This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft File: zcmBSoLMto9Rw3v4OubPV4JEyho.mft (raw, json) Hash identifier: ajUMZO51PYF4lfhaio1s6blWbPxwSNKADFzUX8CtBtE= Subject key identifier: 91:97:98:13:80:80:8B:CD:08:74:79:63:74:C9:CC:D8:28:CA:93:23 Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a Certificate serial: 019B2B53E7071B6FBA32508729402943708C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft Manifest number: 1684 Signing time: Wed 17 Dec 2025 08:01:17 +0000 Manifest this update: Wed 17 Dec 2025 08:01:17 +0000 Manifest next update: Thu 18 Dec 2025 08:01:17 +0000 Files and hashes: 1: LenxSXNvYUG0PNAIsxLHW6t8Gig.roa (hash: 2tRf/A4+PlvxT/fJxe1ZYsaChcE92rdvTlPk4uzM12k=) 2: RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa (hash: Pc/AiM+TyshIYca3WAF87A9bUXB/n7CNYqhspT/vd/c=) 3: zcmBSoLMto9Rw3v4OubPV4JEyho.crl (hash: tZKtUsX3ug/FaHqHBJrz5nGq3FMMh0WzhK0Xozp0lng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:e7:07:1b:6f:ba:32:50:87:29:40:29:43:70:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a Validity Not Before: Dec 17 08:01:17 2025 GMT Not After : Dec 18 08:01:17 2025 GMT Subject: CN=9197981380808bcd0874796374c9ccd828ca9323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:32:e1:5c:e6:73:b1:91:8f:19:e3:eb:5b:c2: d1:c0:37:5e:0d:6f:70:e5:47:a6:29:71:4d:0a:54: 95:16:e7:05:bc:6b:5f:f1:82:63:3a:d7:1f:43:e2: 8b:d6:62:b2:2a:57:bd:c3:70:e8:c6:36:a4:f9:74: f3:0f:35:4d:8a:15:19:5e:77:da:08:e4:95:da:d0: d7:46:fb:65:5f:97:8f:45:a0:17:2d:80:01:42:20: bf:61:37:b6:26:64:47:c6:50:a3:fc:0a:dc:fb:b3: c8:d8:57:b5:19:c5:8a:8d:c9:cf:5f:09:73:77:ce: ef:ee:2a:67:f9:20:dc:19:b6:f7:3c:e2:97:9b:de: c2:ee:e9:d9:a0:cb:24:85:8c:18:29:46:bf:99:71: 0c:92:63:85:0c:26:33:1e:8f:9a:ed:4d:0d:cb:18: 87:7c:13:14:f8:a3:ec:39:c7:6d:4f:6e:96:bc:39: d4:42:17:63:f1:ad:d8:07:61:0c:d6:98:72:99:43: c3:cd:b2:89:0b:e5:d2:78:01:d3:7c:d4:8f:82:09: a7:17:8a:8e:fd:eb:7f:77:75:ee:5e:b3:45:30:df: 24:8c:bf:3c:c1:95:bb:3f:88:bb:55:0d:08:a1:21: 95:c6:b3:f9:aa:06:6f:b5:47:52:20:3b:d4:34:33: 42:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:97:98:13:80:80:8B:CD:08:74:79:63:74:C9:CC:D8:28:CA:93:23 X509v3 Authority Key Identifier: keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bb:92:5a:30:72:ad:62:da:27:e0:bf:fa:68:22:eb:d0:fb: db:dc:59:0a:96:7f:74:93:97:d4:7e:ba:c9:f7:a8:b8:8b:09: 8b:88:b6:7a:c8:55:49:10:65:b1:62:3f:9d:42:81:ae:a0:38: a1:56:78:0e:1c:99:1f:19:da:95:1e:d3:ee:46:b5:cd:8c:2c: b4:97:20:3f:f1:6b:91:2d:b2:c5:79:c6:e9:40:10:fc:86:00: b3:14:c4:f3:e7:f9:6a:39:fc:a2:98:e6:7b:25:d0:2f:0d:b8: 90:9b:28:72:29:46:37:b9:9e:9e:cd:3c:3c:7e:19:2c:ed:21: e1:82:3b:55:9d:87:02:64:ec:e7:ec:4b:42:42:94:3e:60:48: b9:1a:c5:58:48:63:68:2e:c0:42:62:6e:2c:b6:83:e4:3b:cb: 92:0c:b9:cb:65:f0:6f:d7:9f:ae:6b:cc:a7:5f:9c:73:ed:3c: 6c:82:22:d1:46:db:e1:07:5d:50:c3:20:b6:ab:e2:4e:a3:39: ce:04:7b:70:91:7d:53:c3:e2:c0:92:6d:c0:f4:7e:d6:3d:76: 61:21:8c:2f:9f:8b:ce:8f:08:57:9e:db:c7:54:f1:52:81:c6: 71:38:f0:53:8f:87:6d:68:73:23:18:eb:33:6e:96:7a:e4:a3: d0:3c:ca:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU+cHG2+6MlCHKUApQ3CMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYzk4MTRhODJjY2I2OGY1MWMzN2JmODNhZTZjZjU3ODI0 NGNhMWEwHhcNMjUxMjE3MDgwMTE3WhcNMjUxMjE4MDgwMTE3WjAzMTEwLwYDVQQD Eyg5MTk3OTgxMzgwODA4YmNkMDg3NDc5NjM3NGM5Y2NkODI4Y2E5MzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDLhXOZzsZGPGePrW8LRwDdeDW9w 5UemKXFNClSVFucFvGtf8YJjOtcfQ+KL1mKyKle9w3Doxjak+XTzDzVNihUZXnfa COSV2tDXRvtlX5ePRaAXLYABQiC/YTe2JmRHxlCj/Arc+7PI2Fe1GcWKjcnPXwlz d87v7ipn+SDcGbb3POKXm97C7unZoMskhYwYKUa/mXEMkmOFDCYzHo+a7U0NyxiH fBMU+KPsOcdtT26WvDnUQhdj8a3YB2EM1phymUPDzbKJC+XSeAHTfNSPggmnF4qO /et/d3XuXrNFMN8kjL88wZW7P4i7VQ0IoSGVxrP5qgZvtUdSIDvUNDNCFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGXmBOAgIvNCHR5Y3TJzNgoypMjMB8GA1UdIwQY MBaAFM3JgUqCzLaPUcN7+Drmz1eCRMoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUt OTYzYjI1ZmEzMDY4LzEvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUtOTYzYjI1ZmEzMDY4 LzEvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7uSWjBy rWLaJ+C/+mgi69D729xZCpZ/dJOX1H66yfeouIsJi4i2eshVSRBlsWI/nUKBrqA4 oVZ4DhyZHxnalR7T7ka1zYwstJcgP/FrkS2yxXnG6UAQ/IYAsxTE8+f5ajn8opjm eyXQLw24kJsocilGN7mens08PH4ZLO0h4YI7VZ2HAmTs5+xLQkKUPmBIuRrFWEhj aC7AQmJuLLaD5DvLkgy5y2Xwb9efrmvMp1+cc+08bIIi0Ubb4QddUMMgtqviTqM5 zgR7cJF9U8PiwJJtwPR+1j12YSGML5+Lzo8IV57bx1TxUoHGcTjwU4+HbWhzIxjr M26WeuSj0DzKEQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:26:39 2025 by rpki-client