This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft File: zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json) Hash identifier: 69bJLflDk3Y6QM6FzArGHinUgVSDYKkGQyThMNpo0DM= Subject key identifier: A7:6A:55:38:4F:41:16:29:19:43:A0:7B:95:6C:F0:44:5B:35:A1:09 Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85 Certificate issuer: /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485 Certificate serial: 019B3D5A4EA3893F8753C8F7CF86310A1FBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 20:01:27 +0000 Manifest this update: Sat 20 Dec 2025 20:01:27 +0000 Manifest next update: Sun 21 Dec 2025 20:01:27 +0000 Files and hashes: 1: ugeI_SPpOI_az_dGl_P54hP9qpg.roa (hash: HZZ/y/qcvJFbb7qD1Pg6FgrRdOBnE2ywGhjLdlNi6S8=) 2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: xnzJG+kvwLWPshEHWQaJHicPVyHsjyee/bs1hhiooDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:4e:a3:89:3f:87:53:c8:f7:cf:86:31:0a:1f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485 Validity Not Before: Dec 20 20:01:27 2025 GMT Not After : Dec 21 20:01:27 2025 GMT Subject: CN=a76a55384f4116291943a07b956cf0445b35a109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:00:d8:f3:0f:b5:6e:b5:4b:b9:ba:7c:7c:2c: 00:62:7c:7c:80:b1:69:90:5c:e7:63:00:80:69:ee: 60:66:7e:1d:fd:d4:74:43:c6:93:86:43:fe:7b:78: 16:5a:17:df:89:75:c1:9a:08:c0:ce:17:2a:e8:db: 67:7e:ab:a4:4d:32:09:dc:f2:a4:84:3d:6a:05:c8: de:11:e6:8e:02:56:83:2b:ac:9e:2d:f6:7a:92:65: 1f:bb:32:58:9a:44:4b:03:dd:2a:24:03:3f:ba:ba: 15:eb:a5:5f:6f:0f:10:8d:1a:dd:03:bd:1b:87:81: 77:9a:5b:9c:34:ab:ca:a6:d9:9a:1a:74:58:d0:90: 12:6e:61:cb:fe:9a:7a:ca:fe:35:6e:36:49:05:b3: bc:67:90:80:86:58:df:a8:85:0b:27:da:ba:85:ee: fb:7a:49:a2:d6:42:23:e5:87:88:1d:50:6f:38:3c: f8:7d:7c:ba:f4:6d:ef:69:6c:11:65:4e:2d:eb:91: 9c:5d:19:70:48:75:df:af:4e:ee:29:f9:5a:c8:ef: ab:a1:6f:1b:7e:93:7a:7c:4b:06:8e:ac:ff:51:cd: 96:e4:50:07:e3:be:b7:9c:e2:c9:d6:df:33:aa:bd: dd:13:12:10:98:4c:79:44:b3:a5:80:92:86:63:34: 23:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6A:55:38:4F:41:16:29:19:43:A0:7B:95:6C:F0:44:5B:35:A1:09 X509v3 Authority Key Identifier: keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:55:33:3d:37:2d:c9:6e:cc:37:96:6a:ee:f9:c7:01:fa:3e: bb:51:1e:8e:57:e4:1c:1c:39:bc:10:f3:5c:15:65:bc:6a:d0: 1e:3e:05:3c:76:17:19:ec:a6:8b:fe:67:8d:b8:94:b7:65:85: 12:ee:2c:85:1a:1a:0c:43:a8:3e:3c:ad:ae:b0:3a:d7:04:b9: 61:e6:2c:c3:7c:f0:63:a6:ad:06:31:16:a1:06:09:ac:5c:83: 51:89:3a:15:a0:d3:fd:20:44:20:1f:0e:14:0d:1d:c7:da:2b: 0b:bf:4c:8e:49:d1:3a:b3:22:90:64:f5:a2:15:87:ce:f3:c9: d8:7c:bd:6e:9e:51:e1:75:ea:d3:9d:c4:46:9a:72:24:46:5f: f0:d4:9b:5e:ba:3e:1b:47:13:08:02:04:31:86:11:23:f3:41: 5b:ae:52:76:57:76:d2:ae:03:4c:31:26:fd:64:4a:c3:cc:f6: a8:43:28:1f:43:3f:74:ec:db:d1:69:35:90:50:6f:d1:20:11: 1b:1a:dc:da:ce:25:69:6f:9f:fd:95:0f:e5:54:0b:ae:56:86: 4d:81:93:72:22:82:c3:af:94:b2:f9:22:cb:9a:5c:88:27:aa: b5:85:78:98:ec:03:9d:98:34:1e:cd:4c:98:0c:82:80:bc:5f: bb:76:b4:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wk6jiT+HU8j3z4YxCh++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTc5Y2NmMTBhZmY1Zjc3MzY5NGQ5ZjQzZTVkNWRiNDcy ZDY0ODUwHhcNMjUxMjIwMjAwMTI3WhcNMjUxMjIxMjAwMTI3WjAzMTEwLwYDVQQD EyhhNzZhNTUzODRmNDExNjI5MTk0M2EwN2I5NTZjZjA0NDViMzVhMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wDY8w+1brVLubp8fCwAYnx8gLFp kFznYwCAae5gZn4d/dR0Q8aThkP+e3gWWhffiXXBmgjAzhcq6NtnfqukTTIJ3PKk hD1qBcjeEeaOAlaDK6yeLfZ6kmUfuzJYmkRLA90qJAM/uroV66Vfbw8QjRrdA70b h4F3mlucNKvKptmaGnRY0JASbmHL/pp6yv41bjZJBbO8Z5CAhljfqIULJ9q6he77 ekmi1kIj5YeIHVBvODz4fXy69G3vaWwRZU4t65GcXRlwSHXfr07uKflayO+roW8b fpN6fEsGjqz/Uc2W5FAH4763nOLJ1t8zqr3dExIQmEx5RLOlgJKGYzQjoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdqVThPQRYpGUOge5Vs8ERbNaEJMB8GA1UdIwQY MBaAFM2XnM8Qr/X3c2lNn0Pl1dtHLWSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelplY3p4Q3Y5ZmR6YVUyZlEtWFYyMGN0WklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81YzZmM2YtMGJhYi00ZmQwLWJmOTQt NzY1NmRhNmVkZTA5LzEvelplY3p4Q3Y5ZmR6YVUyZlEtWFYyMGN0WklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi81YzZmM2YtMGJhYi00ZmQwLWJmOTQtNzY1NmRhNmVkZTA5 LzEvelplY3p4Q3Y5ZmR6YVUyZlEtWFYyMGN0WklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1UzPTct yW7MN5Zq7vnHAfo+u1EejlfkHBw5vBDzXBVlvGrQHj4FPHYXGeymi/5njbiUt2WF Eu4shRoaDEOoPjytrrA61wS5YeYsw3zwY6atBjEWoQYJrFyDUYk6FaDT/SBEIB8O FA0dx9orC79MjknROrMikGT1ohWHzvPJ2Hy9bp5R4XXq053ERppyJEZf8NSbXro+ G0cTCAIEMYYRI/NBW65Sdld20q4DTDEm/WRKw8z2qEMoH0M/dOzb0Wk1kFBv0SAR Gxrc2s4laW+f/ZUP5VQLrlaGTYGTciKCw6+Usvkiy5pciCeqtYV4mOwDnZg0Hs1M mAyCgLxfu3a0gw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:08:12 2025 by rpki-client