This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft File: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json) Hash identifier: HCEW20cluBJuYNJBZs02a58B9P5SeInYS7Ki3pcpGC4= Subject key identifier: 94:77:77:B2:47:37:80:69:C3:07:0A:EA:3A:DE:49:EC:4E:9A:AE:7D Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa Certificate serial: 019B2852EF3CB0764FB97A249CB8D13ED3A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 18:01:22 +0000 Manifest this update: Tue 16 Dec 2025 18:01:22 +0000 Manifest next update: Wed 17 Dec 2025 18:01:22 +0000 Files and hashes: 1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: e+DDzTeQVnTTjB6qgLFjn/Ve4fCyhpWmt8oSvWjot2E=) 2: qflKZTF3zhSp7clCgQY6deaVcuQ.roa (hash: YrrT0H2VFpPiuVpFBvUMkkYVOwRQGbWJWicWDvr4Ns0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:ef:3c:b0:76:4f:b9:7a:24:9c:b8:d1:3e:d3:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa Validity Not Before: Dec 16 18:01:22 2025 GMT Not After : Dec 17 18:01:22 2025 GMT Subject: CN=947777b247378069c3070aea3ade49ec4e9aae7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:96:2c:73:67:a5:0c:e7:55:a4:b4:7e:8d: cf:61:2a:e7:87:45:78:6e:e5:fb:c1:d0:39:4a:83: a9:db:c1:b4:58:5e:83:f7:a7:57:67:0f:1c:05:b0: 55:a4:4c:27:03:19:fe:2d:a0:7b:fb:61:ed:31:5c: 2a:15:a2:74:59:a1:35:7a:77:e0:24:4f:f4:94:de: 6d:23:a5:34:9b:2d:f9:22:99:c0:57:5c:26:e7:d0: 5c:66:08:07:ff:79:1f:73:ea:ae:44:31:1e:3b:96: 84:d3:49:78:27:9a:cc:25:e2:e0:9b:2b:d1:9c:20: c5:b1:4c:bb:a6:82:19:37:21:ad:74:06:7c:45:62: 2a:c5:f5:df:f3:7b:6b:93:42:7e:f8:7b:10:8b:3a: e7:bf:eb:d5:61:f6:95:f1:5d:35:fc:cc:7f:4b:8a: 44:66:ac:bb:8c:2c:06:76:98:a5:da:dc:44:3c:0a: 3d:d2:80:65:0a:63:a3:bf:8f:8c:68:51:94:07:5a: 36:8c:4d:24:df:43:c4:f3:8b:c3:fe:ad:47:a1:ea: 04:cb:95:48:19:8d:35:6d:72:87:47:2d:d3:5e:34: 04:eb:34:4c:c0:eb:95:c7:77:56:df:81:78:ab:a3: 38:5f:64:19:85:47:20:2e:47:19:89:50:96:f1:1c: 50:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:77:77:B2:47:37:80:69:C3:07:0A:EA:3A:DE:49:EC:4E:9A:AE:7D X509v3 Authority Key Identifier: keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:13:f8:0f:a9:1c:23:1c:42:88:df:9e:d4:b2:41:59:2f:b6: 83:4c:20:b6:a9:35:b0:80:68:54:fd:5c:3a:bd:70:c5:5e:4e: f5:f1:c9:f1:00:12:2c:fc:64:eb:a5:fd:0a:45:c2:be:ab:87: 94:08:ec:c8:8f:4d:2b:9e:93:59:1e:6c:97:87:76:fc:1e:85: 38:de:13:9e:1d:84:6a:6d:90:03:2f:72:e6:98:e0:57:26:11: 90:ef:73:bf:b1:16:2c:cd:d8:2e:ae:1f:be:c9:3c:aa:4c:77: 6a:10:40:80:fe:8e:5d:ce:3a:e7:58:fc:04:8f:d1:75:5d:c2: e8:1b:e3:45:c7:81:c0:29:ce:f2:49:03:1e:a0:fc:40:00:58: 8b:26:24:3b:75:76:14:55:17:87:3f:06:93:c4:a2:04:43:6a: 44:82:df:97:9f:29:35:7a:5a:d3:73:4a:49:97:4c:ba:40:65: 7d:ca:b7:3b:4c:b0:dd:d8:96:8a:5e:8d:0f:57:3f:75:8d:86: 2c:6f:f1:a4:d2:b4:de:04:33:88:11:18:03:19:85:8b:61:f9: 8e:cf:36:7b:61:3a:59:45:99:eb:76:d2:f8:a7:3e:57:b8:93: b9:28:76:a7:f9:ce:b6:08:ac:74:40:e8:26:dc:9a:cf:b9:8a: ba:b0:89:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUu88sHZPuXoknLjRPtOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzY3ZmMyNGQwMDRmNzFkZDJhZWYwM2Y5Y2I0ZjJlM2Y5 MDg2YWEwHhcNMjUxMjE2MTgwMTIyWhcNMjUxMjE3MTgwMTIyWjAzMTEwLwYDVQQD Eyg5NDc3NzdiMjQ3Mzc4MDY5YzMwNzBhZWEzYWRlNDllYzRlOWFhZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5CWLHNnpQznVaS0fo3PYSrnh0V4 buX7wdA5SoOp28G0WF6D96dXZw8cBbBVpEwnAxn+LaB7+2HtMVwqFaJ0WaE1enfg JE/0lN5tI6U0my35IpnAV1wm59BcZggH/3kfc+quRDEeO5aE00l4J5rMJeLgmyvR nCDFsUy7poIZNyGtdAZ8RWIqxfXf83trk0J++HsQizrnv+vVYfaV8V01/Mx/S4pE Zqy7jCwGdpil2txEPAo90oBlCmOjv4+MaFGUB1o2jE0k30PE84vD/q1HoeoEy5VI GY01bXKHRy3TXjQE6zRMwOuVx3dW34F4q6M4X2QZhUcgLkcZiVCW8RxQRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJR3d7JHN4BpwwcK6jreSexOmq59MB8GA1UdIwQY MBaAFNc2f8JNAE9x3SrvA/nLTy4/kIaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQt YjljNzk0ZTAzY2JhLzEvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQtYjljNzk0ZTAzY2Jh LzEvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRP4D6kc IxxCiN+e1LJBWS+2g0wgtqk1sIBoVP1cOr1wxV5O9fHJ8QASLPxk66X9CkXCvquH lAjsyI9NK56TWR5sl4d2/B6FON4Tnh2Eam2QAy9y5pjgVyYRkO9zv7EWLM3YLq4f vsk8qkx3ahBAgP6OXc4651j8BI/RdV3C6BvjRceBwCnO8kkDHqD8QABYiyYkO3V2 FFUXhz8Gk8SiBENqRILfl58pNXpa03NKSZdMukBlfcq3O0yw3diWil6ND1c/dY2G LG/xpNK03gQziBEYAxmFi2H5js82e2E6WUWZ63bS+Kc+V7iTuSh2p/nOtgisdEDo Jtyaz7mKurCJcQ== -----END CERTIFICATE-----Generated at Tue Dec 16 23:19:42 2025 by rpki-client