This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json) Hash identifier: Bc3FftkHCoS9aHckued8VLwP/mJm8C/mNWgM2M4Y1ic= Subject key identifier: E0:44:42:2D:E7:F9:C1:60:A5:0B:CD:92:2A:27:1B:59:E6:AA:C1:C0 Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08 Certificate serial: 019B39B3C165C3BD76F73CEE6053AFAC2784 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 03:00:40 +0000 Manifest this update: Sat 20 Dec 2025 03:00:40 +0000 Manifest next update: Sun 21 Dec 2025 03:00:40 +0000 Files and hashes: 1: Q47WtOQCnZpCmGtfa6Ew40Gy4MM.roa (hash: duMBQWWRYKd9t18S6r0lV3zHXTUBGHlTePHIZBRiz1Q=) 2: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: 2PyUyYVNPvgeZVfO45K6PcmDabGAywfgqiCd7VHrlQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:c1:65:c3:bd:76:f7:3c:ee:60:53:af:ac:27:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08 Validity Not Before: Dec 20 03:00:40 2025 GMT Not After : Dec 21 03:00:40 2025 GMT Subject: CN=e044422de7f9c160a50bcd922a271b59e6aac1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c3:a6:51:36:73:ae:57:f4:37:9d:4a:ed:fb: d2:1b:44:87:1e:de:b4:1f:7a:8a:ab:7a:07:c1:50: 92:7a:6c:f4:f0:88:6a:87:6c:0b:71:36:67:a7:f0: b7:3c:44:44:ed:8f:4c:be:77:fd:74:f6:28:3a:d1: 98:05:5c:b6:27:e7:e0:f3:6e:c0:70:b3:ec:f4:f6: a3:6c:05:fb:cb:18:8c:c3:d8:d0:e5:42:f3:97:c8: 82:db:41:64:c8:cc:88:80:39:12:94:ea:db:df:c4: 96:95:ff:ac:fb:f5:f0:94:a9:55:1d:f9:ae:fe:2b: 16:46:e6:bc:99:1b:68:eb:a9:c8:20:48:43:dd:fc: f1:ee:39:0e:fc:f6:97:56:d2:bf:a7:66:40:e6:a7: 7e:06:b7:7c:2b:3f:b2:04:e1:7b:ae:a7:10:21:b7: 0e:39:4e:bf:c9:bb:e5:6c:38:e7:56:77:34:ac:9f: a4:ed:e2:24:10:23:72:6f:7d:e6:05:e0:e6:78:87: 46:38:d9:e1:2d:58:4e:b1:3d:2c:6b:18:97:21:e2: 9b:2e:af:c4:3f:2e:c0:c6:c6:07:c4:2e:cc:69:a7: c4:bf:00:5c:d3:bf:08:12:75:e9:aa:d9:71:14:5d: 13:be:27:90:76:fb:1e:7d:a0:09:6f:61:e7:a5:99: 82:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:44:42:2D:E7:F9:C1:60:A5:0B:CD:92:2A:27:1B:59:E6:AA:C1:C0 X509v3 Authority Key Identifier: keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:03:1c:d2:d2:c9:00:00:4d:5f:e9:d3:6b:66:a2:8a:83:95: 96:5f:5b:36:a5:0a:3a:77:87:1f:58:d4:41:8d:d7:d7:ac:7e: 8b:34:11:64:a3:33:b1:33:7d:58:51:f7:db:7b:9f:07:62:a4: cc:20:e9:ba:f2:75:4b:6a:89:77:cc:99:eb:b0:2a:03:ef:e5: f1:63:9e:f3:cd:40:44:39:94:db:bd:2f:50:72:f4:9c:f1:a7: 68:d2:a8:93:7c:28:63:e5:11:1f:51:14:b2:6c:4c:88:b2:b8: 97:63:44:8f:35:97:c4:38:03:7e:0c:e1:3e:20:f2:aa:ac:86: 8a:de:56:17:2c:62:08:f2:50:d5:ce:06:b4:c1:ff:1d:76:25: aa:c2:8d:c3:9a:dd:83:71:91:31:16:36:96:94:9c:00:e5:fc: d5:0c:3f:f7:b3:29:b0:f2:74:56:d8:94:3b:3f:1f:2e:c5:b4: 73:5e:e6:a6:00:e2:d6:1b:03:2b:69:f6:96:99:8c:87:e1:bf: 07:7e:d6:7d:d4:0e:a6:5d:f6:03:6b:48:df:b8:80:1d:f6:1b: 22:84:ac:a8:96:7d:8b:23:19:d8:38:7d:73:43:49:5f:de:06: 40:61:0f:dc:36:e6:48:9d:6d:d5:f6:46:16:3b:63:67:83:b4: e1:21:f5:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s8Flw7129zzuYFOvrCeEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTIxYzNmOTIwN2EzNzM0NWUzODcwMmM4OWQxNzliZjQ0 NGFhMDgwHhcNMjUxMjIwMDMwMDQwWhcNMjUxMjIxMDMwMDQwWjAzMTEwLwYDVQQD EyhlMDQ0NDIyZGU3ZjljMTYwYTUwYmNkOTIyYTI3MWI1OWU2YWFjMWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8OmUTZzrlf0N51K7fvSG0SHHt60 H3qKq3oHwVCSemz08Ihqh2wLcTZnp/C3PERE7Y9Mvnf9dPYoOtGYBVy2J+fg827A cLPs9PajbAX7yxiMw9jQ5ULzl8iC20FkyMyIgDkSlOrb38SWlf+s+/XwlKlVHfmu /isWRua8mRto66nIIEhD3fzx7jkO/PaXVtK/p2ZA5qd+Brd8Kz+yBOF7rqcQIbcO OU6/ybvlbDjnVnc0rJ+k7eIkECNyb33mBeDmeIdGONnhLVhOsT0saxiXIeKbLq/E Py7AxsYHxC7MaafEvwBc078IEnXpqtlxFF0TvieQdvsefaAJb2HnpZmCeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBEQi3n+cFgpQvNkionG1nmqsHAMB8GA1UdIwQY MBaAFGUSHD+SB6NzReOHAsidF5v0RKoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYt NDhkM2NhMTYxYmIwLzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYtNDhkM2NhMTYxYmIw LzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAMc0tLJ AABNX+nTa2aiioOVll9bNqUKOneHH1jUQY3X16x+izQRZKMzsTN9WFH323ufB2Kk zCDpuvJ1S2qJd8yZ67AqA+/l8WOe881ARDmU270vUHL0nPGnaNKok3woY+URH1EU smxMiLK4l2NEjzWXxDgDfgzhPiDyqqyGit5WFyxiCPJQ1c4GtMH/HXYlqsKNw5rd g3GRMRY2lpScAOX81Qw/97MpsPJ0VtiUOz8fLsW0c17mpgDi1hsDK2n2lpmMh+G/ B37WfdQOpl32A2tI37iAHfYbIoSsqJZ9iyMZ2Dh9c0NJX94GQGEP3DbmSJ1t1fZG FjtjZ4O04SH11Q== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:00 2025 by rpki-client