This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json) Hash identifier: Zfj1FCnOZXxQj6Q3pd46c52/ZN8NtnkzAxEevIL7mz4= Subject key identifier: C6:44:5C:F1:20:F1:A1:28:C5:62:65:A0:93:43:62:C2:8E:7C:0C:1D Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54 Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54 Certificate serial: 019B75FFA814E0574CF6379762C33A56A8D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft Manifest number: 0AE9 Signing time: Wed 31 Dec 2025 20:00:47 +0000 Manifest this update: Wed 31 Dec 2025 20:00:47 +0000 Manifest next update: Thu 01 Jan 2026 20:00:47 +0000 Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: JpodweoRc6bQG/uxJEI1wLT9yyVGAtHVsKG+fWQTEc0=) 2: up0oav0rMtPMOzsYSRDujbJ3KTk.roa (hash: Rkvar+Ei1oJWKXR7rGewiiIwzRWDihGhTVyjbmAYcXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:ff:a8:14:e0:57:4c:f6:37:97:62:c3:3a:56:a8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54 Validity Not Before: Dec 31 20:00:47 2025 GMT Not After : Jan 1 20:00:47 2026 GMT Subject: CN=c6445cf120f1a128c56265a0934362c28e7c0c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:5f:88:3f:6a:da:8a:36:0d:f0:ca:b2:39: 5f:25:c4:1e:fd:0a:ca:84:a1:bf:78:4f:f7:b4:25: be:27:0a:69:b4:93:99:6a:b5:0b:eb:8d:69:31:9e: 91:5d:59:f0:88:77:9d:2c:46:66:f8:69:4a:62:b8: 40:61:b3:b3:a3:86:72:53:be:a3:90:a1:c5:f1:59: ed:e1:b1:5e:55:83:2a:7c:04:f1:2f:59:63:15:16: 3b:db:e0:a5:be:0e:5d:8a:e0:00:fe:67:9e:af:86: 75:2c:61:83:7a:e1:2c:33:4a:73:b0:46:11:a9:fc: e0:5e:3d:3a:ff:9c:04:30:80:5f:5b:a2:02:62:34: 5e:7b:b4:e2:ef:8a:5d:08:11:9c:35:86:f1:be:33: 9a:b3:70:46:c2:d7:f7:66:df:f5:e8:1f:81:f5:39: 7e:92:df:b8:87:e0:e1:09:df:0c:0e:07:5e:82:e4: f7:a8:79:f9:e2:d2:13:19:bb:54:cb:1e:e5:34:ec: 92:aa:6f:3d:d5:c6:cd:c6:3e:ac:01:c2:fb:71:ea: 05:ec:ce:14:ae:18:9b:7f:51:38:81:09:2c:0b:3f: 2f:f9:1d:73:cc:0d:ca:a0:dc:b0:2d:97:4f:94:d5: fc:53:18:c1:98:9f:b7:f9:82:01:66:9d:09:0b:cb: 6f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:44:5C:F1:20:F1:A1:28:C5:62:65:A0:93:43:62:C2:8E:7C:0C:1D X509v3 Authority Key Identifier: keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:43:25:4a:57:04:e5:21:b9:7c:35:64:af:e5:35:aa:58:88: 41:f8:9a:79:db:7c:ef:2d:ba:0b:9b:2b:29:27:0e:26:2a:4d: 61:76:16:af:37:75:9c:d0:84:27:fa:f5:30:00:e9:96:8e:e4: a5:70:b0:d9:d8:5a:48:1f:50:e2:14:81:67:ff:b3:60:23:a3: d3:d3:31:b6:29:08:d2:c3:21:c4:12:9d:68:01:43:10:67:8a: 67:79:78:14:6a:19:3e:6d:03:b0:09:a4:d1:8b:10:3f:f5:b2: cd:f2:7f:a2:17:16:ed:43:37:18:fa:0e:91:19:8b:67:a7:18: 3c:22:42:9b:69:60:f8:7e:64:23:ba:b8:1d:0b:46:17:ed:00: c2:f4:e7:1a:42:fd:07:96:d8:34:cf:ae:fe:93:0f:af:09:01: c5:a0:74:a7:c9:6a:94:a3:b4:af:05:75:7f:10:3a:ec:f7:e9: 87:8c:cf:d3:30:f9:6b:77:c9:24:7b:c9:e3:69:a7:e8:e3:56: 97:bb:55:1f:c3:e8:f2:e9:1e:6f:7c:90:49:01:48:da:64:7b: c1:c9:e5:ff:5c:8c:9c:be:e6:2b:9b:5c:81:ec:6e:e0:66:6b: 51:b2:4c:c6:98:5f:e2:48:d7:32:9d:0a:b7:ed:7f:26:f5:d5: a2:d7:ed:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1/6gU4FdM9jeXYsM6VqjRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmM3YTRlOWYwMmIyZjRlNjY0ZDdkMGQ3MmE1MmU1MTI2 MWRlNTQwHhcNMjUxMjMxMjAwMDQ3WhcNMjYwMTAxMjAwMDQ3WjAzMTEwLwYDVQQD EyhjNjQ0NWNmMTIwZjFhMTI4YzU2MjY1YTA5MzQzNjJjMjhlN2MwYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLVfiD9q2oo2DfDKsjlfJcQe/QrK hKG/eE/3tCW+JwpptJOZarUL641pMZ6RXVnwiHedLEZm+GlKYrhAYbOzo4ZyU76j kKHF8Vnt4bFeVYMqfATxL1ljFRY72+Clvg5diuAA/meer4Z1LGGDeuEsM0pzsEYR qfzgXj06/5wEMIBfW6ICYjRee7Ti74pdCBGcNYbxvjOas3BGwtf3Zt/16B+B9Tl+ kt+4h+DhCd8MDgdeguT3qHn54tITGbtUyx7lNOySqm891cbNxj6sAcL7ceoF7M4U rhibf1E4gQksCz8v+R1zzA3KoNywLZdPlNX8UxjBmJ+3+YIBZp0JC8tvBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZEXPEg8aEoxWJloJNDYsKOfAwdMB8GA1UdIwQY MBaAFGQsek6fArL05mTX0NcqUuUSYd5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYt NWUwMmM0NjUzZTUwLzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYtNWUwMmM0NjUzZTUw LzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREMlSlcE 5SG5fDVkr+U1qliIQfiaedt87y26C5srKScOJipNYXYWrzd1nNCEJ/r1MADplo7k pXCw2dhaSB9Q4hSBZ/+zYCOj09MxtikI0sMhxBKdaAFDEGeKZ3l4FGoZPm0DsAmk 0YsQP/WyzfJ/ohcW7UM3GPoOkRmLZ6cYPCJCm2lg+H5kI7q4HQtGF+0AwvTnGkL9 B5bYNM+u/pMPrwkBxaB0p8lqlKO0rwV1fxA67Pfph4zP0zD5a3fJJHvJ42mn6ONW l7tVH8Po8ukeb3yQSQFI2mR7wcnl/1yMnL7mK5tcgexu4GZrUbJMxphf4kjXMp0K t+1/JvXVotft2w== -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:10 2025 by rpki-client