This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft File: ZnsrG--6F48w0qMhxFG27qVGYnQ.mft (raw, json) Hash identifier: LoV1fXKfSb55pfVA8ccOQomCggIIqyOWCGM9DuPds6U= Subject key identifier: 12:9A:AD:02:53:61:14:0C:99:21:2A:BD:AE:F7:95:23:93:B8:16:0E Authority key identifier: 66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74 Certificate issuer: /CN=667b2b1befba178f30d2a321c451b6eea5466274 Certificate serial: 019B4EBBCF57C7D8A3F1B7763A2C976C4084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft Manifest number: 10A4 Signing time: Wed 24 Dec 2025 05:01:29 +0000 Manifest this update: Wed 24 Dec 2025 05:01:29 +0000 Manifest next update: Thu 25 Dec 2025 05:01:29 +0000 Files and hashes: 1: ZnsrG--6F48w0qMhxFG27qVGYnQ.crl (hash: k3tlXZsafdAUnxpuFby+NgVGDoVGtZMMwvbXfc35Y+o=) 2: mcf7JveA9sP5q1fzjwTXe1Y9B94.roa (hash: vxgrGFoktHB0oWvn12RjOAHTGS54BioUpfkDuJPEQhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:cf:57:c7:d8:a3:f1:b7:76:3a:2c:97:6c:40:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=667b2b1befba178f30d2a321c451b6eea5466274 Validity Not Before: Dec 24 05:01:29 2025 GMT Not After : Dec 25 05:01:29 2025 GMT Subject: CN=129aad025361140c99212abdaef7952393b8160e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:36:fe:e0:79:26:e9:ce:06:90:e2:55:a8:8f: 2f:72:0e:0c:ab:61:cc:fd:d8:76:50:be:aa:d4:c6: 77:6d:09:bb:41:0e:0e:3e:eb:39:7d:0d:68:e8:e8: c1:65:7a:3f:c0:ea:e3:35:4e:12:41:58:46:14:f9: fc:cb:05:3f:1f:a7:1b:98:d4:b5:d7:c7:af:35:72: 47:43:11:e4:72:64:73:dc:81:d4:3b:92:a8:ad:1a: a6:a1:3d:1d:c0:b3:80:62:45:60:a1:b5:04:c6:1a: 1a:42:7f:f7:9d:a8:af:32:fb:f8:75:cd:c9:cc:cc: 9b:93:26:09:f4:b0:c8:72:e3:f8:95:6e:fc:13:88: 82:c7:2c:60:e0:56:d2:ae:cb:62:88:a5:1f:d8:b0: c9:40:34:dc:33:d6:5b:88:98:d7:0a:6b:c1:ad:87: ae:79:f8:e9:7c:7d:6f:75:2b:97:1b:89:a4:b7:f0: ea:39:d3:83:43:e2:25:41:fc:3b:d5:d9:a5:84:93: 58:e8:9d:15:4e:72:2d:b6:66:8c:4f:e9:ae:44:1e: 9e:57:47:02:69:e1:6d:28:1e:e9:74:69:50:9d:9b: 03:8e:0f:34:83:11:a4:cb:fb:b6:07:09:51:cc:96: c2:6b:2f:7c:87:a3:15:5e:ff:84:61:58:53:28:76: 4f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9A:AD:02:53:61:14:0C:99:21:2A:BD:AE:F7:95:23:93:B8:16:0E X509v3 Authority Key Identifier: keyid:66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:61:e8:e9:a0:2e:a8:4d:64:99:91:bb:71:50:b9:2d:6b:48: 70:e8:6b:00:38:eb:12:c2:7f:bb:8b:66:b3:59:19:f8:5b:50: 61:0c:b8:03:09:35:a5:5a:ff:dd:cc:e0:45:2e:5c:af:7c:b1: 3c:10:63:6f:06:91:24:df:5b:3d:02:42:ba:f5:e7:4e:5a:bc: 14:df:f4:65:11:0b:49:38:8d:7d:ba:54:6d:00:08:c9:a8:99: 74:e1:1d:58:68:74:1a:00:4a:8f:d3:52:cc:53:a7:95:e1:fd: f0:53:3e:d3:93:18:5b:59:7d:3a:59:6e:40:01:bd:16:82:8f: c5:41:94:33:2e:10:6e:c0:11:70:72:1d:a2:46:fd:68:c2:68: 9e:87:5a:3f:ed:e9:cc:fe:91:ad:98:e5:aa:34:e9:5d:66:67: 6b:ec:d6:45:ec:33:1f:cd:9f:d2:51:5b:c2:66:38:35:15:10: fc:f9:bd:88:0a:15:5f:32:bb:ab:8a:1e:bc:f4:f5:c4:fc:d8: db:d3:5a:66:2d:40:27:fa:99:56:ad:26:b6:5b:35:a5:5d:2d: 08:b0:6f:8b:41:3b:28:8d:a8:f1:73:5d:4f:55:69:8b:05:3c: 82:0f:90:3d:33:01:59:e9:0f:fe:5c:52:b9:88:92:1e:1e:d8: d6:cd:f8:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu89Xx9ij8bd2OiyXbECEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2N2IyYjFiZWZiYTE3OGYzMGQyYTMyMWM0NTFiNmVlYTU0 NjYyNzQwHhcNMjUxMjI0MDUwMTI5WhcNMjUxMjI1MDUwMTI5WjAzMTEwLwYDVQQD EygxMjlhYWQwMjUzNjExNDBjOTkyMTJhYmRhZWY3OTUyMzkzYjgxNjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjb+4Hkm6c4GkOJVqI8vcg4Mq2HM /dh2UL6q1MZ3bQm7QQ4OPus5fQ1o6OjBZXo/wOrjNU4SQVhGFPn8ywU/H6cbmNS1 18evNXJHQxHkcmRz3IHUO5KorRqmoT0dwLOAYkVgobUExhoaQn/3naivMvv4dc3J zMybkyYJ9LDIcuP4lW78E4iCxyxg4FbSrstiiKUf2LDJQDTcM9ZbiJjXCmvBrYeu efjpfH1vdSuXG4mkt/DqOdODQ+IlQfw71dmlhJNY6J0VTnIttmaMT+muRB6eV0cC aeFtKB7pdGlQnZsDjg80gxGky/u2BwlRzJbCay98h6MVXv+EYVhTKHZPXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKarQJTYRQMmSEqva73lSOTuBYOMB8GA1UdIwQY MBaAFGZ7KxvvuhePMNKjIcRRtu6lRmJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYt ZjhiZGQyZDc5MjdkLzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYtZjhiZGQyZDc5Mjdk LzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2Ho6aAu qE1kmZG7cVC5LWtIcOhrADjrEsJ/u4tms1kZ+FtQYQy4Awk1pVr/3czgRS5cr3yx PBBjbwaRJN9bPQJCuvXnTlq8FN/0ZRELSTiNfbpUbQAIyaiZdOEdWGh0GgBKj9NS zFOnleH98FM+05MYW1l9OlluQAG9FoKPxUGUMy4QbsARcHIdokb9aMJonodaP+3p zP6RrZjlqjTpXWZna+zWRewzH82f0lFbwmY4NRUQ/Pm9iAoVXzK7q4oevPT1xPzY 29NaZi1AJ/qZVq0mtls1pV0tCLBvi0E7KI2o8XNdT1VpiwU8gg+QPTMBWekP/lxS uYiSHh7Y1s34Ug== -----END CERTIFICATE-----Generated at Wed Dec 24 11:31:43 2025 by rpki-client