This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft File: zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json) Hash identifier: lUUAQciKopvDALcFzEGIiRy/iRUJE3Y/Sn5rI7TEZGM= Subject key identifier: 86:01:BC:6B:D1:48:CA:5B:7F:C5:FA:1B:C7:25:4A:C0:FC:D1:35:5D Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee Certificate serial: 019B2B1DC81E374F460A4EAABB6F975337CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft Manifest number: 0D75 Signing time: Wed 17 Dec 2025 07:02:10 +0000 Manifest this update: Wed 17 Dec 2025 07:02:10 +0000 Manifest next update: Thu 18 Dec 2025 07:02:10 +0000 Files and hashes: 1: qrZKSOFpAICcNRLOx5AIirWqvBo.roa (hash: h3wCdr8A46DdDE5I42tcnvu/LE64VypZvT4djSXNycs=) 2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: IMxOtcnLVdo4cLBscuCzH+tiwviecStriqV7ARoCvrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:c8:1e:37:4f:46:0a:4e:aa:bb:6f:97:53:37:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee Validity Not Before: Dec 17 07:02:10 2025 GMT Not After : Dec 18 07:02:10 2025 GMT Subject: CN=8601bc6bd148ca5b7fc5fa1bc7254ac0fcd1355d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d5:24:df:aa:ef:13:40:b7:6f:93:79:b7:8d: 72:bf:18:bf:ab:ae:1a:a8:98:65:07:30:c2:a1:67: 9e:e2:b9:02:7e:97:ad:f7:ec:d6:a7:f9:18:b6:4b: ae:e7:be:04:55:93:bc:7a:a3:2b:66:96:e3:c4:82: 09:89:08:31:c7:b3:dc:c2:2a:42:5d:33:ff:ef:22: 3f:a9:18:54:af:1e:ac:9b:93:94:03:64:c8:1a:4e: ce:5e:7a:32:79:66:d7:d0:50:90:80:f3:20:3a:46: 20:f2:b8:60:72:15:85:fb:a2:16:91:8d:39:f5:c4: 3f:f9:06:71:b5:e7:c4:68:ae:92:4c:62:59:21:df: eb:29:27:16:d9:f8:eb:be:c2:ff:e6:a8:63:d6:69: b3:a9:9d:9f:a0:40:58:18:dd:37:c1:57:de:73:71: 83:af:25:61:6c:e7:df:40:86:f6:84:f8:0f:fd:b6: 3e:4e:2c:a1:e3:50:63:cb:35:30:3c:ce:90:04:65: c3:a8:21:8d:95:98:58:e1:a0:77:cd:29:f8:e3:b9: 20:7d:e2:07:5c:04:d7:a8:86:fd:83:71:5c:9f:d6: d9:5b:05:fc:fb:cf:ab:5e:b4:6a:d7:cf:40:5b:f3: 08:03:e1:4a:4f:ef:80:08:42:3a:31:d9:23:ac:2c: 3c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:01:BC:6B:D1:48:CA:5B:7F:C5:FA:1B:C7:25:4A:C0:FC:D1:35:5D X509v3 Authority Key Identifier: keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:e0:e0:0e:f6:9d:4d:b1:46:3e:9c:57:b1:81:d0:a0:7f:fd: ac:46:8e:4d:47:54:36:00:95:d2:50:8c:1b:e0:42:ba:b2:18: cf:c4:98:88:c6:88:81:ab:03:18:7a:7b:1c:96:7d:ee:a9:e3: d9:b8:4e:3a:dd:60:c4:a4:70:06:b1:9f:d0:68:ae:0d:d3:c2: 46:da:2b:24:08:f3:04:eb:6d:75:31:81:c2:81:8e:ce:db:0c: 10:b8:02:14:08:bc:ca:10:a0:a7:fc:6c:ef:b1:2c:e5:21:07: c1:86:d6:df:77:24:12:7d:24:d4:b2:ab:29:f3:d5:73:44:c9: 13:b1:14:e8:ac:6f:c6:0b:07:46:ca:2a:e2:64:b9:ab:bf:e7: 3b:a8:7f:e2:90:5b:8a:19:7d:4d:4d:9a:02:3d:f8:81:e5:c5: 88:3e:43:a3:24:bf:51:f9:3d:ca:0d:27:63:7f:1b:0f:3b:96: 49:5a:90:82:ba:fc:79:a3:16:b1:c9:7c:5f:9b:6d:9b:e6:e7: ee:0c:45:b9:a6:ee:bb:86:ba:c9:9c:ee:cf:d4:bb:bf:36:ef: 9d:d2:78:de:ff:ab:3a:6b:18:7e:03:c5:b3:8e:56:70:0a:db: fe:d7:a3:a8:2c:49:9f:ad:cc:c8:eb:cf:ef:55:31:6f:6f:e2: 2d:b1:79:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHcgeN09GCk6qu2+XUzfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNTVmNzZjZmU5ZGFmYjJkOTQxOTAxNDJiYzhhYWIwZDMy ODA2ZWUwHhcNMjUxMjE3MDcwMjEwWhcNMjUxMjE4MDcwMjEwWjAzMTEwLwYDVQQD Eyg4NjAxYmM2YmQxNDhjYTViN2ZjNWZhMWJjNzI1NGFjMGZjZDEzNTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdUk36rvE0C3b5N5t41yvxi/q64a qJhlBzDCoWee4rkCfpet9+zWp/kYtkuu574EVZO8eqMrZpbjxIIJiQgxx7PcwipC XTP/7yI/qRhUrx6sm5OUA2TIGk7OXnoyeWbX0FCQgPMgOkYg8rhgchWF+6IWkY05 9cQ/+QZxtefEaK6STGJZId/rKScW2fjrvsL/5qhj1mmzqZ2foEBYGN03wVfec3GD ryVhbOffQIb2hPgP/bY+Tiyh41BjyzUwPM6QBGXDqCGNlZhY4aB3zSn447kgfeIH XATXqIb9g3Fcn9bZWwX8+8+rXrRq189AW/MIA+FKT++ACEI6MdkjrCw8lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYBvGvRSMpbf8X6G8clSsD80TVdMB8GA1UdIwQY MBaAFMxV92z+na+y2UGQFCvIqrDTKAbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kODFmMTQtMWZmNC00MmIxLTliOWYt MzRjZDA1NzVlMWNiLzEvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kODFmMTQtMWZmNC00MmIxLTliOWYtMzRjZDA1NzVlMWNi LzEvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyODgDvad TbFGPpxXsYHQoH/9rEaOTUdUNgCV0lCMG+BCurIYz8SYiMaIgasDGHp7HJZ97qnj 2bhOOt1gxKRwBrGf0GiuDdPCRtorJAjzBOttdTGBwoGOztsMELgCFAi8yhCgp/xs 77Es5SEHwYbW33ckEn0k1LKrKfPVc0TJE7EU6KxvxgsHRsoq4mS5q7/nO6h/4pBb ihl9TU2aAj34geXFiD5DoyS/Ufk9yg0nY38bDzuWSVqQgrr8eaMWscl8X5ttm+bn 7gxFuabuu4a6yZzuz9S7vzbvndJ43v+rOmsYfgPFs45WcArb/tejqCxJn63MyOvP 71Uxb2/iLbF59A== -----END CERTIFICATE-----Generated at Wed Dec 17 12:56:55 2025 by rpki-client