This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json) Hash identifier: cVx/Cl8Y85xZJq3tZMaKeOqGBgrD7ES//WIgkzISgVg= Subject key identifier: DD:D4:35:5A:AE:BA:A6:1C:DD:AA:6F:D8:8E:CA:2C:3D:27:4E:5C:D1 Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76 Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876 Certificate serial: 019B679F8405442E859F31E9479C30741406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 01:01:05 +0000 Manifest this update: Mon 29 Dec 2025 01:01:05 +0000 Manifest next update: Tue 30 Dec 2025 01:01:05 +0000 Files and hashes: 1: E_L2oklniQj05pWuM0xgBEBv9Z0.roa (hash: vggfw58sjlCL17O/pPVvpJxnAr4298gihw1aekiLNHY=) 2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: Eim9UXmdxtfeoY8bhHXhdkVLb0UxIj+/LpPa1wT8g70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:9f:84:05:44:2e:85:9f:31:e9:47:9c:30:74:14:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876 Validity Not Before: Dec 29 01:01:05 2025 GMT Not After : Dec 30 01:01:05 2025 GMT Subject: CN=ddd4355aaebaa61cddaa6fd88eca2c3d274e5cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:bc:2a:0e:6f:c5:3f:4e:a7:d1:85:d2:10: 93:5a:34:3b:5e:b8:71:e2:b7:19:76:fc:bd:85:b7: e6:df:27:7e:c3:59:dd:90:35:11:ae:db:a5:32:d0: d7:8a:cc:68:58:58:b2:02:8a:13:ac:45:1c:35:7b: 72:4c:75:31:b1:18:a1:e6:7d:84:f4:5d:02:68:ce: b5:13:48:42:e6:99:06:0a:27:a4:00:e9:47:1e:42: ae:90:b5:14:e9:d2:53:b9:46:1d:bf:8f:c8:90:04: 64:36:ab:0a:c7:32:39:dc:8d:9b:13:ee:6f:86:a9: 03:32:dc:d3:ae:b5:9f:25:2d:68:97:87:cd:63:8f: f9:3d:8b:84:a2:9e:5f:53:a4:d9:99:fe:57:b5:46: 91:8a:2b:97:e5:65:8f:5f:43:21:65:33:9d:b1:fb: 34:e4:86:d3:76:b6:27:bf:37:eb:c6:03:15:3f:ee: c5:eb:90:78:9b:60:e9:39:0a:01:7a:3f:1f:a5:47: e9:f2:0c:e0:23:dc:b3:d2:f3:ff:0c:67:d4:c1:59: 5c:e7:08:9c:a6:11:4b:80:5e:6b:f9:a0:8a:15:ab: 79:5d:ce:9a:d5:2c:a6:62:25:fe:30:f6:be:5e:ad: 2e:65:f2:68:4b:5f:cd:fb:67:19:ff:85:d1:8a:f4: e7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D4:35:5A:AE:BA:A6:1C:DD:AA:6F:D8:8E:CA:2C:3D:27:4E:5C:D1 X509v3 Authority Key Identifier: keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b2:5b:48:c3:32:66:22:e0:63:c2:1c:e0:b9:33:e4:58:45: 1b:ea:ce:61:05:4d:f0:ba:98:9d:ab:d9:6b:31:60:c6:e4:ae: 02:c1:52:3f:0b:a6:ae:50:1c:48:81:36:e1:bd:ec:6b:53:e3: d7:d7:cd:b2:7b:66:73:96:75:34:a2:b3:d2:7b:2d:1c:88:d6: b6:20:9e:94:1e:f4:4d:dc:39:a7:35:f9:c3:aa:02:07:53:79: ba:41:6a:a1:42:1e:6b:25:6a:df:85:73:61:05:b7:1b:37:5c: fc:b6:50:f6:88:15:9d:44:25:67:0d:62:8e:8d:3e:4d:11:45: 06:44:f8:d0:e0:6e:8e:cb:91:46:65:28:11:15:3b:71:72:c0: 7f:4a:5b:a9:a5:f2:93:d3:ea:da:92:e7:14:f0:35:4c:ff:75: 21:e4:ef:dd:ca:51:ae:f0:87:d0:91:62:8d:32:8a:5a:8c:ea: 20:77:0e:00:49:d0:99:6a:f3:91:27:db:3d:dc:44:ba:f1:05: 64:b2:45:40:67:5d:04:26:e5:4b:69:c2:e8:33:13:aa:fb:4c: 14:3b:bf:2c:e4:ae:80:4f:02:6c:2a:5c:bf:9a:ba:6a:d5:9c: 66:28:b9:d5:1f:da:07:cb:30:a6:ff:8e:37:e4:91:9d:8b:80: 31:cf:1b:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnn4QFRC6FnzHpR5wwdBQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OTZmYjg5YThhMjNjYmU0ZjJhZGIxNjVjODlmMjZkZThh Yjc4NzYwHhcNMjUxMjI5MDEwMTA1WhcNMjUxMjMwMDEwMTA1WjAzMTEwLwYDVQQD EyhkZGQ0MzU1YWFlYmFhNjFjZGRhYTZmZDg4ZWNhMmMzZDI3NGU1Y2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDG8Kg5vxT9Op9GF0hCTWjQ7Xrhx 4rcZdvy9hbfm3yd+w1ndkDURrtulMtDXisxoWFiyAooTrEUcNXtyTHUxsRih5n2E 9F0CaM61E0hC5pkGCiekAOlHHkKukLUU6dJTuUYdv4/IkARkNqsKxzI53I2bE+5v hqkDMtzTrrWfJS1ol4fNY4/5PYuEop5fU6TZmf5XtUaRiiuX5WWPX0MhZTOdsfs0 5IbTdrYnvzfrxgMVP+7F65B4m2DpOQoBej8fpUfp8gzgI9yz0vP/DGfUwVlc5wic phFLgF5r+aCKFat5Xc6a1SymYiX+MPa+Xq0uZfJoS1/N+2cZ/4XRivTnewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3UNVquuqYc3apv2I7KLD0nTlzRMB8GA1UdIwQY MBaAFGWW+4moojy+TyrbFlyJ8m3oq3h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUt MjAyZTE5YzA4OGIxLzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUtMjAyZTE5YzA4OGIx LzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILJbSMMy ZiLgY8Ic4Lkz5FhFG+rOYQVN8LqYnavZazFgxuSuAsFSPwumrlAcSIE24b3sa1Pj 19fNsntmc5Z1NKKz0nstHIjWtiCelB70Tdw5pzX5w6oCB1N5ukFqoUIeayVq34Vz YQW3Gzdc/LZQ9ogVnUQlZw1ijo0+TRFFBkT40OBujsuRRmUoERU7cXLAf0pbqaXy k9Pq2pLnFPA1TP91IeTv3cpRrvCH0JFijTKKWozqIHcOAEnQmWrzkSfbPdxEuvEF ZLJFQGddBCblS2nC6DMTqvtMFDu/LOSugE8CbCpcv5q6atWcZii51R/aB8swpv+O N+SRnYuAMc8bxA== -----END CERTIFICATE-----Generated at Mon Dec 29 06:10:09 2025 by rpki-client