This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json) Hash identifier: HTmmyxDukHNIDUOx2N8N9++IepfrV+Tv9ZunSF4UYL4= Subject key identifier: F9:C1:2B:41:EB:70:AB:EE:1A:59:17:2D:EC:60:78:61:89:23:E1:CA Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea Certificate serial: 019B0F009796BC3863541D8FD982240077CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft Manifest number: 1314 Signing time: Thu 11 Dec 2025 20:00:55 +0000 Manifest this update: Thu 11 Dec 2025 20:00:55 +0000 Manifest next update: Fri 12 Dec 2025 20:00:55 +0000 Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: yOlGr02IYDF8PAr60qW9UL9lKpAoNt+fyVR+f3ffN1M=) 2: fWdcwSs6zepV4nyngmDbMNEhJgc.roa (hash: xKdKIOHrNEbxshe+Nt7u4EYPgDXnCkWil6RpBaiRPJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:97:96:bc:38:63:54:1d:8f:d9:82:24:00:77:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea Validity Not Before: Dec 11 20:00:55 2025 GMT Not After : Dec 12 20:00:55 2025 GMT Subject: CN=f9c12b41eb70abee1a59172dec6078618923e1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ba:58:c2:06:90:07:68:f2:1c:ba:8f:08:fc: 56:4e:f5:db:04:15:08:bd:a8:ae:88:c3:f0:87:50: b0:a1:4d:10:15:40:9e:2d:d8:07:dd:b9:9a:3a:25: 55:35:94:3f:21:eb:3a:ba:97:d9:23:0b:5b:30:55: 02:77:a7:d5:9e:95:cc:6b:88:21:d7:97:58:38:31: c9:84:91:14:40:a9:5a:11:b2:94:2c:6b:78:d6:5e: b9:68:b2:78:f9:61:2f:88:01:7d:f3:fe:be:4c:04: 19:6f:76:77:47:dd:18:e4:3d:5d:0f:af:d3:af:03: 0a:b2:65:56:cc:56:14:a4:f8:b4:78:e5:b9:38:87: 4f:9c:2a:94:67:ae:ee:59:8e:e8:29:9b:30:87:fc: b6:10:69:fa:bc:23:40:51:aa:48:d6:a6:70:7a:64: e8:62:3f:0b:0e:af:b4:83:5e:85:50:7f:0a:8d:ad: 74:d3:a9:29:90:92:51:06:0f:07:d1:79:c6:15:80: ab:ac:e9:11:b3:7d:5b:f2:37:5c:fb:60:d5:a1:57: a6:e1:b5:11:ab:27:9e:e5:fa:23:4b:91:cb:0a:ab: 2f:73:79:8d:05:bb:68:1f:40:5f:f3:36:17:04:77: df:57:fb:f8:e5:9c:a0:f7:19:1f:2e:b1:8a:19:c0: bf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C1:2B:41:EB:70:AB:EE:1A:59:17:2D:EC:60:78:61:89:23:E1:CA X509v3 Authority Key Identifier: keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:44:57:90:35:32:29:22:5e:a2:87:ea:af:8b:ad:03:1f:33: 26:be:4c:dd:40:8c:b7:58:8b:19:68:79:04:95:f5:da:13:de: cb:cb:ed:da:47:fe:84:17:f5:2a:a6:28:eb:81:cb:7c:b0:69: 8e:d2:ae:1f:6f:97:bd:a1:29:3a:5a:e1:ad:8b:54:a3:e2:5c: 25:1e:05:b2:0e:a9:fa:1d:f5:51:9f:62:8c:d3:db:78:25:4c: 7b:93:4a:fa:53:e0:b8:c5:04:ae:6d:6f:29:2c:69:4e:3c:72: 1b:f9:d3:dc:37:0e:0d:22:2e:a5:9c:ab:1b:bf:84:dd:02:53: 57:37:7e:cd:c2:86:70:89:0f:30:cd:e7:a0:7b:ca:11:3b:eb: 01:6a:3f:e2:8b:1f:a9:f6:9c:10:4e:fc:ae:be:28:1e:7a:6a: 38:f6:50:f6:f1:54:61:b1:c1:8f:bf:9f:46:b8:16:b8:50:8b: de:14:92:ee:84:08:b9:03:4f:cc:b5:bd:00:31:91:27:01:fa: c5:c2:93:48:17:aa:55:04:81:fc:a1:01:bc:52:92:06:70:93: b4:3c:09:a4:ac:c4:b3:29:12:61:2f:c8:a1:67:11:95:c1:99: 0c:a6:e7:55:df:a4:14:c5:51:81:1f:90:82:29:a5:25:88:a7: eb:b0:83:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAJeWvDhjVB2P2YIkAHfMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YzkyMGEyN2UzZTUzYTM2N2Y5ZWE5NmRiN2JhZjdiZDY1 YTgzZWEwHhcNMjUxMjExMjAwMDU1WhcNMjUxMjEyMjAwMDU1WjAzMTEwLwYDVQQD EyhmOWMxMmI0MWViNzBhYmVlMWE1OTE3MmRlYzYwNzg2MTg5MjNlMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLpYwgaQB2jyHLqPCPxWTvXbBBUI vaiuiMPwh1CwoU0QFUCeLdgH3bmaOiVVNZQ/Ies6upfZIwtbMFUCd6fVnpXMa4gh 15dYODHJhJEUQKlaEbKULGt41l65aLJ4+WEviAF98/6+TAQZb3Z3R90Y5D1dD6/T rwMKsmVWzFYUpPi0eOW5OIdPnCqUZ67uWY7oKZswh/y2EGn6vCNAUapI1qZwemTo Yj8LDq+0g16FUH8Kja1006kpkJJRBg8H0XnGFYCrrOkRs31b8jdc+2DVoVem4bUR qyee5fojS5HLCqsvc3mNBbtoH0Bf8zYXBHffV/v45Zyg9xkfLrGKGcC/1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnBK0HrcKvuGlkXLexgeGGJI+HKMB8GA1UdIwQY MBaAFGXJIKJ+PlOjZ/nqltt7r3vWWoPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMmRkMDAtYTYyMS00OWE5LWJiYWIt MzdmOWJmNzg2MWI2LzEvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9iMmRkMDAtYTYyMS00OWE5LWJiYWItMzdmOWJmNzg2MWI2 LzEvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkRXkDUy KSJeoofqr4utAx8zJr5M3UCMt1iLGWh5BJX12hPey8vt2kf+hBf1KqYo64HLfLBp jtKuH2+XvaEpOlrhrYtUo+JcJR4Fsg6p+h31UZ9ijNPbeCVMe5NK+lPguMUErm1v KSxpTjxyG/nT3DcODSIupZyrG7+E3QJTVzd+zcKGcIkPMM3noHvKETvrAWo/4osf qfacEE78rr4oHnpqOPZQ9vFUYbHBj7+fRrgWuFCL3hSS7oQIuQNPzLW9ADGRJwH6 xcKTSBeqVQSB/KEBvFKSBnCTtDwJpKzEsykSYS/IoWcRlcGZDKbnVd+kFMVRgR+Q gimlJYin67CDjw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:57:32 2025 by rpki-client