This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft File: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft (raw, json) Hash identifier: 3S/ktTjRpT8Y44ee5v6Kmbh3ycD91v0CoIPG/J7u/VY= Subject key identifier: DF:19:67:25:26:A9:2A:B0:EE:88:D9:EA:7C:E6:96:EA:E0:57:DA:5B Authority key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4 Certificate issuer: /CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4 Certificate serial: 019AF12CC09E3DC0EEDC36FE4461A9A9C751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft Manifest number: 02E9 Signing time: Sat 06 Dec 2025 01:00:33 +0000 Manifest this update: Sat 06 Dec 2025 01:00:33 +0000 Manifest next update: Sun 07 Dec 2025 01:00:33 +0000 Files and hashes: 1: 1-YCQCphk32b8tDaXBmol_BTFhAA.roa (hash: vDe37BPFiFzh2DmP54Y2HTtv1UAWo0nqbWO5t7R6/68=) 2: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl (hash: 3hu2VfTFxN5IEU107GiC0Ju7nLm3MRQEaKgVLQsMFDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c0:9e:3d:c0:ee:dc:36:fe:44:61:a9:a9:c7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4 Validity Not Before: Dec 6 01:00:33 2025 GMT Not After : Dec 7 01:00:33 2025 GMT Subject: CN=df19672526a92ab0ee88d9ea7ce696eae057da5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9f:a4:64:00:b4:f3:ea:69:eb:1e:ba:b4:e2: 3f:9d:62:6b:ba:8f:31:fd:17:e6:26:6e:b6:a0:f5: 79:52:c3:bc:92:15:5e:39:0d:4d:0c:68:14:8d:dd: ea:c6:37:57:4c:d8:86:e1:62:6e:93:da:2b:ba:ba: 67:f2:d7:10:4b:86:20:08:9b:e5:38:ec:4a:35:59: f9:78:27:4a:d7:1b:de:dd:10:ce:3e:c5:3f:16:5a: a8:60:8f:cb:84:c2:b5:5c:25:07:34:8b:84:46:ff: 79:d6:c0:e3:b4:9b:3a:dc:69:05:39:8e:d8:14:d7: b7:cf:69:04:f8:18:48:d0:69:12:34:c7:50:db:61: 6b:d3:df:84:ac:93:94:c7:5f:c5:4c:1d:4b:7a:06: c8:49:86:e1:ad:76:87:cf:02:bb:f7:2e:ec:f3:ff: ea:d2:b4:3b:10:c4:35:ea:34:e8:25:e0:b4:bd:6a: e5:6b:27:b1:91:b4:3e:dc:a3:dc:86:98:35:3a:c2: 22:1c:8f:d3:0d:76:51:7b:52:64:22:fb:d5:a0:e5: d6:11:91:b6:68:1a:27:fa:e1:61:9a:a1:1d:f4:5d: 56:4d:1a:d3:a5:8f:ed:f8:99:1c:1c:cb:ca:7d:83: 0c:5b:0d:08:cd:9c:e5:af:41:7d:e6:7f:15:1b:0d: dd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:19:67:25:26:A9:2A:B0:EE:88:D9:EA:7C:E6:96:EA:E0:57:DA:5B X509v3 Authority Key Identifier: keyid:CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:cd:9b:47:5b:ad:d7:47:46:9d:aa:0a:03:a7:b3:b7:3f:af: 46:05:ba:89:f8:85:47:e5:ba:f9:e2:a8:45:95:43:55:1c:8d: 42:14:88:e2:ed:e9:9b:d0:28:e6:91:55:ac:9b:f6:4b:4a:8b: 15:91:20:6e:6b:94:87:2e:43:17:d0:2d:d4:7a:02:b6:9b:53: a6:b5:64:a8:d4:c7:3a:a8:97:ad:1d:bb:e5:d0:04:f5:b2:5b: 8d:a1:54:03:6e:d3:32:ca:b5:77:31:47:5b:8d:16:c1:41:25: b6:27:85:6d:1d:88:35:0d:78:7b:cc:c3:63:26:3f:2f:5b:1c: 28:21:98:c4:d1:85:72:be:e7:15:cd:1f:60:31:25:1b:ff:4e: bf:11:c9:60:6b:cb:cd:6b:d0:ac:3b:42:b6:b0:1b:6c:13:87: 82:6c:5c:b4:dc:f8:2f:17:ca:13:d1:90:d3:3f:b3:f3:f6:18: 6d:6b:f8:aa:94:0f:50:61:bb:06:dc:ab:58:e2:7e:33:f0:a8: 25:f7:39:49:a0:e2:12:8c:42:84:55:7d:cc:19:86:cc:a1:c3: fe:17:b9:26:68:0a:7a:be:71:f8:6c:81:e1:53:bd:8f:1a:55: fe:14:d8:d5:d8:ca:57:43:5d:0c:b4:4d:54:de:55:d6:2f:15: f7:64:0e:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMCePcDu3Db+RGGpqcdRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMWE5ZjcyOTM4OGMxNjliYWNjMWNiYWY5OGUyMzZkNGU4 MDhhYjQwHhcNMjUxMjA2MDEwMDMzWhcNMjUxMjA3MDEwMDMzWjAzMTEwLwYDVQQD EyhkZjE5NjcyNTI2YTkyYWIwZWU4OGQ5ZWE3Y2U2OTZlYWUwNTdkYTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp+kZAC08+pp6x66tOI/nWJruo8x /RfmJm62oPV5UsO8khVeOQ1NDGgUjd3qxjdXTNiG4WJuk9orurpn8tcQS4YgCJvl OOxKNVn5eCdK1xve3RDOPsU/FlqoYI/LhMK1XCUHNIuERv951sDjtJs63GkFOY7Y FNe3z2kE+BhI0GkSNMdQ22Fr09+ErJOUx1/FTB1LegbISYbhrXaHzwK79y7s8//q 0rQ7EMQ16jToJeC0vWrlayexkbQ+3KPchpg1OsIiHI/TDXZRe1JkIvvVoOXWEZG2 aBon+uFhmqEd9F1WTRrTpY/t+JkcHMvKfYMMWw0IzZzlr0F95n8VGw3d0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8ZZyUmqSqw7ojZ6nzmlurgV9pbMB8GA1UdIwQY MBaAFMwan3KTiMFpuswcuvmOI21OgIq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NzFjNmItMGYyNi00YzQzLWEwYWEt N2ZmYzRmNDAzNjZhLzEvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84NzFjNmItMGYyNi00YzQzLWEwYWEtN2ZmYzRmNDAzNjZh LzEvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqc2bR1ut 10dGnaoKA6eztz+vRgW6ifiFR+W6+eKoRZVDVRyNQhSI4u3pm9Ao5pFVrJv2S0qL FZEgbmuUhy5DF9At1HoCtptTprVkqNTHOqiXrR275dAE9bJbjaFUA27TMsq1dzFH W40WwUEltieFbR2INQ14e8zDYyY/L1scKCGYxNGFcr7nFc0fYDElG/9OvxHJYGvL zWvQrDtCtrAbbBOHgmxctNz4LxfKE9GQ0z+z8/YYbWv4qpQPUGG7BtyrWOJ+M/Co Jfc5SaDiEoxChFV9zBmGzKHD/he5JmgKer5x+GyB4VO9jxpV/hTY1djKV0NdDLRN VN5V1i8V92QOMA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:12 2025 by rpki-client