This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json) Hash identifier: bgK/htLdhlNts9CTiYQOzzgPEdh/6edpGeoBX5J5vZQ= Subject key identifier: 29:52:12:D4:06:59:DF:0A:7E:6D:FF:D8:9F:7C:5D:E2:7A:10:F1:71 Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54 Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54 Certificate serial: 019B3A21DE276706FB1D42BFCE9F195B8120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft Manifest number: 0ACA Signing time: Sat 20 Dec 2025 05:00:56 +0000 Manifest this update: Sat 20 Dec 2025 05:00:56 +0000 Manifest next update: Sun 21 Dec 2025 05:00:56 +0000 Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: XfNlD26P1WL179rIj1PtwYOqMiVOlrB4VwgkZTb1Cp0=) 2: up0oav0rMtPMOzsYSRDujbJ3KTk.roa (hash: Rkvar+Ei1oJWKXR7rGewiiIwzRWDihGhTVyjbmAYcXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:de:27:67:06:fb:1d:42:bf:ce:9f:19:5b:81:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54 Validity Not Before: Dec 20 05:00:56 2025 GMT Not After : Dec 21 05:00:56 2025 GMT Subject: CN=295212d40659df0a7e6dffd89f7c5de27a10f171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:5c:08:ad:ed:47:55:5f:92:ea:6a:e4:b6: 02:9e:5a:36:9b:9d:31:d2:39:22:d1:fb:ef:a5:91: 1e:22:45:cd:72:15:9d:ca:ec:fd:22:19:20:1a:9c: 68:a5:87:ac:84:a9:1b:41:37:d4:3c:45:aa:d7:7c: 82:76:8f:76:15:11:f7:da:c1:03:29:af:da:3b:3f: 77:ab:94:80:ea:ae:22:ad:eb:2e:3c:db:e9:f3:b1: df:e3:50:07:c9:2d:f4:8d:06:0c:06:dc:4d:23:77: 26:0b:1e:72:39:13:28:c0:c4:e2:1c:f9:17:da:e1: f5:c1:0e:3f:05:ca:d9:44:b7:43:16:28:92:ea:fd: 99:7e:1a:e5:38:f6:36:e5:62:3c:90:57:20:2c:1a: f0:63:15:b5:cb:19:0a:4c:99:76:fe:9a:29:c3:ea: 00:87:8e:de:dd:92:0f:e4:b6:3c:91:2f:52:57:66: f2:ad:ca:e5:23:78:07:e4:c6:ad:27:29:9d:21:59: 67:39:4f:17:4e:79:b0:ac:1e:5f:d9:5d:65:c6:2a: 00:3f:29:1b:e1:d2:35:49:35:11:7c:07:93:ec:1b: 0a:fc:4d:a4:18:43:b4:89:5d:bd:75:c4:5c:e3:91: e5:02:ef:e2:e2:35:e5:df:4b:6e:b2:1f:6a:5e:ef: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:52:12:D4:06:59:DF:0A:7E:6D:FF:D8:9F:7C:5D:E2:7A:10:F1:71 X509v3 Authority Key Identifier: keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:7b:1b:e4:00:f0:29:67:3c:ad:bd:a2:0e:57:14:6d:29:8c: 7d:f3:b9:33:34:7b:8f:fe:83:51:d9:64:06:98:22:b1:46:d0: a5:88:3e:c1:3f:ea:72:1d:f9:20:16:88:7e:3c:ca:77:ae:67: ee:6d:eb:e9:5f:0a:e6:93:08:64:5a:16:06:a0:0d:77:6e:98: e2:c6:da:73:0f:b2:da:7a:17:37:88:ab:26:0d:76:bc:1b:55: aa:a9:d0:45:ca:49:ef:e0:8a:3c:6c:da:86:5b:aa:40:4d:14: 4d:2b:47:db:8d:04:fa:29:4d:9b:18:de:e6:24:97:c8:5a:fd: 1f:3d:82:e6:69:be:95:12:6b:fb:f5:f9:05:e3:9c:c9:61:1f: 94:83:f8:0b:74:4b:6b:de:e8:81:f7:d6:11:45:f2:92:15:b8: 45:80:31:79:d8:68:7f:d8:74:63:97:b1:86:ac:46:86:8e:22: a0:70:eb:f7:dd:b7:a9:7c:5a:a1:3c:f2:81:28:1a:52:d9:2a: 01:b2:bf:fe:e7:b8:db:7b:e0:1d:f9:2d:68:4e:dc:43:f3:ab: 16:00:3d:49:26:f5:1a:62:10:b1:20:20:79:4c:7f:8b:16:76: dd:ff:20:ac:2c:33:67:52:e6:ba:f4:37:91:69:2a:87:7f:89: b3:2f:ab:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Id4nZwb7HUK/zp8ZW4EgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmM3YTRlOWYwMmIyZjRlNjY0ZDdkMGQ3MmE1MmU1MTI2 MWRlNTQwHhcNMjUxMjIwMDUwMDU2WhcNMjUxMjIxMDUwMDU2WjAzMTEwLwYDVQQD EygyOTUyMTJkNDA2NTlkZjBhN2U2ZGZmZDg5ZjdjNWRlMjdhMTBmMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB9cCK3tR1Vfkupq5LYCnlo2m50x 0jki0fvvpZEeIkXNchWdyuz9IhkgGpxopYeshKkbQTfUPEWq13yCdo92FRH32sED Ka/aOz93q5SA6q4iresuPNvp87Hf41AHyS30jQYMBtxNI3cmCx5yORMowMTiHPkX 2uH1wQ4/BcrZRLdDFiiS6v2ZfhrlOPY25WI8kFcgLBrwYxW1yxkKTJl2/popw+oA h47e3ZIP5LY8kS9SV2byrcrlI3gH5MatJymdIVlnOU8XTnmwrB5f2V1lxioAPykb 4dI1STURfAeT7BsK/E2kGEO0iV29dcRc45HlAu/i4jXl30tush9qXu863wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClSEtQGWd8Kfm3/2J98XeJ6EPFxMB8GA1UdIwQY MBaAFGQsek6fArL05mTX0NcqUuUSYd5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYt NWUwMmM0NjUzZTUwLzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYtNWUwMmM0NjUzZTUw LzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXsb5ADw KWc8rb2iDlcUbSmMffO5MzR7j/6DUdlkBpgisUbQpYg+wT/qch35IBaIfjzKd65n 7m3r6V8K5pMIZFoWBqANd26Y4sbacw+y2noXN4irJg12vBtVqqnQRcpJ7+CKPGza hluqQE0UTStH240E+ilNmxje5iSXyFr9Hz2C5mm+lRJr+/X5BeOcyWEflIP4C3RL a97ogffWEUXykhW4RYAxedhof9h0Y5exhqxGho4ioHDr9923qXxaoTzygSgaUtkq AbK//ue423vgHfktaE7cQ/OrFgA9SSb1GmIQsSAgeUx/ixZ23f8grCwzZ1LmuvQ3 kWkqh3+Jsy+rNg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:47:42 2025 by rpki-client