This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft File: zGQrH13XOvfTrQVIfghgAd_5suc.mft (raw, json) Hash identifier: bEYsqreem47NlyQ07CUyUF2Uq1KjVuEnpyumRdQnAyo= Subject key identifier: 65:CF:61:45:31:96:96:54:6D:AC:2A:FA:14:BC:67:3A:51:5F:32:9B Authority key identifier: CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7 Certificate issuer: /CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7 Certificate serial: 019AF051C419945C4D246D3B8B6352FE5AE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft Manifest number: 0526 Signing time: Fri 05 Dec 2025 21:01:21 +0000 Manifest this update: Fri 05 Dec 2025 21:01:21 +0000 Manifest next update: Sat 06 Dec 2025 21:01:21 +0000 Files and hashes: 1: BBmeL_y8dFZnZVsyof-5HOdh9rM.roa (hash: l+ylGzhBzhl0JipTi0n6QhNTnBVAyKKM7zWtPfY+z3s=) 2: zGQrH13XOvfTrQVIfghgAd_5suc.crl (hash: DmlygZZndVuHHfX5Kx+wQxAl0fFMzofmw+5XkpnBySU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:c4:19:94:5c:4d:24:6d:3b:8b:63:52:fe:5a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7 Validity Not Before: Dec 5 21:01:21 2025 GMT Not After : Dec 6 21:01:21 2025 GMT Subject: CN=65cf6145319696546dac2afa14bc673a515f329b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2f:9d:f9:b8:37:75:f2:34:56:51:13:49:bf: b1:df:ae:18:78:c9:9c:28:55:f2:4b:2f:48:89:b5: df:e0:f0:53:4b:f2:e0:7b:9b:95:8f:70:35:90:91: 68:44:8f:46:62:d0:04:a0:2f:bc:2b:44:01:da:9f: 58:00:86:4e:7e:58:c0:f0:74:25:16:84:4e:82:ef: cb:0c:5a:e3:2c:7a:82:27:70:fa:4d:5d:ff:3d:e4: a0:b8:2a:61:72:d1:9e:f5:ab:f1:1e:33:49:a5:b3: 5d:ed:91:e7:d5:f6:8a:d6:3e:28:28:03:a0:b6:e0: 04:e0:2a:63:62:7a:d5:f1:fe:81:6c:03:3a:e2:9c: f8:40:31:1b:a8:79:17:97:79:ec:e0:92:1f:0a:fc: 4a:54:5f:22:f4:57:a6:b9:a5:96:e9:7a:83:23:2b: a9:c7:f2:77:82:66:23:1e:68:6c:98:91:19:1b:d5: ba:99:a5:cc:38:dc:2a:3b:7d:46:9f:46:f0:60:6d: 7a:b7:d7:ed:de:8e:ef:0f:a7:81:b8:58:11:99:ab: 57:2c:ef:39:3f:48:0f:1b:c2:45:a8:ff:27:f2:83: 19:8e:ef:75:16:2a:90:7e:34:cb:4e:8b:90:22:97: 89:13:ad:d0:84:78:da:ef:b2:1b:92:bf:8d:54:ed: 14:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CF:61:45:31:96:96:54:6D:AC:2A:FA:14:BC:67:3A:51:5F:32:9B X509v3 Authority Key Identifier: keyid:CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:47:5a:6c:15:e8:2c:b3:e8:14:63:ab:08:98:50:bf:ed:c2: 13:3d:b4:bc:b8:f0:29:4b:12:5e:97:a6:7a:d7:5b:ad:0e:e6: 