This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json) Hash identifier: nhamK/b9oYXijIKnGOczrmVAnLJAfzwITkc6vMhhPuI= Subject key identifier: 1F:F0:EA:22:17:B6:8C:F2:A6:DA:33:38:28:1A:CA:C3:65:77:DE:A4 Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef Certificate serial: 019B68E9B6EA20C65261D22772978F02B19D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 07:01:45 +0000 Manifest this update: Mon 29 Dec 2025 07:01:45 +0000 Manifest next update: Tue 30 Dec 2025 07:01:45 +0000 Files and hashes: 1: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: +8v6XKabPQSR7H9Ax3KxNHDA5T3lJs1YoFF0+6RW8Qw=) 2: l-W1P1FXUZq5Rom6HiLNeHjPeZk.roa (hash: JZU81XbPivNOV4ANlQqRFiS9x8fNQ6LSZbTjlzXEnFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:b6:ea:20:c6:52:61:d2:27:72:97:8f:02:b1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef Validity Not Before: Dec 29 07:01:45 2025 GMT Not After : Dec 30 07:01:45 2025 GMT Subject: CN=1ff0ea2217b68cf2a6da3338281acac36577dea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:83:89:18:14:6b:d2:22:f6:8b:15:ba:58: 19:9a:bf:4a:e6:09:51:25:f7:60:db:10:a6:10:95: 77:b7:44:63:bf:cc:73:19:1f:ba:99:36:24:6f:00: a5:70:f2:f6:82:fd:bc:13:b5:fb:19:b3:4a:bf:a6: 8d:6f:67:fd:ee:6c:6c:a9:b8:3b:08:ea:47:a3:fd: 56:31:d7:9a:ac:ca:29:99:05:2a:c6:e2:c0:66:ab: 67:7b:44:ae:37:7b:69:94:7f:fc:4d:01:1c:5d:1a: 62:dd:21:58:0c:28:a3:2a:7c:f9:64:10:55:f1:24: b1:2b:b1:42:82:41:c4:69:11:7a:77:45:03:38:50: 45:c7:9e:f2:f3:3f:e0:8e:2c:2d:f4:24:cb:11:89: 29:b6:33:35:72:4d:52:e4:ca:3c:80:3f:b4:17:00: 3e:5c:d2:58:36:89:4b:42:c8:cd:ca:3c:5f:0c:ea: 45:e7:a8:9b:2d:b9:d9:f4:11:24:8f:73:d0:53:71: 8a:52:89:ab:3e:57:94:dd:7c:51:7a:c0:2c:60:d2: 66:96:5f:32:91:76:0e:fb:a3:e9:1d:80:55:a4:38: 7b:17:e3:9c:68:df:09:83:10:ce:d5:bb:2e:29:29: ca:6f:0f:d8:17:67:76:a5:ad:9f:ae:a3:3c:bd:92: f7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F0:EA:22:17:B6:8C:F2:A6:DA:33:38:28:1A:CA:C3:65:77:DE:A4 X509v3 Authority Key Identifier: keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:78:92:f1:2b:eb:bc:a7:51:f6:6c:7f:50:b8:63:06:9f:3b: 69:e4:0b:02:07:ab:99:8f:59:ba:17:f3:8d:5c:6e:dc:90:3b: fa:07:79:7d:5c:a0:0d:e0:e0:c9:fb:de:3f:04:86:21:a6:20: ff:f1:e4:00:90:bd:cd:90:1e:20:9e:1a:20:34:70:01:94:5a: 8d:1d:5b:28:de:c4:c2:c2:1c:c8:7d:29:17:c3:95:53:42:0e: 50:cb:eb:72:df:73:a4:49:87:38:87:65:bc:53:53:0b:1d:a8: 13:86:bb:fb:e5:f3:ed:90:29:a6:08:07:63:ad:9b:97:db:5e: 9a:fe:90:10:15:fc:c6:3f:4e:4b:e4:30:d8:23:f2:fd:f2:d9: 5a:fc:de:9b:ef:48:9f:c4:25:6a:b9:3a:f8:fe:0b:8d:51:46: 26:44:8c:7e:f9:ea:41:cb:0d:17:3a:bc:1e:3d:77:d1:7c:eb: b6:3e:21:34:1c:72:4f:fc:83:85:62:ad:01:79:ff:79:6f:a9: 41:6c:00:e3:cd:db:4e:d4:64:d0:51:23:cc:41:d9:70:f5:aa: ee:18:87:a6:3b:8f:7f:72:85:c7:56:dd:97:43:63:ca:d1:78: c7:d8:9a:b7:bc:f9:79:88:f5:a7:c4:ef:78:1d:91:63:57:4c: 7a:f5:5b:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6bbqIMZSYdIncpePArGdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmM2VkM2Q0ZDQ3YjhlODI1ZmJmZDA3OTQ4MmY3YTBjMjFk YzkxZWYwHhcNMjUxMjI5MDcwMTQ1WhcNMjUxMjMwMDcwMTQ1WjAzMTEwLwYDVQQD EygxZmYwZWEyMjE3YjY4Y2YyYTZkYTMzMzgyODFhY2FjMzY1NzdkZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYuDiRgUa9Ii9osVulgZmr9K5glR Jfdg2xCmEJV3t0Rjv8xzGR+6mTYkbwClcPL2gv28E7X7GbNKv6aNb2f97mxsqbg7 COpHo/1WMdearMopmQUqxuLAZqtne0SuN3tplH/8TQEcXRpi3SFYDCijKnz5ZBBV 8SSxK7FCgkHEaRF6d0UDOFBFx57y8z/gjiwt9CTLEYkptjM1ck1S5Mo8gD+0FwA+ XNJYNolLQsjNyjxfDOpF56ibLbnZ9BEkj3PQU3GKUomrPleU3XxResAsYNJmll8y kXYO+6PpHYBVpDh7F+OcaN8JgxDO1bsuKSnKbw/YF2d2pa2frqM8vZL3zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/w6iIXtozyptozOCgaysNld96kMB8GA1UdIwQY MBaAFP8+09TUe46CX7/QeUgvegwh3JHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2Mzct NWIwOWE2NzQzMzc1LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2MzctNWIwOWE2NzQzMzc1 LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHiS8Svr vKdR9mx/ULhjBp87aeQLAgermY9ZuhfzjVxu3JA7+gd5fVygDeDgyfvePwSGIaYg //HkAJC9zZAeIJ4aIDRwAZRajR1bKN7EwsIcyH0pF8OVU0IOUMvrct9zpEmHOIdl vFNTCx2oE4a7++Xz7ZAppggHY62bl9temv6QEBX8xj9OS+Qw2CPy/fLZWvzem+9I n8Qlark6+P4LjVFGJkSMfvnqQcsNFzq8Hj130Xzrtj4hNBxyT/yDhWKtAXn/eW+p QWwA483bTtRk0FEjzEHZcPWq7hiHpjuPf3KFx1bdl0NjytF4x9iat7z5eYj1p8Tv eB2RY1dMevVbJw== -----END CERTIFICATE-----Generated at Mon Dec 29 16:26:39 2025 by rpki-client