This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json) Hash identifier: TWykWC4q72jio/2PvwbL00b40O0XfHDmjZ8uG3D93AI= Subject key identifier: F3:F8:89:C9:D2:49:6A:37:D4:5A:84:8F:44:7D:9C:B2:FA:02:90:47 Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38 Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238 Certificate serial: 019B39B3989956E76F7A9939B368808833D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft Manifest number: 1721 Signing time: Sat 20 Dec 2025 03:00:29 +0000 Manifest this update: Sat 20 Dec 2025 03:00:29 +0000 Manifest next update: Sun 21 Dec 2025 03:00:29 +0000 Files and hashes: 1: 3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa (hash: r9nE6BN+YAUaWRC/VJWHKz/x1whGDYTMWiwj3TDgzA0=) 2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: 1e4g4IeKB0getTCT5rTq3jWPwhk2MNVywNFTOPoHmI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:98:99:56:e7:6f:7a:99:39:b3:68:80:88:33:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238 Validity Not Before: Dec 20 03:00:29 2025 GMT Not After : Dec 21 03:00:29 2025 GMT Subject: CN=f3f889c9d2496a37d45a848f447d9cb2fa029047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:79:2e:bd:16:0a:0a:e5:7c:17:d6:01:f0:f8: 01:43:dd:d7:64:ca:52:98:d7:f4:34:58:dc:4e:7f: 5a:e4:fd:4b:3e:7d:1e:9a:fa:cf:0f:ca:51:d7:ef: 74:65:6e:1f:4b:aa:64:fb:ea:1a:3f:84:ee:e6:22: 90:4e:8f:fe:99:6d:2b:17:05:60:8b:4d:94:e6:ab: 67:56:73:41:c2:b7:ad:60:7a:6d:0b:0c:be:d4:3f: a8:2b:6f:ed:b8:4d:96:89:97:ba:7f:c7:34:b0:c1: c2:aa:24:06:1e:f7:af:7e:ce:05:a0:5b:2f:95:68: e2:e1:f8:50:3d:eb:c7:74:0e:ce:8c:fa:58:e7:ac: f8:20:d8:92:ff:8c:b4:49:34:cf:27:93:17:4e:38: 79:e7:8e:54:20:81:0c:00:bf:1a:41:8f:f4:21:24: f0:22:90:d9:39:29:19:ce:dc:9a:a8:ca:cf:32:d1: aa:0e:a9:db:52:ee:ad:77:98:b9:d4:64:08:9a:bc: 20:eb:75:cb:4e:5d:70:e9:43:20:30:a9:12:6a:7f: 30:b2:c3:7e:0f:2d:03:20:77:f5:eb:58:c6:6f:e3: 5d:5c:c5:90:31:90:1d:de:69:6f:68:43:c2:09:df: 61:0b:cd:51:20:18:76:fb:93:14:08:14:96:f7:f0: 64:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F8:89:C9:D2:49:6A:37:D4:5A:84:8F:44:7D:9C:B2:FA:02:90:47 X509v3 Authority Key Identifier: keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:60:28:b1:90:7a:5a:ad:e5:25:a9:85:f3:4f:b7:5f:ae:d8: e5:7b:80:61:cf:ab:1c:8a:02:2a:15:f7:49:94:56:6b:35:29: 20:36:6a:54:f5:22:11:b3:86:16:9f:cd:33:d8:57:1a:8f:45: 07:4e:d9:5e:4a:90:f5:02:55:f2:79:68:b2:63:50:e6:e7:0a: d6:e4:5f:ba:ab:b5:19:54:d5:5c:1e:c0:23:d2:3b:87:25:6e: 1b:f2:a9:4a:eb:87:43:82:1d:8f:54:dd:75:70:ed:41:b2:2b: b8:2f:12:7b:cd:d3:d8:d8:3f:cf:f5:c5:af:d6:fe:d0:80:b6: 76:63:c7:9d:66:5b:6b:41:b9:fc:9e:2d:92:a0:2b:9d:47:8b: b5:02:0e:0d:f8:07:61:32:46:c9:d2:de:08:27:75:07:f2:22: c2:4d:a2:6e:f9:d6:31:ad:27:e4:15:61:c8:25:8b:6b:e4:17: 19:26:b9:0a:bc:ef:8c:0b:6a:e8:c5:54:dc:1d:c2:54:27:64: 96:e0:d5:71:09:3b:7b:40:49:42:0b:40:79:5d:44:32:82:ab: b9:71:af:06:75:47:e2:5a:c6:4d:3a:15:e4:4f:d4:19:10:71: 9c:1d:32:58:7f:4c:ed:0f:5b:42:32:7a:ee:9d:d6:06:20:39: 10:05:e6:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s5iZVudvepk5s2iAiDPRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMjgzNDBhMjA5YjJiYTEyYWU5MDNhNzRjYmI1ZTJlMjNh ZWQyMzgwHhcNMjUxMjIwMDMwMDI5WhcNMjUxMjIxMDMwMDI5WjAzMTEwLwYDVQQD EyhmM2Y4ODljOWQyNDk2YTM3ZDQ1YTg0OGY0NDdkOWNiMmZhMDI5MDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nkuvRYKCuV8F9YB8PgBQ93XZMpS mNf0NFjcTn9a5P1LPn0emvrPD8pR1+90ZW4fS6pk++oaP4Tu5iKQTo/+mW0rFwVg i02U5qtnVnNBwretYHptCwy+1D+oK2/tuE2WiZe6f8c0sMHCqiQGHvevfs4FoFsv lWji4fhQPevHdA7OjPpY56z4INiS/4y0STTPJ5MXTjh5545UIIEMAL8aQY/0ISTw IpDZOSkZztyaqMrPMtGqDqnbUu6td5i51GQImrwg63XLTl1w6UMgMKkSan8wssN+ Dy0DIHf161jGb+NdXMWQMZAd3mlvaEPCCd9hC81RIBh2+5MUCBSW9/BkWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPP4icnSSWo31FqEj0R9nLL6ApBHMB8GA1UdIwQY MBaAFM4oNAogmyuhKukDp0y7Xi4jrtI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMt YjFmYzU0N2I3MzIyLzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMtYjFmYzU0N2I3MzIy LzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2AosZB6 Wq3lJamF80+3X67Y5XuAYc+rHIoCKhX3SZRWazUpIDZqVPUiEbOGFp/NM9hXGo9F B07ZXkqQ9QJV8nlosmNQ5ucK1uRfuqu1GVTVXB7AI9I7hyVuG/KpSuuHQ4Idj1Td dXDtQbIruC8Se83T2Ng/z/XFr9b+0IC2dmPHnWZba0G5/J4tkqArnUeLtQIODfgH YTJGydLeCCd1B/Iiwk2ibvnWMa0n5BVhyCWLa+QXGSa5CrzvjAtq6MVU3B3CVCdk luDVcQk7e0BJQgtAeV1EMoKruXGvBnVH4lrGTToV5E/UGRBxnB0yWH9M7Q9bQjJ6 7p3WBiA5EAXm/A== -----END CERTIFICATE-----Generated at Sat Dec 20 12:36:30 2025 by rpki-client