This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft File: zfy95jLRBvqtmMLBiVqHfKYBUho.mft (raw, json) Hash identifier: yJl6p6j/8A6FK4M45X/bFir7GnCsx8McGn+6OtBnOxI= Subject key identifier: EF:2B:89:12:B4:9F:AC:DB:FE:30:9B:BD:39:23:D2:A2:C1:2A:56:F8 Authority key identifier: CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A Certificate issuer: /CN=cdfcbde632d106faad98c2c1895a877ca601521a Certificate serial: 019B05C6FB2A985C30AFFB37F138FAE6FA77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft Manifest number: 16FF Signing time: Wed 10 Dec 2025 01:01:25 +0000 Manifest this update: Wed 10 Dec 2025 01:01:25 +0000 Manifest next update: Thu 11 Dec 2025 01:01:25 +0000 Files and hashes: 1: 3OCzpqqGOlJ3RRPa9qcY9JxjkUo.roa (hash: InQFvxlV7A4HcZ9T6xcxQF/B13Yg7udCj77rsg046YE=) 2: zfy95jLRBvqtmMLBiVqHfKYBUho.crl (hash: 4LYzB5y/yuKcZOdaIgxO0ykzZ1wdqRQ7dR94oRiYtYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c6:fb:2a:98:5c:30:af:fb:37:f1:38:fa:e6:fa:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdfcbde632d106faad98c2c1895a877ca601521a Validity Not Before: Dec 10 01:01:25 2025 GMT Not After : Dec 11 01:01:25 2025 GMT Subject: CN=ef2b8912b49facdbfe309bbd3923d2a2c12a56f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3b:b0:e4:c7:30:46:4e:62:0b:62:a4:02:e3: 07:8b:81:3d:2c:8f:05:9e:42:15:bd:35:eb:b8:1c: 93:be:be:e8:1d:d4:fa:b1:53:cb:a2:45:89:d3:63: 1f:5c:61:87:7c:c7:9b:7c:33:79:7b:7f:b6:bf:43: 49:55:fd:f1:b1:39:91:15:81:c2:8a:6b:53:b8:bd: 38:25:87:3e:d9:6b:22:e3:6c:72:a8:7f:9f:fe:76: de:5a:e5:b6:45:9c:41:3b:89:38:69:d6:8e:df:ac: 33:97:0f:8f:d4:a5:ed:79:17:6e:8a:bd:af:8c:ea: 21:3c:27:cf:91:1f:95:b3:73:a8:e6:d2:de:96:a8: b5:c6:88:34:fd:af:37:7a:82:a8:7e:2c:9c:7c:21: 4f:0d:28:c7:9c:30:32:5d:1a:dd:8b:40:21:5c:e2: 24:68:7f:cc:4f:31:88:07:85:6c:9c:1e:f0:9c:f0: ec:d8:40:e1:38:e6:be:bc:8f:7a:81:84:2b:5d:75: 39:30:74:4a:a3:2d:c1:c6:bf:f3:7e:06:dc:08:96: d2:b1:17:f0:f3:f3:ed:ed:63:08:b0:8e:99:ff:d4: a9:59:f8:1d:f7:19:29:3f:5c:e7:7d:73:07:7b:33: 39:3e:ce:81:4e:cd:e0:a3:92:4e:94:4b:92:94:52: 5a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2B:89:12:B4:9F:AC:DB:FE:30:9B:BD:39:23:D2:A2:C1:2A:56:F8 X509v3 Authority Key Identifier: keyid:CD:FC:BD:E6:32:D1:06:FA:AD:98:C2:C1:89:5A:87:7C:A6:01:52:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfy95jLRBvqtmMLBiVqHfKYBUho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fe45cf-4ad2-41d9-bbca-203cfa238696/1/zfy95jLRBvqtmMLBiVqHfKYBUho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:32:87:61:24:1d:1c:53:16:69:7a:3f:5c:5f:99:0b:49:e7: 