This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft File: zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json) Hash identifier: cR4X9mrw0D6jPHeWwXuvIK92Wh2RKNVu70zssCE08YI= Subject key identifier: E6:09:FE:64:01:B6:69:49:09:84:B6:D3:CF:E7:97:E7:6A:2E:CC:DE Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85 Certificate issuer: /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485 Certificate serial: 019B65E855F08C887EA59F0587316B6523EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 17:01:23 +0000 Manifest this update: Sun 28 Dec 2025 17:01:23 +0000 Manifest next update: Mon 29 Dec 2025 17:01:23 +0000 Files and hashes: 1: ugeI_SPpOI_az_dGl_P54hP9qpg.roa (hash: HZZ/y/qcvJFbb7qD1Pg6FgrRdOBnE2ywGhjLdlNi6S8=) 2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: nmxTXdAL8HFq3jwbRfuLZMzlvBSKS+vO+ZZT/xl0GIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e8:55:f0:8c:88:7e:a5:9f:05:87:31:6b:65:23:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485 Validity Not Before: Dec 28 17:01:23 2025 GMT Not After : Dec 29 17:01:23 2025 GMT Subject: CN=e609fe6401b669490984b6d3cfe797e76a2eccde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7c:4a:93:95:9c:8e:d3:05:fd:cc:37:f5:f7: 91:9d:16:d7:91:1f:27:b8:37:0b:7b:e1:94:b3:27: 9b:12:31:9e:1c:b0:5c:0f:a2:ff:7e:6f:ce:3c:e3: fa:3a:7b:66:1d:b4:7c:6c:c3:a5:30:02:dc:c8:23: 50:5a:e9:2b:d1:33:d4:bb:a9:4f:6c:e2:1e:8c:84: 56:60:24:83:36:40:39:72:08:c7:66:23:1d:f1:d7: ca:90:d9:08:f2:70:f0:d2:0e:75:77:be:b2:b7:41: 3b:68:47:74:6d:32:c2:d0:84:15:31:a1:d5:7a:33: bb:53:eb:f5:24:3d:d6:3a:a9:c8:db:2e:b6:75:ae: 3f:0f:d7:13:23:f4:dc:ed:89:eb:03:59:34:f1:9f: 93:f6:63:6d:e9:31:86:8c:f8:43:6f:79:a3:ea:90: 58:e3:23:9a:67:22:6c:10:83:3c:76:ea:4b:5d:36: 11:1c:10:e9:ba:9d:5b:1f:51:d8:6f:26:5d:c9:83: 40:ff:ab:38:cb:7f:6f:1a:63:97:73:1b:50:f2:ef: 05:b3:18:df:11:3f:d1:31:63:80:e5:f1:2b:5a:5d: 8d:73:95:a2:f5:7c:66:47:2e:dd:05:94:95:ed:17: e9:b3:c0:9d:c0:f2:60:f3:5d:e4:fd:c7:fc:98:89: a1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:09:FE:64:01:B6:69:49:09:84:B6:D3:CF:E7:97:E7:6A:2E:CC:DE X509v3 Authority Key Identifier: keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:22:ed:07:a0:fe:07:7f:83:56:f8:6f:41:4e:55:6f:4c:41: a8:a4:9c:d8:2d:e7:40:7c:95:3a:0a:9f:e1:2f:ab:0a:10:51: e1:8a:b3:97:60:a3:0e:5f:db:a5:4b:4b:96:f7:42:36:2b:db: 50:59:1f:6a:54:7c:7d:04:fa:f0:91:e7:bf:53:fa:63:a1:2e: 5c:49:60:1a:98:d6:ad:8f:f9:4f:6c:e9:4d:a3:d1:0c:86:14: 02:71:92:99:8c:ce:85:c0:31:82:a4:90:ab:7a:15:da:99:05: 9a:c5:db:a0:8d:1f:e3:9b:7e:fe:41:ee:b8:17:b0:82:a0:f5: 77:1c:9e:cc:9b:53:89:a3:a5:19:ee:14:9f:b4:b9:6c:a5:67: c9:f7:87:98:d5:80:8d:4c:02:76:5f:98:31:ab:a2:07:2d:f1: 07:96:8f:4a:44:7e:07:bf:0c:a6:82:4e:b0:97:96:52:55:71: 51:a7:f8:06:4c:54:0b:9b:04:f5:c3:fe:75:a9:f3:06:a1:b3: 7a:fc:cb:43:70:11:91:a6:9b:ef:f8:28:20:bb:ed:8b:11:58: 85:90:c0:3d:5a:f5:94:f1:be:e5:30:76:e6:05:74:38:fa:85: 0f:88:69:96:db:93:eb:ea:92:e8:68:67:8d:a2:69:7c:2e:79: b5:ce:a8:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl6FXwjIh+pZ8FhzFrZSPrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTc5Y2NmMTBhZmY1Zjc3MzY5NGQ5ZjQzZTVkNWRiNDcy ZDY0ODUwHhcNMjUxMjI4MTcwMTIzWhcNMjUxMjI5MTcwMTIzWjAzMTEwLwYDVQQD EyhlNjA5ZmU2NDAxYjY2OTQ5MDk4NGI2ZDNjZmU3OTdlNzZhMmVjY2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXxKk5WcjtMF/cw39feRnRbXkR8n uDcLe+GUsyebEjGeHLBcD6L/fm/OPOP6OntmHbR8bMOlMALcyCNQWukr0TPUu6lP bOIejIRWYCSDNkA5cgjHZiMd8dfKkNkI8nDw0g51d76yt0E7aEd0bTLC0IQVMaHV ejO7U+v1JD3WOqnI2y62da4/D9cTI/Tc7YnrA1k08Z+T9mNt6TGGjPhDb3mj6pBY 4yOaZyJsEIM8dupLXTYRHBDpup1bH1HYbyZdyYNA/6s4y39vGmOXcxtQ8u8Fsxjf ET/RMWOA5fErWl2Nc5Wi9XxmRy7dBZSV7Rfps8CdwPJg813k/cf8mImhnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYJ/mQBtmlJCYS208/nl+dqLszeMB8GA1UdIwQY MBaAFM2XnM8Qr/X3c2lNn0Pl1dtHLWSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelplY3p4Q3Y5ZmR6YVUyZlEtWFYyMGN0WklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81YzZmM2YtMGJhYi00ZmQwLWJmOTQt NzY1NmRhNmVkZTA5LzEvelplY3p4Q3Y5ZmR6YVUyZlEtWFYyMGN0WklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi81YzZmM2YtMGJhYi00ZmQwLWJmOTQtNzY1NmRhNmVkZTA5 LzEvelplY3p4Q3Y5ZmR6YVUyZlEtWFYyMGN0WklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiLtB6D+ B3+DVvhvQU5Vb0xBqKSc2C3nQHyVOgqf4S+rChBR4Yqzl2CjDl/bpUtLlvdCNivb UFkfalR8fQT68JHnv1P6Y6EuXElgGpjWrY/5T2zpTaPRDIYUAnGSmYzOhcAxgqSQ q3oV2pkFmsXboI0f45t+/kHuuBewgqD1dxyezJtTiaOlGe4Un7S5bKVnyfeHmNWA jUwCdl+YMauiBy3xB5aPSkR+B78MpoJOsJeWUlVxUaf4BkxUC5sE9cP+danzBqGz evzLQ3ARkaab7/goILvtixFYhZDAPVr1lPG+5TB25gV0OPqFD4hpltuT6+qS6Ghn jaJpfC55tc6oLw== -----END CERTIFICATE-----Generated at Sun Dec 28 18:53:42 2025 by rpki-client