This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json) Hash identifier: pwe3rx4Yb7kJqjuYfzLx0PWPh3XA4QKehONdFqgZG3U= Subject key identifier: C3:7B:A6:CB:FB:93:3C:05:C3:39:07:5E:87:39:C4:FA:FB:8E:8D:72 Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc Certificate serial: 019B281B4D3C210F3A0340D549E749F9AC71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft Manifest number: 177F Signing time: Tue 16 Dec 2025 17:00:36 +0000 Manifest this update: Tue 16 Dec 2025 17:00:36 +0000 Manifest next update: Wed 17 Dec 2025 17:00:36 +0000 Files and hashes: 1: DXSMQQoNY6zl2bbt_Qxl4yUZpo0.roa (hash: W1Qix1yXYt7eEDSw6BnO5hmas15FwfPB8Nypx8uQBss=) 2: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: KXUVlznDsEDuxKvz5rOrTET4jcAuBm9smiWWDhsIoSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:4d:3c:21:0f:3a:03:40:d5:49:e7:49:f9:ac:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc Validity Not Before: Dec 16 17:00:36 2025 GMT Not After : Dec 17 17:00:36 2025 GMT Subject: CN=c37ba6cbfb933c05c339075e8739c4fafb8e8d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:6d:29:74:85:b0:fc:d1:4b:a3:ea:1e:a7: 41:b5:0b:c8:ec:fc:79:b5:ca:4c:f7:12:67:1e:62: 8f:99:81:9c:2f:f0:63:76:7c:1d:13:40:e5:a1:59: 92:d7:c9:a5:dc:60:54:fc:7d:fe:23:70:ad:0d:15: 40:82:81:1a:b2:b2:70:08:cf:03:7f:35:25:9a:62: 07:35:3b:d0:79:e9:17:7d:a1:98:77:7a:b1:4f:d2: f4:aa:1b:e5:b3:12:b9:69:9c:3a:80:d0:d6:01:b2: 64:56:91:79:9b:40:3f:64:82:07:af:9e:99:1c:31: 88:2f:6b:ce:eb:11:a0:59:79:c2:47:28:ac:f4:75: 00:fc:5f:81:5e:35:71:c0:b1:cc:40:f8:ab:87:b4: e8:58:80:29:a2:f1:ec:c1:51:03:6f:f1:eb:6b:19: e3:90:19:d2:66:4b:87:62:34:ff:30:58:07:7a:45: 94:b6:61:27:9e:1d:86:38:d7:64:aa:f0:9a:f8:74: a3:03:ce:b9:2d:ec:20:b8:a3:ff:1f:e8:0d:3e:42: e2:e5:37:7d:e3:98:80:2b:6b:39:28:2e:a5:c1:c5: b8:09:c8:71:cb:e0:bc:e0:98:bc:65:72:94:7b:cb: 43:46:f1:21:4d:b8:4d:bf:6a:1d:2f:9c:8c:b2:e5: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7B:A6:CB:FB:93:3C:05:C3:39:07:5E:87:39:C4:FA:FB:8E:8D:72 X509v3 Authority Key Identifier: keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c3:76:ca:65:97:a7:5e:9a:88:1f:6a:82:92:58:cf:73:ff: 3e:c9:68:f2:fc:40:6e:80:e0:90:f3:62:ad:18:67:b7:2b:76: e4:b9:dc:2f:cb:4e:bb:84:b7:09:33:4d:33:d9:31:15:6b:70: 3b:de:a1:a8:a9:b9:b3:d9:65:8c:5d:9b:fe:40:b5:ad:f1:9c: e9:fa:27:13:58:e0:be:2b:15:07:bd:b2:79:d9:77:cd:f1:77: 5f:4f:c0:f8:3d:c2:95:86:ed:5c:0b:df:30:58:0a:ac:52:7b: 8e:09:ab:b3:91:02:d4:a8:aa:e2:8d:0c:10:e1:18:e4:ef:d7: a2:d5:53:53:0f:43:1f:b7:9e:e0:d3:c2:39:35:b2:dc:88:03: e4:06:bd:75:eb:07:f6:a7:51:79:4d:2f:a0:90:32:63:2e:e6: c3:cd:ae:41:c4:37:f1:fa:fa:2a:82:9a:c6:7f:ac:49:aa:de: 7b:6a:15:2d:8e:8e:36:cd:53:de:c7:b8:79:a1:b7:ad:06:13: 1b:fa:a8:b7:e0:6d:cb:94:a6:0c:84:96:f9:1a:34:fa:45:7a: 7a:59:2c:74:be:85:63:7c:bf:c0:8d:25:58:bd:6d:02:85:6e: 7c:cf:c8:ca:2d:eb:29:21:e5:a6:3b:fb:e2:51:a3:e8:f5:39: c0:7c:c5:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG008IQ86A0DVSedJ+axxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YzI5MzM4MGJjNDFmNTJkOTEzMTU4NWE4NTgwMDM4Zjky ZjVkY2MwHhcNMjUxMjE2MTcwMDM2WhcNMjUxMjE3MTcwMDM2WjAzMTEwLwYDVQQD EyhjMzdiYTZjYmZiOTMzYzA1YzMzOTA3NWU4NzM5YzRmYWZiOGU4ZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocRtKXSFsPzRS6PqHqdBtQvI7Px5 tcpM9xJnHmKPmYGcL/BjdnwdE0DloVmS18ml3GBU/H3+I3CtDRVAgoEasrJwCM8D fzUlmmIHNTvQeekXfaGYd3qxT9L0qhvlsxK5aZw6gNDWAbJkVpF5m0A/ZIIHr56Z HDGIL2vO6xGgWXnCRyis9HUA/F+BXjVxwLHMQPirh7ToWIApovHswVEDb/Hraxnj kBnSZkuHYjT/MFgHekWUtmEnnh2GONdkqvCa+HSjA865LewguKP/H+gNPkLi5Td9 45iAK2s5KC6lwcW4Cchxy+C84Ji8ZXKUe8tDRvEhTbhNv2odL5yMsuUN6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMN7psv7kzwFwzkHXoc5xPr7jo1yMB8GA1UdIwQY MBaAFGXCkzgLxB9S2RMVhahYADj5L13MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYt ZmU2ZGMxNzU4M2UzLzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYtZmU2ZGMxNzU4M2Uz LzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8N2ymWX p16aiB9qgpJYz3P/Pslo8vxAboDgkPNirRhntyt25LncL8tOu4S3CTNNM9kxFWtw O96hqKm5s9lljF2b/kC1rfGc6fonE1jgvisVB72yedl3zfF3X0/A+D3ClYbtXAvf MFgKrFJ7jgmrs5EC1Kiq4o0MEOEY5O/XotVTUw9DH7ee4NPCOTWy3IgD5Aa9desH 9qdReU0voJAyYy7mw82uQcQ38fr6KoKaxn+sSaree2oVLY6ONs1T3se4eaG3rQYT G/qot+Bty5SmDISW+Ro0+kV6elksdL6FY3y/wI0lWL1tAoVufM/Iyi3rKSHlpjv7 4lGj6PU5wHzF1Q== -----END CERTIFICATE-----Generated at Wed Dec 17 00:07:52 2025 by rpki-client