This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json) Hash identifier: HKgVe2dtTjoI+egXjFi7zMc6q3ViwTLtVBgfNZhjcVo= Subject key identifier: 19:B9:10:A8:95:AC:06:AD:45:37:59:AC:3C:69:32:B6:DE:5D:0B:8E Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a Certificate serial: 019B4A3988340D0357924D66D397B2E43513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 08:00:43 +0000 Manifest this update: Tue 23 Dec 2025 08:00:43 +0000 Manifest next update: Wed 24 Dec 2025 08:00:43 +0000 Files and hashes: 1: cvViwCnJHbOmjnS2VIR4xe7m6w0.roa (hash: fo4ubxrjnffY7zW1GcJNKmk2YbysHvDvLAY+YQK8Gj8=) 2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: +mkZ6YGsJc7qRI6OZEFW24biM5qSuEoG5ueq+4L+Pxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:88:34:0d:03:57:92:4d:66:d3:97:b2:e4:35:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a Validity Not Before: Dec 23 08:00:43 2025 GMT Not After : Dec 24 08:00:43 2025 GMT Subject: CN=19b910a895ac06ad453759ac3c6932b6de5d0b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:aa:97:ee:e8:6a:c8:f3:6e:8a:f2:3a:fc: eb:8c:93:52:69:f9:69:c2:67:15:64:78:42:3a:d9: 55:63:6a:24:3f:b1:92:d0:92:1a:a4:61:a5:06:9b: 17:91:d0:b0:69:dd:04:35:5f:67:99:7f:8a:ad:ed: d1:a9:5b:0f:cd:82:6a:a4:36:e4:8c:76:e6:b4:15: c7:08:e0:da:ab:5b:c1:ad:5b:c4:73:5d:ba:2e:da: 96:46:a5:dc:3b:4c:15:8d:eb:f9:87:2e:85:92:4a: 4d:24:21:e1:7b:a6:96:78:45:df:20:d4:d7:4c:6e: 18:37:b0:75:b4:11:0d:0c:21:d2:be:cb:ee:b4:62: 1a:bc:45:bb:85:ff:98:12:a6:9d:1a:60:39:c5:21: 68:f3:a8:82:80:79:39:66:a2:a2:fc:9b:5c:45:80: a5:d8:b7:68:8b:36:bf:2d:fb:25:9d:22:51:8e:13: f2:7b:e8:db:e1:02:bb:64:ed:06:db:21:9e:28:af: 7e:1f:1b:22:bf:41:5d:99:43:d0:7b:ef:e4:e9:f1: 96:28:8c:7c:6d:16:e1:4f:6f:61:da:ca:dc:dc:a5: de:cc:ae:23:61:ad:21:37:09:74:6a:18:52:81:8c: 1f:05:8c:71:8f:1d:3f:67:3f:85:bf:cd:2f:a5:6b: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B9:10:A8:95:AC:06:AD:45:37:59:AC:3C:69:32:B6:DE:5D:0B:8E X509v3 Authority Key Identifier: keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:12:41:e8:a0:8d:89:7f:d0:b0:6c:2d:de:52:f2:c9:23:d8: 8a:be:ee:16:9a:c2:db:33:d3:4d:b9:a5:f4:01:3b:cf:de:37: 86:76:66:b7:c3:c4:2e:8c:c1:f2:0f:71:2e:46:89:c2:34:76: 11:d0:d2:13:10:c4:4c:99:ef:58:c6:ea:ae:a2:52:61:86:01: 32:d2:92:26:25:61:34:af:d6:68:d7:2e:06:78:d2:7e:cf:5a: 42:4a:95:00:00:5c:32:f0:f8:64:0d:98:c4:c1:a8:e8:e3:83: 67:2e:10:69:b5:5b:2a:f2:ff:18:b5:2f:f7:5b:3e:6d:a1:10: fb:59:84:6c:1c:37:09:c1:ba:f1:11:c0:bd:7b:e5:d4:39:a4: e5:86:74:82:77:b2:5e:ca:24:99:0a:41:5c:91:35:0b:3e:cc: c3:52:a1:49:19:1d:0b:21:e9:cb:26:11:c1:55:a1:5d:50:38: 77:7f:11:a8:66:94:6c:90:01:ce:6e:ea:a9:f6:e6:fb:7e:8d: dd:96:34:ef:63:e1:a4:6b:a7:d7:55:87:1b:c1:2b:30:df:9f: ba:eb:d0:22:e7:67:d2:23:96:37:ec:eb:5e:ff:72:43:4f:16: aa:ae:24:b0:56:af:05:9e:37:10:54:ed:33:63:a4:d0:df:b7: a7:ff:1d:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOYg0DQNXkk1m05ey5DUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMzIzMTYzYmJiNDY1ZjJhMGZhMmY5M2ZhNTBlZjNiMGQ0 YzZhOWEwHhcNMjUxMjIzMDgwMDQzWhcNMjUxMjI0MDgwMDQzWjAzMTEwLwYDVQQD EygxOWI5MTBhODk1YWMwNmFkNDUzNzU5YWMzYzY5MzJiNmRlNWQwYjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl+ql+7oasjzboryOvzrjJNSaflp wmcVZHhCOtlVY2okP7GS0JIapGGlBpsXkdCwad0ENV9nmX+Kre3RqVsPzYJqpDbk jHbmtBXHCODaq1vBrVvEc126LtqWRqXcO0wVjev5hy6FkkpNJCHhe6aWeEXfINTX TG4YN7B1tBENDCHSvsvutGIavEW7hf+YEqadGmA5xSFo86iCgHk5ZqKi/JtcRYCl 2Ldoiza/LfslnSJRjhPye+jb4QK7ZO0G2yGeKK9+Hxsiv0FdmUPQe+/k6fGWKIx8 bRbhT29h2src3KXezK4jYa0hNwl0ahhSgYwfBYxxjx0/Zz+Fv80vpWvhPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBm5EKiVrAatRTdZrDxpMrbeXQuOMB8GA1UdIwQY MBaAFMwyMWO7tGXyoPovk/pQ7zsNTGqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTIt MWVmMDA5MGI3MTU0LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTItMWVmMDA5MGI3MTU0 LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhJB6KCN iX/QsGwt3lLyySPYir7uFprC2zPTTbml9AE7z943hnZmt8PELozB8g9xLkaJwjR2 EdDSExDETJnvWMbqrqJSYYYBMtKSJiVhNK/WaNcuBnjSfs9aQkqVAABcMvD4ZA2Y xMGo6OODZy4QabVbKvL/GLUv91s+baEQ+1mEbBw3CcG68RHAvXvl1Dmk5YZ0gney XsokmQpBXJE1Cz7Mw1KhSRkdCyHpyyYRwVWhXVA4d38RqGaUbJABzm7qqfbm+36N 3ZY072PhpGun11WHG8ErMN+fuuvQIudn0iOWN+zrXv9yQ08Wqq4ksFavBZ43EFTt M2Ok0N+3p/8dFw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:13:41 2025 by rpki-client