82:31:07:0a:6b:80:9f:f8:ae:4e:b2:5d:01:27:1a:00:7c:34: 4d:f5:08:fa:52:90:69:a0:be:91:1a:78:da:26:63:c8:2e:c8: 5f:22:bb:a0:91:29:7f:37:9e:15:01:62:77:e8:59:cc:67:c0: ee:26:59:2b:fe:24:a4:5f:3e:19:1c:80:6c:b9:81:3c:10:11: 88:da:c3:09:b3:ba:97:22:28:47:6f:21:09:9a:eb:76:34:34: 27:1a:4a:03:7a:cb:0f:69:88:c1:0d:69:2c:48:71:63:c1:5b: 28:f3:c2:87:4b:75:e7:b8:67:4d:19:87:47:f7:5c:8b:c5:05: e0:6f:7b:9a:e5:2c:cf:f1:4f:1a:d7:14:89:a3:2e:fe:44:d1: 37:39:b3:98:99:92:43:3d:fc:98:9a:c1:f6:80:ce:e1:a7:61: ec:14:17:9b:30:b7:09:d7:86:bf:dd:9f:e7:9e:4f:13:41:9e: fb:4b:3b:94:ca:70:98:2f:ad:b1:1a:95:0c:45:33:72:4a:bc: 9f:6b:d3:9e:63:e7:ef:a2:26:a9:83:24:10:f6:df:a3:22:5b: b4:1f:73:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUcQZlFxNJG07i2NS/lrpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNjQyYjFmNWRkNzNhZjdkM2FkMDU0ODdlMDg2MDAxZGZm OWIyZTcwHhcNMjUxMjA1MjEwMTIxWhcNMjUxMjA2MjEwMTIxWjAzMTEwLwYDVQQD Eyg2NWNmNjE0NTMxOTY5NjU0NmRhYzJhZmExNGJjNjczYTUxNWYzMjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6C+d+bg3dfI0VlETSb+x364YeMmc KFXySy9IibXf4PBTS/Lge5uVj3A1kJFoRI9GYtAEoC+8K0QB2p9YAIZOfljA8HQl FoROgu/LDFrjLHqCJ3D6TV3/PeSguCphctGe9avxHjNJpbNd7ZHn1faK1j4oKAOg tuAE4CpjYnrV8f6BbAM64pz4QDEbqHkXl3ns4JIfCvxKVF8i9FemuaWW6XqDIyup x/J3gmYjHmhsmJEZG9W6maXMONwqO31Gn0bwYG16t9ft3o7vD6eBuFgRmatXLO85 P0gPG8JFqP8n8oMZju91FiqQfjTLTouQIpeJE63QhHja77Ibkr+NVO0UeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXPYUUxlpZUbawq+hS8ZzpRXzKbMB8GA1UdIwQY MBaAFMxkKx9d1zr3060FSH4IYAHf+bLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekdRckgxM1hPdmZUclFWSWZnaGdBZF81c3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xZTRhMWMtYjE0Yy00NmI1LTg3Y2Mt NWQxNGEwZmY2ZGVlLzEvekdRckgxM1hPdmZUclFWSWZnaGdBZF81c3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8xZTRhMWMtYjE0Yy00NmI1LTg3Y2MtNWQxNGEwZmY2ZGVl LzEvekdRckgxM1hPdmZUclFWSWZnaGdBZF81c3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEdabBXo LLPoFGOrCJhQv+3CEz20vLjwKUsSXpemetdbrQ7mgjEHCmuAn/iuTrJdAScaAHw0 TfUI+lKQaaC+kRp42iZjyC7IXyK7oJEpfzeeFQFid+hZzGfA7iZZK/4kpF8+GRyA bLmBPBARiNrDCbO6lyIoR28hCZrrdjQ0JxpKA3rLD2mIwQ1pLEhxY8FbKPPCh0t1 57hnTRmHR/dci8UF4G97muUsz/FPGtcUiaMu/kTRNzmzmJmSQz38mJrB9oDO4adh 7BQXmzC3CdeGv92f555PE0Ge+0s7lMpwmC+tsRqVDEUzckq8n2vTnmPn76ImqYMk EPbfoyJbtB9zWg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:44 2025 by rpki-client