:71:c6:b6:bb:d7:a8:b5:6a:95:93:58: f4:a6:1b:38:e9:17:6b:2f:00:00:46:39:fb:a9:94: c8:fc:33:b7:24:02:da:ff:6c:04:7f:21:95:b4:fa: 4c:f9:15:e5:8a:a1:4b:14:1a:24:b9:6f:c2:8e:9c: ee:40:57:b8:99:60:f6:42:d1:a7:7c:a3:ce:43:a2: 56:bd:94:e9:67:81:13:92:ec:04:ed:95:19:08:4c: 99:6e:22:95:67:54:70:3e:c2:18:02:77:f6:d3:27: e7:02:7c:fd:69:c4:b0:a5:d2:5f:c3:9f:f3:6c:8a: 83:f3:01:0a:cf:2e:b9:0a:a0:eb:c4:c9:3a:97:d0: 28:cf:da:dd:b0:47:1c:60:12:ad:de:06:a4:7c:e9: 27:af:75:1d:9a:c1:f1:c6:0b:b9:da:25:6a:10:d5: ac:ed:73:6a:2e:64:4e:79:cd:d4:8d:79:03:67:cc: e6:b2:8a:91:cf:da:37:0f:a6:87:11:8c:61:69:e3: 4f:8f:82:87:1e:78:37:27:33:9c:fe:be:3f:03:56: a6:c4:cc:6a:fa:9e:23:68:fc:59:5f:05:e1:57:77: c3:bc:59:79:0e:e3:d4:e8:7f:9f:a2:60:a6:d0:74: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:01:1D:E1:F8:57:DB:9A:5D:1B:DE:A5:83:B1:36:BF:5C:4C:18:5D X509v3 Authority Key Identifier: keyid:67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:61:23:46:59:dc:25:4b:40:ba:5e:49:e9:d3:4e:f2:0a:ee: f2:ce:16:79:18:ec:b7:8d:d1:9e:95:76:bd:7b:32:7d:6c:37: fc:71:3e:57:86:a2:60:21:ba:63:d0:81:c0:81:f2:47:35:d7: 73:97:dd:f2:b7:78:0a:69:20:8b:61:80:54:46:6b:15:c5:a1: c8:24:27:70:44:3c:42:59:0f:c9:8e:ac:e6:3b:a6:12:a2:88: f8:ea:b0:a1:07:c5:eb:47:e9:bc:f9:54:d8:a0:de:13:d6:bc: 7c:7d:5e:7d:c1:3a:2d:e3:d5:8a:17:9b:1a:a9:ae:c2:98:02: fb:f8:2b:cf:c8:97:70:10:d5:cf:4a:a4:5c:f7:1b:09:02:9c: 71:4b:28:ff:90:03:12:5f:7f:aa:97:39:cf:e6:ae:e6:f7:f7: 1f:42:93:20:b1:5f:92:30:48:9d:37:38:7b:13:ab:b0:e2:d0: dd:f5:c3:b8:3a:79:fe:46:4e:6e:aa:c5:ab:91:4d:bc:8e:55: 21:3a:a6:e7:f9:f8:c9:8c:8d:b3:b1:ff:2d:54:5a:6b:90:3a: 12:0e:78:28:29:8d:05:a9:e6:01:c1:5a:2a:ec:7c:77:df:3b: ab:b2:2d:4e:f2:bb:6e:ff:c0:53:e3:35:66:2e:b7:ef:07:39: 66:52:3d:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEAMQPC/e08MxOyoPGbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MTNiOWMwNGNhNjk4YzBiN2ZhZmQxZDE3ZmMwNjhiNzA5 OWY2YWMwHhcNMjUxMjA2MDIwMTEwWhcNMjUxMjA3MDIwMTEwWjAzMTEwLwYDVQQD EyhkZDAxMWRlMWY4NTdkYjlhNWQxYmRlYTU4M2IxMzZiZjVjNGMxODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMpNGdsSrGqa1zpXqp3TXQiUcca2 u9eotWqVk1j0phs46RdrLwAARjn7qZTI/DO3JALa/2wEfyGVtPpM+RXliqFLFBok uW/CjpzuQFe4mWD2QtGnfKPOQ6JWvZTpZ4ETkuwE7ZUZCEyZbiKVZ1RwPsIYAnf2 0yfnAnz9acSwpdJfw5/zbIqD8wEKzy65CqDrxMk6l9Aoz9rdsEccYBKt3gakfOkn r3UdmsHxxgu52iVqENWs7XNqLmROec3UjXkDZ8zmsoqRz9o3D6aHEYxhaeNPj4KH Hng3JzOc/r4/A1amxMxq+p4jaPxZXwXhV3fDvFl5DuPU6H+fomCm0HQJXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0BHeH4V9uaXRvepYOxNr9cTBhdMB8GA1UdIwQY MBaAFGcTucBMppjAt/r9HRf8BotwmfasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81MGY5ZTUtOTEzYy00YmU2LTk5NDkt NGM4YWQ3YzQ2MjAzLzEvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS81MGY5ZTUtOTEzYy00YmU2LTk5NDktNGM4YWQ3YzQ2MjAz LzEvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2EjRlnc JUtAul5J6dNO8gru8s4WeRjst43RnpV2vXsyfWw3/HE+V4aiYCG6Y9CBwIHyRzXX c5fd8rd4Cmkgi2GAVEZrFcWhyCQncEQ8QlkPyY6s5jumEqKI+OqwoQfF60fpvPlU 2KDeE9a8fH1efcE6LePVihebGqmuwpgC+/grz8iXcBDVz0qkXPcbCQKccUso/5AD El9/qpc5z+au5vf3H0KTILFfkjBInTc4exOrsOLQ3fXDuDp5/kZObqrFq5FNvI5V ITqm5/n4yYyNs7H/LVRaa5A6Eg54KCmNBanmAcFaKux8d987q7ItTvK7bv/AU+M1 Zi637wc5ZlI9dA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:11 2025 by rpki-client