This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft File: zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json) Hash identifier: xww2SdTiXoDJPJqX53h3iO3g3pu/5J1JxshEkL3Pb7Q= Subject key identifier: DA:17:1C:47:C5:10:AB:D2:E6:07:38:EC:29:DB:F2:93:BF:91:74:BE Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32 Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832 Certificate serial: 019B638C2E6997944EACC6AE854D76D0809A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft Manifest number: 0351 Signing time: Sun 28 Dec 2025 06:01:29 +0000 Manifest this update: Sun 28 Dec 2025 06:01:29 +0000 Manifest next update: Mon 29 Dec 2025 06:01:29 +0000 Files and hashes: 1: ckBMIFhsxRrJd8g3723Ngrkob0E.roa (hash: 2+AxiQZG50JBBA5rPTQbIhRHNAnVw7yeAiKa0FFBttM=) 2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: bf8LWCoMSh+SNoaTuPI9HKL/PyDst83dYdn+/IIJezI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:8c:2e:69:97:94:4e:ac:c6:ae:85:4d:76:d0:80:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832 Validity Not Before: Dec 28 06:01:29 2025 GMT Not After : Dec 29 06:01:29 2025 GMT Subject: CN=da171c47c510abd2e60738ec29dbf293bf9174be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:71:25:9b:67:fe:f7:7e:ad:bb:14:4a:c9:1e: 17:d2:6e:ca:4d:40:1e:eb:bb:9e:a6:c7:24:8d:37: d3:78:30:cf:2c:38:43:df:18:42:d4:cb:5b:bd:e1: 19:de:ac:49:2a:c1:7a:82:2c:d0:c8:71:a7:07:b6: 39:52:35:2b:21:f4:2d:f7:ec:64:6c:ac:ae:79:47: 3a:25:37:8d:f6:45:cf:f3:d7:e3:9b:17:ea:af:78: 8e:61:c0:57:d4:aa:7b:d6:02:66:89:83:2f:d4:ad: 63:11:2d:c5:9c:eb:28:e4:96:80:1a:73:21:43:81: b1:49:a0:06:f9:b1:24:e3:c2:43:7e:83:c9:86:62: cc:b9:f4:8b:31:2e:58:62:9e:ab:81:2a:61:ab:71: f3:39:52:12:9f:bf:5b:cc:f3:68:a7:be:01:aa:0b: 0f:74:08:2a:8d:e1:a4:7b:27:ce:19:cc:c2:47:9b: fa:0c:5e:da:61:1c:ca:01:2b:fe:5a:95:b9:8c:89: 60:76:87:19:8e:cd:c7:7f:3c:00:3c:0f:5d:bf:9d: 74:30:7f:7e:1e:ba:34:2e:76:16:ac:15:e7:82:e4: 3c:f1:3d:97:e4:66:fb:5a:8c:61:8a:1f:b6:ac:9d: 7f:ea:ad:cb:63:80:eb:f9:70:10:c6:1b:df:57:e9: e1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:17:1C:47:C5:10:AB:D2:E6:07:38:EC:29:DB:F2:93:BF:91:74:BE X509v3 Authority Key Identifier: keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:11:18:fe:eb:3c:22:c3:31:5a:b6:86:9e:2e:5c:f9:2f:ae: e9:31:95:4f:3e:c5:61:29:25:35:da:3c:a1:1e:79:6b:9e:77: 87:76:30:4b:49:ae:50:85:35:3e:0a:47:a7:1d:06:1d:20:43: 3d:5d:7c:61:9a:87:b0:79:81:17:c5:f9:dd:2e:a4:c8:44:1d: b2:f8:6d:b3:78:85:f8:90:fc:1d:c5:f5:61:b4:22:9f:ef:72: a0:b0:af:32:dc:b6:66:d8:b5:7a:a6:92:18:14:78:19:9c:15: 7c:cb:91:9b:b4:db:63:8e:dd:ae:1f:1e:30:b5:1f:69:fa:ae: da:1b:99:c8:59:13:e5:6a:03:40:76:eb:00:94:0f:77:91:57: 28:fb:30:20:dd:88:ff:ce:43:f7:0a:43:7a:82:44:75:14:31: 66:07:b9:30:b7:c4:ef:bd:da:7d:68:bf:fd:1b:47:35:8d:0a: 99:64:84:2d:01:d6:a9:50:0b:7c:eb:ef:c9:7d:0f:bb:a8:69: a4:54:d5:ac:bc:19:30:a6:89:fc:92:12:37:1f:b6:23:d9:cd: 25:35:91:41:02:f6:c9:e4:49:32:57:b1:d9:9a:7d:48:86:52: 22:09:80:78:74:3b:55:63:35:1a:cb:1c:1e:80:a1:03:02:da: b2:72:2e:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjjC5pl5ROrMauhU120ICaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDJkYzRmMzhmOTZiNmQ0Nzc5Njk4OGVjZGRmMGM2ZDBj NGU4MzIwHhcNMjUxMjI4MDYwMTI5WhcNMjUxMjI5MDYwMTI5WjAzMTEwLwYDVQQD EyhkYTE3MWM0N2M1MTBhYmQyZTYwNzM4ZWMyOWRiZjI5M2JmOTE3NGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnElm2f+936tuxRKyR4X0m7KTUAe 67uepsckjTfTeDDPLDhD3xhC1MtbveEZ3qxJKsF6gizQyHGnB7Y5UjUrIfQt9+xk bKyueUc6JTeN9kXP89fjmxfqr3iOYcBX1Kp71gJmiYMv1K1jES3FnOso5JaAGnMh Q4GxSaAG+bEk48JDfoPJhmLMufSLMS5YYp6rgSphq3HzOVISn79bzPNop74BqgsP dAgqjeGkeyfOGczCR5v6DF7aYRzKASv+WpW5jIlgdocZjs3HfzwAPA9dv510MH9+ Hro0LnYWrBXnguQ88T2X5Gb7Woxhih+2rJ1/6q3LY4Dr+XAQxhvfV+nhFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoXHEfFEKvS5gc47Cnb8pO/kXS+MB8GA1UdIwQY MBaAFMzS3E84+WttR3lpiOzd8MbQxOgyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YTJlNWYtOWJiOS00M2E0LWI0NTIt NDYwYzg5YjM5MmIzLzEvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni82YTJlNWYtOWJiOS00M2E0LWI0NTItNDYwYzg5YjM5MmIz LzEvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfREY/us8 IsMxWraGni5c+S+u6TGVTz7FYSklNdo8oR55a553h3YwS0muUIU1PgpHpx0GHSBD PV18YZqHsHmBF8X53S6kyEQdsvhts3iF+JD8HcX1YbQin+9yoLCvMty2Zti1eqaS GBR4GZwVfMuRm7TbY47drh8eMLUfafqu2huZyFkT5WoDQHbrAJQPd5FXKPswIN2I /85D9wpDeoJEdRQxZge5MLfE773afWi//RtHNY0KmWSELQHWqVALfOvvyX0Pu6hp pFTVrLwZMKaJ/JISNx+2I9nNJTWRQQL2yeRJMlex2Zp9SIZSIgmAeHQ7VWM1Gssc HoChAwLasnIu2A== -----END CERTIFICATE-----Generated at Sun Dec 28 09:54:09 2025 by rpki-client