This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json) Hash identifier: dbNwozgbjI9x/lrMri+pM9CJpKHi5kBlUH8i5FOC6JA= Subject key identifier: 02:87:05:BC:3C:B9:6C:63:04:B5:5E:90:7E:DD:E4:C0:1B:00:79:D6 Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40 Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40 Certificate serial: 019B3A9105EC217164EF82597ACDD4496C9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft Manifest number: 0DE5 Signing time: Sat 20 Dec 2025 07:02:21 +0000 Manifest this update: Sat 20 Dec 2025 07:02:21 +0000 Manifest next update: Sun 21 Dec 2025 07:02:21 +0000 Files and hashes: 1: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (hash: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=) 2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: /3UUIE2mUr8Gat3JLRgCXfgvqdbJZtZLy5+qaonX1oQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:05:ec:21:71:64:ef:82:59:7a:cd:d4:49:6c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40 Validity Not Before: Dec 20 07:02:21 2025 GMT Not After : Dec 21 07:02:21 2025 GMT Subject: CN=028705bc3cb96c6304b55e907edde4c01b0079d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3d:da:7f:29:17:77:d9:cb:c1:42:d3:ba:ea: bc:b1:77:dd:65:19:ab:83:57:d1:8a:84:88:99:b1: ad:fd:43:4c:84:ed:ce:72:49:30:89:07:32:d0:26: 2e:42:bb:ae:d0:f9:5b:df:42:e9:d4:00:26:08:9d: a9:78:d1:41:68:56:41:30:29:27:a9:e2:ab:04:4d: 1e:b8:ce:5f:dc:1d:29:54:97:6e:49:69:6a:90:32: 78:34:76:d3:4f:13:16:bf:4a:ba:01:09:85:70:58: d8:e2:3d:db:ae:cb:86:59:14:ef:7b:c1:42:d3:f8: 6b:8c:c5:fd:52:5a:e2:59:a7:d1:e4:79:4d:a9:33: e6:6f:c9:41:58:ec:86:e3:08:03:ac:1c:14:6e:81: 4a:10:33:16:48:b9:e7:9c:e6:62:f2:bf:0f:6b:42: d3:d8:f5:31:48:42:57:72:61:ea:fe:dc:62:23:40: 2a:c8:7e:95:2d:5e:a4:58:89:19:d1:ff:09:02:3d: 00:a4:83:f3:79:26:fb:53:eb:18:fb:3c:24:7b:cc: 01:0b:ec:91:d0:0f:83:a6:c8:a9:29:99:9c:93:ef: 59:65:03:a2:97:2f:67:17:1c:34:e9:fc:06:08:ef: fd:4b:c7:19:b4:03:c6:9c:99:51:fb:7c:68:10:4d: 21:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:87:05:BC:3C:B9:6C:63:04:B5:5E:90:7E:DD:E4:C0:1B:00:79:D6 X509v3 Authority Key Identifier: keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8c:da:39:65:6e:5d:3e:fd:b6:ee:cd:50:b9:cc:5f:86:56: d6:21:22:02:7d:03:30:6a:e2:fb:ac:43:4f:55:a6:58:04:c6: 14:90:32:26:6d:34:41:25:78:5c:72:b3:a8:37:5d:b5:f9:38: ea:54:54:de:a5:fc:fb:1b:67:61:ca:45:b9:a6:bc:b0:57:1e: f8:4c:dc:69:df:ab:64:7d:5a:37:9d:d4:c5:fe:b5:75:82:44: 4f:3f:ab:6a:e8:06:a8:af:f8:b2:11:c5:92:fe:5c:d0:fd:5d: 13:63:10:0c:07:a3:0d:de:74:bf:12:f3:45:f8:0b:16:c6:75: c4:6f:9f:d5:5d:96:4f:57:3d:07:7a:aa:f0:7b:07:27:ff:69: 19:24:60:0b:81:05:df:f1:7d:7a:11:9b:1b:82:d0:1d:31:36: 65:5e:18:3b:46:ef:95:95:82:97:eb:cf:19:4a:75:cf:e0:55: ea:72:15:48:63:3d:f2:14:db:f2:92:13:d9:22:d2:48:e6:92: c0:b0:e9:77:5c:fb:72:40:fd:30:a0:c0:f1:43:1e:d7:fa:be: da:d1:1e:29:bf:03:32:6e:df:2a:22:32:25:c5:aa:ed:16:9f: c9:60:cd:f8:09:6c:65:15:8d:b7:6e:7e:a5:11:05:cf:f1:f1: f9:74:50:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kQXsIXFk74JZes3USWyeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMDA3MmRhOTgxMTQxOTNjMTA0Y2UxYTYwOWQ5MmE2OTc2 ZjljNDAwHhcNMjUxMjIwMDcwMjIxWhcNMjUxMjIxMDcwMjIxWjAzMTEwLwYDVQQD EygwMjg3MDViYzNjYjk2YzYzMDRiNTVlOTA3ZWRkZTRjMDFiMDA3OWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T3afykXd9nLwULTuuq8sXfdZRmr g1fRioSImbGt/UNMhO3OckkwiQcy0CYuQruu0Plb30Lp1AAmCJ2peNFBaFZBMCkn qeKrBE0euM5f3B0pVJduSWlqkDJ4NHbTTxMWv0q6AQmFcFjY4j3brsuGWRTve8FC 0/hrjMX9UlriWafR5HlNqTPmb8lBWOyG4wgDrBwUboFKEDMWSLnnnOZi8r8Pa0LT 2PUxSEJXcmHq/txiI0AqyH6VLV6kWIkZ0f8JAj0ApIPzeSb7U+sY+zwke8wBC+yR 0A+DpsipKZmck+9ZZQOily9nFxw06fwGCO/9S8cZtAPGnJlR+3xoEE0h0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKHBbw8uWxjBLVekH7d5MAbAHnWMB8GA1UdIwQY MBaAFMwActqYEUGTwQTOGmCdkqaXb5xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQt YzBlYzhiOTVhYjc3LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQtYzBlYzhiOTVhYjc3 LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4zaOWVu XT79tu7NULnMX4ZW1iEiAn0DMGri+6xDT1WmWATGFJAyJm00QSV4XHKzqDddtfk4 6lRU3qX8+xtnYcpFuaa8sFce+Ezcad+rZH1aN53Uxf61dYJETz+raugGqK/4shHF kv5c0P1dE2MQDAejDd50vxLzRfgLFsZ1xG+f1V2WT1c9B3qq8HsHJ/9pGSRgC4EF 3/F9ehGbG4LQHTE2ZV4YO0bvlZWCl+vPGUp1z+BV6nIVSGM98hTb8pIT2SLSSOaS wLDpd1z7ckD9MKDA8UMe1/q+2tEeKb8DMm7fKiIyJcWq7RafyWDN+AlsZRWNt25+ pREFz/Hx+XRQ6g== -----END CERTIFICATE-----Generated at Sat Dec 20 14:12:37 2025 by rpki-client