This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json) Hash identifier: GoJ1W/jRmmFxZNCST4RmoIyZV87413CMZEiTsZHb3kY= Subject key identifier: DD:DB:B5:95:76:71:DB:D5:56:CA:CA:27:44:BC:BC:E3:A8:31:7E:FC Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Certificate serial: 019B3AC6BF3E3E04B35A8B74FAFF04B06FC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 08:01:02 +0000 Manifest this update: Sat 20 Dec 2025 08:01:02 +0000 Manifest next update: Sun 21 Dec 2025 08:01:02 +0000 Files and hashes: 1: 5iOaoXB5nkYwr8tIgFWyVnXEhjk.roa (hash: 75KyluwEydMP2XQT86kr0piX0sxxFkty1yXB3kElNns=) 2: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: vVMXrmcMyANOfwDvycxd8d2dyeAI90wOV2YzuhJ5w4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:bf:3e:3e:04:b3:5a:8b:74:fa:ff:04:b0:6f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c Validity Not Before: Dec 20 08:01:02 2025 GMT Not After : Dec 21 08:01:02 2025 GMT Subject: CN=dddbb5957671dbd556caca2744bcbce3a8317efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:31:8d:ca:b6:be:ee:e3:f4:9f:95:ce:ac:67: d5:8e:c2:0f:25:0f:8f:a8:56:13:d9:98:f5:af:cc: e3:f1:9b:1b:e7:85:7a:2a:c8:45:dd:1a:b8:7e:c8: 89:bf:01:8d:7f:f9:90:0e:cf:2e:60:cd:12:bf:85: 0f:7f:b5:b7:d7:20:97:01:45:0d:e2:b1:12:01:81: 91:29:9b:87:bf:5f:66:e9:d8:db:f1:22:39:2c:70: d9:8d:2c:a8:3f:de:c2:1c:40:15:57:cb:68:0c:f8: 2a:b8:7f:1b:c2:b0:c2:0f:ae:e0:83:55:90:37:1f: f5:3f:28:6f:0e:40:e6:2e:9f:d3:38:7d:0d:8a:42: 45:81:0b:44:18:2a:b6:4f:fd:cd:d1:53:1b:96:ac: dc:01:6e:3b:04:80:df:9f:04:d2:dc:64:44:8c:9a: 5d:9f:a9:ae:a3:00:a7:9e:f6:74:d8:33:cd:24:98: f8:99:e9:63:b1:57:09:de:53:ea:61:1d:5a:fa:78: 40:69:15:55:e7:88:b4:40:1e:4f:7f:54:6f:4a:82: 4d:d1:d8:21:9e:da:25:18:71:9c:17:6a:92:e0:d0: 56:a3:ac:f5:30:aa:75:77:44:87:fb:41:b1:45:9f: e4:96:13:61:33:56:04:86:1c:d5:45:55:c5:1f:7e: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DB:B5:95:76:71:DB:D5:56:CA:CA:27:44:BC:BC:E3:A8:31:7E:FC X509v3 Authority Key Identifier: keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:80:36:ae:e8:b1:19:4f:22:28:6c:96:c8:25:a2:e6:d9:ac: e6:15:ff:36:c9:d5:7d:7b:2f:9a:d9:4b:06:8c:67:b3:7b:a2: 35:04:0a:ed:e0:17:de:ee:66:5c:58:76:a6:40:dc:97:db:19: 13:73:95:7f:52:fc:86:96:c1:a3:d1:8b:36:db:43:1a:46:a9: cd:6e:6c:ab:49:d4:62:ad:c7:0b:6c:78:e0:da:af:81:ac:f8: dd:7c:40:df:39:9f:c9:e0:5a:1f:c5:20:8b:3b:5b:e3:6c:b2: 47:42:26:63:67:8f:56:03:a9:78:e5:f7:ab:e8:85:fc:6a:b2: fa:71:70:ad:85:4e:08:f0:96:78:52:80:0d:62:a7:2f:ea:cc: 8e:63:38:0e:9d:1b:f1:c0:b1:4f:66:4a:59:55:6c:fa:51:72: 76:a2:ce:e6:dd:bb:60:8f:f0:4a:84:ce:9a:cc:8a:25:1a:84: f7:50:9d:a0:99:d7:5d:85:b3:3a:93:47:6a:bf:9f:9f:ff:79: 25:48:5f:40:2f:b0:29:e6:99:c3:32:87:bc:fe:27:ef:55:f9: df:7d:2c:65:41:2a:63:72:1f:67:94:d9:60:a4:45:05:da:41: dc:49:5c:1d:f1:92:6d:1a:7f:ae:5f:69:d3:08:bb:ea:c5:8b: 7d:63:29:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xr8+PgSzWot0+v8EsG/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZGYzNzlmYWFmMjEwYTcwMzZkYWMwNWRlNmI1NzcyZGJl NGRkNmMwHhcNMjUxMjIwMDgwMTAyWhcNMjUxMjIxMDgwMTAyWjAzMTEwLwYDVQQD EyhkZGRiYjU5NTc2NzFkYmQ1NTZjYWNhMjc0NGJjYmNlM2E4MzE3ZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DGNyra+7uP0n5XOrGfVjsIPJQ+P qFYT2Zj1r8zj8Zsb54V6KshF3Rq4fsiJvwGNf/mQDs8uYM0Sv4UPf7W31yCXAUUN 4rESAYGRKZuHv19m6djb8SI5LHDZjSyoP97CHEAVV8toDPgquH8bwrDCD67gg1WQ Nx/1PyhvDkDmLp/TOH0NikJFgQtEGCq2T/3N0VMblqzcAW47BIDfnwTS3GREjJpd n6muowCnnvZ02DPNJJj4meljsVcJ3lPqYR1a+nhAaRVV54i0QB5Pf1RvSoJN0dgh ntolGHGcF2qS4NBWo6z1MKp1d0SH+0GxRZ/klhNhM1YEhhzVRVXFH36IpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3btZV2cdvVVsrKJ0S8vOOoMX78MB8GA1UdIwQY MBaAFGXfN5+q8hCnA22sBd5rV3Lb5N1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgt MDc2Yzg4Yjg4MDJmLzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgtMDc2Yzg4Yjg4MDJm LzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoA2ruix GU8iKGyWyCWi5tms5hX/NsnVfXsvmtlLBoxns3uiNQQK7eAX3u5mXFh2pkDcl9sZ E3OVf1L8hpbBo9GLNttDGkapzW5sq0nUYq3HC2x44Nqvgaz43XxA3zmfyeBaH8Ug iztb42yyR0ImY2ePVgOpeOX3q+iF/Gqy+nFwrYVOCPCWeFKADWKnL+rMjmM4Dp0b 8cCxT2ZKWVVs+lFydqLO5t27YI/wSoTOmsyKJRqE91CdoJnXXYWzOpNHar+fn/95 JUhfQC+wKeaZwzKHvP4n71X5330sZUEqY3IfZ5TZYKRFBdpB3ElcHfGSbRp/rl9p 0wi76sWLfWMpOQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:16:04 2025 by rpki-client