This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft File: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft (raw, json) Hash identifier: UQ4w/ZSgTcxaqDbnrtpvdT9Dl9bhAJnQF3fpHn6Q0qY= Subject key identifier: 15:0F:9B:C3:CB:92:60:E8:D8:80:47:35:95:F5:CD:A3:51:EF:DE:EC Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb Certificate serial: 019B41DB56FCDC9178FAE9284F64C5F19480 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft Manifest number: 0D3D Signing time: Sun 21 Dec 2025 17:00:52 +0000 Manifest this update: Sun 21 Dec 2025 17:00:52 +0000 Manifest next update: Mon 22 Dec 2025 17:00:52 +0000 Files and hashes: 1: pbWUlF6kph4C-luLlJFzTT778aw.roa (hash: FFtm0Ye7lx+oD8pt9jf446A0y5P8uQmRXJuEy3Pug1Q=) 2: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl (hash: U3p/tvUvungycoN4/GsZ3Uoe8f4hhSglAP3zELEM9Do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:56:fc:dc:91:78:fa:e9:28:4f:64:c5:f1:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb Validity Not Before: Dec 21 17:00:52 2025 GMT Not After : Dec 22 17:00:52 2025 GMT Subject: CN=150f9bc3cb9260e8d880473595f5cda351efdeec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:51:13:1c:4f:94:eb:e7:f1:6c:fc:69:23:90: bb:33:17:30:20:c7:9f:17:f8:a2:f7:46:5a:30:51: 86:49:ef:b6:fc:aa:6a:88:f3:fa:21:78:6b:2d:e1: f1:b4:c6:d4:5d:a9:f4:15:1a:68:ce:cc:b5:81:77: 22:86:b5:7d:4c:95:17:18:d4:a4:c6:02:8c:32:28: 69:53:65:f8:b1:1c:d8:fc:8a:04:a4:fd:9a:4d:ec: aa:c5:82:84:71:99:92:c8:76:44:6a:71:16:0d:2d: 64:2d:91:bf:19:3d:61:b8:32:cc:2d:f4:b7:b4:8d: 57:f2:a3:dc:22:00:f3:64:3b:0a:41:bf:0e:cd:fa: e6:e3:67:67:61:80:55:41:f5:a5:f0:28:40:f8:79: 52:63:6a:96:1f:ca:37:5c:9f:10:11:22:bc:67:65: d5:18:0a:a6:00:00:49:b9:f4:9b:f2:22:0d:7a:66: c8:f1:16:cc:bc:83:b5:6f:4d:b3:9d:cd:58:b8:0d: 1b:fa:49:49:5c:fe:dc:8a:18:2b:60:2b:8e:cf:0a: 60:18:5a:f1:e2:c5:07:bb:fc:5a:11:3c:58:5a:b1: 96:42:17:4d:b4:94:fa:82:71:22:d0:ed:73:7a:9b: 76:cb:6c:47:3f:07:12:c2:1b:62:f4:94:ce:14:e1: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0F:9B:C3:CB:92:60:E8:D8:80:47:35:95:F5:CD:A3:51:EF:DE:EC X509v3 Authority Key Identifier: keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:56:6c:b6:f2:34:30:11:38:51:db:d6:30:a6:e9:65:59:47: 29:75:f1:2d:86:cf:ef:0f:7a:74:c0:41:dd:a3:e3:82:cc:bc: e2:25:17:2c:a9:e1:62:79:7a:ee:08:b6:0c:fd:06:d7:d1:f3: b4:74:ac:1f:8f:5c:0a:22:27:2a:6f:f9:81:3f:d9:64:ef:47: f2:e0:f1:fa:bd:f1:d3:f1:d5:79:ba:e7:84:d1:3e:48:1b:a1: 8b:83:02:08:80:4c:38:ed:90:38:0d:30:12:8a:73:5c:87:d6: ac:ac:a8:5c:9e:6a:68:dc:8a:0c:fe:9d:2e:7d:03:47:e5:01: 35:3a:42:36:8f:ce:39:4b:0e:49:ee:52:b7:97:4c:06:ff:ea: 53:25:be:d4:e9:e1:56:ae:28:41:c1:c3:a6:8c:da:63:9c:8b: 39:e5:78:13:a2:e9:11:28:5c:39:f2:39:a8:68:78:8b:e0:fc: 2d:3e:42:7c:42:ec:fb:84:56:7a:f0:41:8d:60:88:39:62:ae: 21:de:8c:c5:42:29:54:7f:87:68:ce:ee:54:81:0d:10:a5:7a: 00:d6:37:73:07:0c:ab:b8:a8:78:66:8f:74:59:88:0a:92:c4: cf:51:d2:4f:24:84:cd:d7:ce:92:3e:91:d9:4d:3c:ba:b6:1f: f1:f3:e5:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB21b83JF4+ukoT2TF8ZSAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOGU4ZWJkODBmY2Y4ODQ5NzVlNDJiNDZiZjRlNTQ4Nzkz ZjI5Y2IwHhcNMjUxMjIxMTcwMDUyWhcNMjUxMjIyMTcwMDUyWjAzMTEwLwYDVQQD EygxNTBmOWJjM2NiOTI2MGU4ZDg4MDQ3MzU5NWY1Y2RhMzUxZWZkZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FETHE+U6+fxbPxpI5C7MxcwIMef F/ii90ZaMFGGSe+2/KpqiPP6IXhrLeHxtMbUXan0FRpozsy1gXcihrV9TJUXGNSk xgKMMihpU2X4sRzY/IoEpP2aTeyqxYKEcZmSyHZEanEWDS1kLZG/GT1huDLMLfS3 tI1X8qPcIgDzZDsKQb8Ozfrm42dnYYBVQfWl8ChA+HlSY2qWH8o3XJ8QESK8Z2XV GAqmAABJufSb8iINembI8RbMvIO1b02znc1YuA0b+klJXP7cihgrYCuOzwpgGFrx 4sUHu/xaETxYWrGWQhdNtJT6gnEi0O1zept2y2xHPwcSwhti9JTOFOFL9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUPm8PLkmDo2IBHNZX1zaNR797sMB8GA1UdIwQY MBaAFM2Ojr2A/PiEl15CtGv05Uh5PynLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kYzhmOWItMDZkNi00NGQzLTlhMzgt Mjg2YTVlZTZlMDQzLzEvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9kYzhmOWItMDZkNi00NGQzLTlhMzgtMjg2YTVlZTZlMDQz LzEvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlZstvI0 MBE4UdvWMKbpZVlHKXXxLYbP7w96dMBB3aPjgsy84iUXLKnhYnl67gi2DP0G19Hz tHSsH49cCiInKm/5gT/ZZO9H8uDx+r3x0/HVebrnhNE+SBuhi4MCCIBMOO2QOA0w EopzXIfWrKyoXJ5qaNyKDP6dLn0DR+UBNTpCNo/OOUsOSe5St5dMBv/qUyW+1Onh Vq4oQcHDpozaY5yLOeV4E6LpEShcOfI5qGh4i+D8LT5CfELs+4RWevBBjWCIOWKu Id6MxUIpVH+HaM7uVIENEKV6ANY3cwcMq7ioeGaPdFmICpLEz1HSTySEzdfOkj6R 2U08urYf8fPljA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:27 2025 by rpki-client