This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft File: zsY7h6iuwJPb5H3MqShg6oQSKOA.mft (raw, json) Hash identifier: ikVOTfOhaaxuvgtoDe5JCdXLxisUeTm9xJVKUQVeqjY= Subject key identifier: 0A:01:51:C5:F7:21:42:BD:D0:24:3C:72:CA:2C:25:60:EE:C6:04:70 Authority key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0 Certificate issuer: /CN=cec63b87a8aec093dbe47dcca92860ea841228e0 Certificate serial: 019AF276BF2375AAEF96770773A4209A3300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft Manifest number: 0C6A Signing time: Sat 06 Dec 2025 07:00:59 +0000 Manifest this update: Sat 06 Dec 2025 07:00:59 +0000 Manifest next update: Sun 07 Dec 2025 07:00:59 +0000 Files and hashes: 1: oDVjxYPm7vPq-9FQVAv-wdPcmhE.roa (hash: SVNTWU/SFE8BeAZ7Bb0M+S0ysWhdx0WLLM1QECYtWDg=) 2: zsY7h6iuwJPb5H3MqShg6oQSKOA.crl (hash: s/ZUTQJVy+wlILoAUmq3YhS0ht+/g+g19abfj5nko9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:bf:23:75:aa:ef:96:77:07:73:a4:20:9a:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec63b87a8aec093dbe47dcca92860ea841228e0 Validity Not Before: Dec 6 07:00:59 2025 GMT Not After : Dec 7 07:00:59 2025 GMT Subject: CN=0a0151c5f72142bdd0243c72ca2c2560eec60470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f9:01:07:39:21:bf:eb:67:cc:64:ec:83:56: 7c:a4:99:b3:18:15:0f:ef:9c:f5:90:c4:1d:3f:59: b3:96:dc:c5:e0:15:94:c6:4e:40:bd:30:d5:f0:f8: 5f:e3:97:4b:aa:2b:4b:e1:93:db:c3:30:5d:1a:1e: 17:98:90:d2:0c:ea:fa:ae:75:75:b7:5a:9a:e7:10: 47:8b:d1:d4:cb:7b:72:5b:c0:da:f0:bd:c9:55:77: 35:c9:73:86:96:b0:85:75:56:c6:e7:3a:7d:dc:c1: 72:63:72:73:39:72:56:21:87:aa:b6:56:5c:23:d9: 7a:b3:ad:1d:1a:13:c2:32:6c:f1:e3:5e:cd:0b:f5: 46:1a:d3:33:7c:74:c0:88:a5:f6:72:81:8a:fd:d7: d1:d9:f2:d6:cc:12:ae:f8:ed:82:49:6e:9b:ef:e3: 69:0f:41:17:8b:4e:c5:6e:db:f7:6c:c0:d6:40:74: 7c:6f:06:8f:f2:b8:c4:97:84:44:89:ce:7f:dd:8a: 81:68:f2:92:a3:ee:00:e1:51:1c:41:1f:b7:8f:ae: fe:58:b4:27:8e:69:21:d3:98:fc:e1:2f:eb:c0:d7: bc:e0:90:a9:16:34:16:0d:a1:5f:90:7b:b6:7b:ab: a8:ea:27:ad:f3:5a:71:d0:af:9d:83:2e:8a:0f:df: fb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:01:51:C5:F7:21:42:BD:D0:24:3C:72:CA:2C:25:60:EE:C6:04:70 X509v3 Authority Key Identifier: keyid:CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:95:19:9c:2b:1f:6e:49:75:d9:02:9a:cd:e8:05:e8:5d:d4: 8f:b6:2f:0e:81:e5:98:8e:aa:67:a4:38:e7:b9:22:44:ca:5f: 