This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft File: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft (raw, json) Hash identifier: /Bl6YwBx0suQPKG3VbTfi5N48kACPrWYMDjMlVIBrmA= Subject key identifier: CF:7E:86:13:6D:54:CE:42:D9:C4:B1:39:2F:68:91:64:BF:49:4D:3B Authority key identifier: 67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC Certificate issuer: /CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac Certificate serial: 019B19F26939525D11D42D5D593BA4950292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft Manifest number: 1295 Signing time: Sat 13 Dec 2025 23:01:15 +0000 Manifest this update: Sat 13 Dec 2025 23:01:15 +0000 Manifest next update: Sun 14 Dec 2025 23:01:15 +0000 Files and hashes: 1: 4nY9ANf4EVr4RYiqxYiIP5YrsGA.roa (hash: KpMPrAJwKfQpF/Ebmkogzzx0/khONPsTM4gj0VRrnV8=) 2: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl (hash: CVSLAfrX7FHRLbg3VTd0pC3VXjMamvK2l+rx/BBDyfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:69:39:52:5d:11:d4:2d:5d:59:3b:a4:95:02:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac Validity Not Before: Dec 13 23:01:15 2025 GMT Not After : Dec 14 23:01:15 2025 GMT Subject: CN=cf7e86136d54ce42d9c4b1392f689164bf494d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:50:02:d4:12:94:99:1f:9a:c7:48:78:e8: 65:f4:f9:82:76:58:c2:3d:d5:c8:c6:27:72:b5:28: 8b:0f:28:63:e0:5e:94:3e:b3:40:9d:40:8e:39:94: bc:e2:e4:11:85:cc:c3:41:57:19:fe:57:03:db:90: f3:eb:3c:ca:f4:64:dc:2d:c0:ad:fb:38:d7:3a:cf: 35:ca:c7:6d:9f:8e:c4:7c:98:3c:7f:94:8b:32:75: 25:90:79:6f:1f:ec:17:4f:75:ad:e2:a2:ab:b3:54: fc:0f:f8:28:36:d9:c6:a8:ae:e8:55:01:29:de:eb: 83:68:12:45:7c:d8:76:87:71:89:c1:64:81:f4:fc: 48:a3:03:9b:fb:82:89:4a:ea:b9:74:91:67:f0:ab: 9c:e0:b5:8a:08:8d:ba:e5:20:f4:27:0a:27:a8:72: a5:2a:0f:99:41:df:cc:9d:14:99:68:0c:ed:50:ef: 77:ba:67:2d:1a:1e:7a:40:35:5b:fc:84:42:40:bb: 7b:e2:b0:8b:53:95:3e:a1:01:7b:c8:5d:6f:be:d4: 1d:d3:22:e9:1f:81:ff:99:3d:5d:bf:20:4e:32:16: b9:a3:8a:1e:7a:b7:0e:4c:e6:10:92:9c:9c:71:d5: 7d:2b:67:36:e9:4e:84:a8:d0:27:3c:49:08:c8:00: a4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7E:86:13:6D:54:CE:42:D9:C4:B1:39:2F:68:91:64:BF:49:4D:3B X509v3 Authority Key Identifier: keyid:67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:a6:20:aa:72:81:d6:55:87:1d:d9:f6:5b:a3:65:62:a6:12: 30:af:f6:bf:a5:52:9c:00:55:c7:5e:e4:b3:ce:6e:4c:c1:7d: 21:ac:91:eb:b4:07:70:dd:98:b8:66:6c:10:f7:3f:09:4f:fa: 3e:45:c3:fe:69:8b:d2:6a:85:70:dd:43:22:c2:3f:41:6f:20: 23:33:8d:38:a3:cb:bd:04:8a:6d:0d:47:f7:85:63:ac:b3:07: 2d:52:57:7e:d2:60:38:ab:08:d1:97:f2:4f:fd:9f:57:34:62: 28:f1:01:70:8c:80:d0:55:a9:89:10:22:d9:ce:1d:13:5d:1c: 23:c2:60:3d:a8:1c:35:66:13:3b:43:ef:c2:5a:7a:45:b6:01: ce:c3:7c:10:e9:20:fd:40:fd:13:ef:a3:a8:28:8f:80:84:7e: 9a:25:9e:08:a0:8a:90:3a:8f:e4:63:1f:e4:83:e5:18:37:83: 14:56:04:0f:1e:9e:fe:c7:b1:ad:09:36:20:3e:9a:d1:75:df: 5c:7b:20:98:4b:9f:08:68:22:b5:f7:1e:fc:6a:f6:f4:cf:df: 18:d1:97:2d:d8:13:a0:3e:38:31:a5:e1:4f:79:29:c4:1e:3e: 17:4c:38:76:eb:0e:41:8b:1d:24:9c:0d:b1:00:db:aa:ca:62: 71:20:cf:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8mk5Ul0R1C1dWTuklQKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MTNiOWMwNGNhNjk4YzBiN2ZhZmQxZDE3ZmMwNjhiNzA5 OWY2YWMwHhcNMjUxMjEzMjMwMTE1WhcNMjUxMjE0MjMwMTE1WjAzMTEwLwYDVQQD EyhjZjdlODYxMzZkNTRjZTQyZDljNGIxMzkyZjY4OTE2NGJmNDk0ZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjNQAtQSlJkfmsdIeOhl9PmCdljC PdXIxidytSiLDyhj4F6UPrNAnUCOOZS84uQRhczDQVcZ/lcD25Dz6zzK9GTcLcCt +zjXOs81ysdtn47EfJg8f5SLMnUlkHlvH+wXT3Wt4qKrs1T8D/goNtnGqK7oVQEp 3uuDaBJFfNh2h3GJwWSB9PxIowOb+4KJSuq5dJFn8Kuc4LWKCI265SD0JwonqHKl Kg+ZQd/MnRSZaAztUO93umctGh56QDVb/IRCQLt74rCLU5U+oQF7yF1vvtQd0yLp H4H/mT1dvyBOMha5o4oeercOTOYQkpyccdV9K2c26U6EqNAnPEkIyACktQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9+hhNtVM5C2cSxOS9okWS/SU07MB8GA1UdIwQY MBaAFGcTucBMppjAt/r9HRf8BotwmfasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81MGY5ZTUtOTEzYy00YmU2LTk5NDkt NGM4YWQ3YzQ2MjAzLzEvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS81MGY5ZTUtOTEzYy00YmU2LTk5NDktNGM4YWQ3YzQ2MjAz LzEvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6YgqnKB 1lWHHdn2W6NlYqYSMK/2v6VSnABVx17ks85uTMF9IayR67QHcN2YuGZsEPc/CU/6 PkXD/mmL0mqFcN1DIsI/QW8gIzONOKPLvQSKbQ1H94VjrLMHLVJXftJgOKsI0Zfy T/2fVzRiKPEBcIyA0FWpiRAi2c4dE10cI8JgPagcNWYTO0Pvwlp6RbYBzsN8EOkg /UD9E++jqCiPgIR+miWeCKCKkDqP5GMf5IPlGDeDFFYEDx6e/sexrQk2ID6a0XXf XHsgmEufCGgitfce/Gr29M/fGNGXLdgToD44MaXhT3kpxB4+F0w4dusOQYsdJJwN sQDbqspicSDPBw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:33:37 2025 by rpki-client