This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft File: ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json) Hash identifier: NT7qsDJR2sXQFnqA0VRozxbcgTHXvHBDRe8NCooh1lI= Subject key identifier: 96:AD:C0:54:FA:AC:97:8E:4D:18:53:41:75:A4:39:6B:5E:A0:1F:11 Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93 Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93 Certificate serial: 019AF12EA5CBE909AE38F8443729B500B3E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft Manifest number: 52 Signing time: Sat 06 Dec 2025 01:02:37 +0000 Manifest this update: Sat 06 Dec 2025 01:02:37 +0000 Manifest next update: Sun 07 Dec 2025 01:02:37 +0000 Files and hashes: 1: YI526rDjmCm4ZHVI5LkZmsJxBYA.roa (hash: mnwhg/AU2eU/IE/2TNO5wxiOwcdktq7wIdfPQ68gGbo=) 2: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: HvRpUX5BHeFUJ8c513YwkvpplotUg1krzDQDWabjzEc=) 3: yW7cdRDGRGnl2p9hOjN1yRdkgZU.roa (hash: ZivRWx3B/fZFpGzZX+9m5QTKA6BgqDFkXZVcPhKEPac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a5:cb:e9:09:ae:38:f8:44:37:29:b5:00:b3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93 Validity Not Before: Dec 6 01:02:37 2025 GMT Not After : Dec 7 01:02:37 2025 GMT Subject: CN=96adc054faac978e4d18534175a4396b5ea01f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:3c:19:b8:94:32:e6:75:25:b8:c6:f6:09:66: d1:ce:c0:9d:ab:9f:57:94:fe:fc:33:0a:cb:65:64: 71:76:d8:a5:82:fd:87:39:ba:25:39:4b:f3:52:ac: 66:ac:ce:00:6c:d5:0b:01:a2:e3:bd:3e:1e:84:4b: eb:fd:6f:73:7f:35:95:b4:fc:63:e5:2c:30:17:cb: e5:56:d0:bb:c3:27:96:25:5c:d9:f6:f0:ab:a2:75: 7c:5b:fe:48:20:87:bc:7d:49:02:d6:7b:e6:5c:c0: 27:ab:b1:b9:f2:59:01:80:df:97:b1:a9:2f:20:9f: 07:53:b4:57:90:88:ec:97:bf:62:5c:71:b3:bd:a5: 98:10:aa:5f:f6:25:fa:46:23:3c:a1:bc:ec:59:41: 06:a1:aa:be:ca:b6:08:32:ca:29:32:8f:9e:d1:cc: 72:89:b2:3a:a1:6d:00:3d:32:48:74:9a:88:91:b9: a8:d3:f5:af:4a:09:68:9e:c1:08:2d:cb:8e:46:cf: e7:22:c9:d4:53:61:71:a6:70:a7:7f:03:0b:67:e8: f4:d9:d1:8b:9c:bc:61:7f:15:0c:ac:c3:8d:50:ba: eb:9a:cf:88:2c:cb:fe:95:fb:f3:66:3f:f5:86:0e: 7a:20:23:79:13:3b:11:ce:78:bc:f9:59:45:5c:db: 61:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AD:C0:54:FA:AC:97:8E:4D:18:53:41:75:A4:39:6B:5E:A0:1F:11 X509v3 Authority Key Identifier: keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:06:e1:55:a6:43:3c:4f:31:b2:03:7d:cc:1f:e7:07:30:77: e9:b5:c5:c8:eb:49:95:27:07:88:33:76:ef:07:f1:9c:ed:3d: 38:af:0b:ae:9d:8e:f4:41:bf:75:0c:47:70:2e:55:86:0a:cf: 2f:ea:ab:c8:07:b2:3d:26:05:a7:10:5f:b0:11:01:e7:1e:ee: a3:c6:a2:eb:bb:ca:f5:fc:e0:3f:75:83:fe:bf:12:50:32:93: 31:dc:2c:67:8a:1e:80:cc:ce:df:a6:a8:2f:f6:38:3c:4c:31: 3b:95:4e:7f:d4:5a:b0:9a:b5:5f:96:e2:bd:ed:1e:5d:99:f3: 86:40:e5:98:4f:8a:4d:58:30:cd:f5:2e:cb:04:27:84:77:7c: d3:d1:9d:16:0d:7d:b8:93:f7:4f:df:42:88:dc:93:10:67:3f: d9:9c:cb:bc:57:89:38:bb:7a:db:6d:11:36:0f:02:c5:6c:6b: 72:5a:22:da:3c:7b:57:9e:13:d9:0f:fc:7e:13:22:bc:14:dc: 8c:7d:93:56:42:36:5f:e9:cb:8a:b9:e1:aa:42:72:6c:43:58: 31:fa:f6:f9:11:67:01:cd:8a:e3:6a:f7:50:40:38:00:e0:f4: e3:2e:a1:dc:f4:ae:59:ce:c5:84:c9:90:c0:5e:35:de:b2:4e: 52:b2:4a:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqXL6QmuOPhENym1ALPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MzA2ZTNhY2YzZWI5MDNjYzczOTczZmI2Mjg2MGI2NjM1 MTZjOTMwHhcNMjUxMjA2MDEwMjM3WhcNMjUxMjA3MDEwMjM3WjAzMTEwLwYDVQQD Eyg5NmFkYzA1NGZhYWM5NzhlNGQxODUzNDE3NWE0Mzk2YjVlYTAxZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+jwZuJQy5nUluMb2CWbRzsCdq59X lP78MwrLZWRxdtilgv2HObolOUvzUqxmrM4AbNULAaLjvT4ehEvr/W9zfzWVtPxj 5SwwF8vlVtC7wyeWJVzZ9vCronV8W/5IIIe8fUkC1nvmXMAnq7G58lkBgN+Xsakv IJ8HU7RXkIjsl79iXHGzvaWYEKpf9iX6RiM8obzsWUEGoaq+yrYIMsopMo+e0cxy ibI6oW0APTJIdJqIkbmo0/WvSglonsEILcuORs/nIsnUU2FxpnCnfwMLZ+j02dGL nLxhfxUMrMONULrrms+ILMv+lfvzZj/1hg56ICN5EzsRzni8+VlFXNth6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJatwFT6rJeOTRhTQXWkOWteoB8RMB8GA1UdIwQY MBaAFGYwbjrPPrkDzHOXP7YoYLZjUWyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODct ZWUyN2NiY2E3NDdlLzEvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODctZWUyN2NiY2E3NDdl LzEvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQbhVaZD PE8xsgN9zB/nBzB36bXFyOtJlScHiDN27wfxnO09OK8Lrp2O9EG/dQxHcC5VhgrP L+qryAeyPSYFpxBfsBEB5x7uo8ai67vK9fzgP3WD/r8SUDKTMdwsZ4oegMzO36ao L/Y4PEwxO5VOf9RasJq1X5bive0eXZnzhkDlmE+KTVgwzfUuywQnhHd809GdFg19 uJP3T99CiNyTEGc/2ZzLvFeJOLt6220RNg8CxWxrcloi2jx7V54T2Q/8fhMivBTc jH2TVkI2X+nLirnhqkJybENYMfr2+RFnAc2K42r3UEA4AOD04y6h3PSuWc7FhMmQ wF413rJOUrJK/w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:28 2025 by rpki-client