This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft File: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft (raw, json) Hash identifier: GK4w9lJtw2FyjQthBDU8PpQ13WIopYTmzfBjucgQy4s= Subject key identifier: 00:45:49:B1:10:4C:AC:00:EB:D6:19:51:2F:26:30:BA:A8:6A:81:B1 Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D Certificate issuer: /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d Certificate serial: 019B31C36DEFD8BC5A68F3D1BD647857D169 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft Manifest number: 1245 Signing time: Thu 18 Dec 2025 14:00:49 +0000 Manifest this update: Thu 18 Dec 2025 14:00:49 +0000 Manifest next update: Fri 19 Dec 2025 14:00:49 +0000 Files and hashes: 1: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl (hash: IYj9fOVWAjJWkOaJixY8SFvQAvqtBgLkmGyu34PNDuc=) 2: qjMEBhnPSGniZnI84qDRLbjstP0.roa (hash: zxHWsvNMH3bRN0wwXS6+6h5nHO/vNMw7yKNF0sDPkqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:6d:ef:d8:bc:5a:68:f3:d1:bd:64:78:57:d1:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d Validity Not Before: Dec 18 14:00:49 2025 GMT Not After : Dec 19 14:00:49 2025 GMT Subject: CN=004549b1104cac00ebd619512f2630baa86a81b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a3:ea:c7:c2:a0:9b:dc:d4:f6:71:ec:c3:4b: 23:03:10:39:fc:97:32:9d:f9:59:f4:59:1a:52:e2: b1:b2:db:e5:85:5e:83:9c:a4:15:ad:28:63:ad:26: 26:e1:35:88:fe:20:a5:80:08:d7:35:9b:bc:f9:4e: 7b:a8:dc:6f:91:d2:5d:eb:ba:53:0b:83:9b:78:63: 9f:12:92:de:08:8a:ae:c2:71:28:d9:6d:98:5b:6c: 63:b1:41:3f:ab:95:37:3f:98:66:b9:1e:fb:96:1a: 42:40:db:09:58:32:4a:3d:90:7c:fb:a5:d3:aa:b0: e4:05:eb:82:7c:e2:46:7a:c4:d7:ee:c6:f3:c0:95: f7:13:89:1e:74:9a:8a:ef:4f:84:a9:cb:82:39:74: 52:1e:93:f0:cb:38:54:7f:bb:04:51:b6:2e:59:fa: 07:15:df:c2:ab:74:46:f3:63:dd:c7:5b:32:74:a0: 39:48:58:37:cb:bb:0e:de:31:8a:a0:c6:df:84:04: a7:fc:da:36:10:a4:49:56:1d:0e:68:55:6b:1a:99: c4:dd:37:c2:48:36:ec:30:7c:79:e0:0e:fc:4b:56: af:9f:60:52:47:0f:9d:61:42:f5:c6:2e:c7:cc:8f: c2:8f:05:a4:a1:be:02:38:9b:85:dd:f9:f4:db:71: 28:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:45:49:B1:10:4C:AC:00:EB:D6:19:51:2F:26:30:BA:A8:6A:81:B1 X509v3 Authority Key Identifier: keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:0a:b0:78:7d:1e:4f:2f:d9:48:1e:4e:c2:45:3c:4c:89:72: bc:97:a5:22:f8:44:78:34:c7:92:2f:98:10:8b:e6:c5:4c:68: c6:fa:84:20:65:2d:de:c4:87:4f:6b:55:25:f9:0d:b4:34:66: 06:a8:09:88:1b:93:13:99:31:25:0c:ca:f0:e5:83:2d:4a:3b: 8e:3b:90:17:dd:73:b5:e5:5c:0e:8e:37:a6:0e:ef:59:eb:4e: 15:0c:d6:02:78:08:c9:7d:4a:b0:8c:89:4c:cb:6f:bc:2e:5d: 17:0e:a2:15:69:fa:87:0c:95:8e:4a:17:29:40:1f:f5:b2:e9: 62:02:86:88:e1:b0:1f:44:24:4f:f1:ca:56:2c:26:2a:02:f4: f7:e4:94:dd:52:f8:a9:9c:a4:99:92:6e:da:b7:20:7e:09:8b: da:96:50:13:a0:61:ae:d0:61:09:61:3c:97:f2:7a:5b:79:a9: 9d:e5:63:0e:fa:88:b4:10:57:38:fc:31:f8:73:82:5f:dc:7d: b2:8d:05:a2:44:b3:77:d4:e9:86:0c:c9:75:1a:1b:32:7c:ac: b9:44:b6:c2:10:9d:ed:61:2a:be:8f:6c:55:48:16:c0:46:3c: 8d:e3:0d:fd:02:67:97:54:61:7a:ff:41:a4:7f:48:71:92:34: cd:a9:52:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw23v2LxaaPPRvWR4V9FpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmUzNmZmOGNkOWM5MTU5OWJiM2ZlY2VjMTA2NjQzZDlm MjE2OGQwHhcNMjUxMjE4MTQwMDQ5WhcNMjUxMjE5MTQwMDQ5WjAzMTEwLwYDVQQD EygwMDQ1NDliMTEwNGNhYzAwZWJkNjE5NTEyZjI2MzBiYWE4NmE4MWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aPqx8Kgm9zU9nHsw0sjAxA5/Jcy nflZ9FkaUuKxstvlhV6DnKQVrShjrSYm4TWI/iClgAjXNZu8+U57qNxvkdJd67pT C4ObeGOfEpLeCIquwnEo2W2YW2xjsUE/q5U3P5hmuR77lhpCQNsJWDJKPZB8+6XT qrDkBeuCfOJGesTX7sbzwJX3E4kedJqK70+EqcuCOXRSHpPwyzhUf7sEUbYuWfoH Fd/Cq3RG82Pdx1sydKA5SFg3y7sO3jGKoMbfhASn/No2EKRJVh0OaFVrGpnE3TfC SDbsMHx54A78S1avn2BSRw+dYUL1xi7HzI/CjwWkob4COJuF3fn023EoEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABFSbEQTKwA69YZUS8mMLqoaoGxMB8GA1UdIwQY MBaAFGQuNv+M2ckVmbs/7OwQZkPZ8haNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkM0Ml80elp5UldadXpfczdCQm1ROW55Rm8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83MWEyY2ItZTQzYi00MDU5LTg2ZTQt NTA1MDkyMDkyZjQzLzEvWkM0Ml80elp5UldadXpfczdCQm1ROW55Rm8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83MWEyY2ItZTQzYi00MDU5LTg2ZTQtNTA1MDkyMDkyZjQz LzEvWkM0Ml80elp5UldadXpfczdCQm1ROW55Rm8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2wqweH0e Ty/ZSB5OwkU8TIlyvJelIvhEeDTHki+YEIvmxUxoxvqEIGUt3sSHT2tVJfkNtDRm BqgJiBuTE5kxJQzK8OWDLUo7jjuQF91zteVcDo43pg7vWetOFQzWAngIyX1KsIyJ TMtvvC5dFw6iFWn6hwyVjkoXKUAf9bLpYgKGiOGwH0QkT/HKViwmKgL09+SU3VL4 qZykmZJu2rcgfgmL2pZQE6BhrtBhCWE8l/J6W3mpneVjDvqItBBXOPwx+HOCX9x9 so0FokSzd9TphgzJdRobMnysuUS2whCd7WEqvo9sVUgWwEY8jeMN/QJnl1Rhev9B pH9IcZI0zalSCQ== -----END CERTIFICATE-----Generated at Thu Dec 18 19:12:46 2025 by rpki-client