This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft File: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft (raw, json) Hash identifier: wwUXx9pLHYgycd8D5FMOkbxZnJmHvt5OpRsKNSNSgl8= Subject key identifier: 50:EC:9B:93:5E:DF:23:E7:A1:14:21:88:27:D3:9B:B6:0C:DF:05:CB Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D Certificate issuer: /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d Certificate serial: 019AF208A3CC7ED754F98035F369F450C55B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft Manifest number: 1224 Signing time: Sat 06 Dec 2025 05:00:43 +0000 Manifest this update: Sat 06 Dec 2025 05:00:43 +0000 Manifest next update: Sun 07 Dec 2025 05:00:43 +0000 Files and hashes: 1: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl (hash: 4cXrTplUa8b5GiqC2PgjlZwE1cvguf3ulAIJs8BV2II=) 2: qjMEBhnPSGniZnI84qDRLbjstP0.roa (hash: zxHWsvNMH3bRN0wwXS6+6h5nHO/vNMw7yKNF0sDPkqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a3:cc:7e:d7:54:f9:80:35:f3:69:f4:50:c5:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d Validity Not Before: Dec 6 05:00:43 2025 GMT Not After : Dec 7 05:00:43 2025 GMT Subject: CN=50ec9b935edf23e7a114218827d39bb60cdf05cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:de:6e:f7:2a:2f:28:81:3d:c3:32:5c:52: ce:11:5e:3b:2c:29:d4:54:ec:cf:52:36:0e:70:80: 22:54:53:e3:53:74:43:a4:77:b7:7f:b1:2f:7c:dd: 15:73:bb:7d:22:74:74:df:7b:22:3e:ff:b5:27:18: d1:23:f1:4d:fc:59:00:5d:24:50:4a:33:20:a2:6d: ae:fe:14:cb:0f:5b:4e:b3:42:1d:34:30:b3:97:14: 6b:54:11:d7:83:8e:41:a2:83:b2:77:9b:c9:67:42: 4f:e4:1c:2a:7b:d0:e3:47:dd:ec:6b:44:c7:be:c3: 8a:01:b3:3a:9b:03:81:01:27:a1:68:b6:f3:4a:7a: 22:22:77:e7:f8:67:29:11:24:74:9e:28:a0:cd:e3: 64:84:d4:9d:51:87:bd:f9:c4:96:23:e4:ab:50:2a: bd:b2:fc:56:94:7e:18:cb:6c:a8:71:41:15:93:ac: 4a:d6:8f:56:50:38:4f:47:29:84:68:8b:7d:7a:e7: 41:0c:0d:c5:97:a9:8c:54:e5:6b:09:9f:d2:82:c7: 39:2e:eb:c6:9c:01:3c:44:9c:7d:28:83:79:71:61: fc:0d:bd:cf:f8:d2:ef:e3:b6:09:8e:e1:7b:e3:b0: 09:d4:43:d2:68:1b:5d:03:14:7a:9a:43:d2:26:2e: d5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EC:9B:93:5E:DF:23:E7:A1:14:21:88:27:D3:9B:B6:0C:DF:05:CB X509v3 Authority Key Identifier: keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:48:0e:a5:47:c0:25:e2:9e:2d:3a:09:67:a4:00:a4:ea:82: 94:1d:b7:15:80:b0:3f:b7:dd:a2:86:ef:82:d8:7c:59:03:8a: d9:45:a7:d3:72:f9:79:c4:e4:8c:c0:1c:33:4d:45:29:8d:4e: 10:12:c4:7a:6a:c1:d1:d5:ee:da:9c:dd:1b:6c:bd:61:43:0a: 87:30:9c:db:ba:03:cc:b9:50:c6:5b:c2:2d:4c:dc:e1:23:57: 86:33:27:dd:f5:73:1b:03:20:d7:89:96:50:eb:2c:39:72:b3: e5:b5:29:b1:5d:2a:1f:c8:c0:22:7a:d1:87:0b:f4:29:d8:69: 32:11:95:56:33:ed:b7:26:dc:fc:52:8b:f1:8a:72:84:35:35: b4:9c:a5:eb:ae:e0:73:39:f1:7f:19:d9:78:d3:b3:f6:8f:f1: 25:4e:8e:cb:39:f2:bf:24:ac:c9:45:32:b7:c1:cb:73:8a:16: 48:08:a8:76:b3:c7:89:87:bc:12:93:2b:d1:d8:64:78:03:62: 04:ac:db:ef:1b:71:2d:b6:52:c7:42:9d:03:9c:b8:bc:c3:2b: 6f:39:5b:03:ff:1e:0e:2e:58:ed:a8:89:52:e1:b5:f8:37:23: 98:d8:bb:a3:a3:b6:18:b9:6d:c2:bd:da:4b:95:9e:04:4f:a4: 32:bb:73:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKPMftdU+YA182n0UMVbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmUzNmZmOGNkOWM5MTU5OWJiM2ZlY2VjMTA2NjQzZDlm MjE2OGQwHhcNMjUxMjA2MDUwMDQzWhcNMjUxMjA3MDUwMDQzWjAzMTEwLwYDVQQD Eyg1MGVjOWI5MzVlZGYyM2U3YTExNDIxODgyN2QzOWJiNjBjZGYwNWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTzebvcqLyiBPcMyXFLOEV47LCnU VOzPUjYOcIAiVFPjU3RDpHe3f7EvfN0Vc7t9InR033siPv+1JxjRI/FN/FkAXSRQ SjMgom2u/hTLD1tOs0IdNDCzlxRrVBHXg45BooOyd5vJZ0JP5Bwqe9DjR93sa0TH vsOKAbM6mwOBASehaLbzSnoiInfn+GcpESR0niigzeNkhNSdUYe9+cSWI+SrUCq9 svxWlH4Yy2yocUEVk6xK1o9WUDhPRymEaIt9eudBDA3Fl6mMVOVrCZ/Sgsc5LuvG nAE8RJx9KIN5cWH8Db3P+NLv47YJjuF747AJ1EPSaBtdAxR6mkPSJi7VzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDsm5Ne3yPnoRQhiCfTm7YM3wXLMB8GA1UdIwQY MBaAFGQuNv+M2ckVmbs/7OwQZkPZ8haNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkM0Ml80elp5UldadXpfczdCQm1ROW55Rm8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83MWEyY2ItZTQzYi00MDU5LTg2ZTQt NTA1MDkyMDkyZjQzLzEvWkM0Ml80elp5UldadXpfczdCQm1ROW55Rm8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83MWEyY2ItZTQzYi00MDU5LTg2ZTQtNTA1MDkyMDkyZjQz LzEvWkM0Ml80elp5UldadXpfczdCQm1ROW55Rm8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkgOpUfA JeKeLToJZ6QApOqClB23FYCwP7fdoobvgth8WQOK2UWn03L5ecTkjMAcM01FKY1O EBLEemrB0dXu2pzdG2y9YUMKhzCc27oDzLlQxlvCLUzc4SNXhjMn3fVzGwMg14mW UOssOXKz5bUpsV0qH8jAInrRhwv0KdhpMhGVVjPttybc/FKL8YpyhDU1tJyl667g cznxfxnZeNOz9o/xJU6OyznyvySsyUUyt8HLc4oWSAiodrPHiYe8EpMr0dhkeANi BKzb7xtxLbZSx0KdA5y4vMMrbzlbA/8eDi5Y7aiJUuG1+DcjmNi7o6O2GLltwr3a S5WeBE+kMrtzhA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:56 2025 by rpki-client