This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft File: ZrB43tN1kjDKLho76QZjjRMGuQg.mft (raw, json) Hash identifier: Spbv8N6ZnV2OR/5vIsAPvQDVKgdU9wSxm5Y1W37cFIs= Subject key identifier: 35:65:30:A7:E0:41:E4:47:58:3D:D0:E8:1F:2E:A6:F3:F3:96:97:1F Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08 Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908 Certificate serial: 019B6BE9E269D16552EFE355D1C0874D2FA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft Manifest number: 0AE7 Signing time: Mon 29 Dec 2025 21:00:48 +0000 Manifest this update: Mon 29 Dec 2025 21:00:48 +0000 Manifest next update: Tue 30 Dec 2025 21:00:48 +0000 Files and hashes: 1: ZrB43tN1kjDKLho76QZjjRMGuQg.crl (hash: 78Hs39EHtlZNr+q0pVXfZS3dMSF73laVCKWfOmnIO7I=) 2: mHxy9rJdZpH5hrd46ZQbudzuLF8.roa (hash: xwokQPLLEdy+DbSgYqJ8Dht6nsu849d5eiNxGGm9TUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:e9:e2:69:d1:65:52:ef:e3:55:d1:c0:87:4d:2f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908 Validity Not Before: Dec 29 21:00:48 2025 GMT Not After : Dec 30 21:00:48 2025 GMT Subject: CN=356530a7e041e447583dd0e81f2ea6f3f396971f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a0:46:5e:b4:29:6c:e1:d5:e9:4f:eb:d0:01: e0:a4:d4:a6:13:de:d1:56:f2:b5:3b:5c:f6:e3:8f: ee:2e:d9:3f:66:3f:c2:6b:92:0e:b5:39:82:e6:2e: 41:1b:b2:65:ee:d6:df:d5:8f:61:5e:92:e2:55:10: f8:75:ac:33:76:04:2f:57:af:de:e1:ee:42:fc:1e: 93:a5:a6:f8:4f:7c:6a:91:a3:6d:25:cc:fe:f5:b5: c9:31:df:5a:9d:d6:4f:81:95:95:99:ac:7d:7e:42: 37:1b:88:f8:0a:d4:47:02:02:01:bb:ae:97:ca:5f: b5:19:2c:a0:97:db:55:19:77:44:6a:cf:6f:ac:09: 73:61:91:91:73:c0:4c:5e:87:b6:80:d5:43:40:d8: da:6f:54:fb:9f:95:e4:2d:25:dc:77:c6:95:da:6e: eb:bd:92:9e:ac:ac:de:e0:90:66:16:3a:f0:2e:4d: 54:b8:9b:3a:39:33:03:3b:e9:f1:d1:4f:3e:e8:39: 4b:0f:16:6b:9f:ee:c6:60:c0:43:1b:78:d1:9d:16: 33:16:c4:d0:eb:70:59:71:5f:a1:4f:f3:de:eb:d3: b4:bc:5c:1b:2d:26:c4:17:aa:d1:0b:3b:fe:49:b3: a4:19:7c:52:05:bf:37:79:f0:9d:46:7d:75:84:e7: ff:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:65:30:A7:E0:41:E4:47:58:3D:D0:E8:1F:2E:A6:F3:F3:96:97:1F X509v3 Authority Key Identifier: keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7b:4b:e6:1f:23:06:3e:69:19:82:13:c6:58:6c:ba:95:b7: 80:a2:fb:03:5c:71:48:30:71:6c:d3:22:ce:a0:a5:0a:00:e2: ca:5f:94:b6:0b:bd:9b:dc:66:15:79:33:80:02:67:a8:49:d3: de:a5:1d:c9:cf:8c:e1:f0:18:ce:01:45:35:42:19:3c:ac:d5: d4:84:ff:bb:a9:31:16:83:ca:44:b3:2f:10:35:f8:33:f9:1b: 94:37:6a:25:c3:fc:4a:f6:cb:70:c5:b9:3a:dd:72:e3:62:fa: f6:07:33:58:db:0b:74:70:53:97:a3:e1:6a:56:fa:db:76:04: 41:c3:0a:d2:5b:fd:eb:ce:eb:5b:58:69:9f:49:9b:1f:3c:1e: b0:9f:57:70:e8:79:bc:84:1c:65:d5:bf:ca:c3:e0:d8:a9:bd: c9:97:a3:1b:35:8c:a5:6e:8d:5b:1e:35:a0:8d:71:ec:88:47: a9:bd:00:05:be:82:cd:14:da:8c:e3:ad:09:f5:71:bd:db:68: e6:73:b1:a8:d9:5d:af:64:25:f9:bf:f1:8f:20:59:80:2e:d3: 55:b9:ba:15:d7:de:aa:29:74:b4:a0:fb:24:dc:54:da:b6:44: 62:ea:bd:76:c8:2b:a4:a1:d5:93:36:1d:fa:7e:04:f4:ec:6f: 86:3e:01:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6eJp0WVS7+NV0cCHTS+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YjA3OGRlZDM3NTkyMzBjYTJlMWEzYmU5MDY2MzhkMTMw NmI5MDgwHhcNMjUxMjI5MjEwMDQ4WhcNMjUxMjMwMjEwMDQ4WjAzMTEwLwYDVQQD EygzNTY1MzBhN2UwNDFlNDQ3NTgzZGQwZTgxZjJlYTZmM2YzOTY5NzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26BGXrQpbOHV6U/r0AHgpNSmE97R VvK1O1z244/uLtk/Zj/Ca5IOtTmC5i5BG7Jl7tbf1Y9hXpLiVRD4dawzdgQvV6/e 4e5C/B6Tpab4T3xqkaNtJcz+9bXJMd9andZPgZWVmax9fkI3G4j4CtRHAgIBu66X yl+1GSygl9tVGXdEas9vrAlzYZGRc8BMXoe2gNVDQNjab1T7n5XkLSXcd8aV2m7r vZKerKze4JBmFjrwLk1UuJs6OTMDO+nx0U8+6DlLDxZrn+7GYMBDG3jRnRYzFsTQ 63BZcV+hT/Pe69O0vFwbLSbEF6rRCzv+SbOkGXxSBb83efCdRn11hOf/YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVlMKfgQeRHWD3Q6B8upvPzlpcfMB8GA1UdIwQY MBaAFGaweN7TdZIwyi4aO+kGY40TBrkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NjM1OTItYTQ4MC00NDRmLWE4ODEt NDAyZTYyYzU0ZDMyLzEvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC83NjM1OTItYTQ4MC00NDRmLWE4ODEtNDAyZTYyYzU0ZDMy LzEvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXtL5h8j Bj5pGYITxlhsupW3gKL7A1xxSDBxbNMizqClCgDiyl+Utgu9m9xmFXkzgAJnqEnT 3qUdyc+M4fAYzgFFNUIZPKzV1IT/u6kxFoPKRLMvEDX4M/kblDdqJcP8SvbLcMW5 Ot1y42L69gczWNsLdHBTl6Phalb623YEQcMK0lv9687rW1hpn0mbHzwesJ9XcOh5 vIQcZdW/ysPg2Km9yZejGzWMpW6NWx41oI1x7IhHqb0ABb6CzRTajOOtCfVxvdto 5nOxqNldr2Ql+b/xjyBZgC7TVbm6Fdfeqil0tKD7JNxU2rZEYuq9dsgrpKHVkzYd +n4E9Oxvhj4Bnw== -----END CERTIFICATE-----Generated at Tue Dec 30 04:35:47 2025 by rpki-client