This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft File: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft (raw, json) Hash identifier: LKdj8W3GchyoH3sMXlYvRQls8GgC6FDBgSwiRErgOUE= Subject key identifier: A4:58:D5:6B:DB:EB:AD:C8:AA:8D:76:5D:5C:22:6F:04:2D:83:51:EB Authority key identifier: 65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D Certificate issuer: /CN=65cd7803f41fe499e800664e0aacadee19b66d9d Certificate serial: 019B4A03F0D1B2D11591091E3C4E1853C7FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 07:02:10 +0000 Manifest this update: Tue 23 Dec 2025 07:02:10 +0000 Manifest next update: Wed 24 Dec 2025 07:02:10 +0000 Files and hashes: 1: OYSQ0B4bWIaFBDGeUbIro8GjNIM.roa (hash: ArDmycoBPumVopAcq7qMWyEpeGKW74OE/HKNZi11EfI=) 2: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl (hash: GAT7K/D2U57hB4W7nLHvQopKpQF4WxwtczV2g09VwO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:f0:d1:b2:d1:15:91:09:1e:3c:4e:18:53:c7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65cd7803f41fe499e800664e0aacadee19b66d9d Validity Not Before: Dec 23 07:02:10 2025 GMT Not After : Dec 24 07:02:10 2025 GMT Subject: CN=a458d56bdbebadc8aa8d765d5c226f042d8351eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:76:b4:f1:6e:77:c7:1a:f1:ba:b0:cc:3f: 96:f4:07:aa:7b:65:1e:70:fa:4e:b8:9c:8b:52:23: 85:9f:9b:84:c9:ee:d5:c7:37:99:36:83:df:7c:64: ec:2a:64:d1:ed:c4:4e:f7:7e:79:f3:af:25:01:58: 45:f6:58:1b:a5:c1:e2:4a:b4:0c:c2:e7:e5:10:ef: dd:d6:e3:ac:1a:3e:29:f9:53:bc:4b:64:a4:65:41: ed:04:28:10:f5:7f:53:52:3d:a9:43:a4:f8:ab:02: d5:18:c6:8e:22:bd:8e:fc:16:f1:ea:eb:04:92:9d: 78:14:38:c5:f7:74:88:51:46:c5:68:7e:1a:5a:50: 64:ed:35:20:8f:94:37:a6:e7:32:55:67:f3:55:57: 7d:e6:eb:0b:f1:df:c6:c2:22:29:12:a0:56:05:3c: f9:55:4e:e2:e8:77:fe:53:a7:29:9f:d6:d3:e7:03: 42:19:9e:e1:c9:d9:c4:3c:d7:29:c8:b9:37:0f:43: b5:73:9b:27:ba:24:02:5a:8c:e4:d3:86:ac:e6:52: 2a:b2:09:0a:01:56:5a:0b:14:c4:10:cc:4d:46:11: a3:b4:b4:f6:ab:19:cc:9f:bd:53:7a:d1:dd:75:9c: a0:48:2a:b0:de:ad:ea:40:ff:26:17:bd:4f:a7:59: 93:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:58:D5:6B:DB:EB:AD:C8:AA:8D:76:5D:5C:22:6F:04:2D:83:51:EB X509v3 Authority Key Identifier: keyid:65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f9:d2:98:21:44:8e:c0:48:5f:5c:1f:2b:a2:84:29:af:2f: a7:80:ea:a3:c4:c9:7e:8c:66:e4:e0:61:ee:4a:8a:81:16:f3: 48:d3:49:f9:1c:1e:92:56:1b:83:63:db:29:95:e5:8a:01:1b: dc:c7:3c:c4:a7:8b:98:e1:62:b2:f0:f2:08:d0:11:d1:8f:74: 11:95:39:ee:b0:64:15:66:cb:7a:19:9d:41:13:8b:80:d0:31: 1e:d7:49:b0:40:82:b7:79:5c:27:1a:7b:08:b6:ed:e8:84:58: ac:00:4b:f5:08:37:0c:de:f2:10:35:74:4f:d0:bc:48:bc:9d: b8:f2:ed:e2:dc:fe:c2:f0:94:81:73:34:0e:1b:81:bf:4d:73: ad:01:76:0e:6a:1e:a2:53:13:16:ef:12:c9:f1:08:82:45:82: 72:34:05:6e:24:45:e7:ea:9b:48:b8:2b:49:19:e4:7b:a1:c2: e3:6a:32:78:dc:ef:84:a0:a2:ab:51:dc:5c:6c:5b:3a:37:9f: f8:75:d5:0f:36:43:9d:70:e7:36:c7:b2:4f:7d:17:d4:c5:1d: d4:12:ba:cb:b6:e7:6b:c3:5f:6b:6d:6a:48:6a:39:03:af:07: 02:50:ac:be:4b:05:83:5a:f5:d5:d9:23:eb:f7:37:8e:1d:b3: db:80:7b:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA/DRstEVkQkePE4YU8f7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1Y2Q3ODAzZjQxZmU0OTllODAwNjY0ZTBhYWNhZGVlMTli NjZkOWQwHhcNMjUxMjIzMDcwMjEwWhcNMjUxMjI0MDcwMjEwWjAzMTEwLwYDVQQD EyhhNDU4ZDU2YmRiZWJhZGM4YWE4ZDc2NWQ1YzIyNmYwNDJkODM1MWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0d2tPFud8ca8bqwzD+W9Aeqe2Ue cPpOuJyLUiOFn5uEye7VxzeZNoPffGTsKmTR7cRO9355868lAVhF9lgbpcHiSrQM wuflEO/d1uOsGj4p+VO8S2SkZUHtBCgQ9X9TUj2pQ6T4qwLVGMaOIr2O/Bbx6usE kp14FDjF93SIUUbFaH4aWlBk7TUgj5Q3pucyVWfzVVd95usL8d/GwiIpEqBWBTz5 VU7i6Hf+U6cpn9bT5wNCGZ7hydnEPNcpyLk3D0O1c5snuiQCWozk04as5lIqsgkK AVZaCxTEEMxNRhGjtLT2qxnMn71TetHddZygSCqw3q3qQP8mF71Pp1mTGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRY1Wvb663Iqo12XVwibwQtg1HrMB8GA1UdIwQY MBaAFGXNeAP0H+SZ6ABmTgqsre4Ztm2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lNjZmMDEtMWQ5ZC00NTEzLTk1NmEt Zjk2YmZiMDRlNjQ1LzEvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9lNjZmMDEtMWQ5ZC00NTEzLTk1NmEtZjk2YmZiMDRlNjQ1 LzEvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvnSmCFE jsBIX1wfK6KEKa8vp4Dqo8TJfoxm5OBh7kqKgRbzSNNJ+RweklYbg2PbKZXligEb 3Mc8xKeLmOFisvDyCNAR0Y90EZU57rBkFWbLehmdQROLgNAxHtdJsECCt3lcJxp7 CLbt6IRYrABL9Qg3DN7yEDV0T9C8SLyduPLt4tz+wvCUgXM0DhuBv01zrQF2Dmoe olMTFu8SyfEIgkWCcjQFbiRF5+qbSLgrSRnke6HC42oyeNzvhKCiq1HcXGxbOjef +HXVDzZDnXDnNseyT30X1MUd1BK6y7bna8Nfa21qSGo5A68HAlCsvksFg1r11dkj 6/c3jh2z24B7ZA== -----END CERTIFICATE-----Generated at Tue Dec 23 17:18:20 2025 by rpki-client