This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json) Hash identifier: vpbNE2CrPMLiUTfLxbfa/RDO2hjr/MtPRhEKwVY7dek= Subject key identifier: 1D:D0:1E:85:74:D1:48:E3:4B:99:F0:39:93:1B:57:1E:4C:AE:A3:3B Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e Certificate serial: 019B533D37FA10F62850CB961981E3CEE2FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft Manifest number: 073A Signing time: Thu 25 Dec 2025 02:01:19 +0000 Manifest this update: Thu 25 Dec 2025 02:01:19 +0000 Manifest next update: Fri 26 Dec 2025 02:01:19 +0000 Files and hashes: 1: GnRBgfOJgqgbCKfVmItzXv5DJ54.roa (hash: MiCCH7uvupnb1UHdVT5mWDwROiRyBunRSB+jjWhogas=) 2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: 5tiEizfM7FnEAHuEuB0U5tKWUVihCxQtn4hS5mR4nmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 02:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:37:fa:10:f6:28:50:cb:96:19:81:e3:ce:e2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e Validity Not Before: Dec 25 02:01:19 2025 GMT Not After : Dec 26 02:01:19 2025 GMT Subject: CN=1dd01e8574d148e34b99f039931b571e4caea33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:16:13:f8:9c:e6:7d:8a:a9:66:3c:73:91:4e: b6:af:87:71:d0:e7:08:ef:a5:82:7a:d6:f8:6d:3a: 06:7d:86:ee:17:f0:20:cc:ad:90:7d:e4:31:97:b5: 23:ca:d0:30:96:f1:c4:82:1c:af:94:4e:db:42:36: 7d:48:82:ac:8a:f4:26:f5:98:b2:c4:18:7d:38:b4: ca:02:e0:04:72:7f:0e:5a:60:bb:02:90:5f:25:b9: 08:6d:b4:ab:00:93:50:3a:01:14:bf:ba:4a:a7:c5: 83:de:7e:c8:62:ad:49:58:46:83:cb:d3:f4:f6:d1: 87:e5:69:9c:da:50:2c:3c:fe:0c:53:17:31:51:a8: e8:89:bd:ca:3a:84:87:cf:b0:49:d7:d0:24:a7:d5: b8:4f:30:6c:d6:e1:66:7b:37:44:6e:4f:8d:e1:8e: e1:fb:b8:71:db:b9:27:7e:3e:7d:b3:1b:f3:aa:c6: 8a:ba:72:92:4c:48:9e:3c:48:b0:01:a5:c1:40:15: e9:b9:9c:fa:c5:ff:75:60:6f:af:79:4a:f8:fd:54: 0f:78:eb:6b:74:82:c6:81:2b:52:66:ff:20:2a:15: 26:ac:3a:00:e0:0c:7a:1d:61:1b:8c:3f:74:f1:66: 9a:ad:11:79:d5:64:30:6c:d7:44:6a:be:25:ea:21: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D0:1E:85:74:D1:48:E3:4B:99:F0:39:93:1B:57:1E:4C:AE:A3:3B X509v3 Authority Key Identifier: keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:9c:79:24:43:b7:2a:4f:eb:4b:e5:3a:82:f9:bb:2a:44:7d: d8:86:24:99:ce:79:f0:5c:2b:76:66:fa:65:96:0a:cc:65:ac: 3c:f7:de:07:3d:8c:78:12:ba:61:f2:69:61:3f:14:c3:df:10: 8c:f6:0a:0f:b4:a3:63:21:63:2b:fc:35:e6:1c:ad:8f:de:57: 0e:e0:e7:93:9a:b1:19:a6:f8:57:f8:62:b1:d5:ba:6a:5d:1d: c2:41:c5:b4:11:08:c8:45:06:fe:fa:8c:ce:0d:ce:49:ca:8a: 97:82:83:cb:82:f7:14:e0:16:ff:37:6d:40:e8:cb:82:d8:36: f7:fe:59:71:13:94:37:10:d2:02:65:b2:ae:3b:a1:73:03:e2: a0:b9:53:9b:d2:5c:95:73:54:5b:63:9c:8e:82:4d:b4:79:0f: 3d:5d:3e:f1:60:82:0d:da:08:0a:03:ab:bb:77:0b:de:2d:41: 20:df:a1:3a:ab:5d:45:3d:63:84:cb:40:48:9f:ef:08:b6:38: 43:b6:11:58:5d:b9:43:b8:cd:13:8e:01:3a:a6:a1:e3:be:db: 39:64:ba:13:f3:21:e6:c8:3a:55:4e:e8:99:27:81:cc:94:00: 58:07:92:1e:68:b5:a3:fb:16:70:6a:9f:09:f9:99:e9:1e:26: 53:a7:7a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPTf6EPYoUMuWGYHjzuL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkM2RiZDVmYzZmOTFiODA3YjdiYzRjZjZlNjQ2ZTM0NTg2 MmFmM2UwHhcNMjUxMjI1MDIwMTE5WhcNMjUxMjI2MDIwMTE5WjAzMTEwLwYDVQQD EygxZGQwMWU4NTc0ZDE0OGUzNGI5OWYwMzk5MzFiNTcxZTRjYWVhMzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxYT+JzmfYqpZjxzkU62r4dx0OcI 76WCetb4bToGfYbuF/AgzK2QfeQxl7UjytAwlvHEghyvlE7bQjZ9SIKsivQm9Ziy xBh9OLTKAuAEcn8OWmC7ApBfJbkIbbSrAJNQOgEUv7pKp8WD3n7IYq1JWEaDy9P0 9tGH5Wmc2lAsPP4MUxcxUajoib3KOoSHz7BJ19Akp9W4TzBs1uFmezdEbk+N4Y7h +7hx27knfj59sxvzqsaKunKSTEiePEiwAaXBQBXpuZz6xf91YG+veUr4/VQPeOtr dILGgStSZv8gKhUmrDoA4Ax6HWEbjD908WaarRF51WQwbNdEar4l6iHOzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3QHoV00UjjS5nwOZMbVx5MrqM7MB8GA1UdIwQY MBaAFM09vV/G+RuAe3vEz25kbjRYYq8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNGI5MzMtN2UzNC00YTg3LWIyMTUt OGNhYWQzZTMxYWRjLzEvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xNGI5MzMtN2UzNC00YTg3LWIyMTUtOGNhYWQzZTMxYWRj LzEvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5x5JEO3 Kk/rS+U6gvm7KkR92IYkmc558Fwrdmb6ZZYKzGWsPPfeBz2MeBK6YfJpYT8Uw98Q jPYKD7SjYyFjK/w15hytj95XDuDnk5qxGab4V/hisdW6al0dwkHFtBEIyEUG/vqM zg3OScqKl4KDy4L3FOAW/zdtQOjLgtg29/5ZcROUNxDSAmWyrjuhcwPioLlTm9Jc lXNUW2OcjoJNtHkPPV0+8WCCDdoICgOru3cL3i1BIN+hOqtdRT1jhMtASJ/vCLY4 Q7YRWF25Q7jNE44BOqah477bOWS6E/Mh5sg6VU7omSeBzJQAWAeSHmi1o/sWcGqf CfmZ6R4mU6d6fA== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:11 2025 by rpki-client