81:80:44:f9:f2:d3:97:29:a3:70:7c:54:ea:ad:26:03:06:28: 72:16:05:96:d5:9a:6a:b5:11:3d:63:4d:bd:06:6a:4e:84:09: e5:bd:73:f6:9b:6b:81:f9:ef:f0:5a:f5:7d:63:79:1d:a8:61: 67:ba:2f:a1:0e:ef:0a:10:96:40:a6:af:4b:11:2c:78:80:85: 36:c4:c5:83:ed:80:1a:56:51:3e:fc:62:16:36:d7:36:b1:96: 42:f7:32:50:fe:43:71:25:0c:12:9b:05:d1:ff:8e:12:17:0a: ae:e8:7e:82:1f:1a:fc:83:b0:5a:58:89:43:ac:d2:de:e7:33: 09:08:14:5c:75:ea:a9:91:e7:20:64:9f:17:2f:93:cd:da:66: 79:76:28:72:88:52:45:fd:1d:9a:b5:29:6e:f4:4d:a5:66:b9: 20:49:7b:64:44:c9:10:6c:bc:3d:9a:e1:7a:63:1b:15:ac:8a: 4a:18:e4:25:5c:ef:f3:82:6c:cb:a1:b8:95:d5:af:40:0d:40: 8a:34:ab:de:f9:24:a3:bc:cf:32:45:21:31:a7:04:f8:2d:ba: c5:e4:7e:6e:06:00:b4:94:12:48:9a:df:95:71:ff:53:20:38: c7:2d:be:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxvsqmFwwr/s38Tj65vp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZmNiZGU2MzJkMTA2ZmFhZDk4YzJjMTg5NWE4NzdjYTYw MTUyMWEwHhcNMjUxMjEwMDEwMTI1WhcNMjUxMjExMDEwMTI1WjAzMTEwLwYDVQQD EyhlZjJiODkxMmI0OWZhY2RiZmUzMDliYmQzOTIzZDJhMmMxMmE1NmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Duw5McwRk5iC2KkAuMHi4E9LI8F nkIVvTXruByTvr7oHdT6sVPLokWJ02MfXGGHfMebfDN5e3+2v0NJVf3xsTmRFYHC imtTuL04JYc+2Wsi42xyqH+f/nbeWuW2RZxBO4k4adaO36wzlw+P1KXteRduir2v jOohPCfPkR+Vs3Oo5tLelqi1xog0/a83eoKofiycfCFPDSjHnDAyXRrdi0AhXOIk aH/MTzGIB4VsnB7wnPDs2EDhOOa+vI96gYQrXXU5MHRKoy3Bxr/zfgbcCJbSsRfw 8/Pt7WMIsI6Z/9SpWfgd9xkpP1znfXMHezM5Ps6BTs3go5JOlEuSlFJaRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8riRK0n6zb/jCbvTkj0qLBKlb4MB8GA1UdIwQY MBaAFM38veYy0Qb6rZjCwYlah3ymAVIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZ5OTVqTFJCdnF0bU1MQmlWcUhmS1lCVWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mZTQ1Y2YtNGFkMi00MWQ5LWJiY2Et MjAzY2ZhMjM4Njk2LzEvemZ5OTVqTFJCdnF0bU1MQmlWcUhmS1lCVWhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9mZTQ1Y2YtNGFkMi00MWQ5LWJiY2EtMjAzY2ZhMjM4Njk2 LzEvemZ5OTVqTFJCdnF0bU1MQmlWcUhmS1lCVWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTKHYSQd HFMWaXo/XF+ZC0nngYBE+fLTlymjcHxU6q0mAwYochYFltWaarURPWNNvQZqToQJ 5b1z9ptrgfnv8Fr1fWN5HahhZ7ovoQ7vChCWQKavSxEseICFNsTFg+2AGlZRPvxi FjbXNrGWQvcyUP5DcSUMEpsF0f+OEhcKruh+gh8a/IOwWliJQ6zS3uczCQgUXHXq qZHnIGSfFy+TzdpmeXYocohSRf0dmrUpbvRNpWa5IEl7ZETJEGy8PZrhemMbFayK ShjkJVzv84Jsy6G4ldWvQA1AijSr3vkko7zPMkUhMacE+C26xeR+bgYAtJQSSJrf lXH/UyA4xy2+TQ== -----END CERTIFICATE-----Generated at Wed Dec 10 11:10:54 2025 by rpki-client