This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json) Hash identifier: qAc2SLnV95vVLjrz2oZR0yrth09StAuP8GLIj0sbGf8= Subject key identifier: 42:8E:DE:46:FD:B9:3F:29:AC:19:FE:6A:CC:DD:5C:B9:8F:9D:39:38 Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0 Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0 Certificate serial: 019B1A29682D4C4A2F189C475FD6C78F77CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft Manifest number: 0598 Signing time: Sun 14 Dec 2025 00:01:19 +0000 Manifest this update: Sun 14 Dec 2025 00:01:19 +0000 Manifest next update: Mon 15 Dec 2025 00:01:19 +0000 Files and hashes: 1: 5RDrxvpk6f6_CeHaE5maQdmSM44.roa (hash: ki187Iv+O6q2r1ZkIX9WA+gL/Pc275QX3Xeem+p1Izk=) 2: DQ01J-Cq4hUemzI_hsxFb8NofP8.asa (hash: fcPlXypjGU8YaSASqBijwf7gz4frCYBc1/uFvytFDWw=) 3: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: alOROC1JkkZ0a6Z/3sAR8kFMafsSLzWQX4ti31m1080=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:68:2d:4c:4a:2f:18:9c:47:5f:d6:c7:8f:77:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0 Validity Not Before: Dec 14 00:01:19 2025 GMT Not After : Dec 15 00:01:19 2025 GMT Subject: CN=428ede46fdb93f29ac19fe6accdd5cb98f9d3938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:39:aa:57:00:ee:82:2a:0a:e3:08:87:9f: 7e:78:e2:2f:7e:10:c6:dc:02:28:a0:c6:d1:a9:3d: bf:26:ef:f1:5d:92:62:d1:a0:53:98:c5:1c:06:1b: 0b:49:20:b8:e1:fc:39:c2:04:b6:09:40:4a:4f:a3: 4f:a5:a0:e4:67:5b:bb:75:a2:90:17:b9:2a:0f:f0: 65:b4:e0:a4:01:db:4a:86:34:a3:db:4e:3d:a9:e9: 12:3e:90:db:ac:96:ff:11:7f:94:28:2d:d6:40:b2: 35:e1:a7:fe:07:a3:ae:ad:88:63:47:2d:11:62:87: 17:af:e5:10:3a:a8:1b:41:f7:47:7c:df:8b:64:86: d0:e7:45:49:19:a9:8d:19:c3:aa:a8:be:88:15:e1: 6a:ac:a6:98:8e:a7:d5:e3:e5:f0:f2:41:d8:48:3b: 2d:b9:7b:37:9b:a8:4b:9d:73:33:c4:17:cd:bf:f5: 7f:ab:b5:b8:3b:b0:29:89:63:a8:7e:6e:a5:5e:26: bb:4f:a1:c9:de:37:82:b3:9d:a9:dd:57:61:49:b8: df:f4:a3:3a:6f:81:7b:fa:91:c4:b2:b9:9e:d3:eb: 62:9c:5a:e5:66:f3:ef:78:3c:fe:fc:af:5a:df:56: f6:cb:d3:96:89:cc:e6:0b:67:9b:a5:8b:d9:89:14: 62:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8E:DE:46:FD:B9:3F:29:AC:19:FE:6A:CC:DD:5C:B9:8F:9D:39:38 X509v3 Authority Key Identifier: keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a1:1f:27:e8:1b:4e:83:72:ca:cc:7a:04:fb:87:b6:7d:4c: de:e6:52:3b:ad:f3:db:a3:c7:fa:a8:9f:06:81:d6:5f:ba:91: 75:99:a1:ea:30:cc:11:8f:b0:75:da:f0:5b:c0:15:bf:68:ac: 37:9b:48:ca:2d:b1:f7:5e:d4:82:a6:10:c3:10:f3:96:4b:13: 1d:d6:41:2b:b4:c9:6f:40:2e:b5:51:9f:6c:4c:e7:32:b2:62: ba:f7:21:7f:f5:be:e6:6f:e4:e8:8d:49:77:3d:47:72:57:49: e6:d9:dc:63:d9:6d:1e:14:40:3c:de:d3:12:6f:af:96:1f:02: 12:59:8c:eb:60:f4:f9:e7:b1:68:26:cc:52:36:18:e9:8c:90: 1f:5c:30:f8:b8:67:2e:d9:06:18:c7:9e:93:a0:1b:70:7f:4a: ad:5c:85:bd:96:5d:8f:a2:d5:28:c6:5e:2d:48:38:d7:3f:8a: c1:4a:1e:db:8a:d3:73:91:e9:69:1b:19:ea:f5:27:fd:14:bf: 56:e5:7c:02:87:06:fa:b4:8f:14:09:e6:57:d2:bb:13:75:17: 8c:c0:fc:c8:56:f1:12:0a:0e:91:70:f2:94:13:68:3c:ba:e2: ea:67:c0:77:79:d3:e8:22:14:88:fa:00:87:fb:b3:81:ed:c2: 32:c5:17:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKWgtTEovGJxHX9bHj3fKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTRmY2U5YjE5YTVlZWE1MzJlMTdkODNkYThjMWRjZDFk ZTE4YzAwHhcNMjUxMjE0MDAwMTE5WhcNMjUxMjE1MDAwMTE5WjAzMTEwLwYDVQQD Eyg0MjhlZGU0NmZkYjkzZjI5YWMxOWZlNmFjY2RkNWNiOThmOWQzOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufI5qlcA7oIqCuMIh59+eOIvfhDG 3AIooMbRqT2/Ju/xXZJi0aBTmMUcBhsLSSC44fw5wgS2CUBKT6NPpaDkZ1u7daKQ F7kqD/BltOCkAdtKhjSj2049qekSPpDbrJb/EX+UKC3WQLI14af+B6OurYhjRy0R YocXr+UQOqgbQfdHfN+LZIbQ50VJGamNGcOqqL6IFeFqrKaYjqfV4+Xw8kHYSDst uXs3m6hLnXMzxBfNv/V/q7W4O7ApiWOofm6lXia7T6HJ3jeCs52p3VdhSbjf9KM6 b4F7+pHEsrme0+tinFrlZvPveDz+/K9a31b2y9OWiczmC2ebpYvZiRRiOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKO3kb9uT8prBn+aszdXLmPnTk4MB8GA1UdIwQY MBaAFM8U/Omxml7qUy4X2D2owdzR3hjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMt NTljMTA4N2U0ODU2LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMtNTljMTA4N2U0ODU2 LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKEfJ+gb ToNyysx6BPuHtn1M3uZSO63z26PH+qifBoHWX7qRdZmh6jDMEY+wddrwW8AVv2is N5tIyi2x917UgqYQwxDzlksTHdZBK7TJb0AutVGfbEznMrJiuvchf/W+5m/k6I1J dz1HcldJ5tncY9ltHhRAPN7TEm+vlh8CElmM62D0+eexaCbMUjYY6YyQH1ww+Lhn LtkGGMeek6AbcH9KrVyFvZZdj6LVKMZeLUg41z+KwUoe24rTc5HpaRsZ6vUn/RS/ VuV8AocG+rSPFAnmV9K7E3UXjMD8yFbxEgoOkXDylBNoPLri6mfAd3nT6CIUiPoA h/uzge3CMsUXBg== -----END CERTIFICATE-----Generated at Sun Dec 14 10:18:36 2025 by rpki-client