This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft File: zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json) Hash identifier: tDPUuyAlnaGOQFFPs4Y2wHBdTtedTXmdEZA8Dv4rquM= Subject key identifier: 25:FC:9B:82:D0:C7:DD:7D:82:50:06:B0:62:CC:62:3F:6E:82:A5:43 Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d Certificate serial: 019B3DC7A9BD1C29AD37DF9492A6AA6C03BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft Manifest number: 033D Signing time: Sat 20 Dec 2025 22:00:53 +0000 Manifest this update: Sat 20 Dec 2025 22:00:53 +0000 Manifest next update: Sun 21 Dec 2025 22:00:53 +0000 Files and hashes: 1: 8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa (hash: WhyrbQbNYw+ibwL1fIGjF77XjkxU2NCmWVAW1D5cDrM=) 2: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: 3xZ+oeI10lj7sk56QFOGSRd2odrS2kV3OJacmkx392I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:a9:bd:1c:29:ad:37:df:94:92:a6:aa:6c:03:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d Validity Not Before: Dec 20 22:00:53 2025 GMT Not After : Dec 21 22:00:53 2025 GMT Subject: CN=25fc9b82d0c7dd7d825006b062cc623f6e82a543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:65:52:96:ac:c4:c8:9b:01:6b:11:77:40:2a: f3:3e:2a:46:66:16:f8:5e:db:bd:a0:0a:d1:16:11: e7:ba:ac:b5:2d:96:77:19:65:c8:ee:7e:c9:b0:ba: 9d:75:13:ca:4d:cd:a7:6e:59:67:02:ef:cf:06:b9: 7d:72:c1:4d:ed:56:c7:5f:8d:e6:25:57:b4:4d:d9: 32:69:94:a4:03:f1:90:dc:45:2a:0f:5e:5a:71:33: 5d:34:1a:c2:7f:44:78:05:7b:8f:85:03:6d:5d:24: ce:47:d9:c8:7c:23:e1:b1:fb:c7:b9:c6:cb:94:55: 69:5e:06:ed:b4:33:c0:ce:9c:27:46:ca:6a:69:3a: 8e:ca:3d:76:2d:12:95:e0:30:a5:ae:38:79:26:51: a9:1d:74:df:b3:b3:17:9c:0f:81:91:d9:eb:5a:1b: df:16:2f:6e:b8:05:f8:17:53:97:2e:ef:14:1a:d3: a2:da:f5:33:d8:29:2e:26:0b:05:b4:7a:86:38:8a: 5c:12:25:77:e1:c8:cc:b6:86:69:b4:7d:c8:f2:5b: 4c:29:1b:88:8a:b2:2b:73:41:ec:13:ee:f2:62:05: e9:19:b3:a4:72:21:e0:68:57:e1:62:37:3e:2c:f3: 9b:7c:fb:bb:71:e7:21:8b:67:6a:89:d7:92:a4:c7: 90:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FC:9B:82:D0:C7:DD:7D:82:50:06:B0:62:CC:62:3F:6E:82:A5:43 X509v3 Authority Key Identifier: keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:5c:a0:69:45:f4:a9:d8:f5:22:4a:44:f4:0a:63:a8:62:ec: c3:0c:7f:a0:e8:5f:49:39:cc:dd:c9:e9:1f:8f:ad:b7:63:b7: 44:a4:a8:69:26:6b:e1:03:18:fa:67:c7:b8:a6:ef:4f:9a:b3: 82:54:f2:2a:6b:c1:b5:7d:b1:4e:0a:d4:7b:4e:4d:87:93:98: 57:ff:80:31:5d:ce:ac:1c:18:cc:7f:34:1f:c8:e4:e0:62:c5: 6b:04:64:22:18:b1:f4:48:e0:bc:97:78:85:15:d3:3f:46:86: 70:83:0b:5e:f4:0e:28:3c:f8:a5:ae:ec:9d:f5:49:66:f1:b5: 96:fe:fa:78:56:34:db:5e:2a:13:09:30:e9:5a:19:cd:fc:99: 07:e7:5f:54:29:6a:2a:01:6a:8f:a3:c4:9b:c6:d4:54:51:fe: 0b:79:26:f3:42:db:10:ad:0b:01:cb:44:2a:1c:34:ca:60:04: d9:e0:06:d5:c7:3f:aa:4f:1a:4f:87:f7:70:7a:48:51:76:6e: 41:2b:87:53:b0:20:9f:0b:27:77:d5:17:0c:7a:e7:ed:47:45: 59:d3:73:87:48:56:0c:13:a9:48:4c:dc:55:16:d3:e9:df:55: 61:ff:61:3a:a1:16:1f:3f:7d:18:83:c2:4a:ad:49:8e:b3:e9: 76:8b:7d:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x6m9HCmtN9+UkqaqbAO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOTgxNmNhZmZmYTU2MjYzZGQwZDc0ODE5Yzk0ZDU0MDJm MWJiNmQwHhcNMjUxMjIwMjIwMDUzWhcNMjUxMjIxMjIwMDUzWjAzMTEwLwYDVQQD EygyNWZjOWI4MmQwYzdkZDdkODI1MDA2YjA2MmNjNjIzZjZlODJhNTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GVSlqzEyJsBaxF3QCrzPipGZhb4 Xtu9oArRFhHnuqy1LZZ3GWXI7n7JsLqddRPKTc2nbllnAu/PBrl9csFN7VbHX43m JVe0TdkyaZSkA/GQ3EUqD15acTNdNBrCf0R4BXuPhQNtXSTOR9nIfCPhsfvHucbL lFVpXgbttDPAzpwnRspqaTqOyj12LRKV4DClrjh5JlGpHXTfs7MXnA+BkdnrWhvf Fi9uuAX4F1OXLu8UGtOi2vUz2CkuJgsFtHqGOIpcEiV34cjMtoZptH3I8ltMKRuI irIrc0HsE+7yYgXpGbOkciHgaFfhYjc+LPObfPu7cechi2dqideSpMeQdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCX8m4LQx919glAGsGLMYj9ugqVDMB8GA1UdIwQY MBaAFMyYFsr/+lYmPdDXSBnJTVQC8bttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80MDdhM2YtNjZjMC00OTc5LWE3MjUt MDllYjAwMTNmYzI0LzEvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni80MDdhM2YtNjZjMC00OTc5LWE3MjUtMDllYjAwMTNmYzI0 LzEvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFygaUX0 qdj1IkpE9ApjqGLswwx/oOhfSTnM3cnpH4+tt2O3RKSoaSZr4QMY+mfHuKbvT5qz glTyKmvBtX2xTgrUe05Nh5OYV/+AMV3OrBwYzH80H8jk4GLFawRkIhix9EjgvJd4 hRXTP0aGcIMLXvQOKDz4pa7snfVJZvG1lv76eFY0214qEwkw6VoZzfyZB+dfVClq KgFqj6PEm8bUVFH+C3km80LbEK0LActEKhw0ymAE2eAG1cc/qk8aT4f3cHpIUXZu QSuHU7Agnwsnd9UXDHrn7UdFWdNzh0hWDBOpSEzcVRbT6d9VYf9hOqEWHz99GIPC Sq1JjrPpdot9sw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:23:00 2025 by rpki-client