This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json) Hash identifier: 7u5HKPGg9RAqksy0bK9xlx9C2Wfs1ZN0HwDnBsm8ZLQ= Subject key identifier: EF:9A:D8:80:03:39:CF:B6:D4:B2:45:9E:87:AE:93:44:58:52:F2:7E Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0 Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0 Certificate serial: 019AF19B7D7609E4C172D97ED942C9E4849E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft Manifest number: 0583 Signing time: Sat 06 Dec 2025 03:01:30 +0000 Manifest this update: Sat 06 Dec 2025 03:01:30 +0000 Manifest next update: Sun 07 Dec 2025 03:01:30 +0000 Files and hashes: 1: 5RDrxvpk6f6_CeHaE5maQdmSM44.roa (hash: ki187Iv+O6q2r1ZkIX9WA+gL/Pc275QX3Xeem+p1Izk=) 2: DQ01J-Cq4hUemzI_hsxFb8NofP8.asa (hash: fcPlXypjGU8YaSASqBijwf7gz4frCYBc1/uFvytFDWw=) 3: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: t4iwT5rD1mw59xjV3xM6Q+3yf/VzcZyn+dSyx6PaZgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7d:76:09:e4:c1:72:d9:7e:d9:42:c9:e4:84:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0 Validity Not Before: Dec 6 03:01:30 2025 GMT Not After : Dec 7 03:01:30 2025 GMT Subject: CN=ef9ad8800339cfb6d4b2459e87ae93445852f27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:88:b0:be:fb:94:70:61:cd:86:eb:87:e0:21: 66:1d:93:63:c3:dd:3a:b1:40:f5:e2:4d:4b:9d:e4: 23:a6:c5:01:22:60:47:03:b9:86:6e:e7:45:8f:2c: ad:88:1f:9e:66:27:b6:46:23:4a:29:13:08:de:30: 9c:cc:d6:b1:c5:65:13:cc:b2:26:f7:29:c7:0c:30: f8:be:0d:a3:b5:0a:a2:d6:fd:02:05:a3:0e:63:5e: a0:1c:76:76:70:e2:d5:49:8c:e5:82:00:54:be:bc: 8d:3c:e1:15:a8:c9:37:e4:ea:1b:a8:2f:02:1e:b0: 24:ad:36:e9:a8:ba:07:ab:85:09:f8:3e:fb:23:1d: f7:46:38:fa:1a:10:3b:6a:87:99:7d:e5:48:48:15: 86:4b:5d:32:ce:41:39:3c:95:e1:b7:41:3c:6e:7b: ff:bf:3c:38:0a:62:c2:b2:a3:ae:2e:d2:95:c8:57: d9:4f:3d:39:5a:c1:de:9f:70:dd:16:9d:2f:00:14: 41:3f:69:43:07:0f:4e:96:d4:07:a4:d9:bd:14:2d: 53:03:4b:41:6a:81:ca:52:e2:ef:f4:9f:82:36:d6: 86:d7:fa:79:62:31:0e:37:42:d4:cb:f1:b8:0b:58: cc:6f:fc:d4:83:3b:46:9e:d9:1d:fb:c1:91:78:37: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9A:D8:80:03:39:CF:B6:D4:B2:45:9E:87:AE:93:44:58:52:F2:7E X509v3 Authority Key Identifier: keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:39:e3:c8:b2:59:9b:c0:ae:94:a8:4c:92:76:ef:30:6e:59: 83:cb:46:8c:eb:48:a8:9c:b3:b3:86:5c:80:9a:b5:b7:c7:61: 76:31:ab:f7:17:fb:c1:3f:ac:57:01:73:c5:f2:42:d4:9d:db: c9:ce:d3:2b:aa:45:06:b8:57:ca:53:89:19:2c:7c:85:8e:d7: bd:87:8b:54:00:3b:1b:6a:71:46:16:95:e4:0d:e5:83:23:68: 6f:50:e6:cf:e1:73:e1:d3:ce:57:3e:c1:0c:15:90:97:69:4c: c1:31:9d:83:88:4d:55:fe:be:da:63:42:82:d6:88:4d:d0:42: 87:70:33:80:ee:c2:38:5c:a9:95:2d:5e:87:33:c3:55:5f:93: 56:26:82:5c:3e:74:37:d6:05:63:67:42:46:9b:5e:df:49:a8: ad:92:c5:15:6f:13:ba:32:7e:4d:24:2b:62:02:46:e9:04:d3: e6:64:d5:ba:a3:ed:1e:e6:2d:74:7c:19:42:b7:0e:1b:f8:cd: 9c:d2:e5:bc:91:39:a0:9a:8c:e0:90:9e:4f:32:74:a3:fe:90: 9b:49:71:99:8d:13:69:1b:01:6d:a8:d8:26:3f:ee:48:15:77: 15:51:8b:1c:d5:fa:3f:0b:e0:9c:4f:08:2e:b1:52:a2:7b:77: d0:a8:c2:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm312CeTBctl+2ULJ5ISeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTRmY2U5YjE5YTVlZWE1MzJlMTdkODNkYThjMWRjZDFk ZTE4YzAwHhcNMjUxMjA2MDMwMTMwWhcNMjUxMjA3MDMwMTMwWjAzMTEwLwYDVQQD EyhlZjlhZDg4MDAzMzljZmI2ZDRiMjQ1OWU4N2FlOTM0NDU4NTJmMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoiwvvuUcGHNhuuH4CFmHZNjw906 sUD14k1LneQjpsUBImBHA7mGbudFjyytiB+eZie2RiNKKRMI3jCczNaxxWUTzLIm 9ynHDDD4vg2jtQqi1v0CBaMOY16gHHZ2cOLVSYzlggBUvryNPOEVqMk35OobqC8C HrAkrTbpqLoHq4UJ+D77Ix33Rjj6GhA7aoeZfeVISBWGS10yzkE5PJXht0E8bnv/ vzw4CmLCsqOuLtKVyFfZTz05WsHen3DdFp0vABRBP2lDBw9OltQHpNm9FC1TA0tB aoHKUuLv9J+CNtaG1/p5YjEON0LUy/G4C1jMb/zUgztGntkd+8GReDco6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+a2IADOc+21LJFnoeuk0RYUvJ+MB8GA1UdIwQY MBaAFM8U/Omxml7qUy4X2D2owdzR3hjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMt NTljMTA4N2U0ODU2LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMtNTljMTA4N2U0ODU2 LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDnjyLJZ m8CulKhMknbvMG5Zg8tGjOtIqJyzs4ZcgJq1t8dhdjGr9xf7wT+sVwFzxfJC1J3b yc7TK6pFBrhXylOJGSx8hY7XvYeLVAA7G2pxRhaV5A3lgyNob1Dmz+Fz4dPOVz7B DBWQl2lMwTGdg4hNVf6+2mNCgtaITdBCh3AzgO7COFyplS1ehzPDVV+TViaCXD50 N9YFY2dCRpte30morZLFFW8TujJ+TSQrYgJG6QTT5mTVuqPtHuYtdHwZQrcOG/jN nNLlvJE5oJqM4JCeTzJ0o/6Qm0lxmY0TaRsBbajYJj/uSBV3FVGLHNX6PwvgnE8I LrFSont30KjC9A== -----END CERTIFICATE-----Generated at Sat Dec 6 05:06:41 2025 by rpki-client