This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft File: zcmBSoLMto9Rw3v4OubPV4JEyho.mft (raw, json) Hash identifier: Pz4tSYqsPeawU0sAEW46V8zvhtfic1L2CO+Zy4rh6U4= Subject key identifier: 42:6F:1E:41:EA:AA:69:F5:98:D4:6F:53:A9:8B:D8:C5:FE:75:35:C0 Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a Certificate serial: 019AF164036DADE9B387832D87A28672EEB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft Manifest number: 1666 Signing time: Sat 06 Dec 2025 02:00:54 +0000 Manifest this update: Sat 06 Dec 2025 02:00:54 +0000 Manifest next update: Sun 07 Dec 2025 02:00:54 +0000 Files and hashes: 1: LenxSXNvYUG0PNAIsxLHW6t8Gig.roa (hash: 2tRf/A4+PlvxT/fJxe1ZYsaChcE92rdvTlPk4uzM12k=) 2: RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa (hash: Pc/AiM+TyshIYca3WAF87A9bUXB/n7CNYqhspT/vd/c=) 3: zcmBSoLMto9Rw3v4OubPV4JEyho.crl (hash: Rigjj41LPIcEzZA1gMSAPcpsMTyc1K48Vj1z2KM7z0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:03:6d:ad:e9:b3:87:83:2d:87:a2:86:72:ee:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a Validity Not Before: Dec 6 02:00:54 2025 GMT Not After : Dec 7 02:00:54 2025 GMT Subject: CN=426f1e41eaaa69f598d46f53a98bd8c5fe7535c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:e6:23:81:b4:a3:82:e8:3f:c5:0c:ac:f4: e1:64:44:df:14:aa:36:1b:70:20:5e:eb:59:da:80: e6:93:4b:0a:31:30:07:f0:e0:48:52:9c:10:04:6e: 3c:5e:be:10:79:b2:3f:25:42:83:50:6d:3e:9b:cd: f7:f7:d4:73:ad:63:fb:6a:e8:bd:e5:93:ed:5b:e4: 7f:2e:71:32:53:1f:a9:40:fa:32:f8:b9:31:bc:ae: 97:bb:e0:33:fd:89:f8:cc:0b:17:aa:3c:71:11:2e: 07:63:89:27:04:6a:e0:94:74:06:11:16:d4:2c:81: 2e:64:51:6e:57:f0:b5:ed:22:0b:2e:96:9e:ad:ed: 0c:9e:3f:9c:f8:64:6d:65:df:06:73:10:1e:48:2d: b7:cc:4d:16:ac:b4:f4:e8:63:43:71:c7:d9:7a:15: 6f:44:ea:63:99:b0:bd:27:96:c9:6e:d3:a0:66:95: 5a:7a:ba:56:b4:2f:f7:de:72:72:54:3e:d4:83:5d: 48:98:74:4d:21:b4:cf:97:2a:bc:8f:bd:a7:a4:cb: 05:5a:17:91:e0:4d:d7:8d:6f:43:bd:51:2b:c3:e0: 86:15:2e:4b:44:0f:d0:a9:1c:b0:13:ec:a9:46:4c: ee:f8:af:ed:39:2c:e7:e5:b2:15:4d:13:ed:a2:4b: d6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6F:1E:41:EA:AA:69:F5:98:D4:6F:53:A9:8B:D8:C5:FE:75:35:C0 X509v3 Authority Key Identifier: keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:77:71:53:c3:d2:aa:1d:ca:19:d0:bd:22:b2:f2:ad:f0:0e: 2e:2c:0a:37:18:19:14:fd:0a:c4:f1:72:7e:08:51:1d:01:66: a3:c6:f4:b2:86:6a:6b:ef:b5:52:2f:bb:65:53:d2:28:78:f9: 13:1e:e2:23:51:5f:6e:79:5e:0d:26:1b:1b:87:39:2f:56:8b: a2:27:2e:70:82:6c:86:1e:3f:5c:ec:25:a1:93:d3:39:96:73: 35:ac:4e:3b:b0:9c:ae:b9:14:ed:09:bd:d6:7c:cc:76:5c:a3: 35:8f:82:ab:2d:78:9e:76:69:59:db:b5:ae:b8:52:98:f4:62: cf:ae:ec:4a:eb:88:73:73:8f:4d:c9:af:c8:6c:c0:aa:ca:07: 6d:b3:3c:6f:d4:63:c0:3f:32:ee:98:5a:5f:60:40:02:bc:d7: 0a:28:17:f0:31:64:a6:64:74:02:dd:76:39:66:5c:8c:2b:4b: 4b:8e:34:66:8d:ce:0b:46:90:1b:e9:a8:45:7a:dc:2e:8f:27: ac:f2:1b:e1:cd:7f:cf:83:51:3b:c6:31:c6:f1:aa:99:54:46: 3e:6f:d5:b3:1f:50:d6:0d:cd:56:2e:ed:dc:5d:bf:1b:ad:89: ed:7c:c5:45:68:f1:64:a9:6a:b5:0e:8a:77:45:4a:90:89:fa: c1:f7:98:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZANtremzh4Mth6KGcu62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYzk4MTRhODJjY2I2OGY1MWMzN2JmODNhZTZjZjU3ODI0 NGNhMWEwHhcNMjUxMjA2MDIwMDU0WhcNMjUxMjA3MDIwMDU0WjAzMTEwLwYDVQQD Eyg0MjZmMWU0MWVhYWE2OWY1OThkNDZmNTNhOThiZDhjNWZlNzUzNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLvmI4G0o4LoP8UMrPThZETfFKo2 G3AgXutZ2oDmk0sKMTAH8OBIUpwQBG48Xr4QebI/JUKDUG0+m83399RzrWP7aui9 5ZPtW+R/LnEyUx+pQPoy+LkxvK6Xu+Az/Yn4zAsXqjxxES4HY4knBGrglHQGERbU LIEuZFFuV/C17SILLpaere0Mnj+c+GRtZd8GcxAeSC23zE0WrLT06GNDccfZehVv ROpjmbC9J5bJbtOgZpVaerpWtC/33nJyVD7Ug11ImHRNIbTPlyq8j72npMsFWheR 4E3XjW9DvVErw+CGFS5LRA/QqRywE+ypRkzu+K/tOSzn5bIVTRPtokvWjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJvHkHqqmn1mNRvU6mL2MX+dTXAMB8GA1UdIwQY MBaAFM3JgUqCzLaPUcN7+Drmz1eCRMoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUt OTYzYjI1ZmEzMDY4LzEvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUtOTYzYjI1ZmEzMDY4 LzEvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHdxU8PS qh3KGdC9IrLyrfAOLiwKNxgZFP0KxPFyfghRHQFmo8b0soZqa++1Ui+7ZVPSKHj5 Ex7iI1FfbnleDSYbG4c5L1aLoicucIJshh4/XOwloZPTOZZzNaxOO7CcrrkU7Qm9 1nzMdlyjNY+Cqy14nnZpWdu1rrhSmPRiz67sSuuIc3OPTcmvyGzAqsoHbbM8b9Rj wD8y7phaX2BAArzXCigX8DFkpmR0At12OWZcjCtLS440Zo3OC0aQG+moRXrcLo8n rPIb4c1/z4NRO8YxxvGqmVRGPm/Vsx9Q1g3NVi7t3F2/G62J7XzFRWjxZKlqtQ6K d0VKkIn6wfeYOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:55 2025 by rpki-client