This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft File: zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft (raw, json) Hash identifier: TDBYd63vFZmVCYlshq6vGkK2EdEu+nTup2Jm1eYlSt8= Subject key identifier: 07:7C:09:89:3C:41:78:83:5A:F7:65:4A:7B:BE:67:33:60:C6:E8:CD Authority key identifier: CC:E5:0C:AB:B6:F7:38:62:16:0E:F1:F9:F5:05:4F:49:0A:89:DF:F8 Certificate issuer: /CN=cce50cabb6f73862160ef1f9f5054f490a89dff8 Certificate serial: 019B59AC79D6764F146650CCF44B12CD5A7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft Manifest number: 2C Signing time: Fri 26 Dec 2025 08:00:34 +0000 Manifest this update: Fri 26 Dec 2025 08:00:34 +0000 Manifest next update: Sat 27 Dec 2025 08:00:34 +0000 Files and hashes: 1: 4zOxTq2oMyWiJCiCIMIU-0Ua58Y.roa (hash: 2GMrPmfPXHRO6HMiDvps0qC1Qdw5U6PIWAf0zs/6xb4=) 2: zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl (hash: iwWICO/zW/gszRrJDa98kDGdU3hm9zCRlNB1N1TuhmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:79:d6:76:4f:14:66:50:cc:f4:4b:12:cd:5a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cce50cabb6f73862160ef1f9f5054f490a89dff8 Validity Not Before: Dec 26 08:00:34 2025 GMT Not After : Dec 27 08:00:34 2025 GMT Subject: CN=077c09893c4178835af7654a7bbe673360c6e8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:af:c5:c6:42:cb:fb:b5:d1:e7:34:a9:bc:10: ce:1b:6c:c4:0d:c5:40:7d:b9:ee:23:6f:d2:c8:43: 79:df:37:f9:3f:0b:d7:43:99:6c:c1:6a:c5:47:8c: 90:20:de:c9:cc:e8:f1:00:5e:e0:43:1a:09:8c:59: 80:2c:63:52:fc:d1:fe:46:fc:e5:48:5d:7d:1d:71: a0:d9:4b:eb:19:67:c4:ec:b8:48:40:8d:ea:a7:e2: 9d:66:28:73:a8:48:59:62:16:b7:ef:0a:ab:8a:55: df:f9:0a:84:63:9b:3d:28:5d:d0:a2:c5:40:bf:cb: 85:52:4a:12:ae:4d:8e:fd:e2:34:b0:78:45:43:94: f5:34:25:ca:c6:50:b9:b8:b5:19:c6:9b:a2:29:cb: ac:41:2d:75:5b:59:1f:a1:a9:56:d5:f7:e8:74:6e: 58:c4:e7:b5:3d:0a:3d:80:fa:85:44:c7:4b:a3:43: e8:76:93:16:68:10:db:1f:cc:49:39:72:aa:1d:1f: c3:c2:a8:13:a8:52:5a:e0:f5:bc:ff:41:ad:4c:a8: c7:d1:78:b4:45:e9:d0:e6:7f:6b:8b:cd:e0:ef:58: cf:97:24:78:66:5c:04:2f:1d:11:06:05:d9:f3:53: ef:11:e5:cf:08:3b:de:d6:98:5a:41:70:56:17:6b: 50:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7C:09:89:3C:41:78:83:5A:F7:65:4A:7B:BE:67:33:60:C6:E8:CD X509v3 Authority Key Identifier: keyid:CC:E5:0C:AB:B6:F7:38:62:16:0E:F1:F9:F5:05:4F:49:0A:89:DF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:40:0b:a1:2c:94:f1:93:e2:e8:28:82:e2:a1:df:f1:fd:fe: 