This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft File: zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft (raw, json) Hash identifier: fIc4/IDUSiQSqJhrDnRV98LxNxBDTYv6KnfZ+7o0hqo= Subject key identifier: 32:E3:87:36:3D:C9:97:60:2F:B5:10:F3:56:46:5F:47:55:C0:18:7C Authority key identifier: CC:E5:0C:AB:B6:F7:38:62:16:0E:F1:F9:F5:05:4F:49:0A:89:DF:F8 Certificate issuer: /CN=cce50cabb6f73862160ef1f9f5054f490a89dff8 Certificate serial: 019B4091824140A7BEBF1FC30944BE9BB899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft Manifest number: 1F Signing time: Sun 21 Dec 2025 11:00:36 +0000 Manifest this update: Sun 21 Dec 2025 11:00:36 +0000 Manifest next update: Mon 22 Dec 2025 11:00:36 +0000 Files and hashes: 1: 4zOxTq2oMyWiJCiCIMIU-0Ua58Y.roa (hash: 2GMrPmfPXHRO6HMiDvps0qC1Qdw5U6PIWAf0zs/6xb4=) 2: zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl (hash: xGq74Ug1kNXD20masVd5JfK/FP3iWV+TFG91CxdZfaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:82:41:40:a7:be:bf:1f:c3:09:44:be:9b:b8:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cce50cabb6f73862160ef1f9f5054f490a89dff8 Validity Not Before: Dec 21 11:00:36 2025 GMT Not After : Dec 22 11:00:36 2025 GMT Subject: CN=32e387363dc997602fb510f356465f4755c0187c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ac:38:95:a4:76:0a:30:19:3d:76:1d:01:03: 40:90:81:4b:e2:7d:bf:e7:2d:01:cf:31:e6:3b:f0: f8:ee:8a:f7:7f:66:4d:73:b7:9b:43:d3:e8:d3:81: eb:9b:85:6a:d9:ad:c1:24:fc:72:93:8e:da:f0:3d: ab:46:57:9c:f1:48:31:e5:cd:c2:75:7b:0f:8b:64: 57:91:ba:8d:11:e7:5c:47:de:1e:80:6a:92:43:0e: 3a:13:d3:3f:74:e8:fe:e3:06:35:57:b6:a7:3f:f3: 28:38:69:6a:ff:7c:76:79:1d:e6:fd:e1:88:af:2e: 97:c4:1c:1d:e0:62:f6:ff:3f:b0:6a:60:00:0f:4b: f7:77:d9:8c:08:ad:65:07:f6:a2:73:c8:83:d0:bc: 21:c0:f3:d5:d8:77:81:1e:10:24:37:fd:9f:7a:6c: 22:ef:28:c6:6f:87:35:50:6a:b9:f0:6a:50:f0:b8: 66:42:2f:54:c1:d8:cb:0b:43:28:d2:e6:9e:c1:f1: 02:da:70:0c:73:39:d9:bc:4e:bc:1e:07:ce:9a:49: fc:12:a3:4f:21:63:87:b8:bd:02:af:fa:90:97:01: 89:e0:92:bf:0d:10:da:32:9c:32:78:31:20:05:98: 42:fc:2a:30:17:8c:0a:6b:c9:ad:fb:e4:15:db:64: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E3:87:36:3D:C9:97:60:2F:B5:10:F3:56:46:5F:47:55:C0:18:7C X509v3 Authority Key Identifier: keyid:CC:E5:0C:AB:B6:F7:38:62:16:0E:F1:F9:F5:05:4F:49:0A:89:DF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e9:3f:c2:f1:c9:51:a5:0d:8a:3a:af:30:8c:40:e2:bf:fc: