This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json) Hash identifier: XBLfzll30qOvxdpyPsATgdBZNI90nrp3Mi5cdwo3rYU= Subject key identifier: 3F:D3:03:40:35:1A:F2:1F:0D:43:DC:0E:CF:26:86:33:17:E5:C3:A8 Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82 Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782 Certificate serial: 019B71B55DF8A81E6548219B2D2CEFBF2155 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft Manifest number: 17A2 Signing time: Wed 31 Dec 2025 00:01:09 +0000 Manifest this update: Wed 31 Dec 2025 00:01:09 +0000 Manifest next update: Thu 01 Jan 2026 00:01:09 +0000 Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=) 2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=) 3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: CV+VyyW1WNJSmv8ehdZvFFZhzjh1cOFo9hwaUpFVQxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:b5:5d:f8:a8:1e:65:48:21:9b:2d:2c:ef:bf:21:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc4491558cd24875db524273410502fdae3a6782 Validity Not Before: Dec 31 00:01:09 2025 GMT Not After : Jan 1 00:01:09 2026 GMT Subject: CN=3fd30340351af21f0d43dc0ecf26863317e5c3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:7a:3d:f7:7c:7c:31:a3:84:a3:65:03:73: 13:89:ae:e3:68:67:a0:dc:4f:94:ff:78:c7:84:03: 14:60:c6:43:e4:a1:9a:72:b6:0a:e5:af:46:15:d8: 1a:bd:88:d3:6c:93:f7:71:ad:8f:d4:1d:e2:eb:ef: b3:ad:b0:42:46:a9:b8:d0:f0:d2:09:c3:46:63:4c: 1f:8f:14:cd:44:a0:0f:2f:f2:5b:1c:88:47:f1:6b: f6:a9:62:da:5f:48:98:c2:e3:0b:3e:fe:1d:8c:72: f9:1e:a5:c6:7d:14:5f:31:aa:f9:d9:59:4e:df:fa: 85:b8:6f:d0:f3:27:c8:bc:1c:d0:a6:cc:3b:6d:f2: ef:1e:b6:3e:00:e2:17:48:34:f9:72:91:80:eb:7e: 7a:1c:1a:14:f3:aa:22:07:66:1c:6c:5c:36:c0:cd: 91:2d:16:44:23:47:6e:e4:a1:3f:54:b3:d5:f0:a0: ee:83:08:83:1a:c6:62:26:90:d2:bd:e4:3a:fa:cb: ea:b9:2a:1a:30:2a:2f:a2:22:7c:f7:41:49:bd:93: 53:d1:04:b5:0e:fa:32:c9:7b:c4:db:8f:f8:fd:e7: b9:1b:cf:9c:4a:63:12:92:09:5b:f6:2f:a7:32:39: dd:af:ee:ae:f8:66:46:70:78:f4:49:c9:6e:e5:49: 4a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D3:03:40:35:1A:F2:1F:0D:43:DC:0E:CF:26:86:33:17:E5:C3:A8 X509v3 Authority Key Identifier: keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0c:be:37:d4:d5:99:3b:f3:a1:c2:82:18:f0:03:58:cc:5f: d3:29:52:6b:89:55:8c:ae:12:dd:e0:0d:12:67:56:ba:aa:3c: 7e:b6:dd:7b:dc:75:09:9e:25:a5:47:ab:a9:30:a4:ea:60:32: cf:df:f5:94:ab:f2:ab:7c:d6:9c:0c:04:18:c5:d2:90:0e:f4: 4a:c6:1b:70:8c:81:ac:98:f0:df:3d:9d:67:e4:14:93:58:ab: 6e:e2:5a:6d:41:83:eb:2e:ab:31:06:cb:37:e0:7e:4c:18:11: 83:6d:00:70:c6:40:5e:41:86:fb:92:ab:39:fd:79:3c:ea:18: 7b:1b:23:d9:c3:43:6a:30:1b:1a:c7:d3:dd:27:59:29:bf:81: 98:24:84:ed:4c:2d:3b:19:19:bf:7b:df:fc:8c:70:07:78:4c: 11:79:08:80:31:44:7e:f7:c5:ff:57:23:52:88:8d:51:f4:4c: cb:10:03:af:05:d9:e5:bb:24:4f:d1:8a:ce:f5:40:3b:9b:65: a1:46:aa:24:c8:cc:b2:cf:23:f3:c0:1a:d0:55:62:67:8f:21: bb:7e:d6:63:2a:a9:61:0b:8c:6d:85:2c:1f:87:e8:cd:0c:c3: ed:c6:30:24:90:e2:0c:c5:48:e0:32:d2:fc:8d:7e:17:4a:98: c8:42:f6:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxtV34qB5lSCGbLSzvvyFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDQ5MTU1OGNkMjQ4NzVkYjUyNDI3MzQxMDUwMmZkYWUz YTY3ODIwHhcNMjUxMjMxMDAwMTA5WhcNMjYwMTAxMDAwMTA5WjAzMTEwLwYDVQQD EygzZmQzMDM0MDM1MWFmMjFmMGQ0M2RjMGVjZjI2ODYzMzE3ZTVjM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l56Pfd8fDGjhKNlA3MTia7jaGeg 3E+U/3jHhAMUYMZD5KGacrYK5a9GFdgavYjTbJP3ca2P1B3i6++zrbBCRqm40PDS CcNGY0wfjxTNRKAPL/JbHIhH8Wv2qWLaX0iYwuMLPv4djHL5HqXGfRRfMar52VlO 3/qFuG/Q8yfIvBzQpsw7bfLvHrY+AOIXSDT5cpGA6356HBoU86oiB2YcbFw2wM2R LRZEI0du5KE/VLPV8KDugwiDGsZiJpDSveQ6+svquSoaMCovoiJ890FJvZNT0QS1 DvoyyXvE24/4/ee5G8+cSmMSkglb9i+nMjndr+6u+GZGcHj0Sclu5UlKgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/TA0A1GvIfDUPcDs8mhjMX5cOoMB8GA1UdIwQY MBaAFMxEkVWM0kh121JCc0EFAv2uOmeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80MzllZmUtZjEzMC00OTMxLTkzMWMt YzhkNWMwNGUzZDQzLzEvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80MzllZmUtZjEzMC00OTMxLTkzMWMtYzhkNWMwNGUzZDQz LzEvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgy+N9TV mTvzocKCGPADWMxf0ylSa4lVjK4S3eANEmdWuqo8frbde9x1CZ4lpUerqTCk6mAy z9/1lKvyq3zWnAwEGMXSkA70SsYbcIyBrJjw3z2dZ+QUk1irbuJabUGD6y6rMQbL N+B+TBgRg20AcMZAXkGG+5KrOf15POoYexsj2cNDajAbGsfT3SdZKb+BmCSE7Uwt OxkZv3vf/IxwB3hMEXkIgDFEfvfF/1cjUoiNUfRMyxADrwXZ5bskT9GKzvVAO5tl oUaqJMjMss8j88Aa0FViZ48hu37WYyqpYQuMbYUsH4fozQzD7cYwJJDiDMVI4DLS /I1+F0qYyEL2rg== -----END CERTIFICATE-----Generated at Wed Dec 31 05:21:43 2025 by rpki-client