This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft File: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft (raw, json) Hash identifier: b84BPtukswoRIDWRtgW44jKobiPJ+Jxj/dNAJbAxx9Y= Subject key identifier: F7:B8:DA:6B:3B:48:CF:6D:04:34:DF:75:16:07:C6:EB:F0:07:E5:06 Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C Certificate issuer: /CN=66927b2b26b5214b9665d8dc85f414709714996c Certificate serial: 019B39EB0B979F826B803B48836C9C899505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft Manifest number: 13B9 Signing time: Sat 20 Dec 2025 04:01:03 +0000 Manifest this update: Sat 20 Dec 2025 04:01:03 +0000 Manifest next update: Sun 21 Dec 2025 04:01:03 +0000 Files and hashes: 1: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl (hash: GojY9lKXOeB0pdeHxDa2OHVzS9hA61dj9B3yGnsGwZE=) 2: z14kTSlHc0FGtPp_p4eZCWL53uI.roa (hash: o0QCjev3qiHHVGYnELxUtNoSu9oIG3V8qNROrWFFFEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:0b:97:9f:82:6b:80:3b:48:83:6c:9c:89:95:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c Validity Not Before: Dec 20 04:01:03 2025 GMT Not After : Dec 21 04:01:03 2025 GMT Subject: CN=f7b8da6b3b48cf6d0434df751607c6ebf007e506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:65:c0:98:d5:ab:0e:1f:5d:a7:77:27:61:e2: b1:51:77:45:67:89:9d:09:04:a0:b0:7f:20:b4:19: 83:15:1b:13:2b:fa:98:16:81:31:cb:07:48:50:f1: c7:1a:e1:7a:33:8f:83:35:8d:a7:31:af:48:0f:9c: 78:97:bc:95:98:61:0f:86:1a:ed:9e:9e:f3:b4:f1: 94:90:fe:11:ad:07:30:de:3a:ea:4a:c1:76:cf:16: d4:c1:0c:3a:03:c3:b0:1c:8d:87:2f:18:25:8d:21: 0d:5e:b8:81:de:91:9f:c2:86:2f:dd:ff:ca:47:5b: 16:c7:c3:19:e0:77:17:90:86:5c:44:1a:d3:7b:03: 2e:a6:cc:74:42:c8:94:a1:e4:55:5c:98:f0:fb:2e: a4:1c:31:d0:a2:87:40:7d:ac:9f:88:c3:25:9e:82: 7b:62:d2:15:fe:7a:b9:a2:f9:6b:a0:16:f2:19:ae: b4:12:ac:c9:a1:cc:7c:f8:4c:43:ad:82:f3:80:b3: f6:61:2f:ce:f5:9f:f5:cf:5c:0b:b6:06:f7:1b:a3: 3d:26:9c:4d:19:cd:99:dd:d6:9c:83:43:48:53:55: e4:a0:ee:46:47:6f:4a:a9:48:e4:04:26:2e:01:f5: 99:a6:4a:d4:4e:c5:f8:15:f1:b9:b8:9c:f6:5f:45: 3e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B8:DA:6B:3B:48:CF:6D:04:34:DF:75:16:07:C6:EB:F0:07:E5:06 X509v3 Authority Key Identifier: keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:35:dc:08:8f:f0:21:6f:a6:9b:09:9a:0a:5c:d8:15:03:01: 8e:f4:8c:6d:33:34:f9:99:f0:df:b4:7c:c3:2f:d2:66:2d:b5: 93:d9:c7:33:65:5b:e1:21:32:bc:1d:d6:1a:46:52:e9:a6:87: d4:e0:ae:19:ea:a2:32:61:d4:c6:00:30:33:54:d5:0e:7a:80: 45:28:56:95:59:7f:90:87:5a:e5:1e:b6:bb:47:96:8c:1f:61: 5e:7d:40:27:92:78:6c:49:cc:05:ec:dc:1e:aa:8c:64:cd:97: e2:dd:b8:a3:7c:b9:d9:6a:af:2b:e8:79:17:df:ff:83:71:cc: 14:d5:05:82:bf:7d:d3:74:83:18:00:82:0b:be:ae:c2:b1:16: b4:54:be:2d:45:0a:e5:d8:2d:da:b0:16:d1:22:a5:7c:b9:a6: 00:94:6f:31:3e:4a:b5:3f:c4:df:96:72:8f:05:c1:fc:57:8c: 3a:5a:5b:b5:74:dd:18:d2:0f:7f:db:7f:4a:42:e6:4d:5a:7b: ed:4e:65:c8:e0:a3:c3:af:7e:96:c8:44:93:19:ef:dc:68:4e: 2f:2c:c6:b7:11:c3:30:fb:41:43:7a:56:47:3a:0e:69:6f:ac: 8a:2a:47:4f:d0:c2:5d:8e:2e:d7:1c:9e:a8:77:8d:d6:25:9f: 41:0e:b6:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56wuXn4JrgDtIg2yciZUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTI3YjJiMjZiNTIxNGI5NjY1ZDhkYzg1ZjQxNDcwOTcx NDk5NmMwHhcNMjUxMjIwMDQwMTAzWhcNMjUxMjIxMDQwMTAzWjAzMTEwLwYDVQQD EyhmN2I4ZGE2YjNiNDhjZjZkMDQzNGRmNzUxNjA3YzZlYmYwMDdlNTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mXAmNWrDh9dp3cnYeKxUXdFZ4md CQSgsH8gtBmDFRsTK/qYFoExywdIUPHHGuF6M4+DNY2nMa9ID5x4l7yVmGEPhhrt np7ztPGUkP4RrQcw3jrqSsF2zxbUwQw6A8OwHI2HLxgljSENXriB3pGfwoYv3f/K R1sWx8MZ4HcXkIZcRBrTewMupsx0QsiUoeRVXJjw+y6kHDHQoodAfayfiMMlnoJ7 YtIV/nq5ovlroBbyGa60EqzJocx8+ExDrYLzgLP2YS/O9Z/1z1wLtgb3G6M9JpxN Gc2Z3dacg0NIU1XkoO5GR29KqUjkBCYuAfWZpkrUTsX4FfG5uJz2X0U+pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPe42ms7SM9tBDTfdRYHxuvwB+UGMB8GA1UdIwQY MBaAFGaSeysmtSFLlmXY3IX0FHCXFJlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lNGNlN2MtYWQ3Yi00MDA2LThlNmEt ODAzNTJkMTQxM2Q5LzEvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9lNGNlN2MtYWQ3Yi00MDA2LThlNmEtODAzNTJkMTQxM2Q5 LzEvWnBKN0t5YTFJVXVXWmRqY2hmUVVjSmNVbVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTXcCI/w IW+mmwmaClzYFQMBjvSMbTM0+Znw37R8wy/SZi21k9nHM2Vb4SEyvB3WGkZS6aaH 1OCuGeqiMmHUxgAwM1TVDnqARShWlVl/kIda5R62u0eWjB9hXn1AJ5J4bEnMBezc HqqMZM2X4t24o3y52WqvK+h5F9//g3HMFNUFgr9903SDGACCC76uwrEWtFS+LUUK 5dgt2rAW0SKlfLmmAJRvMT5KtT/E35ZyjwXB/FeMOlpbtXTdGNIPf9t/SkLmTVp7 7U5lyOCjw69+lshEkxnv3GhOLyzGtxHDMPtBQ3pWRzoOaW+siipHT9DCXY4u1xye qHeN1iWfQQ62pw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:20:28 2025 by rpki-client