This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json) Hash identifier: 6bUKkrvjJYbyA1PZywysc8vp4oI/ybvoY25WMRTABUI= Subject key identifier: 7C:3E:C6:A8:B2:7F:AE:AA:99:5A:8F:6E:B0:09:C3:45:FA:6A:98:7C Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0 Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0 Certificate serial: 019B3EDAE1C84F18EC31085047C0EAC81606 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft Manifest number: 05AB Signing time: Sun 21 Dec 2025 03:01:30 +0000 Manifest this update: Sun 21 Dec 2025 03:01:30 +0000 Manifest next update: Mon 22 Dec 2025 03:01:30 +0000 Files and hashes: 1: 5RDrxvpk6f6_CeHaE5maQdmSM44.roa (hash: ki187Iv+O6q2r1ZkIX9WA+gL/Pc275QX3Xeem+p1Izk=) 2: DQ01J-Cq4hUemzI_hsxFb8NofP8.asa (hash: fcPlXypjGU8YaSASqBijwf7gz4frCYBc1/uFvytFDWw=) 3: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: sfmLWfe+Y1l9xHhBM8GcQAw3FeXkge+zdgePzpGXrMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:e1:c8:4f:18:ec:31:08:50:47:c0:ea:c8:16:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0 Validity Not Before: Dec 21 03:01:30 2025 GMT Not After : Dec 22 03:01:30 2025 GMT Subject: CN=7c3ec6a8b27faeaa995a8f6eb009c345fa6a987c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:8e:7c:4f:a5:c4:d9:2d:20:2c:b0:f1:31: 1a:b7:33:a8:a4:4a:8c:42:b2:0a:42:a0:1f:3d:08: 32:3e:09:bc:7b:f3:9c:e1:fe:a0:03:64:db:0c:67: ac:ab:00:da:62:7d:6e:75:00:2e:e0:50:3b:dc:91: b0:0a:ee:ab:0d:43:94:7f:d5:3e:d0:85:e4:ed:92: b8:48:0e:70:c4:ea:a3:8a:16:a4:81:0b:74:66:7a: ca:1a:95:63:ee:59:33:95:14:52:26:9f:6b:d2:bf: 60:2e:11:4d:2d:23:ae:dd:34:00:f9:7c:26:90:b0: 72:1c:0f:ca:c8:7c:df:de:ab:fe:98:e2:cf:7f:0f: 0a:98:8c:95:73:ac:2a:ad:26:7d:a6:44:5f:b1:ef: 08:47:b8:13:a5:a4:26:57:ba:10:0e:8d:53:e2:e8: ee:4f:11:4c:8d:a2:45:2a:e1:32:11:63:e6:50:dd: 53:7e:72:f7:47:8f:f1:ee:3b:53:b8:2a:4c:34:66: f0:9f:c2:d9:3b:04:4e:56:f8:f3:7f:7f:7f:9d:5a: 7e:16:e0:12:93:1b:bf:b3:01:cb:53:d9:5e:1f:29: 93:95:06:40:48:0e:1e:35:4c:62:3d:75:d8:6a:c6: bf:16:92:0b:f2:d8:55:6a:18:3d:8c:69:67:35:a9: d3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3E:C6:A8:B2:7F:AE:AA:99:5A:8F:6E:B0:09:C3:45:FA:6A:98:7C X509v3 Authority Key Identifier: keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ba:e7:bb:e1:f0:02:fe:cb:69:e9:27:ef:4c:e5:18:bf:95: 98:af:6f:ab:62:4c:b1:32:27:2b:4b:f2:38:86:a7:d0:db:48: 25:86:dd:05:b7:b0:81:f0:69:9a:83:9f:e2:e6:48:f6:25:51: 58:80:c9:25:48:85:1f:88:99:1e:1c:ff:eb:af:2d:02:e2:75: 84:9f:e8:5f:7a:7f:22:98:f4:d5:b3:48:99:ce:7a:3b:59:ca: f6:0d:75:27:6b:a9:1e:9d:63:f7:bb:8e:34:7b:dd:4b:72:c5: b0:ae:59:2d:f3:24:13:25:95:7c:cb:a4:c7:08:44:f3:08:bd: b2:a5:f2:39:1c:63:21:d1:4c:ec:92:16:78:05:dc:9c:e6:fc: 30:64:83:51:43:4b:83:13:17:93:5e:9a:b5:58:98:c4:c8:a9: 3c:25:65:c5:42:f1:13:f1:22:4e:55:d0:ad:e0:98:06:87:2d: 89:1d:ab:63:06:18:fd:42:b1:4d:84:57:20:37:d6:82:cf:ec: 27:23:a9:80:84:07:b1:ff:db:17:f8:a2:3d:69:9f:4e:ad:6c: a6:3c:d5:89:bf:9c:52:6b:83:38:e6:6b:9e:92:cd:c7:4b:53: ec:be:9f:74:14:02:2b:7e:2a:41:41:3d:61:8f:0c:bb:66:8a: 29:9e:00:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2uHITxjsMQhQR8DqyBYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTRmY2U5YjE5YTVlZWE1MzJlMTdkODNkYThjMWRjZDFk ZTE4YzAwHhcNMjUxMjIxMDMwMTMwWhcNMjUxMjIyMDMwMTMwWjAzMTEwLwYDVQQD Eyg3YzNlYzZhOGIyN2ZhZWFhOTk1YThmNmViMDA5YzM0NWZhNmE5ODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW+OfE+lxNktICyw8TEatzOopEqM QrIKQqAfPQgyPgm8e/Oc4f6gA2TbDGesqwDaYn1udQAu4FA73JGwCu6rDUOUf9U+ 0IXk7ZK4SA5wxOqjihakgQt0ZnrKGpVj7lkzlRRSJp9r0r9gLhFNLSOu3TQA+Xwm kLByHA/KyHzf3qv+mOLPfw8KmIyVc6wqrSZ9pkRfse8IR7gTpaQmV7oQDo1T4uju TxFMjaJFKuEyEWPmUN1TfnL3R4/x7jtTuCpMNGbwn8LZOwROVvjzf39/nVp+FuAS kxu/swHLU9leHymTlQZASA4eNUxiPXXYasa/FpIL8thVahg9jGlnNanTGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHw+xqiyf66qmVqPbrAJw0X6aph8MB8GA1UdIwQY MBaAFM8U/Omxml7qUy4X2D2owdzR3hjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMt NTljMTA4N2U0ODU2LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMtNTljMTA4N2U0ODU2 LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbrnu+Hw Av7Laekn70zlGL+VmK9vq2JMsTInK0vyOIan0NtIJYbdBbewgfBpmoOf4uZI9iVR WIDJJUiFH4iZHhz/668tAuJ1hJ/oX3p/Ipj01bNImc56O1nK9g11J2upHp1j97uO NHvdS3LFsK5ZLfMkEyWVfMukxwhE8wi9sqXyORxjIdFM7JIWeAXcnOb8MGSDUUNL gxMXk16atViYxMipPCVlxULxE/EiTlXQreCYBoctiR2rYwYY/UKxTYRXIDfWgs/s JyOpgIQHsf/bF/iiPWmfTq1spjzVib+cUmuDOOZrnpLNx0tT7L6fdBQCK34qQUE9 YY8Mu2aKKZ4AKw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:20:06 2025 by rpki-client