This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json) Hash identifier: 0S+3+TcIR8DMkfIyu3AZPZkMEBt1c47RLLK6iXfzX/c= Subject key identifier: 3A:D1:39:DC:3A:CB:43:12:A4:30:39:2A:07:78:B0:75:87:D9:08:50 Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d Certificate serial: 019B3BA20916A1F2AE5D661A125723D7AE1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 12:00:33 +0000 Manifest this update: Sat 20 Dec 2025 12:00:33 +0000 Manifest next update: Sun 21 Dec 2025 12:00:33 +0000 Files and hashes: 1: E-7nk5OKQny9W_bEEmUe46EIcfs.roa (hash: cEU0S6nlC1/hdoqfbgIZpy0a5hGCyF6U3fW531GaMKQ=) 2: Jb_gFPV2he7uZ_D9dGgBvUqstrY.roa (hash: 76/q3p10jkYhjXz60HYg6xHRHGQY02emHt13PPRY/0Y=) 3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: uhmfvt5yt47Q2lR/oZXwudUpcJHosFz/pWsea5GE/6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:09:16:a1:f2:ae:5d:66:1a:12:57:23:d7:ae:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d Validity Not Before: Dec 20 12:00:33 2025 GMT Not After : Dec 21 12:00:33 2025 GMT Subject: CN=3ad139dc3acb4312a430392a0778b07587d90850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ba:4c:f4:fc:79:4b:53:5e:ae:23:fd:a0:a7: c5:5e:a7:d0:60:59:ad:ff:93:87:bc:aa:6c:88:3f: 7c:39:e5:96:22:2f:29:32:fa:60:8f:d9:f0:62:3c: c7:6e:47:cb:49:3c:e8:ba:3d:22:d9:e8:76:51:81: d1:a8:b8:31:6c:91:8b:73:aa:1f:52:26:e1:62:d3: 6e:90:12:22:b0:55:c4:ae:dc:91:df:51:09:55:57: 4c:4a:d6:57:e0:ab:af:65:10:ff:20:f8:df:1b:17: 0a:10:9d:e2:dd:60:b3:a1:8e:d0:45:70:d7:36:e7: 8a:2b:c1:ab:18:b5:84:4f:c5:ea:a0:82:27:80:8b: a1:ef:8d:a3:da:34:1f:c8:65:76:7c:75:8e:de:9b: 2d:7a:08:45:41:b0:81:59:19:b6:08:17:9c:38:fd: 52:fb:22:f0:97:80:cc:f3:05:8d:35:88:20:1c:d8: 57:d0:ad:f5:3d:b8:ab:96:b9:fc:78:53:8b:7b:52: 9f:fb:d2:5d:77:82:38:84:67:97:8c:09:f3:08:51: f0:90:91:a8:26:56:de:aa:b3:8a:12:89:8f:76:38: 35:7d:61:31:a1:2f:a9:4c:d3:2e:33:f8:4d:82:63: d8:34:ab:90:5b:50:ec:8d:8a:f0:e6:7e:ec:86:95: d1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D1:39:DC:3A:CB:43:12:A4:30:39:2A:07:78:B0:75:87:D9:08:50 X509v3 Authority Key Identifier: keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f4:f1:af:b9:cc:a9:4a:4a:45:fe:d7:35:18:33:e8:0b:f9: a1:b5:08:28:fb:56:38:52:65:4f:17:0e:a2:20:16:c9:2b:a1: 32:72:4a:8c:1c:42:d5:f3:06:a5:40:b1:3f:fe:0f:01:be:95: 18:10:03:98:50:48:f9:34:1f:18:94:c6:f7:13:dc:cc:64:45: c2:f6:6d:b3:e7:33:0e:e9:aa:23:f6:2e:9c:6b:61:88:b0:b5: 36:4a:49:a5:20:cc:74:6b:c2:33:2b:14:d3:47:1d:9b:ae:da: 25:b8:0c:1a:f8:04:9e:66:7b:b6:88:a1:24:b2:69:28:e4:c8: 94:ef:c9:c6:b5:8a:d1:62:75:f3:71:f8:40:26:58:39:a7:85: 5d:85:a6:70:b5:ca:91:e9:4f:4a:bd:68:a8:d2:63:66:0d:86: 05:64:e2:84:18:29:cc:bd:f8:f7:d0:9c:51:d9:f4:98:6d:0c: b8:2b:bd:7c:a3:0c:11:e5:08:19:76:02:4b:7b:e7:ac:bd:cb: b6:27:17:d7:2e:9d:41:54:bd:09:08:ce:d4:44:c1:67:6f:bf: 2b:f4:a0:1e:ab:51:a1:1f:58:cb:4a:25:d2:f7:4b:f9:5d:c0: 81:f4:96:9c:7a:4e:27:6d:22:6a:6c:c5:35:5d:48:44:23:cc: e3:4c:46:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ogkWofKuXWYaElcj164fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDBkOTYyNDJiMDgyZWZlNWI0ZjIyNTg4MjBiMzA1OTM5 NjE5OGQwHhcNMjUxMjIwMTIwMDMzWhcNMjUxMjIxMTIwMDMzWjAzMTEwLwYDVQQD EygzYWQxMzlkYzNhY2I0MzEyYTQzMDM5MmEwNzc4YjA3NTg3ZDkwODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bpM9Px5S1NeriP9oKfFXqfQYFmt /5OHvKpsiD98OeWWIi8pMvpgj9nwYjzHbkfLSTzouj0i2eh2UYHRqLgxbJGLc6of UibhYtNukBIisFXErtyR31EJVVdMStZX4KuvZRD/IPjfGxcKEJ3i3WCzoY7QRXDX NueKK8GrGLWET8XqoIIngIuh742j2jQfyGV2fHWO3psteghFQbCBWRm2CBecOP1S +yLwl4DM8wWNNYggHNhX0K31Pbirlrn8eFOLe1Kf+9Jdd4I4hGeXjAnzCFHwkJGo JlbeqrOKEomPdjg1fWExoS+pTNMuM/hNgmPYNKuQW1DsjYrw5n7shpXRRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrROdw6y0MSpDA5Kgd4sHWH2QhQMB8GA1UdIwQY MBaAFMxA2WJCsILv5bTyJYggswWTlhmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYWE2OWYtZGI1NS00ZmJhLWJjZTkt YzFlYmU2MTU0OWNjLzEvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xYWE2OWYtZGI1NS00ZmJhLWJjZTktYzFlYmU2MTU0OWNj LzEvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/Txr7nM qUpKRf7XNRgz6Av5obUIKPtWOFJlTxcOoiAWySuhMnJKjBxC1fMGpUCxP/4PAb6V GBADmFBI+TQfGJTG9xPczGRFwvZts+czDumqI/YunGthiLC1NkpJpSDMdGvCMysU 00cdm67aJbgMGvgEnmZ7toihJLJpKOTIlO/JxrWK0WJ183H4QCZYOaeFXYWmcLXK kelPSr1oqNJjZg2GBWTihBgpzL3499CcUdn0mG0MuCu9fKMMEeUIGXYCS3vnrL3L ticX1y6dQVS9CQjO1ETBZ2+/K/SgHqtRoR9Yy0ol0vdL+V3AgfSWnHpOJ20iamzF NV1IRCPM40xGEQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:44:31 2025 by rpki-client