This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft File: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft (raw, json) Hash identifier: 2DnUfi4Lc/C5eUbT8cA1S6FZ4zgS9C/mJndwifoopzE= Subject key identifier: 3C:32:66:69:C7:55:20:02:B2:29:79:E7:8E:F8:B6:A1:89:D4:75:FF Authority key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4 Certificate issuer: /CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4 Certificate serial: 019B34C44157EAD54DA238B54C386BF8644C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft Manifest number: 030C Signing time: Fri 19 Dec 2025 04:00:35 +0000 Manifest this update: Fri 19 Dec 2025 04:00:35 +0000 Manifest next update: Sat 20 Dec 2025 04:00:35 +0000 Files and hashes: 1: 1-YCQCphk32b8tDaXBmol_BTFhAA.roa (hash: vDe37BPFiFzh2DmP54Y2HTtv1UAWo0nqbWO5t7R6/68=) 2: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl (hash: sgZJOnVwcZdm0m5fLDTdCsm5Y+k3jNzvqWre7fMlnjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:41:57:ea:d5:4d:a2:38:b5:4c:38:6b:f8:64:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4 Validity Not Before: Dec 19 04:00:35 2025 GMT Not After : Dec 20 04:00:35 2025 GMT Subject: CN=3c326669c7552002b22979e78ef8b6a189d475ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1a:ea:46:12:fd:50:7d:c4:52:1a:0e:00:55: f4:9f:0c:0e:65:d4:28:21:7e:8f:ac:a4:21:0c:28: e7:7e:0a:46:02:fc:48:94:fb:43:84:08:48:a1:ed: 4f:c7:ad:eb:3b:2d:50:c5:1b:4e:ef:98:3c:c7:d6: 76:1a:55:2b:e8:70:d9:f4:fb:cb:d4:a7:64:38:3e: 1c:b5:7e:38:ea:44:c3:cd:bd:bc:bb:f1:49:24:31: 32:0e:47:9a:2a:82:f2:82:53:ea:c4:e4:b2:f8:20: 73:a3:18:8e:51:55:2e:dd:39:1a:eb:b3:d0:ad:54: 38:1a:7e:79:c0:67:de:13:6a:d5:9f:14:14:82:e8: 14:ce:cd:85:fc:9f:c8:d0:2e:6b:76:28:78:7f:69: af:38:88:4a:76:6f:e0:f5:22:12:ee:92:31:7b:30: 4b:94:4e:f9:77:65:16:ea:e6:65:a8:f1:2e:25:ab: 2d:5d:c6:72:f9:aa:e2:2e:47:bb:cd:50:ba:9e:d4: a0:bc:65:12:b9:51:8f:ae:25:6e:70:23:44:45:6d: c0:3c:a1:45:2a:54:ab:62:9f:64:b8:c0:f5:5c:d1: 3b:e8:7c:1f:47:58:66:e2:04:49:14:ae:5f:d8:8b: dc:c1:15:4c:54:1c:e9:86:8c:c4:cb:ec:d5:7f:53: 93:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:32:66:69:C7:55:20:02:B2:29:79:E7:8E:F8:B6:A1:89:D4:75:FF X509v3 Authority Key Identifier: keyid:CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d9:96:c0:f2:4d:f6:e0:ae:64:b7:aa:6d:40:03:c8:c5:16: 31:7f:c6:09:4e:b0:73:4d:54:05:77:b5:76:fd:c7:b1:08:76: ee:39:6d:fa:9f:df:0e:30:60:e3:eb:0a:14:2c:37:46:c9:c0: 27:5e:52:54:02:8f:fc:f3:ae:54:d4:2b:d9:48:4b:c2:cf:0a: f8:50:6b:d3:9d:c4:e1:45:dd:3d:59:73:ea:b3:13:34:99:53: b5:48:96:46:e6:0d:7f:15:db:c0:56:46:cc:8f:1d:1a:5a:a9: e0:02:ad:53:3f:ca:2a:cc:e5:60:d3:f4:c1:03:10:86:1c:8a: 39:6e:71:eb:fb:76:be:ab:80:32:c2:1c:fe:1f:09:de:82:e6: 0c:7e:f0:94:64:e1:20:c9:96:8a:b4:14:36:c3:a2:85:ca:67: 79:73:a1:34:da:e6:3b:aa:0d:1a:5d:02:a3:ef:1b:22:e3:d1: a0:75:82:04:6f:1e:18:18:80:f4:e2:ab:e9:df:6a:c1:46:fd: 72:c1:36:48:5f:1f:d4:88:f0:31:25:44:bb:5a:3a:bd:b5:51: 14:2e:cf:cb:e5:07:dc:7e:c2:d0:db:93:75:a4:37:13:42:17: dd:34:3a:99:c4:68:dd:95:4b:53:3d:63:f9:05:bc:87:69:6d: ba:14:79:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xEFX6tVNoji1TDhr+GRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMWE5ZjcyOTM4OGMxNjliYWNjMWNiYWY5OGUyMzZkNGU4 MDhhYjQwHhcNMjUxMjE5MDQwMDM1WhcNMjUxMjIwMDQwMDM1WjAzMTEwLwYDVQQD EygzYzMyNjY2OWM3NTUyMDAyYjIyOTc5ZTc4ZWY4YjZhMTg5ZDQ3NWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphrqRhL9UH3EUhoOAFX0nwwOZdQo IX6PrKQhDCjnfgpGAvxIlPtDhAhIoe1Px63rOy1QxRtO75g8x9Z2GlUr6HDZ9PvL 1KdkOD4ctX446kTDzb28u/FJJDEyDkeaKoLyglPqxOSy+CBzoxiOUVUu3Tka67PQ rVQ4Gn55wGfeE2rVnxQUgugUzs2F/J/I0C5rdih4f2mvOIhKdm/g9SIS7pIxezBL lE75d2UW6uZlqPEuJastXcZy+ariLke7zVC6ntSgvGUSuVGPriVucCNERW3APKFF KlSrYp9kuMD1XNE76HwfR1hm4gRJFK5f2IvcwRVMVBzphozEy+zVf1OTWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwyZmnHVSACsil55474tqGJ1HX/MB8GA1UdIwQY MBaAFMwan3KTiMFpuswcuvmOI21OgIq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NzFjNmItMGYyNi00YzQzLWEwYWEt N2ZmYzRmNDAzNjZhLzEvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84NzFjNmItMGYyNi00YzQzLWEwYWEtN2ZmYzRmNDAzNjZh LzEvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtmWwPJN 9uCuZLeqbUADyMUWMX/GCU6wc01UBXe1dv3HsQh27jlt+p/fDjBg4+sKFCw3RsnA J15SVAKP/POuVNQr2UhLws8K+FBr053E4UXdPVlz6rMTNJlTtUiWRuYNfxXbwFZG zI8dGlqp4AKtUz/KKszlYNP0wQMQhhyKOW5x6/t2vquAMsIc/h8J3oLmDH7wlGTh IMmWirQUNsOihcpneXOhNNrmO6oNGl0Co+8bIuPRoHWCBG8eGBiA9OKr6d9qwUb9 csE2SF8f1IjwMSVEu1o6vbVRFC7Py+UH3H7C0NuTdaQ3E0IX3TQ6mcRo3ZVLUz1j +QW8h2ltuhR5vg== -----END CERTIFICATE-----Generated at Fri Dec 19 09:22:16 2025 by rpki-client