This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json) Hash identifier: VCxK/kKP8rvieHsFL/u6Hrc2JugHbFTQjIN3nKWAx5k= Subject key identifier: 54:AF:ED:8F:74:15:C1:81:EA:87:4D:39:A7:63:1C:73:D6:28:2B:FA Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1 Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1 Certificate serial: 019AF50ADFC41E1CB3275C0EEF9A8FC9307C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft Manifest number: 10B6 Signing time: Sat 06 Dec 2025 19:02:01 +0000 Manifest this update: Sat 06 Dec 2025 19:02:01 +0000 Manifest next update: Sun 07 Dec 2025 19:02:01 +0000 Files and hashes: 1: 393YoA_-TG1rJW7pJiXVZZOcLRE.roa (hash: /h7+NJqveZtwZnIhU53gy4Hhcp46zP11eq1lYDwDpdg=) 2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: Ha8gr6K3swoXMTWhPcwtZCh8W4iv7GJY+JEelAZJomQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:df:c4:1e:1c:b3:27:5c:0e:ef:9a:8f:c9:30:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1 Validity Not Before: Dec 6 19:02:01 2025 GMT Not After : Dec 7 19:02:01 2025 GMT Subject: CN=54afed8f7415c181ea874d39a7631c73d6282bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:61:08:21:47:68:eb:55:cd:eb:0d:4b:96: 80:52:c9:8c:88:c6:ed:df:1a:79:a3:ab:a3:37:80: d4:32:9f:14:ab:9d:ba:11:11:64:2a:41:17:1c:c5: fb:05:0a:dd:76:e5:4a:19:a6:25:e7:b8:d4:1b:b1: db:02:4d:22:74:a2:6e:0d:9b:db:c5:22:03:f3:7b: 8d:d4:e0:22:53:1c:36:91:60:a0:b8:d2:6e:f1:16: 88:fc:52:ac:fe:78:e9:3a:09:5e:cb:d3:35:cb:42: 3f:a7:af:b8:d1:bd:b1:93:f9:f1:e5:3a:72:8b:fb: cd:1f:17:dc:ec:de:9a:09:3d:75:0a:02:cf:55:6e: 15:a4:12:90:56:d0:a8:f8:4d:f1:49:c7:f8:4b:6a: 05:99:bc:ce:af:87:bd:db:84:ce:e9:f7:26:10:f2: 66:63:72:89:65:cc:29:b2:f6:42:3c:9b:69:b3:4b: 01:ac:e1:a0:71:03:54:10:4e:e5:d7:75:c8:b1:64: 69:b5:15:26:af:07:6d:d4:e9:53:62:72:4e:27:1b: 27:4a:d3:a4:9c:ba:4e:24:f7:79:25:13:89:e7:b3: bd:dd:25:47:df:b9:d8:08:65:d9:96:0c:dd:1e:f6: e5:8b:00:aa:76:26:e8:0e:5b:e4:3d:16:69:14:e9: f8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AF:ED:8F:74:15:C1:81:EA:87:4D:39:A7:63:1C:73:D6:28:2B:FA X509v3 Authority Key Identifier: keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fc:d6:af:51:0e:6d:77:22:3b:5a:c0:a9:5d:c3:e6:06:47: d4:d2:4e:4b:fc:dd:55:49:ac:e9:ca:67:af:5b:ec:fb:14:51: 33:58:ab:e4:96:a1:34:02:4c:6a:96:ba:bd:0e:60:ed:4e:a2: bb:d1:05:d9:88:78:a1:51:38:28:1a:98:5a:1c:6e:0c:89:4e: d2:ac:8b:c8:4c:12:38:af:70:7d:fe:4f:b7:0d:28:bf:02:0e: 51:18:9e:78:0a:f6:19:cc:9a:3a:fb:60:ce:54:e8:2b:0c:a8: ca:32:c6:a4:60:85:31:50:fe:64:98:90:c6:1f:26:9f:7c:39: 90:6b:0a:e7:86:c5:cf:0f:0f:19:43:3b:71:5f:bf:7e:b0:8d: a5:ce:8c:bb:f4:3a:81:80:94:c3:47:6e:92:63:76:55:5d:a6: 91:c4:75:59:90:2f:94:49:14:83:fc:dd:f2:26:6d:d4:0a:2c: f2:82:ff:f8:b5:01:e2:c9:f3:1b:c5:5e:09:ba:5e:50:65:31: b2:db:0c:40:3d:42:81:cb:a8:30:9d:44:cd:b7:a2:f4:3d:45: 59:6a:84:ef:ee:35:bb:39:19:c0:79:20:97:cf:31:a6:f7:41: 8a:38:2b:b1:c7:cf:9c:50:43:77:3b:4a:de:30:ac:f5:02:38: 2a:0c:96:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ct/EHhyzJ1wO75qPyTB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOGU5YmUyNDhjNzQxYmE2YTI2YWM4Y2ZlMmMyYmI3YzJk N2EzYjEwHhcNMjUxMjA2MTkwMjAxWhcNMjUxMjA3MTkwMjAxWjAzMTEwLwYDVQQD Eyg1NGFmZWQ4Zjc0MTVjMTgxZWE4NzRkMzlhNzYzMWM3M2Q2MjgyYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfRhCCFHaOtVzesNS5aAUsmMiMbt 3xp5o6ujN4DUMp8Uq526ERFkKkEXHMX7BQrdduVKGaYl57jUG7HbAk0idKJuDZvb xSID83uN1OAiUxw2kWCguNJu8RaI/FKs/njpOgley9M1y0I/p6+40b2xk/nx5Tpy i/vNHxfc7N6aCT11CgLPVW4VpBKQVtCo+E3xScf4S2oFmbzOr4e924TO6fcmEPJm Y3KJZcwpsvZCPJtps0sBrOGgcQNUEE7l13XIsWRptRUmrwdt1OlTYnJOJxsnStOk nLpOJPd5JROJ57O93SVH37nYCGXZlgzdHvbliwCqdiboDlvkPRZpFOn4wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSv7Y90FcGB6odNOadjHHPWKCv6MB8GA1UdIwQY MBaAFM6Om+JIx0G6aiasjP4sK7fC16OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTIt OWZiOGUyNTQ1ZDczLzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTItOWZiOGUyNTQ1ZDcz LzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPzWr1EO bXciO1rAqV3D5gZH1NJOS/zdVUms6cpnr1vs+xRRM1ir5JahNAJMapa6vQ5g7U6i u9EF2Yh4oVE4KBqYWhxuDIlO0qyLyEwSOK9wff5Ptw0ovwIOURieeAr2GcyaOvtg zlToKwyoyjLGpGCFMVD+ZJiQxh8mn3w5kGsK54bFzw8PGUM7cV+/frCNpc6Mu/Q6 gYCUw0dukmN2VV2mkcR1WZAvlEkUg/zd8iZt1Aos8oL/+LUB4snzG8VeCbpeUGUx stsMQD1CgcuoMJ1Ezbei9D1FWWqE7+41uzkZwHkgl88xpvdBijgrscfPnFBDdztK 3jCs9QI4KgyWPg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:16:59 2025 by rpki-client