This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json) Hash identifier: I4UzahFxfUz8Nrx4K0ETIUmC0EjvV6Wx61R5hB/KOLo= Subject key identifier: 5A:54:A1:28:4D:9A:6B:8E:33:5B:21:50:C1:38:3B:DC:5A:E2:DD:85 Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30 Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230 Certificate serial: 019B108105ADAB7D232B1A452C6A45F5A3AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 03:00:49 +0000 Manifest this update: Fri 12 Dec 2025 03:00:49 +0000 Manifest next update: Sat 13 Dec 2025 03:00:49 +0000 Files and hashes: 1: 1KzANFt0aPj0q7oH7exbtu-amXU.roa (hash: mW2duFDxzUlFHO8La7Ej6q1lO3QaO9KQzC0XOixRqPM=) 2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: fLI8OE6zZI+VBULxVeNseNL4LVi+B2A5grXqlF3DAuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:05:ad:ab:7d:23:2b:1a:45:2c:6a:45:f5:a3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230 Validity Not Before: Dec 12 03:00:49 2025 GMT Not After : Dec 13 03:00:49 2025 GMT Subject: CN=5a54a1284d9a6b8e335b2150c1383bdc5ae2dd85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:62:2e:63:bf:ae:ca:3b:30:01:bd:d8:0a: ab:0c:f9:38:7d:96:87:51:69:4e:fd:65:4a:fd:ac: c5:c1:da:ed:fd:5e:9c:d2:94:9b:b5:a7:a9:d2:c6: d7:a2:11:e6:61:fa:3e:3f:0a:a7:2e:95:64:26:d3: d9:74:c0:91:7e:ce:a5:28:bb:a9:35:73:37:0e:4b: 84:02:78:4b:f1:1d:d6:f1:4a:19:11:90:69:6e:fd: f3:6c:64:a8:90:d5:61:2f:05:7e:27:b7:db:6b:2f: e7:be:4e:f9:f4:6f:35:e6:50:cd:ac:78:45:87:c2: c7:4d:d2:36:8d:85:4e:28:65:f8:2e:d3:c1:3d:37: 99:a5:a3:3f:10:db:f6:13:3f:90:68:a9:d8:ef:c5: f6:c5:d5:e2:14:30:b1:c6:49:26:f9:b4:33:54:3b: 3a:6a:e9:78:f0:ef:40:8c:72:2a:bb:f3:18:15:ca: 0b:ea:23:f0:67:40:be:4a:2c:56:0f:66:91:5f:e0: c2:85:1f:b7:49:fd:15:aa:00:c1:3f:a0:10:e3:6d: 64:10:b0:ea:66:49:fe:c9:aa:e2:e6:3f:3a:f2:79: 2b:ff:67:56:a2:83:0a:d7:8c:f3:10:23:67:75:ba: ec:c5:f1:cb:0c:f2:5c:a5:86:5e:63:35:5f:cc:e2: 34:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:54:A1:28:4D:9A:6B:8E:33:5B:21:50:C1:38:3B:DC:5A:E2:DD:85 X509v3 Authority Key Identifier: keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c3:9b:dd:5b:9e:c2:e7:30:5c:a0:af:02:4c:b6:de:8c:94: 08:23:5b:58:a3:00:b2:e2:5d:7f:73:04:db:60:4a:5c:83:ea: 87:51:44:c0:9e:9a:27:88:72:2e:55:13:0b:f1:2b:46:f6:bb: ea:fe:07:44:82:fe:fd:15:ad:6c:fa:d5:e6:7a:7e:fe:9b:6f: f7:d1:1b:48:29:2d:66:1d:50:5b:7b:1f:b7:96:a4:e5:d6:a3: 55:03:25:19:21:87:1b:b9:44:be:6b:d8:d9:05:0b:fc:e7:0b: 51:6f:9e:ef:8a:30:3d:e9:33:2b:0b:1c:f2:83:a1:22:dd:2d: f6:51:8d:ad:a4:99:27:31:43:e1:59:1a:e9:a4:d6:7b:fa:e2: 4a:11:1d:56:c2:90:81:2d:a7:e7:39:d3:31:f8:84:29:cb:34: c9:b6:00:cb:94:59:1e:d6:cf:43:08:7f:f0:da:ed:e5:2b:af: a0:9b:3a:e7:44:81:47:e9:8e:b5:68:76:82:db:87:7b:c6:b7: 57:2d:eb:c4:d6:7a:4f:a0:20:75:47:d5:b2:26:9c:7f:01:d1: ec:b5:2f:ae:51:52:c6:72:3e:cb:88:00:42:a2:04:e5:f2:cc: 51:6c:83:ee:9a:86:95:76:d8:e6:10:06:85:4c:ab:d5:59:b5: bf:01:2f:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgQWtq30jKxpFLGpF9aOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWM3ODk5NzZkM2I1ODQwMTZjYWMxOWYzNGJiZWRlOTY2 Y2QyMzAwHhcNMjUxMjEyMDMwMDQ5WhcNMjUxMjEzMDMwMDQ5WjAzMTEwLwYDVQQD Eyg1YTU0YTEyODRkOWE2YjhlMzM1YjIxNTBjMTM4M2JkYzVhZTJkZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIBiLmO/rso7MAG92AqrDPk4fZaH UWlO/WVK/azFwdrt/V6c0pSbtaep0sbXohHmYfo+PwqnLpVkJtPZdMCRfs6lKLup NXM3DkuEAnhL8R3W8UoZEZBpbv3zbGSokNVhLwV+J7fbay/nvk759G815lDNrHhF h8LHTdI2jYVOKGX4LtPBPTeZpaM/ENv2Ez+QaKnY78X2xdXiFDCxxkkm+bQzVDs6 aul48O9AjHIqu/MYFcoL6iPwZ0C+SixWD2aRX+DChR+3Sf0VqgDBP6AQ421kELDq Zkn+yari5j868nkr/2dWooMK14zzECNndbrsxfHLDPJcpYZeYzVfzOI0+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpUoShNmmuOM1shUME4O9xa4t2FMB8GA1UdIwQY MBaAFGbseJl207WEAWysGfNLvt6WbNIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wN2JmNWItMDM0MC00MzRlLWE0NDQt ZjA3NjFlMjllNmM0LzEvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8wN2JmNWItMDM0MC00MzRlLWE0NDQtZjA3NjFlMjllNmM0 LzEvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMOb3Vue wucwXKCvAky23oyUCCNbWKMAsuJdf3ME22BKXIPqh1FEwJ6aJ4hyLlUTC/ErRva7 6v4HRIL+/RWtbPrV5np+/ptv99EbSCktZh1QW3sft5ak5dajVQMlGSGHG7lEvmvY 2QUL/OcLUW+e74owPekzKwsc8oOhIt0t9lGNraSZJzFD4Vka6aTWe/riShEdVsKQ gS2n5znTMfiEKcs0ybYAy5RZHtbPQwh/8Nrt5SuvoJs650SBR+mOtWh2gtuHe8a3 Vy3rxNZ6T6AgdUfVsiacfwHR7LUvrlFSxnI+y4gAQqIE5fLMUWyD7pqGlXbY5hAG hUyr1Vm1vwEvDg== -----END CERTIFICATE-----Generated at Fri Dec 12 06:40:12 2025 by rpki-client