20:50:e3:76:1a:ca:b9:0b:35:0d:92:53:f8:bb:09:68:2b:a8: 12:97:a3:e1:3b:ff:7a:74:d6:b7:3e:28:e7:00:b4:fc:93:16: a3:e2:8d:5a:6d:b9:0e:6b:cd:e3:fa:55:f0:fe:12:ba:88:c4: a1:29:b7:12:3c:99:18:8c:03:29:fc:cc:96:b7:fd:88:90:ac: 10:90:ab:f4:d5:5c:b0:1d:27:86:f6:8f:3a:bb:bd:4e:d2:e7: 0a:2b:45:ff:8c:68:8d:d1:e8:ff:12:87:2d:d7:12:49:8c:4b: b1:45:66:47:df:31:87:3a:34:7a:3f:c9:98:2d:d0:91:37:6d: b5:95:01:fd:0d:fb:2c:83:31:e0:dc:c2:bd:ba:6b:a4:fd:aa: 5a:37:5d:3c:3e:1d:d0:10:51:dd:28:54:d8:96:04:18:24:13: 50:7c:66:c2:b4:7b:57:c9:c3:19:10:ae:49:3b:9a:a5:d5:8f: 04:dc:6d:ac:7d:34:da:03:0a:f2:ef:35:6e:bf:a8:4c:50:77: ed:44:fe:27:e2:06:c5:62:24:6c:96:4d:cc:12:70:01:e5:3d: b7:14:09:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydr8jdarvlncHc6QgmjMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzYzYjg3YThhZWMwOTNkYmU0N2RjY2E5Mjg2MGVhODQx MjI4ZTAwHhcNMjUxMjA2MDcwMDU5WhcNMjUxMjA3MDcwMDU5WjAzMTEwLwYDVQQD EygwYTAxNTFjNWY3MjE0MmJkZDAyNDNjNzJjYTJjMjU2MGVlYzYwNDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvkBBzkhv+tnzGTsg1Z8pJmzGBUP 75z1kMQdP1mzltzF4BWUxk5AvTDV8Phf45dLqitL4ZPbwzBdGh4XmJDSDOr6rnV1 t1qa5xBHi9HUy3tyW8Da8L3JVXc1yXOGlrCFdVbG5zp93MFyY3JzOXJWIYeqtlZc I9l6s60dGhPCMmzx417NC/VGGtMzfHTAiKX2coGK/dfR2fLWzBKu+O2CSW6b7+Np D0EXi07Fbtv3bMDWQHR8bwaP8rjEl4REic5/3YqBaPKSo+4A4VEcQR+3j67+WLQn jmkh05j84S/rwNe84JCpFjQWDaFfkHu2e6uo6iet81px0K+dgy6KD9/7MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoBUcX3IUK90CQ8csosJWDuxgRwMB8GA1UdIwQY MBaAFM7GO4eorsCT2+R9zKkoYOqEEijgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNZN2g2aXV3SlBiNUgzTXFTaGc2b1FTS09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hODJmNDMtNTAyYi00MmZiLTg4ZWIt ODNiZDY2ZjRlNmY2LzEvenNZN2g2aXV3SlBiNUgzTXFTaGc2b1FTS09BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9hODJmNDMtNTAyYi00MmZiLTg4ZWItODNiZDY2ZjRlNmY2 LzEvenNZN2g2aXV3SlBiNUgzTXFTaGc2b1FTS09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZUZnCsf bkl12QKazegF6F3Uj7YvDoHlmI6qZ6Q457kiRMpfIFDjdhrKuQs1DZJT+LsJaCuo Epej4Tv/enTWtz4o5wC0/JMWo+KNWm25DmvN4/pV8P4SuojEoSm3EjyZGIwDKfzM lrf9iJCsEJCr9NVcsB0nhvaPOru9TtLnCitF/4xojdHo/xKHLdcSSYxLsUVmR98x hzo0ej/JmC3QkTdttZUB/Q37LIMx4NzCvbprpP2qWjddPD4d0BBR3ShU2JYEGCQT UHxmwrR7V8nDGRCuSTuapdWPBNxtrH002gMK8u81br+oTFB37UT+J+IGxWIkbJZN zBJwAeU9txQJJg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:26:22 2025 by rpki-client