This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json) Hash identifier: JxE9DnUXxltntV0fFLngG8TSLCecCGFQXyVcB+p/JVY= Subject key identifier: 50:2C:77:D6:91:DB:3B:4E:A2:A4:50:02:2F:69:92:75:F2:97:E9:A9 Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81 Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81 Certificate serial: 019B3DFEDDEB883CF1749C7BACD6DBB31726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft Manifest number: 130C Signing time: Sat 20 Dec 2025 23:01:11 +0000 Manifest this update: Sat 20 Dec 2025 23:01:11 +0000 Manifest next update: Sun 21 Dec 2025 23:01:11 +0000 Files and hashes: 1: 6jo1mW4jr6vxQFyb8Lr2xYFki74.roa (hash: I0t7VLBXEu80++dNJuv+glJrgnKcO3XEc9lYhQefY9A=) 2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: Wj4LcNoebAuaebCxL6ImLICNx2B1/SgR6MU8kdJDhPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:dd:eb:88:3c:f1:74:9c:7b:ac:d6:db:b3:17:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81 Validity Not Before: Dec 20 23:01:11 2025 GMT Not After : Dec 21 23:01:11 2025 GMT Subject: CN=502c77d691db3b4ea2a450022f699275f297e9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c2:67:ca:62:9c:6a:42:00:84:7e:5c:ae:a7: db:0f:83:a8:12:e0:95:3a:2a:0e:1f:42:c7:4a:e7: 9c:aa:83:5e:49:76:6d:c9:1e:7e:c6:8e:2b:2a:c8: e7:a7:83:fd:2b:d6:e8:0f:97:c7:ae:e9:f7:e9:fe: 6f:5a:3c:52:7c:31:bf:70:d6:69:80:7a:85:05:6e: 3a:bf:e3:f6:d9:18:da:5b:d7:d1:65:aa:34:df:38: 67:ba:82:40:83:12:54:72:b2:b0:27:32:9f:1c:52: 1e:17:6b:3a:09:ef:ca:29:e6:71:fb:12:6a:17:85: 29:a6:5c:e8:12:0e:31:2c:67:d9:58:8e:66:75:ef: 51:91:44:f6:9e:f2:45:16:70:c9:ab:c4:f0:e8:c3: 7a:02:a4:70:26:fd:f1:0f:da:24:b6:79:ff:de:9a: ec:5a:9a:5c:64:87:2b:e7:07:0c:46:60:f7:ed:af: 40:25:bb:33:3e:f4:4b:60:2e:48:25:3a:a5:1e:e7: fc:c9:88:12:5c:d0:6f:fc:cb:38:73:22:36:dc:3b: 71:9d:2c:84:9e:44:c0:2c:ac:7f:d0:99:ae:4e:18: 4b:b6:ca:1a:c5:53:30:94:af:e2:66:81:3f:04:f8: 28:d3:6c:cf:1e:35:6d:6b:6a:5c:ff:d2:ce:2a:ea: 6c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2C:77:D6:91:DB:3B:4E:A2:A4:50:02:2F:69:92:75:F2:97:E9:A9 X509v3 Authority Key Identifier: keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:da:e6:2f:18:1e:39:b9:39:85:7f:ea:b0:bc:c1:46:10:02: 4c:26:82:ec:9f:7a:e3:ad:01:56:4b:19:34:13:31:85:c7:33: df:90:80:c9:57:c4:f9:7a:76:75:13:89:40:e2:76:c3:ca:5f: 3b:44:04:ee:6a:5b:50:44:15:9d:e3:5c:69:0f:02:f2:04:69: 91:60:2b:d6:96:33:ae:80:b5:42:66:d5:53:62:fd:d0:fe:e6: 2d:4b:c5:ff:47:4e:ea:2d:98:fd:91:7a:d3:cb:89:42:2a:39: 5b:36:94:be:fb:2e:34:7a:05:5d:f0:77:0d:d7:06:7f:2a:e7: 58:1c:b7:87:90:e9:6c:64:f5:e4:07:55:88:6c:23:fe:cd:c4: 6c:35:11:64:ea:b0:6d:06:77:a1:0e:8c:81:ab:d1:df:80:de: 6c:f0:d4:17:c1:74:f0:0f:82:98:e1:16:37:17:0b:aa:ef:38: 03:f5:36:bc:f8:6a:0f:60:d8:fa:27:0b:69:35:67:b6:46:52: 81:e5:d8:88:68:20:75:1a:79:7a:a0:ba:b8:90:79:e7:62:f9: 2e:47:32:2d:13:ea:a7:7b:62:e9:45:a2:c4:15:7a:71:3e:f3: 75:86:