This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft File: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft (raw, json) Hash identifier: 2E0HLQeDFINn7KftQKcMzzZ25U66zI7zcB8CgbWjwDU= Subject key identifier: 46:6F:9C:EA:29:FD:36:B6:12:B8:69:1C:14:62:5A:70:81:48:31:BA Authority key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4 Certificate issuer: /CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4 Certificate serial: 019B3A8F6BF128401ED59B92CD7432B66E49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft Manifest number: 030F Signing time: Sat 20 Dec 2025 07:00:36 +0000 Manifest this update: Sat 20 Dec 2025 07:00:36 +0000 Manifest next update: Sun 21 Dec 2025 07:00:36 +0000 Files and hashes: 1: 1-YCQCphk32b8tDaXBmol_BTFhAA.roa (hash: vDe37BPFiFzh2DmP54Y2HTtv1UAWo0nqbWO5t7R6/68=) 2: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl (hash: 262ZVhdKH0synlW7+eGdXBP2cEaRfTBTnGARTOvezec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:6b:f1:28:40:1e:d5:9b:92:cd:74:32:b6:6e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4 Validity Not Before: Dec 20 07:00:36 2025 GMT Not After : Dec 21 07:00:36 2025 GMT Subject: CN=466f9cea29fd36b612b8691c14625a70814831ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:cb:64:11:af:0a:0b:b1:01:cf:9e:a6:95: ee:d9:40:ce:0c:6b:51:d1:eb:3e:14:48:c8:24:24: a2:17:2b:c1:fd:ad:ce:94:09:df:ab:cb:ba:32:4c: 54:24:23:e6:c3:33:fa:56:01:db:8e:37:ac:85:48: 7b:fc:41:9f:f8:a3:4e:72:29:b5:05:6a:f2:2a:89: b0:1a:56:4a:02:ca:2e:77:1c:87:e5:cf:41:82:48: 57:18:b3:00:08:19:f7:94:66:d0:89:30:1f:11:30: 38:a5:72:54:13:ba:7e:99:7b:e4:05:bf:36:17:e8: 45:10:af:41:95:c5:aa:d5:7c:08:87:b9:ea:3e:36: 81:e3:ed:eb:f9:9c:9a:09:47:b2:41:0d:63:93:84: 7e:a1:e1:9a:05:1d:80:a2:06:d6:92:98:b2:0a:37: bc:5a:bb:02:cc:8d:24:24:4f:eb:55:3d:0e:85:60: 92:f0:b6:1d:d3:fa:19:0c:29:05:ef:8e:f8:47:c6: 11:bd:53:72:dd:2b:22:8e:43:c2:97:6a:39:f1:f7: eb:98:a5:d6:ad:e8:aa:2d:c2:c9:16:87:a3:e6:dd: 7e:19:84:62:fe:c8:ba:d3:26:51:ce:df:4b:42:1f: f5:46:44:c1:2d:d0:5c:76:86:45:e0:66:ff:29:bd: 65:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6F:9C:EA:29:FD:36:B6:12:B8:69:1C:14:62:5A:70:81:48:31:BA X509v3 Authority Key Identifier: keyid:CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2a:4e:14:d2:da:53:6e:c5:8c:04:76:72:ec:ee:ca:13:2d: 0d:65:d6:36:9f:52:64:04:8d:4f:84:d4:2e:7c:e6:07:ab:bd: b3:8c:82:7e:8a:d6:9b:0a:99:a8:6f:39:dd:68:22:c0:09:81: 4d:bf:c3:58:9d:c1:62:ea:79:f0:52:d6:c3:e3:bb:3d:41:f0: d0:d2:78:d6:8e:6c:87:8b:96:87:46:58:82:42:c6:de:b8:84: 03:60:54:c2:ec:ea:87:9c:45:f3:92:b1:0e:cf:fe:1f:9f:a0: 47:46:35:8a:89:b2:3d:20:6f:08:bd:84:f0:4f:15:d2:3b:17: 36:24:38:bf:c6:14:63:6e:de:21:12:8b:0c:8e:75:df:86:2b: 3e:5a:4b:a0:45:54:0c:87:88:c8:5a:ed:32:4b:20:1c:c9:2c: ef:98:19:6b:f6:5a:1c:ae:5f:91:e2:72:35:32:3c:e0:8d:28: 8a:5d:ee:39:4a:e4:92:77:7a:5f:39:0f:c8:e3:cc:8c:62:4f: 8b:d8:e1:39:bf:ed:77:21:c8:8c:5f:e0:68:be:d0:a4:c4:f3: 94:c3:5d:ae:21:61:f3:fa:5e:79:c4:3f:94:6a:47:8f:c4:b0: fa:51:e6:50:d7:09:fb:18:74:9d:c5:cd:2d:aa:dc:35:7a:76: 66:d7:32:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j2vxKEAe1ZuSzXQytm5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMWE5ZjcyOTM4OGMxNjliYWNjMWNiYWY5OGUyMzZkNGU4 MDhhYjQwHhcNMjUxMjIwMDcwMDM2WhcNMjUxMjIxMDcwMDM2WjAzMTEwLwYDVQQD Eyg0NjZmOWNlYTI5ZmQzNmI2MTJiODY5MWMxNDYyNWE3MDgxNDgzMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBvLZBGvCguxAc+eppXu2UDODGtR 0es+FEjIJCSiFyvB/a3OlAnfq8u6MkxUJCPmwzP6VgHbjjeshUh7/EGf+KNOcim1 BWryKomwGlZKAsoudxyH5c9BgkhXGLMACBn3lGbQiTAfETA4pXJUE7p+mXvkBb82 F+hFEK9BlcWq1XwIh7nqPjaB4+3r+ZyaCUeyQQ1jk4R+oeGaBR2AogbWkpiyCje8 WrsCzI0kJE/rVT0OhWCS8LYd0/oZDCkF7474R8YRvVNy3SsijkPCl2o58ffrmKXW reiqLcLJFoej5t1+GYRi/si60yZRzt9LQh/1RkTBLdBcdoZF4Gb/Kb1llwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZvnOop/Ta2ErhpHBRiWnCBSDG6MB8GA1UdIwQY MBaAFMwan3KTiMFpuswcuvmOI21OgIq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NzFjNmItMGYyNi00YzQzLWEwYWEt N2ZmYzRmNDAzNjZhLzEvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84NzFjNmItMGYyNi00YzQzLWEwYWEtN2ZmYzRmNDAzNjZh LzEvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCpOFNLa U27FjAR2cuzuyhMtDWXWNp9SZASNT4TULnzmB6u9s4yCforWmwqZqG853WgiwAmB Tb/DWJ3BYup58FLWw+O7PUHw0NJ41o5sh4uWh0ZYgkLG3riEA2BUwuzqh5xF85Kx Ds/+H5+gR0Y1iomyPSBvCL2E8E8V0jsXNiQ4v8YUY27eIRKLDI5134YrPlpLoEVU DIeIyFrtMksgHMks75gZa/ZaHK5fkeJyNTI84I0oil3uOUrkknd6XzkPyOPMjGJP i9jhOb/tdyHIjF/gaL7QpMTzlMNdriFh8/peecQ/lGpHj8Sw+lHmUNcJ+xh0ncXN LarcNXp2Ztcyrw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:46:50 2025 by rpki-client