This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json) Hash identifier: uBMrfM991Pvuxy/Gx8+zA9lC4svF6HTcYGViSP1McQo= Subject key identifier: 0B:3C:E7:5E:23:8C:D9:BF:C4:69:C8:65:4B:A1:73:35:11:F0:E5:5F Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60 Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460 Certificate serial: 019B44376774DFC7C7AC8F7553538C83C631 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft Manifest number: 08C0 Signing time: Mon 22 Dec 2025 04:00:39 +0000 Manifest this update: Mon 22 Dec 2025 04:00:39 +0000 Manifest next update: Tue 23 Dec 2025 04:00:39 +0000 Files and hashes: 1: O6G70f_k228z-ZHm2ohB4tt-ekc.roa (hash: /bGnkVKQw6cLnt6o6jgq/vbGsus5bIRs/NypwJUrJ1g=) 2: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: j1BK71Ldm05aWyA1hAWxfYAV1v/h/mwC3uI9Dc9n3bM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:67:74:df:c7:c7:ac:8f:75:53:53:8c:83:c6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460 Validity Not Before: Dec 22 04:00:39 2025 GMT Not After : Dec 23 04:00:39 2025 GMT Subject: CN=0b3ce75e238cd9bfc469c8654ba1733511f0e55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:49:16:2f:2d:ad:41:59:d2:be:7b:90:a5:62: b5:8d:1a:50:a0:82:4d:5a:3c:74:bc:83:94:57:6c: b7:ab:a8:02:a5:b8:c4:d2:13:68:78:34:0c:3e:26: a6:ff:8d:af:36:ee:fc:ea:64:03:e0:85:ae:6f:fc: 53:56:9b:f0:6d:a3:dc:40:64:1d:40:61:ad:d8:96: cb:a5:04:4d:4b:f6:64:c5:38:e4:3c:26:7f:8d:61: 4f:03:15:f1:e6:c4:bb:0c:92:0e:07:c3:f9:66:69: 55:e8:c3:a0:20:a1:f2:17:f6:06:6d:16:5e:76:66: e6:27:1b:1c:57:aa:df:86:b1:40:6d:03:42:9c:0d: f4:50:9d:36:31:ab:ac:e2:8c:16:1e:7d:fb:11:9b: 8e:26:00:4c:29:c7:09:54:2a:24:92:c2:50:03:12: f6:52:fc:1f:5e:a4:f4:84:93:94:b0:dc:00:07:c9: 03:8c:a8:a7:b5:5d:ab:f3:71:ac:eb:50:56:69:da: d6:07:bd:d9:2a:1a:53:7f:e8:25:70:9b:d8:f3:38: 2f:12:e6:47:e2:77:a8:c1:37:ab:5d:d3:5b:01:ec: 0c:35:4a:48:2a:f8:bc:1d:fa:cd:79:3e:de:ad:a7: 37:a8:38:56:05:f4:92:33:8c:72:1f:c2:69:1b:af: 7d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3C:E7:5E:23:8C:D9:BF:C4:69:C8:65:4B:A1:73:35:11:F0:E5:5F X509v3 Authority Key Identifier: keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b5:66:04:fa:ef:09:45:cf:39:47:14:73:39:af:c1:de:e2: 69:32:07:a6:4f:cd:ac:d3:a4:9b:cc:f9:d0:9e:13:85:ac:97: d2:d3:80:b6:79:f8:e7:fc:07:2e:fa:3a:34:97:7e:81:02:e1: ca:f8:d0:e3:3d:e2:24:f2:9a:b9:36:1b:8f:9d:11:3a:fd:6c: b7:2b:63:7d:0f:32:ba:e5:3a:d6:02:75:66:3e:4c:67:7e:fa: 2d:9e:a4:75:3a:01:36:76:57:08:b7:4f:ba:11:43:5b:8c:43: b3:f9:a2:d1:4a:4c:70:4b:74:58:6e:f4:eb:56:07:e0:2c:25: 7b:19:77:87:da:cb:85:ce:cd:1a:11:fe:bb:b6:9c:e7:49:24: 4a:63:09:c3:34:9f:29:f0:f6:e0:22:2f:b5:1d:f1:e6:0b:f9: a6:87:a4:e9:47:90:2c:7a:01:19:bf:02:08:59:53:90:26:62: 65:1a:2d:32:7d:32:58:fd:44:27:20:66:e5:55:2b:bb:fb:e2: 8f:84:ed:b0:7e:a4:32:17:25:6e:b5:30:71:7c:73:46:51:2f: 5c:b3:b0:c3:0a:28:20:9f:a5:05:8f:d5:31:b8:57:2a:ec:62: 50:24:f2:aa:e2:f9:69:37:b5:21:ef:0a:6d:ed:3f:3d:8b:41: 84:29:66:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN2d038fHrI91U1OMg8YxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmYyNDFjY2NhMjc4MmI1ZmM0MDdlMWJiYWY3YTk3YTk4 NDc0NjAwHhcNMjUxMjIyMDQwMDM5WhcNMjUxMjIzMDQwMDM5WjAzMTEwLwYDVQQD EygwYjNjZTc1ZTIzOGNkOWJmYzQ2OWM4NjU0YmExNzMzNTExZjBlNTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUkWLy2tQVnSvnuQpWK1jRpQoIJN Wjx0vIOUV2y3q6gCpbjE0hNoeDQMPiam/42vNu786mQD4IWub/xTVpvwbaPcQGQd QGGt2JbLpQRNS/ZkxTjkPCZ/jWFPAxXx5sS7DJIOB8P5ZmlV6MOgIKHyF/YGbRZe dmbmJxscV6rfhrFAbQNCnA30UJ02Maus4owWHn37EZuOJgBMKccJVCokksJQAxL2 UvwfXqT0hJOUsNwAB8kDjKintV2r83Gs61BWadrWB73ZKhpTf+glcJvY8zgvEuZH 4neowTerXdNbAewMNUpIKvi8HfrNeT7erac3qDhWBfSSM4xyH8JpG699ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAs8514jjNm/xGnIZUuhczUR8OVfMB8GA1UdIwQY MBaAFGQvJBzMongrX8QH4buvepephHRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGIt MTQ1ZTk1ZThhN2JlLzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGItMTQ1ZTk1ZThhN2Jl LzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebVmBPrv CUXPOUcUczmvwd7iaTIHpk/NrNOkm8z50J4ThayX0tOAtnn45/wHLvo6NJd+gQLh yvjQ4z3iJPKauTYbj50ROv1stytjfQ8yuuU61gJ1Zj5MZ376LZ6kdToBNnZXCLdP uhFDW4xDs/mi0UpMcEt0WG7061YH4Cwlexl3h9rLhc7NGhH+u7ac50kkSmMJwzSf KfD24CIvtR3x5gv5poek6UeQLHoBGb8CCFlTkCZiZRotMn0yWP1EJyBm5VUru/vi j4TtsH6kMhclbrUwcXxzRlEvXLOwwwooIJ+lBY/VMbhXKuxiUCTyquL5aTe1Ie8K be0/PYtBhClmgg== -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:50 2025 by rpki-client