This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json) Hash identifier: PqMsEZNgdgbn9htpeOFQg9vOxxffbIO8JrH+QEGulv8= Subject key identifier: 57:99:D0:DD:71:23:46:94:58:E7:D5:6A:92:53:54:D7:F1:CD:56:5C Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f Certificate serial: 019B48F0417A5BD3EDBC33AF58FFF090E550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft Manifest number: 1206 Signing time: Tue 23 Dec 2025 02:01:03 +0000 Manifest this update: Tue 23 Dec 2025 02:01:03 +0000 Manifest next update: Wed 24 Dec 2025 02:01:03 +0000 Files and hashes: 1: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (hash: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=) 2: ifcwYHfmty9P7YlJSIwto5Z8mhc.roa (hash: j3Q6hvt9y1dRnxH4mfVL1HI6Z3oaft4npRVPXBxnB5Y=) 3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: k6omqvGIzl0CTMJH2KcX5qFi2tVBRnt+tP4+g7Up2g4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:41:7a:5b:d3:ed:bc:33:af:58:ff:f0:90:e5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f Validity Not Before: Dec 23 02:01:03 2025 GMT Not After : Dec 24 02:01:03 2025 GMT Subject: CN=5799d0dd7123469458e7d56a925354d7f1cd565c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:72:e4:22:ac:59:f1:c2:2b:86:7e:6a:35:dd: 5e:c9:bd:52:05:b1:37:18:ac:c0:2b:34:17:d8:00: 75:53:89:1a:8d:be:36:98:e1:3c:fe:d9:c7:fc:a8: 7a:7e:59:b2:63:51:fc:d1:7a:0a:87:13:99:bf:5d: 84:66:1a:71:5c:43:aa:5e:f6:3a:7b:71:14:ca:67: 41:61:4b:e4:42:74:f0:79:11:05:07:2e:89:71:7b: de:0a:31:c6:7b:f2:9a:7c:d3:cc:f3:d7:f1:72:ae: f7:77:86:5e:38:98:47:3b:80:e4:8a:88:ba:99:b2: 0d:aa:64:77:9e:1a:4f:c5:29:66:b7:60:ad:33:9e: 64:57:33:35:7f:a3:9a:ea:df:41:bc:85:94:71:0f: 74:f2:d3:3d:28:61:1b:2d:1a:9f:7b:ae:90:bd:81: 06:32:c6:ef:f0:4a:d9:89:ac:ca:8e:d1:22:af:d6: 21:27:18:da:ce:b2:fa:6a:70:0f:ad:a6:73:d5:83: 99:6a:d7:4c:70:fd:02:f2:c9:a1:58:c8:a4:7b:4f: cc:ed:a5:a8:7e:2e:52:ba:c1:a7:19:01:1c:54:5a: db:2d:06:e4:23:fe:b7:4d:38:b1:be:84:77:93:6d: db:82:e0:ea:c7:af:f0:0f:59:ee:67:a1:1c:9b:a8: 68:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:99:D0:DD:71:23:46:94:58:E7:D5:6A:92:53:54:D7:F1:CD:56:5C X509v3 Authority Key Identifier: keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9e:da:dd:06:c2:27:de:68:79:17:0c:58:01:c7:a2:a4:51: 05:0d:18:1b:fb:1f:26:7d:e8:05:d4:33:ba:4c:02:ab:27:04: 6f:b5:b0:f7:b4:1b:46:9f:3d:af:92:2f:af:13:65:0c:8c:d1: c1:3e:60:49:c3:3c:cf:f0:2b:0c:0c:0d:1e:d4:52:c7:72:d0: 03:6a:5d:a4:c2:8b:ba:60:3f:4e:38:cd:45:92:55:60:f0:74: 60:d1:94:5a:93:de:8a:75:61:1d:ed:da:19:b9:9d:5a:e7:9e: c1:34:24:bb:ef:37:2a:b8:c0:ac:6c:21:96:75:5f:60:fc:20: 08:cd:43:54:4f:fa:cd:26:58:3c:89:73:90:40:9f:7f:11:e4: 98:4f:6b:11:45:c4:1e:21:64:cc:03:9e:f9:2b:23:6f:9c:74: 67:b5:03:58:2d:f5:59:ff:7e:a4:77:9e:5a:12:b1:35:de:d6: 0d:f5:db:91:ac:7f:68:d1:08:3b:f9:a9:86:d8:da:c8:f9:b5: 2d:12:5e:f5:84:09:e2:52:bb:f0:cb:75:08:b2:25:34:fc:dc: fc:e2:b4:e2:d7:d5:2c:d2:97:eb:11:78:00:1c:75:28:68:b9: 02:98:e6:7d:1e:c4:e0:8d:71:2a:6f:07:05:3d:38:0d:97:a3: 1b:09:be:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8EF6W9PtvDOvWP/wkOVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDM1NzkwODMwY2U3NDY5YTk0YzU5YjJlMmNjYmJmNWUz NmQxM2YwHhcNMjUxMjIzMDIwMTAzWhcNMjUxMjI0MDIwMTAzWjAzMTEwLwYDVQQD Eyg1Nzk5ZDBkZDcxMjM0Njk0NThlN2Q1NmE5MjUzNTRkN2YxY2Q1NjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHLkIqxZ8cIrhn5qNd1eyb1SBbE3 GKzAKzQX2AB1U4kajb42mOE8/tnH/Kh6flmyY1H80XoKhxOZv12EZhpxXEOqXvY6 e3EUymdBYUvkQnTweREFBy6JcXveCjHGe/KafNPM89fxcq73d4ZeOJhHO4Dkioi6 mbINqmR3nhpPxSlmt2CtM55kVzM1f6Oa6t9BvIWUcQ908tM9KGEbLRqfe66QvYEG Msbv8ErZiazKjtEir9YhJxjazrL6anAPraZz1YOZatdMcP0C8smhWMike0/M7aWo fi5SusGnGQEcVFrbLQbkI/63TTixvoR3k23bguDqx6/wD1nuZ6Ecm6hoSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeZ0N1xI0aUWOfVapJTVNfxzVZcMB8GA1UdIwQY MBaAFMzTV5CDDOdGmpTFmy4sy79eNtE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAt YzVkMTNlODhlNGRlLzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAtYzVkMTNlODhlNGRl LzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB57a3QbC J95oeRcMWAHHoqRRBQ0YG/sfJn3oBdQzukwCqycEb7Ww97QbRp89r5IvrxNlDIzR wT5gScM8z/ArDAwNHtRSx3LQA2pdpMKLumA/TjjNRZJVYPB0YNGUWpPeinVhHe3a GbmdWueewTQku+83KrjArGwhlnVfYPwgCM1DVE/6zSZYPIlzkECffxHkmE9rEUXE HiFkzAOe+Ssjb5x0Z7UDWC31Wf9+pHeeWhKxNd7WDfXbkax/aNEIO/mphtjayPm1 LRJe9YQJ4lK78Mt1CLIlNPzc/OK04tfVLNKX6xF4ABx1KGi5ApjmfR7E4I1xKm8H BT04DZejGwm+6g== -----END CERTIFICATE-----Generated at Tue Dec 23 09:16:33 2025 by rpki-client