This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft File: zSC8r3ISPi2fXieIazg5t0JEELc.mft (raw, json) Hash identifier: Gu/DKpb4RC8rcOf6MW8ZLiXGIDePvjUkRDp4f6dCy9I= Subject key identifier: BD:2A:AD:19:80:9A:9F:A1:BD:20:65:2C:DB:DD:A6:0C:9D:C6:EF:13 Authority key identifier: CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7 Certificate issuer: /CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7 Certificate serial: 019AF1D1A6F8353A4CF51226AC1415166310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft Manifest number: 0D4F Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: YvvxlYUE1Sa5OVkc6cN_zQjcrsc.roa (hash: 755pvpPS6YdCIfa/QNyMrmXmYNI2VVu3cPA+IlhoyYY=) 2: zSC8r3ISPi2fXieIazg5t0JEELc.crl (hash: H2DMrs6CmCwyX9Q2b/c4XjotjhHVjPJKyqxQ97CPIng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a6:f8:35:3a:4c:f5:12:26:ac:14:15:16:63:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7 Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=bd2aad19809a9fa1bd20652cdbdda60c9dc6ef13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:0a:7e:62:ad:b6:0a:ff:16:08:cf:d5:75: da:bb:bd:a1:86:c0:25:f1:40:2b:98:2f:1d:04:72: 4c:e6:74:da:d7:8c:1b:b3:9a:1e:ad:d9:4c:d3:df: e3:f5:0b:20:a8:84:af:f3:87:0b:69:69:45:1a:82: 72:2d:34:44:06:7c:a3:9d:ba:15:2e:61:35:fe:7a: f7:f7:48:15:eb:50:34:06:27:2b:9e:01:10:d4:9c: 06:a1:79:5f:74:1d:1d:10:b5:7c:47:c8:0e:0c:82: 69:bb:f4:33:7b:ae:26:ed:21:aa:3f:27:21:43:03: 1e:2e:18:4f:d6:d1:02:9b:d0:4c:c6:f3:5d:46:7e: 63:94:2d:a0:48:ed:3c:2b:bb:f7:f0:4c:cb:ae:8d: 09:59:f0:c7:d0:be:4f:73:ef:72:eb:ea:87:14:7a: 31:1d:28:4c:31:f1:21:a3:70:97:8b:a9:69:0c:2f: 57:71:74:17:26:0f:37:1c:25:a4:6f:3f:b7:f0:c2: be:db:d9:92:d1:29:70:2b:9d:6e:ab:d3:03:28:52: c9:44:24:d5:0d:4a:8d:77:e0:1e:68:61:52:33:ff: a5:47:51:64:a2:6a:53:7c:bf:b3:c0:ae:ef:a2:fd: 04:df:8c:f0:47:73:f8:d1:a4:06:8e:6a:63:b4:41: e6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2A:AD:19:80:9A:9F:A1:BD:20:65:2C:DB:DD:A6:0C:9D:C6:EF:13 X509v3 Authority Key Identifier: keyid:CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c8:bf:90:95:85:60:dd:7d:93:dc:b8:26:fa:8b:99:ec:ba: 82:ef:4d:3e:a2:3b:a8:70:b0:18:89:6e:5e:15:6c:eb:58:45: 99:ca:6c:fe:26:87:31:5a:63:56:15:13:d7:c9:66:70:bb:33: a1:86:27:ce:16:99:28:7b:93:3b:b3:b1:3e:a3:53:79:10:2a: 3b:43:87:3b:4f:06:8c:5d:fd:86:a0:64:33:7e:5d:31:a0:42: 7a:8a:80:e9:91:11:57:20:5a:37:22:f2:5d:aa:53:d1:02:f7: a9:91:7a:3f:e4:40:85:d1:86:ed:36:d0:62:6a:ba:aa:a2:e4: 88:c7:a9:66:5f:70:a4:0c:d9:e0:8a:db:6c:2b:0b:92:2e:a5: 39:e5:a0:27:2d:a3:10:53:38:e1:ac:35:78:64:97:89:26:51: ab:ab:75:21:f6:13:4d:1c:a9:5c:5a:84:38:6f:4e:6c:a7:2f: 0c:1a:f0:56:9d:ba:2a:5c:94:6a:99:3b:72:a6:06:ad:1c:7a: 88:1f:a8:69:17:b3:86:98:84:53:1a:d6:cc:11:58:99:35:8f: 2e:66:9f:d7:6b:76:7e:fc:02:b8:b4:e1:a4:c5:d1:a7:91:0a: 70:c2:6b:0d:5d:5d:a4:39:6a:d0:cc:12:74:7b:9f:1b:79:7e: 74:88:67:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ab4NTpM9RImrBQVFmMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMjBiY2FmNzIxMjNlMmQ5ZjVlMjc4ODZiMzgzOWI3NDI0 NDEwYjcwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD EyhiZDJhYWQxOTgwOWE5ZmExYmQyMDY1MmNkYmRkYTYwYzlkYzZlZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaQKfmKttgr/FgjP1XXau72hhsAl 8UArmC8dBHJM5nTa14wbs5oerdlM09/j9QsgqISv84cLaWlFGoJyLTREBnyjnboV LmE1/nr390gV61A0BicrngEQ1JwGoXlfdB0dELV8R8gODIJpu/Qze64m7SGqPych QwMeLhhP1tECm9BMxvNdRn5jlC2gSO08K7v38EzLro0JWfDH0L5Pc+9y6+qHFHox HShMMfEho3CXi6lpDC9XcXQXJg83HCWkbz+38MK+29mS0SlwK51uq9MDKFLJRCTV DUqNd+AeaGFSM/+lR1FkompTfL+zwK7vov0E34zwR3P40aQGjmpjtEHmuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0qrRmAmp+hvSBlLNvdpgydxu8TMB8GA1UdIwQY MBaAFM0gvK9yEj4tn14niGs4ObdCRBC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy80NGNmNmEtZGNiZi00MzM1LTliZGYt MGY4MmMxYmExODA2LzEvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy80NGNmNmEtZGNiZi00MzM1LTliZGYtMGY4MmMxYmExODA2 LzEvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMi/kJWF YN19k9y4JvqLmey6gu9NPqI7qHCwGIluXhVs61hFmcps/iaHMVpjVhUT18lmcLsz oYYnzhaZKHuTO7OxPqNTeRAqO0OHO08GjF39hqBkM35dMaBCeoqA6ZERVyBaNyLy XapT0QL3qZF6P+RAhdGG7TbQYmq6qqLkiMepZl9wpAzZ4IrbbCsLki6lOeWgJy2j EFM44aw1eGSXiSZRq6t1IfYTTRypXFqEOG9ObKcvDBrwVp26KlyUapk7cqYGrRx6 iB+oaRezhpiEUxrWzBFYmTWPLmaf12t2fvwCuLThpMXRp5EKcMJrDV1dpDlq0MwS dHufG3l+dIhnuw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:40 2025 by rpki-client