This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft File: zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft (raw, json) Hash identifier: by83aAy75t6uXNdnxpqrAfGADI/shb0MPuCzXouFShk= Subject key identifier: F1:52:D8:31:CA:6D:49:3B:8B:01:D1:DF:D1:10:8F:10:0C:69:AE:09 Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52 Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52 Certificate serial: 019B69C515038EF32237B061FF2BCBCC6601 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft Manifest number: 0F6B Signing time: Mon 29 Dec 2025 11:01:21 +0000 Manifest this update: Mon 29 Dec 2025 11:01:21 +0000 Manifest next update: Tue 30 Dec 2025 11:01:21 +0000 Files and hashes: 1: F8CkVi3Azk4IP8l0xbj9A7utWT4.roa (hash: E5Iv0quJqPnudHATWcToHknlwXYMpaxnHvHdqASmVUA=) 2: zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl (hash: iAu9voLNRWmewG5INCRseGPV0oZFlWjYjtVkliYQnuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c5:15:03:8e:f3:22:37:b0:61:ff:2b:cb:cc:66:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52 Validity Not Before: Dec 29 11:01:21 2025 GMT Not After : Dec 30 11:01:21 2025 GMT Subject: CN=f152d831ca6d493b8b01d1dfd1108f100c69ae09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:28:d1:8a:db:1a:99:3c:21:56:ac:49:b4: 5b:47:8b:13:f3:75:64:e8:af:2e:b1:2f:98:bd:9f: 18:ad:1f:54:83:78:1c:bc:65:c5:c6:b1:16:07:1e: 01:0d:b6:6d:4e:44:1e:85:ea:75:44:12:1c:ff:e5: e1:77:ca:fd:7d:4d:2b:64:0e:b6:fd:23:91:28:97: ae:86:c7:cd:74:d3:8c:e2:d7:2c:18:2d:6e:35:79: d3:6e:33:27:e8:ab:5d:e2:b9:b5:8e:83:e5:54:19: 11:8d:a0:27:aa:5a:75:ff:c6:59:2e:9f:e3:5e:0b: ff:8c:8b:c9:1b:1f:02:45:3b:4d:41:3c:17:56:79: 81:15:e4:8f:d6:3f:d6:7b:99:6c:e6:b1:b0:50:7c: 87:c0:74:a8:13:46:73:c1:ec:d3:fe:41:12:ba:dd: ac:df:8f:48:4d:30:a0:c4:0f:8f:74:78:09:8b:0a: 0b:fe:cc:6c:ab:b8:72:79:74:ea:af:8f:32:54:ef: 76:67:5c:1a:4a:0c:69:e7:51:f7:38:64:cf:c7:76: bc:6c:77:03:84:0a:d1:0f:ed:b9:33:9c:48:15:6b: d9:6a:72:e6:08:5a:f9:29:bf:f4:5e:b2:40:30:20: 78:ab:c9:ef:3e:04:df:18:14:f9:22:a6:3d:9d:c8: fb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:52:D8:31:CA:6D:49:3B:8B:01:D1:DF:D1:10:8F:10:0C:69:AE:09 X509v3 Authority Key Identifier: keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:11:5f:e6:35:03:f5:82:ec:51:37:cc:c3:db:fe:31:83:f0: ec:98:b6:04:c9:b7:2f:52:b1:0e:9c:41:d3:d7:a2:8d:89:f4: 07:73:9c:a0:e9:6b:4a:f4:a6:e4:5e:a6:bc:80:9d:55:3c:d9: 73:f2:55:41:78:e2:88:56:4a:8f:d9:26:2d:58:15:14:15:6c: b7:e8:06:2c:c6:c0:f3:cb:8c:66:9b:7b:e8:49:3c:03:a8:73: 45:a9:ef:2f:7b:3f:41:c8:db:52:88:5d:54:85:7b:59:dc:c6: 7c:d0:68:58:51:9f:be:d0:f7:4e:b8:95:2e:5d:1f:83:6f:15: 9a:20:12:84:e2:38:13:d7:0d:31:e0:06:01:08:6f:ac:95:86: 09:13:0c:c9:3c:70:5c:04:69:d2:1f:ea:c5:9a:ab:10:b4:72: e1:67:6f:55:47:6f:03:d5:7d:d7:a6:86:0a:d4:d8:80:3a:97: 47:d5:35:8d:6d:db:53:99:bf:21:43:59:8d:79:5f:6d:03:21: e4:47:45:5d:ad:71:aa:f6:87:18:c5:1c:72:b0:a0:b6:a5:ec: 92:fb:1f:0f:a2:a7:d0:9a:ad:c9:68:8e:78:5a:12:94:bd:50: e2:4e:37:ed:7c:ca:e6:63:1c:54:e5:b2:9a:ac:9e:65:cd:bf: 77:dd:d5:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxRUDjvMiN7Bh/yvLzGYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZTU3ZGM4MjM0ZGY1ZjU5ZDY3ZmRjNjg1NmJiMjYyZTcx OTNmNTIwHhcNMjUxMjI5MTEwMTIxWhcNMjUxMjMwMTEwMTIxWjAzMTEwLwYDVQQD EyhmMTUyZDgzMWNhNmQ0OTNiOGIwMWQxZGZkMTEwOGYxMDBjNjlhZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiwo0YrbGpk8IVasSbRbR4sT83Vk 6K8usS+YvZ8YrR9Ug3gcvGXFxrEWBx4BDbZtTkQehep1RBIc/+Xhd8r9fU0rZA62 /SORKJeuhsfNdNOM4tcsGC1uNXnTbjMn6Ktd4rm1joPlVBkRjaAnqlp1/8ZZLp/j Xgv/jIvJGx8CRTtNQTwXVnmBFeSP1j/We5ls5rGwUHyHwHSoE0ZzwezT/kESut2s 349ITTCgxA+PdHgJiwoL/sxsq7hyeXTqr48yVO92Z1waSgxp51H3OGTPx3a8bHcD hArRD+25M5xIFWvZanLmCFr5Kb/0XrJAMCB4q8nvPgTfGBT5IqY9ncj7kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFS2DHKbUk7iwHR39EQjxAMaa4JMB8GA1UdIwQY MBaAFMzlfcgjTfX1nWf9xoVrsmLnGT9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8zNGFjZjQtNzQ3Zi00NWZlLTgxMjkt NDAyZjFmYjg0OGNmLzEvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8zNGFjZjQtNzQ3Zi00NWZlLTgxMjktNDAyZjFmYjg0OGNm LzEvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxFf5jUD 9YLsUTfMw9v+MYPw7Ji2BMm3L1KxDpxB09eijYn0B3OcoOlrSvSm5F6mvICdVTzZ c/JVQXjiiFZKj9kmLVgVFBVst+gGLMbA88uMZpt76Ek8A6hzRanvL3s/QcjbUohd VIV7WdzGfNBoWFGfvtD3TriVLl0fg28VmiAShOI4E9cNMeAGAQhvrJWGCRMMyTxw XARp0h/qxZqrELRy4WdvVUdvA9V916aGCtTYgDqXR9U1jW3bU5m/IUNZjXlfbQMh 5EdFXa1xqvaHGMUccrCgtqXskvsfD6Kn0JqtyWiOeFoSlL1Q4k437XzK5mMcVOWy mqyeZc2/d93VSg== -----END CERTIFICATE-----Generated at Mon Dec 29 14:54:00 2025 by rpki-client