This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft File: zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json) Hash identifier: mTbqVvOOAiyabwEAMSebIqASe/J7qJ68b41hMX6v7UU= Subject key identifier: C9:D5:3D:AD:5B:F1:66:EA:D8:06:11:6B:AC:00:6C:FE:F2:F3:EA:D8 Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80 Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480 Certificate serial: 019B533D083DD61082166ECEE15807061C9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft Manifest number: 0C89 Signing time: Thu 25 Dec 2025 02:01:07 +0000 Manifest this update: Thu 25 Dec 2025 02:01:07 +0000 Manifest next update: Fri 26 Dec 2025 02:01:07 +0000 Files and hashes: 1: VEgZIBYWjoldzkGuakwy0OuiD_g.roa (hash: /UHAw/sksRIzZ9d6cBH90oCHv9WV9PgycAVZrQjs45g=) 2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: qVnyBc0WNG8W7HEfgnx9KrCFZvxCFPOy8A01VSMc/Qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 02:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:08:3d:d6:10:82:16:6e:ce:e1:58:07:06:1c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480 Validity Not Before: Dec 25 02:01:07 2025 GMT Not After : Dec 26 02:01:07 2025 GMT Subject: CN=c9d53dad5bf166ead806116bac006cfef2f3ead8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:a2:08:e5:9e:25:0d:d6:ce:f3:d3:10:5a: 40:ec:b0:64:1f:c3:b9:d5:de:f7:87:01:24:41:bb: 5c:42:99:a0:68:29:03:b8:2f:4e:c9:25:93:1c:f4: b2:cc:4e:a8:b9:66:f3:79:63:41:d5:bf:81:24:41: aa:b8:41:35:36:d0:bb:00:28:20:cf:b8:0e:0a:a5: 1c:41:06:2c:3d:12:99:e5:ac:6b:1c:8f:f2:57:25: b4:48:54:91:97:0f:49:de:54:39:6b:31:70:dd:d8: 63:20:ca:20:b0:c5:28:d4:34:84:be:01:05:cc:c9: de:cc:d7:df:82:66:78:85:30:10:9f:d1:80:06:26: 3e:93:e1:3a:28:19:45:d1:64:1c:19:9d:2e:f8:5e: 4e:f0:9c:7b:cc:73:4d:9e:80:0e:02:7f:2b:33:5e: 9b:cd:46:53:bc:c5:85:ce:dd:9f:c8:33:1e:0b:03: dd:a5:2c:d6:b8:d6:bb:ac:06:69:82:79:d9:3e:63: 6b:90:16:58:b9:62:78:5e:32:32:17:a7:8f:ce:ba: 9a:fe:40:b6:4e:ac:e2:25:b0:54:0e:30:40:d6:0b: 38:62:64:21:be:c5:a8:bf:fb:c5:37:52:86:99:34: d3:69:e8:47:b5:cd:9b:98:80:7b:c7:6e:64:72:9a: 69:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D5:3D:AD:5B:F1:66:EA:D8:06:11:6B:AC:00:6C:FE:F2:F3:EA:D8 X509v3 Authority Key Identifier: keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fb:28:6b:ea:32:7c:35:4b:31:ae:49:12:0f:07:58:65:5c: a3:e1:87:cf:00:44:10:06:9b:bc:9a:59:0f:5c:da:04:86:c3: 54:67:8f:ba:95:4d:79:cd:fa:d0:cf:73:53:26:c4:f5:a3:03: b0:b1:7a:67:e5:50:84:f4:d7:13:73:61:85:66:79:1a:be:99: 4b:73:a9:91:56:59:a6:aa:d1:6e:be:cb:ed:36:bb:8b:5e:9b: cd:47:70:3c:f2:80:c1:83:03:26:e7:f8:80:2c:bc:79:71:0c: d1:f7:fc:89:e8:7e:14:42:22:2b:e4:6e:55:0c:43:fb:49:43: 94:03:cc:b1:c3:e3:df:bc:77:6b:77:74:3b:33:18:3d:94:55: e8:58:0d:56:01:74:e8:2c:6f:60:0f:d2:bf:84:3c:4d:a3:53: f0:b3:41:18:7e:2e:2b:34:3e:5e:c5:04:cc:5b:86:f6:01:7f: e3:3f:07:fb:7e:22:5c:99:07:bb:89:da:1c:d8:11:21:5f:f3: 9f:d2:32:c7:81:ce:8c:5c:e9:02:af:c8:87:d0:92:47:0d:38: 21:91:96:83:d7:98:0e:78:62:40:cd:69:2b:38:3a:83:bb:4a: 34:ef:3b:3b:76:9b:9d:be:8f:77:a7:14:29:cc:4a:af:5f:b4: 83:64:7b:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPQg91hCCFm7O4VgHBhyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjUxYTdiNGM1YjI0NTgwMjkyYjhjNGFhNmFhOWMzMjU2 NjU0ODAwHhcNMjUxMjI1MDIwMTA3WhcNMjUxMjI2MDIwMTA3WjAzMTEwLwYDVQQD EyhjOWQ1M2RhZDViZjE2NmVhZDgwNjExNmJhYzAwNmNmZWYyZjNlYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5eiCOWeJQ3WzvPTEFpA7LBkH8O5 1d73hwEkQbtcQpmgaCkDuC9OySWTHPSyzE6ouWbzeWNB1b+BJEGquEE1NtC7ACgg z7gOCqUcQQYsPRKZ5axrHI/yVyW0SFSRlw9J3lQ5azFw3dhjIMogsMUo1DSEvgEF zMnezNffgmZ4hTAQn9GABiY+k+E6KBlF0WQcGZ0u+F5O8Jx7zHNNnoAOAn8rM16b zUZTvMWFzt2fyDMeCwPdpSzWuNa7rAZpgnnZPmNrkBZYuWJ4XjIyF6ePzrqa/kC2 TqziJbBUDjBA1gs4YmQhvsWov/vFN1KGmTTTaehHtc2bmIB7x25kcppp6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnVPa1b8Wbq2AYRa6wAbP7y8+rYMB8GA1UdIwQY MBaAFM31GntMWyRYApK4xKpqqcMlZlSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yNzI5ODYtODhhOS00NzdjLWEyNzct YTU1YjU4MGIwZWEzLzEvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8yNzI5ODYtODhhOS00NzdjLWEyNzctYTU1YjU4MGIwZWEz LzEvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvsoa+oy fDVLMa5JEg8HWGVco+GHzwBEEAabvJpZD1zaBIbDVGePupVNec360M9zUybE9aMD sLF6Z+VQhPTXE3NhhWZ5Gr6ZS3OpkVZZpqrRbr7L7Ta7i16bzUdwPPKAwYMDJuf4 gCy8eXEM0ff8ieh+FEIiK+RuVQxD+0lDlAPMscPj37x3a3d0OzMYPZRV6FgNVgF0 6CxvYA/Sv4Q8TaNT8LNBGH4uKzQ+XsUEzFuG9gF/4z8H+34iXJkHu4naHNgRIV/z n9Iyx4HOjFzpAq/Ih9CSRw04IZGWg9eYDnhiQM1pKzg6g7tKNO87O3abnb6Pd6cU KcxKr1+0g2R7Ag== -----END CERTIFICATE-----Generated at Thu Dec 25 11:01:34 2025 by rpki-client