63:23:77:a0:66:04:87:43:7b:2a:0d:f8:2c:24:b2:da:f1:31: a0:73:a5:b9:1e:5c:1b:2f:2d:ba:9b:ef:5f:9a:73:86:62:98: 81:50:08:78:66:ed:48:ed:8a:ab:57:6f:8f:f8:7a:ae:0a:15: 42:af:81:ea:e6:ce:2d:1f:72:4b:ec:61:bb:9a:a4:91:e7:e3: 3f:65:8e:f9:99:a5:3d:c0:1b:11:d7:e2:88:0a:08:c4:2c:5c: 5b:fe:9b:e0:09:7b:44:07:d9:62:a1:9a:b0:10:20:5e:32:24: 26:1d:0a:a5:76:77:12:fa:69:0d:50:19:d6:71:dc:d9:ae:f3: 18:eb:32:61:8e:e1:4d:4e:24:47:ec:b8:7c:cb:ef:32:21:99: 12:55:6a:13:d0:17:c9:a5:6b:8a:44:fe:65:af:be:a4:ed:5d: d9:89:0d:05:b1:8d:aa:ab:b4:01:d6:2a:4f:7e:d3:f3:98:4a: 69:51:ca:59:a3:77:f8:7b:c1:36:8b:e4:87:a3:2e:41:bf:f5: 9b:2e:aa:1a:b2:28:88:01:08:c8:98:bd:c0:80:21:48:d3:10: 8c:f4:bf:36:9f:51:1d:e7:7b:eb:ce:3d:44:f9:6b:a5:97:8b: 2a:ac:f3:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrHnWdk8UZlDM9EsSzVp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZTUwY2FiYjZmNzM4NjIxNjBlZjFmOWY1MDU0ZjQ5MGE4 OWRmZjgwHhcNMjUxMjI2MDgwMDM0WhcNMjUxMjI3MDgwMDM0WjAzMTEwLwYDVQQD EygwNzdjMDk4OTNjNDE3ODgzNWFmNzY1NGE3YmJlNjczMzYwYzZlOGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K/FxkLL+7XR5zSpvBDOG2zEDcVA fbnuI2/SyEN53zf5PwvXQ5lswWrFR4yQIN7JzOjxAF7gQxoJjFmALGNS/NH+Rvzl SF19HXGg2UvrGWfE7LhIQI3qp+KdZihzqEhZYha37wqrilXf+QqEY5s9KF3QosVA v8uFUkoSrk2O/eI0sHhFQ5T1NCXKxlC5uLUZxpuiKcusQS11W1kfoalW1ffodG5Y xOe1PQo9gPqFRMdLo0PodpMWaBDbH8xJOXKqHR/DwqgTqFJa4PW8/0GtTKjH0Xi0 RenQ5n9ri83g71jPlyR4ZlwELx0RBgXZ81PvEeXPCDve1phaQXBWF2tQDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAd8CYk8QXiDWvdlSnu+ZzNgxujNMB8GA1UdIwQY MBaAFMzlDKu29zhiFg7x+fUFT0kKid/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek9VTXE3YjNPR0lXRHZINTlRVlBTUXFKM19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84MzdlNjQtYzc0NC00NWQ1LThhZDgt ZTUyNDAwNzM5MDliLzEvek9VTXE3YjNPR0lXRHZINTlRVlBTUXFKM19nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy84MzdlNjQtYzc0NC00NWQ1LThhZDgtZTUyNDAwNzM5MDli LzEvek9VTXE3YjNPR0lXRHZINTlRVlBTUXFKM19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA50ALoSyU 8ZPi6CiC4qHf8f3+YyN3oGYEh0N7Kg34LCSy2vExoHOluR5cGy8tupvvX5pzhmKY gVAIeGbtSO2Kq1dvj/h6rgoVQq+B6ubOLR9yS+xhu5qkkefjP2WO+ZmlPcAbEdfi iAoIxCxcW/6b4Al7RAfZYqGasBAgXjIkJh0KpXZ3EvppDVAZ1nHc2a7zGOsyYY7h TU4kR+y4fMvvMiGZElVqE9AXyaVrikT+Za++pO1d2YkNBbGNqqu0AdYqT37T85hK aVHKWaN3+HvBNovkh6MuQb/1my6qGrIoiAEIyJi9wIAhSNMQjPS/Np9RHed76849 RPlrpZeLKqzz9Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:24 2025 by rpki-client