This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json) Hash identifier: q0sKBhQ8L5ed6VT757GV65+e75jGwqtHw7+BmQ+Cjvc= Subject key identifier: 95:39:D7:34:E3:71:4A:02:77:99:D6:38:BA:B1:78:3D:3C:26:8F:D6 Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54 Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54 Certificate serial: 019B45B855BA0F3E9314C685D4EA64109359 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft Manifest number: 0AD0 Signing time: Mon 22 Dec 2025 11:01:06 +0000 Manifest this update: Mon 22 Dec 2025 11:01:06 +0000 Manifest next update: Tue 23 Dec 2025 11:01:06 +0000 Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: 2vA11VR29ucBn2gUZnx/jVodYZ5zGMNSdbY+U0Riw9E=) 2: up0oav0rMtPMOzsYSRDujbJ3KTk.roa (hash: Rkvar+Ei1oJWKXR7rGewiiIwzRWDihGhTVyjbmAYcXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:55:ba:0f:3e:93:14:c6:85:d4:ea:64:10:93:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54 Validity Not Before: Dec 22 11:01:06 2025 GMT Not After : Dec 23 11:01:06 2025 GMT Subject: CN=9539d734e3714a027799d638bab1783d3c268fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:32:1e:d8:6d:62:3c:59:0a:f5:9d:73:63:e0: 04:55:7e:f7:f2:c2:3d:1d:27:ae:e4:16:2f:e4:35: 70:e7:97:65:ab:b9:d2:cc:ce:f5:c4:2b:24:a4:6b: 6f:60:bb:c5:e2:45:78:00:b5:c7:4f:5e:38:28:a3: b3:2d:f0:d8:98:d9:b5:c0:11:a7:95:31:b2:e2:65: ac:7f:0b:f0:ad:bb:3c:b2:e3:16:f0:8d:9f:30:89: 43:19:fd:5a:23:e1:8f:91:e5:30:df:12:0f:d5:d1: 35:68:f6:3f:a6:85:00:0f:fd:b6:3f:ca:ce:b8:2e: b5:03:e5:b5:63:83:3f:ce:9f:c9:98:df:ff:cb:fc: 74:81:74:95:f2:64:29:77:22:da:55:4f:11:b0:9c: e3:93:9a:38:27:98:82:e9:00:32:28:01:df:56:bc: 22:fd:53:f3:6b:61:a5:52:80:0b:0a:92:26:d4:cf: 59:29:d6:e3:7c:bc:06:59:5e:7a:39:ae:12:d1:4f: 0f:cf:f9:7e:8d:a4:4f:97:12:44:e6:b9:b5:cc:6d: 75:94:0a:e0:2e:e2:2f:70:a3:0c:2c:d2:6a:fe:d8: 0d:60:1e:b6:61:13:7f:a4:42:c0:b8:5e:f0:03:1d: e6:7c:00:d1:70:03:17:b5:67:d2:ce:ea:64:be:5d: 0d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:39:D7:34:E3:71:4A:02:77:99:D6:38:BA:B1:78:3D:3C:26:8F:D6 X509v3 Authority Key Identifier: keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:04:51:36:9e:d8:03:e0:44:ba:96:db:4f:60:ce:9e:63:d9: 57:df:35:99:5a:4b:c4:eb:a9:30:de:8d:1b:47:f6:03:1f:dd: 87:34:64:c4:e1:3e:e8:8a:ae:5b:13:6e:5b:78:75:7c:2d:b0: 31:8e:64:12:25:3a:d6:d9:a7:1b:3f:ce:f6:b5:af:bb:11:30: 1e:a8:b4:e6:aa:08:80:07:33:6e:1a:70:aa:7c:ba:55:13:08: 75:33:df:c3:c0:62:f3:cc:6f:68:3b:55:79:74:f1:0e:24:10: 41:88:6a:c0:90:d4:75:b1:f0:94:50:a2:6f:1e:a5:85:92:c5: fa:a2:e1:0f:f0:a9:95:b5:87:f4:62:b2:19:72:bd:85:d9:fc: d6:50:3b:fe:a4:fa:b0:22:a2:60:7b:3b:50:e2:dc:92:67:f4: 96:ca:07:51:3e:27:f6:7c:e7:35:71:c1:98:93:30:1e:41:5d: cf:90:9a:e9:5a:87:2b:9d:05:7d:1c:e2:d9:71:79:b2:bd:b3: e8:46:2c:1e:c8:22:37:0e:71:08:40:87:6f:7c:3c:d9:a3:9f: 9c:25:a5:cc:48:1a:32:c8:8d:5c:e4:9d:62:d4:f6:dc:c6:8c: 9d:94:e4:a0:3a:2b:16:cc:4a:aa:f1:6b:b9:2a:ce:b3:8e:e5: 6d:ca:25:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuFW6Dz6TFMaF1OpkEJNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmM3YTRlOWYwMmIyZjRlNjY0ZDdkMGQ3MmE1MmU1MTI2 MWRlNTQwHhcNMjUxMjIyMTEwMTA2WhcNMjUxMjIzMTEwMTA2WjAzMTEwLwYDVQQD Eyg5NTM5ZDczNGUzNzE0YTAyNzc5OWQ2MzhiYWIxNzgzZDNjMjY4ZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjIe2G1iPFkK9Z1zY+AEVX738sI9 HSeu5BYv5DVw55dlq7nSzM71xCskpGtvYLvF4kV4ALXHT144KKOzLfDYmNm1wBGn lTGy4mWsfwvwrbs8suMW8I2fMIlDGf1aI+GPkeUw3xIP1dE1aPY/poUAD/22P8rO uC61A+W1Y4M/zp/JmN//y/x0gXSV8mQpdyLaVU8RsJzjk5o4J5iC6QAyKAHfVrwi /VPza2GlUoALCpIm1M9ZKdbjfLwGWV56Oa4S0U8Pz/l+jaRPlxJE5rm1zG11lArg LuIvcKMMLNJq/tgNYB62YRN/pELAuF7wAx3mfADRcAMXtWfSzupkvl0NZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJU51zTjcUoCd5nWOLqxeD08Jo/WMB8GA1UdIwQY MBaAFGQsek6fArL05mTX0NcqUuUSYd5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYt NWUwMmM0NjUzZTUwLzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYtNWUwMmM0NjUzZTUw LzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQRRNp7Y A+BEupbbT2DOnmPZV981mVpLxOupMN6NG0f2Ax/dhzRkxOE+6IquWxNuW3h1fC2w MY5kEiU61tmnGz/O9rWvuxEwHqi05qoIgAczbhpwqny6VRMIdTPfw8Bi88xvaDtV eXTxDiQQQYhqwJDUdbHwlFCibx6lhZLF+qLhD/CplbWH9GKyGXK9hdn81lA7/qT6 sCKiYHs7UOLckmf0lsoHUT4n9nznNXHBmJMwHkFdz5Ca6VqHK50FfRzi2XF5sr2z 6EYsHsgiNw5xCECHb3w82aOfnCWlzEgaMsiNXOSdYtT23MaMnZTkoDorFsxKqvFr uSrOs47lbcol1w== -----END CERTIFICATE-----Generated at Mon Dec 22 20:43:44 2025 by rpki-client