This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft File: zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json) Hash identifier: 56ULoCB1RStkpIS5Hx7XnNSF0xCSjo22PAX+2wWOB+4= Subject key identifier: 76:6F:B8:36:2C:07:71:E9:60:9B:B1:C9:3C:84:B0:2A:7A:61:27:49 Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27 Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627 Certificate serial: 019B4701CE789770C9541E70D237066BB841 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft Manifest number: 06FF Signing time: Mon 22 Dec 2025 17:00:59 +0000 Manifest this update: Mon 22 Dec 2025 17:00:59 +0000 Manifest next update: Tue 23 Dec 2025 17:00:59 +0000 Files and hashes: 1: FnA6f4DOd265nGzqUSApRurvL20.roa (hash: CKai/Ita+qQk4qWCNkCUXx6BxPFuVd8UKoy7z8Mf368=) 2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: Phv7R6etH/A7nKMoh+bOrCqsb1UXjTwck/gauAOyJhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:ce:78:97:70:c9:54:1e:70:d2:37:06:6b:b8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627 Validity Not Before: Dec 22 17:00:59 2025 GMT Not After : Dec 23 17:00:59 2025 GMT Subject: CN=766fb8362c0771e9609bb1c93c84b02a7a612749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:34:98:a3:6a:61:91:bd:9f:55:54:18:3e:74: 9c:dd:ae:84:ac:06:88:b0:52:90:b0:c7:66:09:27: 83:7c:35:3a:90:1d:d7:9d:54:90:29:10:47:dd:c7: 6e:7b:9e:f4:96:45:2b:b9:5b:84:fb:44:4a:90:9a: e4:c1:ac:66:0f:f5:6c:35:55:1d:60:8f:cb:54:4d: f2:dc:23:59:dc:ca:5f:36:df:cb:eb:8f:f6:32:21: fb:cc:44:43:c4:e4:e0:f7:d4:5e:9e:a6:1e:3f:da: 28:8f:73:3e:2d:f6:0a:ec:b2:c1:00:a9:b4:2d:fa: a2:67:84:e2:27:f8:75:33:5c:d3:03:39:38:56:1e: 3b:60:bd:84:0c:81:fe:34:60:47:05:fd:21:f4:04: a9:8b:56:60:b4:3e:65:fa:84:d4:ef:02:c7:80:af: 65:9c:99:92:2c:8b:64:18:c5:96:9f:24:99:31:a7: 1a:33:f6:9e:86:d2:2a:d4:9e:73:41:d4:37:bf:72: d7:0d:78:e3:31:fe:f7:1f:ff:30:59:1d:5d:f1:bc: 1f:ae:a3:e0:78:3a:75:59:e4:ac:ec:98:36:52:2e: e7:ee:b9:04:aa:64:e3:51:53:fc:f7:16:e6:f1:6b: 0e:5a:25:7c:32:e2:92:4a:7c:bd:f6:c1:80:7d:21: 17:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6F:B8:36:2C:07:71:E9:60:9B:B1:C9:3C:84:B0:2A:7A:61:27:49 X509v3 Authority Key Identifier: keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:75:fa:40:c5:4c:97:71:0f:60:89:cc:ac:c4:c0:2d:bf:c5: fd:2e:61:a7:52:79:65:da:2b:7a:fa:e9:f2:82:f2:43:e9:98: 90:5a:cc:32:ab:6f:61:51:af:60:4f:1c:cb:be:5f:b8:a2:6c: 86:ba:79:96:78:06:76:71:8b:6f:eb:5b:d9:e8:ca:c3:82:6e: 81:1b:36:13:c8:27:39:85:67:b8:36:84:af:1f:b7:64:ef:09: ca:e4:7c:c3:83:3c:13:3a:51:98:88:9b:1a:23:33:07:02:c1: 7e:40:78:dd:33:8c:de:53:c0:01:36:49:b6:63:78:9a:27:ed: 52:be:c0:93:41:ba:d7:00:e2:a8:36:0e:57:c5:50:2e:5b:1c: 79:cc:f6:87:d7:4e:c2:81:c2:5e:31:3a:c1:a2:92:e2:f0:56: 3a:ca:a1:11:30:d6:2b:38:71:e1:80:76:e7:ec:81:39:01:d9: 38:a8:8c:69:b7:5b:2e:8e:ed:8f:40:cc:e2:13:93:72:6a:ff: 07:ab:01:85:ab:07:e6:07:a4:8f:5a:cd:59:8a:c6:e3:1a:42: 53:16:79:f1:95:40:b6:fc:e4:b7:4a:b3:00:95:d1:e3:db:8b: 1d:49:9e:ae:04:33:62:a8:30:e3:82:06:ac:45:db:66:19:c7: 1b:34:bc:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAc54l3DJVB5w0jcGa7hBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTg0MTQwY2QxYTIyM2Y2MzhiNzk5NmY1NDg5ZjQ4NWQ4 ZWU2MjcwHhcNMjUxMjIyMTcwMDU5WhcNMjUxMjIzMTcwMDU5WjAzMTEwLwYDVQQD Eyg3NjZmYjgzNjJjMDc3MWU5NjA5YmIxYzkzYzg0YjAyYTdhNjEyNzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDSYo2phkb2fVVQYPnSc3a6ErAaI sFKQsMdmCSeDfDU6kB3XnVSQKRBH3cdue570lkUruVuE+0RKkJrkwaxmD/VsNVUd YI/LVE3y3CNZ3MpfNt/L64/2MiH7zERDxOTg99RenqYeP9ooj3M+LfYK7LLBAKm0 LfqiZ4TiJ/h1M1zTAzk4Vh47YL2EDIH+NGBHBf0h9ASpi1ZgtD5l+oTU7wLHgK9l nJmSLItkGMWWnySZMacaM/aehtIq1J5zQdQ3v3LXDXjjMf73H/8wWR1d8bwfrqPg eDp1WeSs7Jg2Ui7n7rkEqmTjUVP89xbm8WsOWiV8MuKSSny99sGAfSEXcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZvuDYsB3HpYJuxyTyEsCp6YSdJMB8GA1UdIwQY MBaAFM8YQUDNGiI/Y4t5lvVIn0hdjuYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhoQlFNMGFJajlqaTNtVzlVaWZTRjJPNWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wN2JmMjktMDdkMS00ZGFmLWIzYmIt Y2JmYjJjN2ZiYWRkLzEvenhoQlFNMGFJajlqaTNtVzlVaWZTRjJPNWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wN2JmMjktMDdkMS00ZGFmLWIzYmItY2JmYjJjN2ZiYWRk LzEvenhoQlFNMGFJajlqaTNtVzlVaWZTRjJPNWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnX6QMVM l3EPYInMrMTALb/F/S5hp1J5Zdorevrp8oLyQ+mYkFrMMqtvYVGvYE8cy75fuKJs hrp5lngGdnGLb+tb2ejKw4JugRs2E8gnOYVnuDaErx+3ZO8JyuR8w4M8EzpRmIib GiMzBwLBfkB43TOM3lPAATZJtmN4miftUr7Ak0G61wDiqDYOV8VQLlscecz2h9dO woHCXjE6waKS4vBWOsqhETDWKzhx4YB25+yBOQHZOKiMabdbLo7tj0DM4hOTcmr/ B6sBhasH5gekj1rNWYrG4xpCUxZ58ZVAtvzkt0qzAJXR49uLHUmergQzYqgw44IG rEXbZhnHGzS8jA== -----END CERTIFICATE-----Generated at Mon Dec 22 20:30:25 2025 by rpki-client