This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json) Hash identifier: vv4UsI+gJxjD/vWpxzmORdPTFfo0j2kgG1KCWt8lwuA= Subject key identifier: 26:B9:02:EE:03:A9:86:76:C8:03:B7:19:8F:90:AA:5A:FC:18:F7:55 Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a Certificate serial: 019AF0BF3540D0103B0F808DD2EC8F75B962 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft Manifest number: 0ACA Signing time: Fri 05 Dec 2025 23:00:54 +0000 Manifest this update: Fri 05 Dec 2025 23:00:54 +0000 Manifest next update: Sat 06 Dec 2025 23:00:54 +0000 Files and hashes: 1: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: 1ZBKlwtAbIruv6gXGYY1NwCYacdUBgDZy/YFql4Q/3A=) 2: paYy_Hhxnm4PBAs2Lf2_YVwZO6U.roa (hash: ATfmnjPDFCrMSy8LdJNeeiWeAqOBvNXLV0H5uqzb3IU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:35:40:d0:10:3b:0f:80:8d:d2:ec:8f:75:b9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a Validity Not Before: Dec 5 23:00:54 2025 GMT Not After : Dec 6 23:00:54 2025 GMT Subject: CN=26b902ee03a98676c803b7198f90aa5afc18f755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1d:48:33:77:79:52:13:d7:de:6d:06:36:ca: dc:ce:8a:39:c2:ed:e0:92:67:55:8b:1c:1e:2b:70: 18:2f:4c:ca:69:51:62:fa:ae:85:5c:7a:c1:57:53: 15:65:9d:43:9e:44:e3:4c:c5:55:e2:ca:0d:6f:d4: 68:b6:59:fd:38:ca:06:8c:fe:b2:69:84:0a:5a:97: c0:74:85:d0:94:ac:c9:c3:e0:4b:00:8e:f7:69:a0: da:9e:83:6a:61:02:a1:76:c6:1e:94:7a:50:29:ad: 44:83:2f:58:32:59:ce:de:6b:d1:60:10:af:39:86: 32:59:59:ff:83:42:ff:b9:1d:77:bc:a8:3d:88:70: cb:cf:70:1c:3a:7d:06:f6:6e:ab:27:f5:ad:92:f9: 00:ba:09:00:0c:fe:f0:fd:d2:19:2a:2f:0b:69:2b: fa:fe:2b:e6:24:ce:ad:71:91:66:81:5d:c8:f6:4b: ac:06:28:b7:02:a9:f3:ad:e6:48:a4:b0:54:ac:75: e2:84:aa:ea:e1:03:3d:80:c3:e6:76:92:7e:0e:48: e1:16:97:1e:e9:31:b3:98:c6:47:aa:55:e1:df:7b: ab:43:f6:bc:c5:be:b8:0f:0b:40:c0:a0:59:d9:a6: a6:0e:1c:30:b9:94:93:fb:86:ae:f2:78:71:b6:1a: 4a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B9:02:EE:03:A9:86:76:C8:03:B7:19:8F:90:AA:5A:FC:18:F7:55 X509v3 Authority Key Identifier: keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:51:f0:48:61:a4:06:23:7f:a7:13:e5:42:f8:c6:ca:33:81: 43:15:55:3f:9e:3d:9b:0c:b8:8b:21:3e:a6:18:9f:74:41:34: d2:ac:62:d8:73:08:2e:4a:6c:7e:94:8f:5c:26:0e:27:5f:9a: ea:fc:d5:15:dd:20:9f:f2:45:c2:f5:a4:56:ed:d1:a2:84:22: 41:68:fd:22:58:f5:3d:52:9d:73:3b:f4:ed:d9:d1:ba:8a:18: 53:6e:87:6b:14:3d:c5:31:bc:5f:01:83:5d:44:34:b2:2c:1e: 90:73:db:27:0f:13:43:f8:43:fa:5d:76:d3:d7:95:cc:40:00: fa:d3:3f:a0:8e:1a:c8:6a:1a:ba:98:1b:f8:c6:0d:24:da:3a: 51:62:ff:54:f3:50:40:37:f6:57:dc:d0:d0:cb:f6:8a:f2:df: 7c:fe:c8:62:75:a8:c9:17:c8:c7:35:42:06:5e:b1:a0:4f:6f: ee:cc:b9:e3:7a:86:39:4f:2c:a3:fc:ca:7c:05:75:b9:21:0f: 2c:b9:1f:ef:e3:27:cb:cc:95:99:58:b8:75:7f:27:46:bc:f5: 22:e9:4a:2f:d9:91:67:76:01:b6:d0:80:a1:c4:61:66:f9:c1: c0:a3:e4:cb:9f:75:6c:b8:07:99:d8:d0:39:4e:3e:6c:fb:05: b7:a5:d1:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzVA0BA7D4CN0uyPdbliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmJhYjg0NTk5NDhiNzk3NDc2NDhlMTNlOTliOWQwYTU4 MjUwNmEwHhcNMjUxMjA1MjMwMDU0WhcNMjUxMjA2MjMwMDU0WjAzMTEwLwYDVQQD EygyNmI5MDJlZTAzYTk4Njc2YzgwM2I3MTk4ZjkwYWE1YWZjMThmNzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB1IM3d5UhPX3m0GNsrczoo5wu3g kmdVixweK3AYL0zKaVFi+q6FXHrBV1MVZZ1DnkTjTMVV4soNb9Rotln9OMoGjP6y aYQKWpfAdIXQlKzJw+BLAI73aaDanoNqYQKhdsYelHpQKa1Egy9YMlnO3mvRYBCv OYYyWVn/g0L/uR13vKg9iHDLz3AcOn0G9m6rJ/WtkvkAugkADP7w/dIZKi8LaSv6 /ivmJM6tcZFmgV3I9kusBii3AqnzreZIpLBUrHXihKrq4QM9gMPmdpJ+DkjhFpce 6TGzmMZHqlXh33urQ/a8xb64DwtAwKBZ2aamDhwwuZST+4au8nhxthpKHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCa5Au4DqYZ2yAO3GY+Qqlr8GPdVMB8GA1UdIwQY MBaAFGQrq4RZlIt5dHZI4T6ZudClglBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81ZWMzMGMtMmFlZi00N2FiLWIwZWMt NWIxNTUyM2JmY2JiLzEvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS81ZWMzMGMtMmFlZi00N2FiLWIwZWMtNWIxNTUyM2JmY2Ji LzEvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlHwSGGk BiN/pxPlQvjGyjOBQxVVP549mwy4iyE+phifdEE00qxi2HMILkpsfpSPXCYOJ1+a 6vzVFd0gn/JFwvWkVu3RooQiQWj9Ilj1PVKdczv07dnRuooYU26HaxQ9xTG8XwGD XUQ0siwekHPbJw8TQ/hD+l1209eVzEAA+tM/oI4ayGoaupgb+MYNJNo6UWL/VPNQ QDf2V9zQ0Mv2ivLffP7IYnWoyRfIxzVCBl6xoE9v7sy543qGOU8so/zKfAV1uSEP LLkf7+Mny8yVmVi4dX8nRrz1IulKL9mRZ3YBttCAocRhZvnBwKPky591bLgHmdjQ OU4+bPsFt6XRjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:38 2025 by rpki-client