This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json) Hash identifier: ZxTqIYCFCnHDOqXLzMLGfao2cu30JOdOg+Rf6PfC9wA= Subject key identifier: 7A:C3:73:3F:66:56:C6:B7:FB:0E:C0:C0:19:8F:37:20:F5:3C:6A:E8 Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a Certificate serial: 019B330CC429CBAF0596164C0474B852E252 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 20:00:33 +0000 Manifest this update: Thu 18 Dec 2025 20:00:33 +0000 Manifest next update: Fri 19 Dec 2025 20:00:33 +0000 Files and hashes: 1: cvViwCnJHbOmjnS2VIR4xe7m6w0.roa (hash: fo4ubxrjnffY7zW1GcJNKmk2YbysHvDvLAY+YQK8Gj8=) 2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: esPwxa/YmHkKJozvr0Z8SY3UekpiQqNLVAUI3OgxhBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:c4:29:cb:af:05:96:16:4c:04:74:b8:52:e2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a Validity Not Before: Dec 18 20:00:33 2025 GMT Not After : Dec 19 20:00:33 2025 GMT Subject: CN=7ac3733f6656c6b7fb0ec0c0198f3720f53c6ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:14:f7:13:d4:f6:33:8b:4e:35:5b:12:29: d0:59:8a:ec:e5:95:da:04:1f:e0:87:1c:78:40:4c: 16:f4:12:e7:33:04:25:79:9c:d2:be:c3:c5:40:d3: ba:91:5d:f9:03:2e:2c:1e:e0:5d:96:1e:dd:46:66: 0d:35:79:f0:3a:38:18:58:f6:90:3b:81:f6:37:bf: 8f:87:57:96:68:9a:b8:24:af:f0:11:8b:72:83:49: 42:4f:03:37:b6:65:82:4d:8b:6e:4c:f0:43:3b:51: 31:7f:e9:d2:16:84:49:8c:bf:3e:87:50:1c:e9:1f: 95:50:65:9e:2c:28:ac:72:26:af:d5:1d:c6:62:60: 40:4c:87:71:18:ce:87:70:57:51:ad:2b:bf:de:a4: 24:e7:4f:bc:f8:19:1e:1f:e5:e2:95:a9:9f:71:a8: b2:e1:dc:fb:f6:27:90:38:2e:79:56:10:30:56:a4: 9b:57:a6:83:a3:77:1f:bd:4e:2f:9c:73:da:2a:3d: 9a:ca:d7:f4:a7:4d:f9:93:4a:e7:bf:1a:af:49:6b: a1:65:c9:45:7b:5c:0d:12:aa:a8:6f:cb:f8:14:6e: 42:a9:b5:39:ca:57:cd:ad:8f:2d:60:b8:21:b5:07: cc:d1:ce:b2:ef:19:0d:49:05:cd:9a:f7:24:6a:86: 46:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C3:73:3F:66:56:C6:B7:FB:0E:C0:C0:19:8F:37:20:F5:3C:6A:E8 X509v3 Authority Key Identifier: keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d3:a8:b4:07:c5:62:44:80:13:3d:fb:63:7f:f5:e9:60:21: 1a:8e:49:46:48:aa:9f:43:f6:9e:fa:5c:6b:2e:6c:3d:09:76: cd:98:67:55:e4:df:ce:c8:5b:8a:f3:98:af:55:56:c2:e4:62: ca:d1:29:df:1f:76:b0:ff:2c:7c:91:4a:21:53:e5:6f:d2:2f: a4:32:2c:72:72:da:5a:33:d7:95:45:09:e7:ef:91:ad:95:4d: 64:45:11:77:1e:3c:bd:92:61:87:26:2c:d9:6f:c3:92:3a:8d: a8:f9:d0:45:b8:fd:db:6c:9b:35:64:52:28:87:93:32:77:dd: 3d:83:0d:71:cc:21:51:1e:5c:29:a1:da:a5:eb:e8:6d:a1:5b: cf:ce:82:e7:b4:6e:47:63:64:50:a3:f4:50:dc:e1:58:49:8d: 1a:57:06:4b:0f:44:f9:a0:cb:38:5f:e9:21:d6:ad:e7:c8:f6: ee:50:7e:23:19:cb:04:e1:0b:4d:5a:4e:b4:cf:57:ab:ec:0f: b8:fb:dd:f9:1d:68:13:07:86:41:01:6b:13:24:2e:54:ec:ae: 94:3c:66:a9:21:dd:4c:19:8b:eb:cf:90:43:63:67:23:8c:8f: 50:72:f9:0f:a1:ed:08:a3:1f:24:b3:9b:eb:75:b3:be:e3:7a: 07:86:bc:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDMQpy68FlhZMBHS4UuJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMzIzMTYzYmJiNDY1ZjJhMGZhMmY5M2ZhNTBlZjNiMGQ0 YzZhOWEwHhcNMjUxMjE4MjAwMDMzWhcNMjUxMjE5MjAwMDMzWjAzMTEwLwYDVQQD Eyg3YWMzNzMzZjY2NTZjNmI3ZmIwZWMwYzAxOThmMzcyMGY1M2M2YWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQUU9xPU9jOLTjVbEinQWYrs5ZXa BB/ghxx4QEwW9BLnMwQleZzSvsPFQNO6kV35Ay4sHuBdlh7dRmYNNXnwOjgYWPaQ O4H2N7+Ph1eWaJq4JK/wEYtyg0lCTwM3tmWCTYtuTPBDO1Exf+nSFoRJjL8+h1Ac 6R+VUGWeLCisciav1R3GYmBATIdxGM6HcFdRrSu/3qQk50+8+BkeH+Xilamfcaiy 4dz79ieQOC55VhAwVqSbV6aDo3cfvU4vnHPaKj2aytf0p035k0rnvxqvSWuhZclF e1wNEqqob8v4FG5CqbU5ylfNrY8tYLghtQfM0c6y7xkNSQXNmvckaoZGkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrDcz9mVsa3+w7AwBmPNyD1PGroMB8GA1UdIwQY MBaAFMwyMWO7tGXyoPovk/pQ7zsNTGqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTIt MWVmMDA5MGI3MTU0LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTItMWVmMDA5MGI3MTU0 LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNOotAfF YkSAEz37Y3/16WAhGo5JRkiqn0P2nvpcay5sPQl2zZhnVeTfzshbivOYr1VWwuRi ytEp3x92sP8sfJFKIVPlb9IvpDIscnLaWjPXlUUJ5++RrZVNZEURdx48vZJhhyYs 2W/DkjqNqPnQRbj922ybNWRSKIeTMnfdPYMNccwhUR5cKaHapevobaFbz86C57Ru R2NkUKP0UNzhWEmNGlcGSw9E+aDLOF/pIdat58j27lB+IxnLBOELTVpOtM9Xq+wP uPvd+R1oEweGQQFrEyQuVOyulDxmqSHdTBmL68+QQ2NnI4yPUHL5D6HtCKMfJLOb 63WzvuN6B4a8zg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:51 2025 by rpki-client