This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft File: zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json) Hash identifier: wc2xrzAsNQEsTrsV1SLstdDuR/aC+SzSZ+FI7Yy5k1I= Subject key identifier: D4:17:A3:4F:0A:52:80:D7:E8:B6:C0:E3:6A:05:02:C1:E7:56:AC:1E Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee Certificate serial: 019AF31B9D8C72E8F86FB290AEF926A41300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft Manifest number: 0D58 Signing time: Sat 06 Dec 2025 10:01:04 +0000 Manifest this update: Sat 06 Dec 2025 10:01:04 +0000 Manifest next update: Sun 07 Dec 2025 10:01:04 +0000 Files and hashes: 1: qrZKSOFpAICcNRLOx5AIirWqvBo.roa (hash: h3wCdr8A46DdDE5I42tcnvu/LE64VypZvT4djSXNycs=) 2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: s0ElLjEbUpTx2vSgP7F+ncA9PYeQep9X+/NT/Gcmkj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:9d:8c:72:e8:f8:6f:b2:90:ae:f9:26:a4:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee Validity Not Before: Dec 6 10:01:04 2025 GMT Not After : Dec 7 10:01:04 2025 GMT Subject: CN=d417a34f0a5280d7e8b6c0e36a0502c1e756ac1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:95:9f:1c:72:34:ad:d9:2d:d7:5c:ec:18:e2: 0e:c8:ae:4f:70:c5:a7:1e:e1:4e:41:0a:a2:77:10: 0c:18:4d:dd:5c:a9:92:af:40:ae:62:ba:1c:7c:32: 55:7f:2d:c1:9a:cf:1a:e1:29:11:a0:c2:32:1f:7a: 49:3a:96:56:ed:f1:7c:e6:bc:a9:25:0f:85:16:a4: f1:dd:8d:a0:e7:c7:3b:a4:92:02:43:4b:7a:da:5a: 9d:cc:85:4d:30:b3:e4:1e:f5:66:68:51:8c:3f:72: 6d:e6:1a:51:33:58:88:8f:18:cb:e6:4b:45:40:11: 38:3a:c5:0b:b9:09:f0:29:93:c7:b0:69:d8:60:23: 48:22:d5:8d:21:19:48:7c:3f:c4:56:37:ba:9a:d3: 14:ee:2f:f6:f3:3b:17:fa:3f:98:c5:90:51:ef:bc: b9:06:86:9d:21:12:4d:66:37:c7:43:98:27:0e:1f: a6:bf:28:cf:da:92:17:11:72:0e:52:67:dd:51:62: 51:59:ba:6f:24:bc:d8:2f:3e:47:5f:29:f7:d6:db: bf:da:f9:67:5e:23:29:2e:65:d4:5e:10:64:93:fa: ab:0f:7a:9f:a5:5f:25:c1:1d:a5:90:32:54:48:36: a7:37:cb:52:36:5e:d8:4a:26:f9:29:f6:e6:2f:d8: 3e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:17:A3:4F:0A:52:80:D7:E8:B6:C0:E3:6A:05:02:C1:E7:56:AC:1E X509v3 Authority Key Identifier: keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:a0:0f:bc:54:90:ee:c4:3a:de:88:6a:f9:9f:c3:1a:dc:30: d5:ed:09:61:fb:78:16:2e:59:f9:76:13:52:a5:2d:fa:c3:bd: 94:72:32:5e:d4:c4:bb:f8:04:68:75:3e:e1:b8:db:5f:5d:fb: 6b:55:1f:21:2e:a2:62:1b:da:a9:ce:7d:38:8b:91:6f:36:2c: ca:36:ca:6c:4f:82:3b:b6:6d:d2:94:14:1b:57:53:6b:cd:97: 9a:73:98:53:0f:6b:c5:92:c4:d3:02:eb:04:52:a0:39:5e:60: 93:f0:a6:9b:c7:67:0f:ca:36:6b:69:bf:e0:80:b5:0b:d8:3d: bc:9b:3c:8b:a9:67:50:d4:57:a7:87:0d:f2:6b:70:9d:87:db: af:6c:56:91:d9:07:af:de:99:8d:20:34:b3:ba:72:e7:f7:cf: 9a:09:ef:cc:39:ca:17:aa:1d:8c:0f:21:f6:a4:b9:6f:65:76: 2e:7b:af:10:7d:93:98:4e:79:9c:b3:39:c5:80:c5:53:9f:5b: 9c:11:7b:6d:0a:41:0c:f4:00:fc:9c:63:85:34:bb:e5:b4:45: c1:c1:42:4f:61:d0:f2:4e:25:4b:6b:b6:81:7a:e1:ad:c4:1c: 69:ef:ac:56:62:a0:19:5c:11:e5:ed:ae:ef:05:1a:70:b9:fa: 9b:c4:40:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG52Mcuj4b7KQrvkmpBMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNTVmNzZjZmU5ZGFmYjJkOTQxOTAxNDJiYzhhYWIwZDMy ODA2ZWUwHhcNMjUxMjA2MTAwMTA0WhcNMjUxMjA3MTAwMTA0WjAzMTEwLwYDVQQD EyhkNDE3YTM0ZjBhNTI4MGQ3ZThiNmMwZTM2YTA1MDJjMWU3NTZhYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5WfHHI0rdkt11zsGOIOyK5PcMWn HuFOQQqidxAMGE3dXKmSr0CuYrocfDJVfy3Bms8a4SkRoMIyH3pJOpZW7fF85ryp JQ+FFqTx3Y2g58c7pJICQ0t62lqdzIVNMLPkHvVmaFGMP3Jt5hpRM1iIjxjL5ktF QBE4OsULuQnwKZPHsGnYYCNIItWNIRlIfD/EVje6mtMU7i/28zsX+j+YxZBR77y5 BoadIRJNZjfHQ5gnDh+mvyjP2pIXEXIOUmfdUWJRWbpvJLzYLz5HXyn31tu/2vln XiMpLmXUXhBkk/qrD3qfpV8lwR2lkDJUSDanN8tSNl7YSib5KfbmL9g+uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQXo08KUoDX6LbA42oFAsHnVqweMB8GA1UdIwQY MBaAFMxV92z+na+y2UGQFCvIqrDTKAbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kODFmMTQtMWZmNC00MmIxLTliOWYt MzRjZDA1NzVlMWNiLzEvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kODFmMTQtMWZmNC00MmIxLTliOWYtMzRjZDA1NzVlMWNi LzEvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1aAPvFSQ 7sQ63ohq+Z/DGtww1e0JYft4Fi5Z+XYTUqUt+sO9lHIyXtTEu/gEaHU+4bjbX137 a1UfIS6iYhvaqc59OIuRbzYsyjbKbE+CO7Zt0pQUG1dTa82XmnOYUw9rxZLE0wLr BFKgOV5gk/Cmm8dnD8o2a2m/4IC1C9g9vJs8i6lnUNRXp4cN8mtwnYfbr2xWkdkH r96ZjSA0s7py5/fPmgnvzDnKF6odjA8h9qS5b2V2LnuvEH2TmE55nLM5xYDFU59b nBF7bQpBDPQA/JxjhTS75bRFwcFCT2HQ8k4lS2u2gXrhrcQcae+sVmKgGVwR5e2u 7wUacLn6m8RAfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:38 2025 by rpki-client