This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft File: zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json) Hash identifier: vXEvuXox73Uu4FoA2n9UkyCtallfVOS2M9Cv3S9J/eI= Subject key identifier: 9D:13:E9:BC:11:B0:55:9B:71:23:20:86:AE:49:87:E3:35:85:DE:25 Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3 Certificate issuer: /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3 Certificate serial: 019AF1D1A34FBF29F634ADD40BBAE07F0576 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 04:00:39 +0000 Manifest this update: Sat 06 Dec 2025 04:00:39 +0000 Manifest next update: Sun 07 Dec 2025 04:00:39 +0000 Files and hashes: 1: 1QFlrvAPCEY9CxtKdM8ySIJ2CQM.roa (hash: qOb1k95cjdyB0rlC/+JRqF7RzF8ycajnDjjrG1VLQhQ=) 2: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: /7SawI1NTDWj5qDoD+UjnK6Yg035h8ML03uEGmja/Bc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a3:4f:bf:29:f6:34:ad:d4:0b:ba:e0:7f:05:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3 Validity Not Before: Dec 6 04:00:39 2025 GMT Not After : Dec 7 04:00:39 2025 GMT Subject: CN=9d13e9bc11b0559b71232086ae4987e33585de25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5c:39:f5:a5:b4:ad:0b:ec:d2:a6:82:33:97: 12:72:cf:e3:0f:9a:cb:77:3f:4c:d9:d0:82:40:10: 76:ca:4b:d6:a1:71:fb:fe:82:e4:98:e0:44:db:02: 52:10:c5:e9:9d:9e:92:9b:b4:2e:02:c8:e9:c0:45: d4:e9:e7:25:8c:bd:52:b2:9d:9f:67:f5:dc:2d:92: 03:7a:54:bd:38:d4:11:dc:3d:f5:2f:97:a1:96:e0: 25:5a:ea:0f:e6:63:a2:2e:30:b4:27:dc:f5:ea:33: 77:69:2e:03:0c:8f:f8:4b:41:7e:b7:05:b1:a4:ad: 63:c6:d3:cd:ae:9e:8d:26:51:8d:7b:94:83:1d:39: 92:48:19:67:7a:2b:5d:aa:0a:4d:fc:92:3c:40:54: ac:ac:82:ea:1c:64:bd:77:5b:46:3c:40:95:62:ff: d0:9d:85:00:6a:b4:23:d0:50:5a:41:a1:7b:8d:80: 25:ee:7f:c0:fb:1f:17:8f:ac:75:1f:3e:e9:70:c8: f5:08:40:4e:ee:be:95:27:12:e4:d0:d1:ed:b7:47: 05:ea:52:d4:9a:3d:6e:81:7b:33:91:23:f8:2c:35: f4:de:38:c0:f3:7a:cf:55:a9:01:0e:da:d0:d3:ae: a4:fc:f2:d5:9f:4b:55:dc:ee:70:d0:50:27:04:40: b7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:13:E9:BC:11:B0:55:9B:71:23:20:86:AE:49:87:E3:35:85:DE:25 X509v3 Authority Key Identifier: keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:08:d2:68:e7:87:c8:f4:4e:2d:24:f1:b7:7a:59:32:fe:0a: 21:ba:54:41:d2:6c:93:30:43:5e:fe:40:b7:dd:04:85:9a:6e: a0:b5:c5:e6:c0:aa:b8:9c:94:a8:ab:01:f4:62:5d:a6:4f:92: 44:d0:1a:d6:63:b0:0c:bb:3c:9d:8a:85:60:c8:7f:60:bd:8c: b1:41:2e:a6:f0:d6:6e:8f:20:ba:13:88:ed:e1:4e:17:7e:84: 8b:fa:da:65:81:c5:f9:13:0c:1c:aa:1c:03:c9:9b:67:32:89: 7a:06:63:60:5a:19:94:fa:6a:40:b8:c1:86:57:65:bd:61:e0: 37:bf:c8:1d:9f:20:1a:05:52:8c:cc:0a:f9:f0:7a:3d:48:a0: 95:4e:f5:fa:f4:cf:f7:59:34:43:20:c8:1f:55:89:69:59:97: d1:dd:67:a5:31:3d:ab:70:eb:03:8c:43:a5:b9:52:37:d6:b9: 53:fc:c2:18:04:81:98:6c:41:9c:1c:65:98:88:09:46:3b:c3: 5d:b6:22:cd:7f:76:23:44:7b:60:d6:28:13:a7:e9:1e:84:23: a8:21:4d:f1:1e:c2:df:47:73:2d:07:5c:e3:0b:13:27:e5:39: 39:04:ab:83:11:4c:7b:21:b1:61:02:5a:b5:6b:7b:63:47:ba: 1d:79:f5:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aNPvyn2NK3UC7rgfwV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNmNhMDVjNGNiNjFkOWUyMzI5Mjk4ZDM1NGMyYTc2OWJk ZDA1ZDMwHhcNMjUxMjA2MDQwMDM5WhcNMjUxMjA3MDQwMDM5WjAzMTEwLwYDVQQD Eyg5ZDEzZTliYzExYjA1NTliNzEyMzIwODZhZTQ5ODdlMzM1ODVkZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFw59aW0rQvs0qaCM5cScs/jD5rL dz9M2dCCQBB2ykvWoXH7/oLkmOBE2wJSEMXpnZ6Sm7QuAsjpwEXU6ecljL1Ssp2f Z/XcLZIDelS9ONQR3D31L5ehluAlWuoP5mOiLjC0J9z16jN3aS4DDI/4S0F+twWx pK1jxtPNrp6NJlGNe5SDHTmSSBlneitdqgpN/JI8QFSsrILqHGS9d1tGPECVYv/Q nYUAarQj0FBaQaF7jYAl7n/A+x8Xj6x1Hz7pcMj1CEBO7r6VJxLk0NHtt0cF6lLU mj1ugXszkSP4LDX03jjA83rPVakBDtrQ066k/PLVn0tV3O5w0FAnBEC3oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0T6bwRsFWbcSMghq5Jh+M1hd4lMB8GA1UdIwQY MBaAFMxsoFxMth2eIykpjTVMKnab3QXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekd5Z1hFeTJIWjRqS1NtTk5Vd3FkcHZkQmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wOTdiMDEtOTQ3MC00OGViLTg1MGQt YWZjNjAyNzE0ZTEzLzEvekd5Z1hFeTJIWjRqS1NtTk5Vd3FkcHZkQmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8wOTdiMDEtOTQ3MC00OGViLTg1MGQtYWZjNjAyNzE0ZTEz LzEvekd5Z1hFeTJIWjRqS1NtTk5Vd3FkcHZkQmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgjSaOeH yPROLSTxt3pZMv4KIbpUQdJskzBDXv5At90EhZpuoLXF5sCquJyUqKsB9GJdpk+S RNAa1mOwDLs8nYqFYMh/YL2MsUEupvDWbo8guhOI7eFOF36Ei/raZYHF+RMMHKoc A8mbZzKJegZjYFoZlPpqQLjBhldlvWHgN7/IHZ8gGgVSjMwK+fB6PUiglU71+vTP 91k0QyDIH1WJaVmX0d1npTE9q3DrA4xDpblSN9a5U/zCGASBmGxBnBxlmIgJRjvD XbYizX92I0R7YNYoE6fpHoQjqCFN8R7C30dzLQdc4wsTJ+U5OQSrgxFMeyGxYQJa tWt7Y0e6HXn1wg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:34:40 2025 by rpki-client