This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft File: zR9zNFeUzkgX6pno2M_OpxvXg2c.mft (raw, json) Hash identifier: Ul3EMuDB9qG7ql9XzC77DfGwEizg8qii86IhYcjd6B8= Subject key identifier: 10:4B:DC:36:89:23:87:73:00:10:DC:0A:D0:CA:DF:2C:70:BB:C5:47 Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67 Certificate issuer: /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367 Certificate serial: 019B42492CA474B2448541FAD5A21F9551DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft Manifest number: 0773 Signing time: Sun 21 Dec 2025 19:00:50 +0000 Manifest this update: Sun 21 Dec 2025 19:00:50 +0000 Manifest next update: Mon 22 Dec 2025 19:00:50 +0000 Files and hashes: 1: EsGGI1P8V7qCIrWJmfPudsu7pMI.roa (hash: RgD/iTo2o3seqIZhRljS2dvXiiazUq7PXVkPQR+sYAc=) 2: zR9zNFeUzkgX6pno2M_OpxvXg2c.crl (hash: YvQdiUtzZHU33Ci5xFaeMPqq6sBEjk6XvSuMdLTu/6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:2c:a4:74:b2:44:85:41:fa:d5:a2:1f:95:51:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367 Validity Not Before: Dec 21 19:00:50 2025 GMT Not After : Dec 22 19:00:50 2025 GMT Subject: CN=104bdc36892387730010dc0ad0cadf2c70bbc547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:9d:00:ee:aa:70:bd:e8:2d:3e:0d:b2:80: 4e:d9:89:a0:f4:bb:8a:7f:50:4b:57:52:c3:44:77: 86:cb:62:e2:75:79:04:0d:ac:3c:11:1c:ee:0c:46: 4c:43:7e:b8:e7:bd:d0:e0:59:1c:30:d7:2a:76:77: ba:ca:6d:22:9f:42:d7:2a:7c:70:95:a4:e0:6c:db: 35:5f:aa:a9:c2:f5:38:31:4e:c0:24:27:f2:7d:53: 7d:1a:77:49:b2:b5:e5:19:aa:26:5a:7a:95:4d:5c: 7e:64:48:a5:89:46:fa:79:1f:cc:eb:5d:5c:f8:45: 7e:c9:a0:cb:4c:2c:08:26:65:ee:92:f7:f3:37:61: bb:1a:3a:ff:28:ab:43:76:9d:88:24:bb:24:46:cc: 57:5d:b3:d7:d8:7c:fb:c6:f1:2b:47:df:fd:12:62: 2c:6e:6d:98:a9:b6:db:8d:2c:2f:9f:84:5b:b5:11: 9b:58:5f:a3:45:a6:56:87:ac:5f:09:a2:01:7d:9e: ef:c9:59:5f:39:66:4d:26:ef:68:7f:c9:69:29:7a: f8:d1:61:fe:64:0c:97:46:3f:4f:8a:c4:e3:0b:68: 1b:f5:4a:8c:4a:29:d5:0b:9e:57:b6:74:07:52:21: c3:b8:ba:fb:1a:c8:bd:9b:cc:fa:a3:25:ba:cb:23: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4B:DC:36:89:23:87:73:00:10:DC:0A:D0:CA:DF:2C:70:BB:C5:47 X509v3 Authority Key Identifier: keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c5:a8:6b:2b:43:93:12:cc:8b:79:c2:0e:76:de:d7:cb:2f: 35:53:55:0f:56:50:98:0c:e8:45:34:ea:16:91:83:d8:94:7b: 29:17:56:62:1d:47:5c:1c:07:a1:bc:ab:0b:6c:fd:ce:2c:f2: a3:2f:81:1f:f5:06:52:73:0d:e7:f8:78:0e:77:00:c1:76:1f: 3e:a1:e7:cb:71:f0:10:18:7a:f6:4a:ec:b8:0d:9f:a0:9b:2a: 1c:33:8b:9d:48:d4:c3:3f:f6:78:36:87:cc:44:2e:e0:0d:84: 44:de:96:5d:fc:2b:a2:6b:60:71:da:08:77:4a:34:15:da:7d: cf:ed:0b:be:67:0a:5f:e1:52:be:c6:15:41:08:c1:da:b9:7e: 86:56:10:74:ac:98:0c:6f:1e:6d:27:5d:05:df:a1:0b:87:3f: ea:c9:a6:2e:c8:2c:82:39:52:40:02:4f:c3:47:85:95:55:db: b4:e6:40:52:71:b6:74:8f:3e:1d:58:dc:cd:67:05:95:52:8e: 53:96:49:95:5c:57:f6:77:b5:dd:06:9c:e7:db:cd:21:63:9f: 89:84:9c:32:5b:5e:72:42:ca:64:a2:c7:ac:c4:40:b0:7f:34: df:13:c1:aa:00:e3:6b:be:75:d9:c6:96:5e:36:45:91:7f:7b: 23:7a:58:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSSykdLJEhUH61aIflVHcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMWY3MzM0NTc5NGNlNDgxN2VhOTllOGQ4Y2ZjZWE3MWJk NzgzNjcwHhcNMjUxMjIxMTkwMDUwWhcNMjUxMjIyMTkwMDUwWjAzMTEwLwYDVQQD EygxMDRiZGMzNjg5MjM4NzczMDAxMGRjMGFkMGNhZGYyYzcwYmJjNTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4CdAO6qcL3oLT4NsoBO2Ymg9LuK f1BLV1LDRHeGy2LidXkEDaw8ERzuDEZMQ364573Q4FkcMNcqdne6ym0in0LXKnxw laTgbNs1X6qpwvU4MU7AJCfyfVN9GndJsrXlGaomWnqVTVx+ZEiliUb6eR/M611c +EV+yaDLTCwIJmXukvfzN2G7Gjr/KKtDdp2IJLskRsxXXbPX2Hz7xvErR9/9EmIs bm2YqbbbjSwvn4RbtRGbWF+jRaZWh6xfCaIBfZ7vyVlfOWZNJu9of8lpKXr40WH+ ZAyXRj9PisTjC2gb9UqMSinVC55XtnQHUiHDuLr7Gsi9m8z6oyW6yyN4DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBL3DaJI4dzABDcCtDK3yxwu8VHMB8GA1UdIwQY MBaAFM0fczRXlM5IF+qZ6NjPzqcb14NnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MDExNzAtZTYwNi00ZmQxLTg1MDQt N2YwZDA3YmE0YWYzLzEvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MDExNzAtZTYwNi00ZmQxLTg1MDQtN2YwZDA3YmE0YWYz LzEvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsWoaytD kxLMi3nCDnbe18svNVNVD1ZQmAzoRTTqFpGD2JR7KRdWYh1HXBwHobyrC2z9zizy oy+BH/UGUnMN5/h4DncAwXYfPqHny3HwEBh69krsuA2foJsqHDOLnUjUwz/2eDaH zEQu4A2ERN6WXfwromtgcdoId0o0Fdp9z+0LvmcKX+FSvsYVQQjB2rl+hlYQdKyY DG8ebSddBd+hC4c/6smmLsgsgjlSQAJPw0eFlVXbtOZAUnG2dI8+HVjczWcFlVKO U5ZJlVxX9ne13Qac59vNIWOfiYScMlteckLKZKLHrMRAsH803xPBqgDja7512caW XjZFkX97I3pY+g== -----END CERTIFICATE-----Generated at Mon Dec 22 04:43:57 2025 by rpki-client