This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft File: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft (raw, json) Hash identifier: r+HoClWXuLLr+Czy+vzW68yR9N4NQ0DA0Y1KlIWCp84= Subject key identifier: 6C:02:23:AA:5C:1C:8C:A1:C6:A8:1A:93:57:57:9B:C5:AB:75:DC:5E Authority key identifier: 65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D Certificate issuer: /CN=65cd7803f41fe499e800664e0aacadee19b66d9d Certificate serial: 019AF12E27F27860006D14F209F8ABA00207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:05 +0000 Manifest this update: Sat 06 Dec 2025 01:02:05 +0000 Manifest next update: Sun 07 Dec 2025 01:02:05 +0000 Files and hashes: 1: OYSQ0B4bWIaFBDGeUbIro8GjNIM.roa (hash: ArDmycoBPumVopAcq7qMWyEpeGKW74OE/HKNZi11EfI=) 2: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl (hash: rqau2CQpmHhSkhQhR3fY98YVnuP09YhasRC6pub65rQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:27:f2:78:60:00:6d:14:f2:09:f8:ab:a0:02:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65cd7803f41fe499e800664e0aacadee19b66d9d Validity Not Before: Dec 6 01:02:05 2025 GMT Not After : Dec 7 01:02:05 2025 GMT Subject: CN=6c0223aa5c1c8ca1c6a81a9357579bc5ab75dc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:03:00:02:e5:85:38:ff:6f:79:0e:ef:59:0f: 0d:eb:e8:4a:4b:11:fc:2d:f1:46:21:e6:97:0c:3c: cb:94:8a:5e:9f:f2:82:fe:21:94:56:64:56:2c:07: 5e:10:83:ba:ac:e3:3f:a3:cc:89:3d:46:e8:4f:65: aa:59:69:8d:44:db:f1:45:0e:c4:47:51:05:a3:9a: aa:ba:0d:53:d2:10:1e:2c:e6:da:f4:c4:5b:7d:38: 1c:0d:74:ee:09:51:69:a5:64:62:3e:f3:91:da:a7: 37:95:67:cf:f0:f5:4c:f1:ec:65:1a:08:56:3b:e5: 16:57:20:80:fa:3b:32:b2:b2:fd:fd:59:1a:a1:15: 44:df:25:1e:43:70:e5:fa:76:8a:dd:fa:71:8c:a4: 2b:10:30:90:a4:88:08:89:3e:4a:cc:52:59:6a:28: 28:c4:ee:36:fc:76:95:e2:db:92:83:25:55:ec:66: 4b:e0:b7:66:44:91:ae:95:87:68:9a:7e:96:20:52: 40:9b:31:02:fa:1b:5d:f9:dd:61:a3:4a:09:b4:af: 61:c1:e3:b0:e4:e1:70:a3:ff:81:da:25:95:c3:b8: 0a:41:a9:32:20:da:30:26:a7:40:4b:c0:7c:7c:56: 7d:25:b7:7b:e0:01:4e:c5:48:c1:75:1d:1a:26:a8: ea:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:02:23:AA:5C:1C:8C:A1:C6:A8:1A:93:57:57:9B:C5:AB:75:DC:5E X509v3 Authority Key Identifier: keyid:65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:bd:b9:05:8b:c3:87:10:15:a3:fc:a1:71:e9:57:04:76:41: 74:5e:ed:ac:b0:ad:0b:f9:31:50:11:20:fa:2f:a0:c9:3a:60: fa:54:23:ef:a9:2a:b2:71:0c:96:6d:2c:2d:1e:ec:33:a3:a4: 81:f0:d9:a9:ed:cd:9e:51:f2:1a:75:13:df:2e:15:19:73:81: 14:9f:c7:5f:0b:31:c0:df:89:99:d6:8a:00:ce:0e:3a:8c:d7: 7d:ec:dd:65:9e:05:5c:c1:33:54:a3:40:cf:23:d9:54:96:31: 2b:fe:b0:5c:bc:e6:82:d0:85:cf:66:90:07:1b:5d:2e:f6:0e: 98:aa:d7:90:0b:d7:f1:24:32:98:01:b2:ef:de:c5:31:11:4b: 13:61:36:d0:6f:4b:5b:53:c9:b4:c1:e9:c3:02:72:49:57:f2: 91:e6:fe:3a:0c:b2:8b:44:23:c0:96:70:a1:a2:47:eb:11:bd: 2d:67:2f:18:f4:ab:77:73:22:9b:59:53:42:5b:8d:ad:80:c9: 3a:ca:1a:7a:d9:75:89:32:7b:89:6f:65:a6:f6:93:1c:c5:ed: d3:e9:92:6e:f8:06:7a:11:78:a2:20:4b:c0:39:43:88:34:03: cb:65:66:39:02:05:48:2c:4e:0a:7e:e5:07:50:2c:83:f4:a6: 29:8e:e2:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLifyeGAAbRTyCfiroAIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1Y2Q3ODAzZjQxZmU0OTllODAwNjY0ZTBhYWNhZGVlMTli NjZkOWQwHhcNMjUxMjA2MDEwMjA1WhcNMjUxMjA3MDEwMjA1WjAzMTEwLwYDVQQD Eyg2YzAyMjNhYTVjMWM4Y2ExYzZhODFhOTM1NzU3OWJjNWFiNzVkYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QMAAuWFOP9veQ7vWQ8N6+hKSxH8 LfFGIeaXDDzLlIpen/KC/iGUVmRWLAdeEIO6rOM/o8yJPUboT2WqWWmNRNvxRQ7E R1EFo5qqug1T0hAeLOba9MRbfTgcDXTuCVFppWRiPvOR2qc3lWfP8PVM8exlGghW O+UWVyCA+jsysrL9/VkaoRVE3yUeQ3Dl+naK3fpxjKQrEDCQpIgIiT5KzFJZaigo xO42/HaV4tuSgyVV7GZL4LdmRJGulYdomn6WIFJAmzEC+htd+d1ho0oJtK9hweOw 5OFwo/+B2iWVw7gKQakyINowJqdAS8B8fFZ9Jbd74AFOxUjBdR0aJqjqLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwCI6pcHIyhxqgak1dXm8WrddxeMB8GA1UdIwQY MBaAFGXNeAP0H+SZ6ABmTgqsre4Ztm2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lNjZmMDEtMWQ5ZC00NTEzLTk1NmEt Zjk2YmZiMDRlNjQ1LzEvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9lNjZmMDEtMWQ5ZC00NTEzLTk1NmEtZjk2YmZiMDRlNjQ1 LzEvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACr25BYvD hxAVo/yhcelXBHZBdF7trLCtC/kxUBEg+i+gyTpg+lQj76kqsnEMlm0sLR7sM6Ok gfDZqe3NnlHyGnUT3y4VGXOBFJ/HXwsxwN+JmdaKAM4OOozXfezdZZ4FXMEzVKNA zyPZVJYxK/6wXLzmgtCFz2aQBxtdLvYOmKrXkAvX8SQymAGy797FMRFLE2E20G9L W1PJtMHpwwJySVfykeb+Ogyyi0QjwJZwoaJH6xG9LWcvGPSrd3Mim1lTQluNrYDJ Osoaetl1iTJ7iW9lpvaTHMXt0+mSbvgGehF4oiBLwDlDiDQDy2VmOQIFSCxOCn7l B1Asg/SmKY7iMg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:43 2025 by rpki-client