This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft File: ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json) Hash identifier: /5wc8J6BO8ENqAmmmp5K0QX1G8dEPrQH0uvCgl+MK9I= Subject key identifier: 46:ED:5B:B7:25:92:8E:16:32:58:0D:1A:BD:02:37:2C:D2:EF:A8:5D Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67 Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67 Certificate serial: 019B3FB5E8730541E304C953CBB7893259AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 07:00:44 +0000 Manifest this update: Sun 21 Dec 2025 07:00:44 +0000 Manifest next update: Mon 22 Dec 2025 07:00:44 +0000 Files and hashes: 1: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: OvOfwjYSpfMpDX4u/uKQ7yLLP8kVAGyMTquVZyJ6grw=) 2: uq1i3QTcOfr9aoUS3uiTj-7_PxQ.roa (hash: TsR7okYr+7CVrm7zPPpfCJyYKvk1uxkHBTpNsw0aMrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:e8:73:05:41:e3:04:c9:53:cb:b7:89:32:59:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67 Validity Not Before: Dec 21 07:00:44 2025 GMT Not After : Dec 22 07:00:44 2025 GMT Subject: CN=46ed5bb725928e1632580d1abd02372cd2efa85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:68:48:f0:4e:77:54:c6:bd:d4:81:62:4f: 00:f2:14:1d:9e:02:af:b2:b7:80:12:00:17:bc:67: fc:e8:a2:23:c3:b4:33:b7:18:b9:25:ae:2e:ea:07: 47:a3:c5:82:85:2b:7b:07:29:12:28:b4:3a:19:7d: dc:9d:98:48:c5:47:ce:eb:9b:c4:7a:7d:80:6c:5d: a0:35:32:44:ad:89:99:5d:46:9f:8c:03:6e:e6:d7: 6f:02:81:a4:0d:73:c2:84:b2:a4:3c:bb:61:48:bd: 05:bb:d3:51:a8:da:05:fa:22:d9:ac:c4:4b:ae:24: 75:5a:0d:41:b6:d8:41:90:45:94:4e:fa:48:fb:a0: 6e:16:44:31:d5:d4:92:a7:1e:fb:4d:61:0a:6b:cc: 98:42:08:0a:86:04:85:7f:d9:6e:4f:a7:f3:f8:4b: 5b:e7:cd:36:05:82:53:ea:85:a3:33:b3:c2:e5:23: 7a:76:80:5a:a5:f3:6e:17:7a:40:b1:06:d1:f9:a2: ff:3d:56:54:5e:94:32:03:38:68:87:5d:be:f0:66: c6:e6:84:45:cf:c4:31:6a:72:f4:d9:7a:98:35:29: 56:57:ef:58:b0:39:aa:c2:25:f0:94:d8:ca:09:b6: 44:1a:f7:37:c9:25:c8:1a:17:45:5d:0f:fa:f8:49: a9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:ED:5B:B7:25:92:8E:16:32:58:0D:1A:BD:02:37:2C:D2:EF:A8:5D X509v3 Authority Key Identifier: keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a1:29:69:36:4b:87:6d:e0:80:6c:bc:bf:53:87:ac:16:ff: 76:8b:56:de:55:52:b2:28:9a:ac:cd:57:7d:2c:3b:26:30:a1: 4d:98:47:e2:a3:69:74:08:1c:c4:26:d4:30:83:d5:1d:ca:af: 64:84:78:da:32:5e:c5:a1:3a:7e:00:56:03:a2:4f:ea:50:80: a3:9e:c6:7c:df:2e:fb:b0:ef:ca:03:72:17:48:f3:ce:94:81: 64:d6:ad:41:ae:18:a5:42:44:be:db:36:77:ff:33:0d:cd:36: ec:83:7f:3a:cb:3b:e8:49:97:e8:c0:72:9a:ad:05:d8:c1:67: 10:f2:9b:a5:8d:2d:e7:c4:ea:2a:44:8a:58:fd:c3:c8:bb:d1: a9:1b:0b:f3:5f:31:1f:84:b6:18:4e:91:97:16:7d:13:8c:7b: fa:f5:d3:e8:ce:b0:fe:74:17:13:24:c4:a0:2f:38:cd:09:de: 80:48:5f:ac:0c:61:19:56:82:19:21:ab:a6:f7:0c:96:f1:9e: 58:ae:41:e1:3a:2a:76:bd:e8:f3:98:ea:51:e5:48:39:f4:9d: d7:5e:e7:12:43:35:98:be:b4:e5:a7:a0:f0:34:e3:b6:68:af: b1:5b:a3:93:ee:91:cf:e5:e9:de:04:bc:2b:2a:93:e0:57:35: 98:71:70:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tehzBUHjBMlTy7eJMlmqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZGVkODVkOWEwNWIxZGY2ODlhOGI2YzMxM2Y4MTI4Yzdh MDBiNjcwHhcNMjUxMjIxMDcwMDQ0WhcNMjUxMjIyMDcwMDQ0WjAzMTEwLwYDVQQD Eyg0NmVkNWJiNzI1OTI4ZTE2MzI1ODBkMWFiZDAyMzcyY2QyZWZhODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uNoSPBOd1TGvdSBYk8A8hQdngKv sreAEgAXvGf86KIjw7Qztxi5Ja4u6gdHo8WChSt7BykSKLQ6GX3cnZhIxUfO65vE en2AbF2gNTJErYmZXUafjANu5tdvAoGkDXPChLKkPLthSL0Fu9NRqNoF+iLZrMRL riR1Wg1BtthBkEWUTvpI+6BuFkQx1dSSpx77TWEKa8yYQggKhgSFf9luT6fz+Etb 5802BYJT6oWjM7PC5SN6doBapfNuF3pAsQbR+aL/PVZUXpQyAzhoh12+8GbG5oRF z8QxanL02XqYNSlWV+9YsDmqwiXwlNjKCbZEGvc3ySXIGhdFXQ/6+EmprwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbtW7clko4WMlgNGr0CNyzS76hdMB8GA1UdIwQY MBaAFGTe2F2aBbHfaJqLbDE/gSjHoAtnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUt YjllYjg3MWY2ZDk2LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUtYjllYjg3MWY2ZDk2 LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaEpaTZL h23ggGy8v1OHrBb/dotW3lVSsiiarM1XfSw7JjChTZhH4qNpdAgcxCbUMIPVHcqv ZIR42jJexaE6fgBWA6JP6lCAo57GfN8u+7DvygNyF0jzzpSBZNatQa4YpUJEvts2 d/8zDc027IN/Oss76EmX6MBymq0F2MFnEPKbpY0t58TqKkSKWP3DyLvRqRsL818x H4S2GE6RlxZ9E4x7+vXT6M6w/nQXEyTEoC84zQnegEhfrAxhGVaCGSGrpvcMlvGe WK5B4Toqdr3o85jqUeVIOfSd117nEkM1mL605aeg8DTjtmivsVujk+6Rz+Xp3gS8 KyqT4Fc1mHFwiw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:43:06 2025 by rpki-client