This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft File: ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json) Hash identifier: A92VPDCcKxoZfWHqceHz9nuwP4udHx2tpibDh3X6XDI= Subject key identifier: 7A:62:94:CC:91:19:27:FA:3D:A0:E2:E4:6E:76:0D:49:92:D3:A8:1E Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba Certificate serial: 019B53E1EF2688745E2C9DC2263AFFA4764E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 05:01:14 +0000 Manifest this update: Thu 25 Dec 2025 05:01:14 +0000 Manifest next update: Fri 26 Dec 2025 05:01:14 +0000 Files and hashes: 1: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: bB6c4jfCVuXXCOC8n/Q1GI94qZVaDjGblA6yRmfR8VY=) 2: cO1AasGYHXhPsHKm3hi1TX9-Qos.roa (hash: CIc/4zinLVuL7fIWbIBFTK/p1pSlSm0f2NwdbryHRXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:ef:26:88:74:5e:2c:9d:c2:26:3a:ff:a4:76:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba Validity Not Before: Dec 25 05:01:14 2025 GMT Not After : Dec 26 05:01:14 2025 GMT Subject: CN=7a6294cc911927fa3da0e2e46e760d4992d3a81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ae:72:92:c7:32:ae:37:a1:61:9b:a3:9d:f2: 9d:d9:72:8d:02:12:58:e5:2a:b0:7d:40:5d:16:df: d2:ce:ec:0b:80:c0:bd:1a:7d:62:90:80:2b:84:3f: 64:6e:6b:96:a6:4d:ec:7d:6e:4f:24:44:8b:88:33: 1a:26:49:13:21:65:91:8e:58:51:38:ef:d1:8a:3d: 11:95:f6:e0:f0:cb:eb:88:d2:35:a1:c0:25:65:c8: 61:50:a4:e3:f5:cc:d6:4f:51:a0:aa:0f:c6:3f:e7: fe:70:c1:4a:30:d0:72:de:e7:65:73:a4:c4:87:0f: 5f:8c:f7:80:03:28:17:dd:8f:4e:4f:8d:e2:e7:ae: b7:81:7b:5d:90:4d:33:4e:22:d3:44:54:39:29:0c: b7:0a:9e:ad:6a:93:6b:ab:a4:ba:71:2a:35:21:18: 11:98:6f:fd:61:c6:f6:30:bf:08:40:45:ad:e1:43: 85:77:2c:8b:44:6f:24:b3:f0:a7:e0:e0:15:fc:2e: c1:77:54:9b:65:12:6c:cd:6f:f7:de:fa:09:c4:33: 9a:8d:35:19:49:f2:4e:01:15:41:4a:b4:0f:85:59: 24:fa:02:ae:3f:37:5b:d2:c1:2e:46:54:f3:c3:1d: 69:66:2e:6d:5a:02:b4:66:9e:92:f9:13:fa:b9:20: 3a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:62:94:CC:91:19:27:FA:3D:A0:E2:E4:6E:76:0D:49:92:D3:A8:1E X509v3 Authority Key Identifier: keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:dc:bc:5f:94:40:2a:f5:86:8f:59:18:0a:15:3e:35:ec:e8: 34:03:22:4c:b5:39:91:ca:b7:bc:28:aa:f1:66:e6:7f:30:43: f1:2c:4f:a2:c0:50:a6:90:76:9e:b0:e5:0d:dd:1a:b7:3e:a3: bf:3e:aa:e2:5a:84:f5:3d:4e:0a:bb:36:cb:43:e0:f2:ee:ef: 90:11:09:c4:fd:03:79:58:af:cb:b8:4c:3e:76:de:4d:7e:90: d6:aa:67:af:50:8b:cf:c2:62:88:48:9b:4b:3f:b3:fd:95:0e: ef:3f:70:59:29:c9:94:3a:04:f0:19:07:d2:1d:0e:a1:2c:01: 63:52:28:96:f3:ef:dc:43:a2:65:ce:9c:09:7d:e7:63:23:6d: 69:bf:6b:b1:fe:ea:67:10:bb:f1:51:41:cd:10:6c:cd:2c:bb: c0:1a:7a:02:7c:c2:ae:10:77:29:50:ed:a9:fa:6b:cc:30:db: 3f:e7:8e:36:c8:83:98:78:25:4e:97:23:af:65:b0:bc:50:c2: 46:27:85:b6:57:a0:ee:c4:8e:a4:1e:e5:26:24:57:6b:4b:9c: 06:b2:bb:60:40:f7:d1:1f:0e:da:91:92:2c:51:4c:3e:22:13: 5b:f0:a5:8e:da:71:ee:1d:85:ac:28:bf:79:5d:47:13:73:a0: f1:4f:72:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4e8miHReLJ3CJjr/pHZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZjAxMjBlZTNiNmYwZjhkYjUyZDBkYjgxYzAxZTQ0NDdk OGU0YmEwHhcNMjUxMjI1MDUwMTE0WhcNMjUxMjI2MDUwMTE0WjAzMTEwLwYDVQQD Eyg3YTYyOTRjYzkxMTkyN2ZhM2RhMGUyZTQ2ZTc2MGQ0OTkyZDNhODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9a5ykscyrjehYZujnfKd2XKNAhJY 5SqwfUBdFt/SzuwLgMC9Gn1ikIArhD9kbmuWpk3sfW5PJESLiDMaJkkTIWWRjlhR OO/Rij0Rlfbg8MvriNI1ocAlZchhUKTj9czWT1Ggqg/GP+f+cMFKMNBy3udlc6TE hw9fjPeAAygX3Y9OT43i5663gXtdkE0zTiLTRFQ5KQy3Cp6tapNrq6S6cSo1IRgR mG/9Ycb2ML8IQEWt4UOFdyyLRG8ks/Cn4OAV/C7Bd1SbZRJszW/33voJxDOajTUZ SfJOARVBSrQPhVkk+gKuPzdb0sEuRlTzwx1pZi5tWgK0Zp6S+RP6uSA6VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpilMyRGSf6PaDi5G52DUmS06geMB8GA1UdIwQY MBaAFGXwEg7jtvD421LQ24HAHkRH2OS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmZBU0R1TzI4UGpiVXREYmdjQWVSRWZZNUxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kMTQxOGMtN2NkOC00YWY5LTgxNjYt NTc3YzAzOTEwNzAxLzEvWmZBU0R1TzI4UGpiVXREYmdjQWVSRWZZNUxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kMTQxOGMtN2NkOC00YWY5LTgxNjYtNTc3YzAzOTEwNzAx LzEvWmZBU0R1TzI4UGpiVXREYmdjQWVSRWZZNUxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNy8X5RA KvWGj1kYChU+NezoNAMiTLU5kcq3vCiq8WbmfzBD8SxPosBQppB2nrDlDd0atz6j vz6q4lqE9T1OCrs2y0Pg8u7vkBEJxP0DeVivy7hMPnbeTX6Q1qpnr1CLz8JiiEib Sz+z/ZUO7z9wWSnJlDoE8BkH0h0OoSwBY1IolvPv3EOiZc6cCX3nYyNtab9rsf7q ZxC78VFBzRBszSy7wBp6AnzCrhB3KVDtqfprzDDbP+eONsiDmHglTpcjr2WwvFDC RieFtleg7sSOpB7lJiRXa0ucBrK7YED30R8O2pGSLFFMPiITW/Cljtpx7h2FrCi/ eV1HE3Og8U9ynQ== -----END CERTIFICATE-----Generated at Thu Dec 25 14:20:14 2025 by rpki-client