This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json) Hash identifier: vOPxAf+yrnGaJwGFQGdfuR98N8qcmsITvkqUyP4PwAo= Subject key identifier: EE:96:0B:7F:9A:73:B3:FE:B6:6C:EA:20:96:71:4F:C6:95:06:88:BD Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60 Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460 Certificate serial: 019B631D95E7EDE64A1FE77E1CEFCDCCA162 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft Manifest number: 08D0 Signing time: Sun 28 Dec 2025 04:00:41 +0000 Manifest this update: Sun 28 Dec 2025 04:00:41 +0000 Manifest next update: Mon 29 Dec 2025 04:00:41 +0000 Files and hashes: 1: O6G70f_k228z-ZHm2ohB4tt-ekc.roa (hash: /bGnkVKQw6cLnt6o6jgq/vbGsus5bIRs/NypwJUrJ1g=) 2: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: VUVLU8jKDE0lfiSYx19MkvVxNlKteHqfyC5E6erjGyY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:95:e7:ed:e6:4a:1f:e7:7e:1c:ef:cd:cc:a1:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460 Validity Not Before: Dec 28 04:00:41 2025 GMT Not After : Dec 29 04:00:41 2025 GMT Subject: CN=ee960b7f9a73b3feb66cea2096714fc6950688bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:e5:b4:1d:67:77:2c:61:05:f0:88:e3:0b: 1f:c4:e6:ca:01:e1:46:8d:07:c4:2b:7b:20:80:d2: cc:aa:35:28:0c:bd:09:8b:e1:ff:c7:1a:59:09:bc: c4:22:8e:f8:5f:22:87:65:b4:7b:51:4f:a2:f6:e1: 0d:93:27:78:0b:fe:28:21:4b:d9:a3:18:0d:e5:44: c3:b3:1a:61:5f:ed:f0:ce:54:5c:21:7d:1d:00:50: 7f:e7:9b:c6:db:42:40:e4:b2:ce:1c:12:63:8f:34: 87:2f:26:7c:32:d2:07:b1:17:4e:5c:92:17:22:73: 71:8c:e8:86:77:88:b0:07:74:7f:c0:08:b4:9d:e4: d0:eb:63:6f:e7:fd:34:57:b8:b6:ff:b9:36:a6:6c: 6f:fb:7a:65:d9:ec:b2:c4:56:9f:0b:e0:ff:e4:b7: f1:99:cd:6a:08:25:cd:1d:9c:cc:b9:84:c6:4a:fa: dd:34:8d:bb:ea:d0:c4:dd:df:52:27:ee:ff:f3:ab: 6e:29:59:48:f2:38:24:3e:a9:c1:1b:16:e4:d6:4e: 5d:b1:a1:30:4b:75:b0:3c:90:c1:55:2f:2f:22:ca: b0:60:c0:0e:5c:96:53:bf:6a:5e:aa:59:33:b5:15: 78:eb:29:81:49:f7:85:55:f5:83:78:8a:cb:ba:a2: 2d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:96:0B:7F:9A:73:B3:FE:B6:6C:EA:20:96:71:4F:C6:95:06:88:BD X509v3 Authority Key Identifier: keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:83:75:45:12:aa:90:13:4e:b0:84:68:13:f0:80:28:40:76: bf:7d:47:3e:71:1c:b2:77:1c:26:ef:ec:84:8e:95:e2:e1:7d: 52:2b:d3:6b:06:9c:09:2d:12:1b:54:df:22:00:07:5a:79:f1: c2:cc:3a:69:a9:e0:c6:0e:b7:7a:9b:ec:40:fa:7a:07:c6:97: 40:b8:5a:c4:db:24:de:97:8e:a7:a9:4f:1b:6c:11:18:77:b6: dc:6c:45:08:49:b5:53:92:4b:4c:df:a9:80:09:fc:31:cc:32: 45:7a:77:f4:6f:f2:74:b7:39:f1:39:ee:de:18:94:c8:d6:c9: 5a:48:d7:c8:85:f5:56:8d:24:0e:ca:83:a2:79:27:15:48:36: 08:5f:1c:59:ce:56:f4:af:f3:24:2e:ca:ae:78:9f:d2:12:89: 1a:0a:60:d5:df:3f:39:ed:f9:07:2c:15:71:ae:f4:6a:61:37: cd:50:5c:35:52:a8:f5:43:ea:b4:71:56:6a:7d:1e:d0:ba:a6: 25:a7:c3:ae:db:cc:f1:14:52:0f:f8:2e:54:4a:c7:e1:83:9b: e7:3a:ea:67:fd:26:66:37:bc:57:c5:52:bd:37:30:b0:6d:4f: 80:6e:7e:2d:92:be:07:b9:85:f9:44:c5:a2:c2:76:3c:d4:bb: 2c:04:e3:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHZXn7eZKH+d+HO/NzKFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmYyNDFjY2NhMjc4MmI1ZmM0MDdlMWJiYWY3YTk3YTk4 NDc0NjAwHhcNMjUxMjI4MDQwMDQxWhcNMjUxMjI5MDQwMDQxWjAzMTEwLwYDVQQD EyhlZTk2MGI3ZjlhNzNiM2ZlYjY2Y2VhMjA5NjcxNGZjNjk1MDY4OGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kvltB1ndyxhBfCI4wsfxObKAeFG jQfEK3sggNLMqjUoDL0Ji+H/xxpZCbzEIo74XyKHZbR7UU+i9uENkyd4C/4oIUvZ oxgN5UTDsxphX+3wzlRcIX0dAFB/55vG20JA5LLOHBJjjzSHLyZ8MtIHsRdOXJIX InNxjOiGd4iwB3R/wAi0neTQ62Nv5/00V7i2/7k2pmxv+3pl2eyyxFafC+D/5Lfx mc1qCCXNHZzMuYTGSvrdNI276tDE3d9SJ+7/86tuKVlI8jgkPqnBGxbk1k5dsaEw S3WwPJDBVS8vIsqwYMAOXJZTv2peqlkztRV46ymBSfeFVfWDeIrLuqItLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6WC3+ac7P+tmzqIJZxT8aVBoi9MB8GA1UdIwQY MBaAFGQvJBzMongrX8QH4buvepephHRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGIt MTQ1ZTk1ZThhN2JlLzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGItMTQ1ZTk1ZThhN2Jl LzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4N1RRKq kBNOsIRoE/CAKEB2v31HPnEcsnccJu/shI6V4uF9UivTawacCS0SG1TfIgAHWnnx wsw6aangxg63epvsQPp6B8aXQLhaxNsk3peOp6lPG2wRGHe23GxFCEm1U5JLTN+p gAn8McwyRXp39G/ydLc58Tnu3hiUyNbJWkjXyIX1Vo0kDsqDonknFUg2CF8cWc5W 9K/zJC7Krnif0hKJGgpg1d8/Oe35BywVca70amE3zVBcNVKo9UPqtHFWan0e0Lqm JafDrtvM8RRSD/guVErH4YOb5zrqZ/0mZje8V8VSvTcwsG1PgG5+LZK+B7mF+UTF osJ2PNS7LATjkg== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:44 2025 by rpki-client