This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft File: 1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json) Hash identifier: c0gp7hCpJyCGwCUCcrLx3VQCAkGn6VtD6Hb9oXzpVyM= Subject key identifier: 3D:CD:CC:1F:72:13:B9:DB:1E:57:AA:A7:6B:F2:37:F5:94:35:CB:0C Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28 Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328 Certificate serial: 019B6C57DECD04DD75D2E5573BF090C2D35B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft Manifest number: 070C Signing time: Mon 29 Dec 2025 23:00:56 +0000 Manifest this update: Mon 29 Dec 2025 23:00:56 +0000 Manifest next update: Tue 30 Dec 2025 23:00:56 +0000 Files and hashes: 1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: 0sQMr73lSL88P8wp5V3ITwUBbPE2BhvGgwQqTyaD2e8=) 2: oZt6wOeBPRzgxfrSHyQvaXZ61CE.roa (hash: 0c3+xTwK5KGYXpDaZhmc1MdZZB2Ym1lrAvZHlgXOKE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:57:de:cd:04:dd:75:d2:e5:57:3b:f0:90:c2:d3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328 Validity Not Before: Dec 29 23:00:56 2025 GMT Not After : Dec 30 23:00:56 2025 GMT Subject: CN=3dcdcc1f7213b9db1e57aaa76bf237f59435cb0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:09:b5:44:7e:81:c0:bc:32:6e:6d:f6:30: f7:d1:d9:70:03:fd:8f:c7:3c:e2:be:d6:11:f2:f1: 90:78:f5:30:6e:4b:20:7e:18:1a:46:1f:51:6f:47: 82:07:70:a5:d7:38:39:17:8d:12:06:8e:87:dc:3b: 48:a8:4a:9a:ff:c2:c8:7d:1a:0a:8a:47:fa:bb:04: ed:75:9a:bb:03:f0:83:7f:e5:c5:01:d6:ed:ac:c4: e6:65:7e:d9:4a:3e:8a:9a:ed:b4:b4:df:17:a6:a0: 0c:19:5f:d9:bf:17:db:ab:8c:12:36:ee:a0:75:05: 85:32:65:ee:08:0d:9d:e3:fe:33:13:37:95:ba:77: 4a:d9:4a:86:a8:5f:b5:4c:0f:52:bd:4b:32:68:7a: ab:10:03:ec:e4:fa:ba:78:d7:b8:cb:12:98:48:4e: a7:ef:02:88:95:87:41:3d:00:09:5c:d8:d7:cd:de: 1a:57:78:af:1e:ce:3c:2b:16:60:8b:da:5f:2c:a1: 9b:1d:3a:8c:b1:54:f9:69:00:2d:d6:a6:9b:4d:be: 89:0b:71:9d:16:8b:21:ab:85:4a:67:ad:d8:4c:e8: 98:9e:84:ff:c8:f8:74:1d:08:63:39:c2:1f:f3:ea: e2:74:69:c5:b0:64:83:19:83:2f:54:67:d6:0c:76: 2c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CD:CC:1F:72:13:B9:DB:1E:57:AA:A7:6B:F2:37:F5:94:35:CB:0C X509v3 Authority Key Identifier: keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:10:85:c7:7a:a7:e7:81:dd:57:57:03:cb:37:4f:c5:eb:46: 18:9a:a9:e1:be:56:64:a6:68:55:9b:61:20:8a:93:9b:32:b4: 81:91:51:eb:ba:20:b2:a1:41:1d:da:61:4a:58:88:b7:72:79: 05:93:e1:0e:74:7a:17:23:e7:fd:c3:21:58:de:fc:01:04:22: a6:01:b7:64:e7:da:56:07:9f:91:f1:2d:e4:92:f6:73:60:c7: 7a:68:56:4d:81:5d:ab:ee:a5:a5:3c:7a:23:c7:a5:da:fd:9b: cd:be:1e:6e:27:e4:a6:b0:e0:00:d8:42:9c:61:7c:3a:95:01: 8a:26:50:c5:f6:c9:03:15:ba:79:70:13:70:62:23:f4:75:09: 5e:f5:00:42:8b:9c:68:1a:1d:7b:05:00:b8:08:34:7a:09:d6: 75:bb:57:bd:3d:3a:46:bc:8d:91:b4:68:bc:83:33:3f:5c:4b: 62:9c:c9:9b:c2:a5:fa:2c:14:3b:71:3e:63:a3:54:2a:e7:55: 5a:02:13:a5:58:ca:77:0a:f9:07:04:29:da:7d:27:f0:9e:f7: 50:f4:55:1b:ec:01:80:43:5b:fb:e1:77:e0:e8:3c:8f:d6:56: 7a:b6:96:5c:49:f2:e3:53:5f:12:69:c0:88:34:ac:96:2e:80: 2d:fe:28:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsV97NBN110uVXO/CQwtNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1OTU2Y2IyZThiYmI0ZDQyOTcyOGUwMWUyMGZkM2M4ZTA1 ZjMzMjgwHhcNMjUxMjI5MjMwMDU2WhcNMjUxMjMwMjMwMDU2WjAzMTEwLwYDVQQD EygzZGNkY2MxZjcyMTNiOWRiMWU1N2FhYTc2YmYyMzdmNTk0MzVjYjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcEJtUR+gcC8Mm5t9jD30dlwA/2P xzzivtYR8vGQePUwbksgfhgaRh9Rb0eCB3Cl1zg5F40SBo6H3DtIqEqa/8LIfRoK ikf6uwTtdZq7A/CDf+XFAdbtrMTmZX7ZSj6Kmu20tN8XpqAMGV/Zvxfbq4wSNu6g dQWFMmXuCA2d4/4zEzeVundK2UqGqF+1TA9SvUsyaHqrEAPs5Pq6eNe4yxKYSE6n 7wKIlYdBPQAJXNjXzd4aV3ivHs48KxZgi9pfLKGbHTqMsVT5aQAt1qabTb6JC3Gd Foshq4VKZ63YTOiYnoT/yPh0HQhjOcIf8+ridGnFsGSDGYMvVGfWDHYsHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3NzB9yE7nbHleqp2vyN/WUNcsMMB8GA1UdIwQY MBaAFNWVbLLou7TUKXKOAeIP08jgXzMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jYmE3MTgtYWE3My00ZDM3LTlhMDQt OThkYWJlM2UyNjYyLzEvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jYmE3MTgtYWE3My00ZDM3LTlhMDQtOThkYWJlM2UyNjYy LzEvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRCFx3qn 54HdV1cDyzdPxetGGJqp4b5WZKZoVZthIIqTmzK0gZFR67ogsqFBHdphSliIt3J5 BZPhDnR6FyPn/cMhWN78AQQipgG3ZOfaVgefkfEt5JL2c2DHemhWTYFdq+6lpTx6 I8el2v2bzb4ebifkprDgANhCnGF8OpUBiiZQxfbJAxW6eXATcGIj9HUJXvUAQouc aBodewUAuAg0egnWdbtXvT06RryNkbRovIMzP1xLYpzJm8Kl+iwUO3E+Y6NUKudV WgITpVjKdwr5BwQp2n0n8J73UPRVG+wBgENb++F34Og8j9ZWeraWXEny41NfEmnA iDSsli6ALf4oBQ== -----END CERTIFICATE-----Generated at Tue Dec 30 07:14:11 2025 by rpki-client