This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json) Hash identifier: EAidS6sPiLoIBlpzhOZXjiDFqhJ7MLkzqWP5Ok9pesc= Subject key identifier: CA:1F:05:17:C6:A4:0F:9D:69:96:97:75:B3:8E:A9:B5:7E:B9:70:72 Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54 Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54 Certificate serial: 019B4994F2FC571E99B24FC6FB6D2A2A875D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft Manifest number: 0AD2 Signing time: Tue 23 Dec 2025 05:00:56 +0000 Manifest this update: Tue 23 Dec 2025 05:00:56 +0000 Manifest next update: Wed 24 Dec 2025 05:00:56 +0000 Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: e7aAWJxW4y4+vKbtlmAXMbes+N83JpNeCszwMhoSPSs=) 2: up0oav0rMtPMOzsYSRDujbJ3KTk.roa (hash: Rkvar+Ei1oJWKXR7rGewiiIwzRWDihGhTVyjbmAYcXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:f2:fc:57:1e:99:b2:4f:c6:fb:6d:2a:2a:87:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54 Validity Not Before: Dec 23 05:00:56 2025 GMT Not After : Dec 24 05:00:56 2025 GMT Subject: CN=ca1f0517c6a40f9d69969775b38ea9b57eb97072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f9:2c:ce:93:e4:c8:02:aa:d6:03:1a:a5:33: d4:5b:be:ac:d8:f7:32:43:56:95:6b:de:10:15:b7: 4f:66:ce:fd:31:88:59:a4:7d:85:07:0b:81:79:4c: 46:8f:9b:c3:b7:2f:20:45:50:bc:5b:e0:13:eb:da: bf:89:5b:2e:13:85:14:bf:12:9f:6c:de:52:f6:c3: c3:2c:3f:37:bb:10:21:1a:a5:d5:b7:58:bb:2c:d9: b6:df:a8:71:14:4b:6d:da:9e:f1:d2:09:11:eb:5a: ea:63:91:1f:a5:2f:a4:13:27:1b:98:c7:43:7a:e2: e5:f0:70:24:d1:f9:45:84:1f:91:19:b1:24:a9:b8: 2a:0e:ba:5f:d7:27:40:5c:aa:d2:d2:54:0f:a7:64: da:1e:53:b9:4f:b1:ff:06:2d:e3:d1:a3:69:00:af: da:8d:36:57:af:94:d9:92:2e:4a:6f:b1:6e:cd:be: ea:6d:3d:20:25:60:d0:82:50:c7:26:43:a3:59:59: 1a:0f:cc:df:4a:6b:37:fd:11:b2:86:e8:bf:4d:a6: bf:16:f1:71:5f:fe:4c:1e:73:e6:c4:4d:1d:27:0a: 80:44:04:6b:e1:e6:96:3a:1e:9e:b0:03:1f:a4:32: 8e:24:f6:d8:4e:40:34:cf:45:35:e8:3e:70:05:ed: dc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1F:05:17:C6:A4:0F:9D:69:96:97:75:B3:8E:A9:B5:7E:B9:70:72 X509v3 Authority Key Identifier: keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:9f:48:df:6b:dd:94:a6:5c:61:3b:70:da:f8:42:0d:4d:55: 05:55:ce:14:44:e4:73:9d:01:29:3d:f6:f9:2d:84:5c:37:99: 54:68:b5:24:63:33:e0:3e:e2:9a:d9:33:5c:df:93:cf:4e:29: 5b:5b:7f:93:b5:f6:27:2d:d1:ca:8f:92:63:6c:70:36:23:69: 94:37:a1:68:10:3e:d3:55:8a:29:5b:31:81:23:90:4e:9d:fb: 78:45:3a:17:e0:5c:db:7f:13:59:d2:05:0d:41:b5:09:2a:dd: fe:60:a8:88:60:17:32:25:31:b3:be:db:fb:f7:8f:84:46:30: cf:fa:1f:cb:c8:a2:86:8a:e7:ad:94:ff:c2:37:77:27:fe:21: b8:97:c1:22:3b:70:d9:df:14:c5:d2:47:d8:28:d6:82:df:6d: 93:14:08:5d:5b:f5:2f:f3:dc:cb:64:7c:c1:38:48:36:52:e2: 78:c0:4a:63:18:89:48:f8:88:df:a2:25:90:98:1b:44:bb:69: ca:21:fc:b0:da:dc:cf:08:ec:50:08:d9:fa:7f:bb:96:6e:b2: 9e:7d:3b:cb:bf:93:a6:7a:ea:e8:32:ed:0c:86:4d:ff:1f:2a: 29:02:0b:cc:5d:71:4b:c0:20:26:8e:79:cf:e2:a3:e1:c0:3e: 96:1a:4f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlPL8Vx6Zsk/G+20qKoddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmM3YTRlOWYwMmIyZjRlNjY0ZDdkMGQ3MmE1MmU1MTI2 MWRlNTQwHhcNMjUxMjIzMDUwMDU2WhcNMjUxMjI0MDUwMDU2WjAzMTEwLwYDVQQD EyhjYTFmMDUxN2M2YTQwZjlkNjk5Njk3NzViMzhlYTliNTdlYjk3MDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfkszpPkyAKq1gMapTPUW76s2Pcy Q1aVa94QFbdPZs79MYhZpH2FBwuBeUxGj5vDty8gRVC8W+AT69q/iVsuE4UUvxKf bN5S9sPDLD83uxAhGqXVt1i7LNm236hxFEtt2p7x0gkR61rqY5EfpS+kEycbmMdD euLl8HAk0flFhB+RGbEkqbgqDrpf1ydAXKrS0lQPp2TaHlO5T7H/Bi3j0aNpAK/a jTZXr5TZki5Kb7Fuzb7qbT0gJWDQglDHJkOjWVkaD8zfSms3/RGyhui/Taa/FvFx X/5MHnPmxE0dJwqARARr4eaWOh6esAMfpDKOJPbYTkA0z0U16D5wBe3coQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMofBRfGpA+daZaXdbOOqbV+uXByMB8GA1UdIwQY MBaAFGQsek6fArL05mTX0NcqUuUSYd5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYt NWUwMmM0NjUzZTUwLzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYtNWUwMmM0NjUzZTUw LzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI59I32vd lKZcYTtw2vhCDU1VBVXOFETkc50BKT32+S2EXDeZVGi1JGMz4D7imtkzXN+Tz04p W1t/k7X2Jy3Ryo+SY2xwNiNplDehaBA+01WKKVsxgSOQTp37eEU6F+Bc238TWdIF DUG1CSrd/mCoiGAXMiUxs77b+/ePhEYwz/ofy8iihornrZT/wjd3J/4huJfBIjtw 2d8UxdJH2CjWgt9tkxQIXVv1L/Pcy2R8wThINlLieMBKYxiJSPiI36IlkJgbRLtp yiH8sNrczwjsUAjZ+n+7lm6ynn07y7+Tpnrq6DLtDIZN/x8qKQILzF1xS8AgJo55 z+Kj4cA+lhpPuA== -----END CERTIFICATE-----Generated at Tue Dec 23 12:39:53 2025 by rpki-client