f9:3a:38:04:11:9c:d2:d2:f5:f0:b1:c4:8f:07:dd:f3:e6:d3: d9:a4:61:57:83:cd:29:6c:86:60:00:43:49:81:fc:df:f1:cc: a3:16:5e:2d:84:c3:4b:ea:9a:81:f6:d2:be:8e:62:d2:46:cc: 3f:3c:60:40:40:5b:85:8a:a1:13:01:ad:fc:7b:74:91:1a:c1: 51:13:4a:af:ad:cc:28:a6:a7:ee:14:97:6e:e2:98:af:e7:fa: 7c:71:38:14:19:11:fc:f7:2c:65:2b:8d:56:f5:39:b0:22:8a: 8a:3f:f7:c8:1d:20:37:dd:57:4f:70:0d:94:85:82:71:f1:d5: 57:e8:69:c2:ff:62:6c:c4:4a:ad:f6:a2:3e:e5:9a:05:45:67: ed:73:e3:67:14:f3:c4:48:bc:72:00:ba:c5:3a:43:9e:1b:8a: d6:ba:9d:b7:9e:d3:c4:37:0f:21:59:7d:80:7a:2e:d0:93:29: 44:f9:a6:9f:e7:b1:7d:59:8e:79:10:85:87:c2:fb:a3:bd:4b: 15:2a:97:90:8b:6c:1d:dd:36:3e:d9:c3:a2:fa:00:c3:08:cc: 84:d8:b3:23:98:ed:e8:2a:7d:39:50:9a:5f:27:78:c4:a0:41: a4:8f:12:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkYJBQKe+vx/DCUS+m7iZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZTUwY2FiYjZmNzM4NjIxNjBlZjFmOWY1MDU0ZjQ5MGE4 OWRmZjgwHhcNMjUxMjIxMTEwMDM2WhcNMjUxMjIyMTEwMDM2WjAzMTEwLwYDVQQD EygzMmUzODczNjNkYzk5NzYwMmZiNTEwZjM1NjQ2NWY0NzU1YzAxODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6w4laR2CjAZPXYdAQNAkIFL4n2/ 5y0BzzHmO/D47or3f2ZNc7ebQ9Po04Hrm4Vq2a3BJPxyk47a8D2rRlec8Ugx5c3C dXsPi2RXkbqNEedcR94egGqSQw46E9M/dOj+4wY1V7anP/MoOGlq/3x2eR3m/eGI ry6XxBwd4GL2/z+wamAAD0v3d9mMCK1lB/aic8iD0LwhwPPV2HeBHhAkN/2femwi 7yjGb4c1UGq58GpQ8LhmQi9UwdjLC0Mo0uaewfEC2nAMcznZvE68HgfOmkn8EqNP IWOHuL0Cr/qQlwGJ4JK/DRDaMpwyeDEgBZhC/CowF4wKa8mt++QV22RqBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLjhzY9yZdgL7UQ81ZGX0dVwBh8MB8GA1UdIwQY MBaAFMzlDKu29zhiFg7x+fUFT0kKid/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek9VTXE3YjNPR0lXRHZINTlRVlBTUXFKM19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84MzdlNjQtYzc0NC00NWQ1LThhZDgt ZTUyNDAwNzM5MDliLzEvek9VTXE3YjNPR0lXRHZINTlRVlBTUXFKM19nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy84MzdlNjQtYzc0NC00NWQ1LThhZDgtZTUyNDAwNzM5MDli LzEvek9VTXE3YjNPR0lXRHZINTlRVlBTUXFKM19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+k/wvHJ UaUNijqvMIxA4r/8+To4BBGc0tL18LHEjwfd8+bT2aRhV4PNKWyGYABDSYH83/HM oxZeLYTDS+qagfbSvo5i0kbMPzxgQEBbhYqhEwGt/Ht0kRrBURNKr63MKKan7hSX buKYr+f6fHE4FBkR/PcsZSuNVvU5sCKKij/3yB0gN91XT3ANlIWCcfHVV+hpwv9i bMRKrfaiPuWaBUVn7XPjZxTzxEi8cgC6xTpDnhuK1rqdt57TxDcPIVl9gHou0JMp RPmmn+exfVmOeRCFh8L7o71LFSqXkItsHd02PtnDovoAwwjMhNizI5jt6Cp9OVCa Xyd4xKBBpI8Seg== -----END CERTIFICATE-----Generated at Sun Dec 21 20:31:03 2025 by rpki-client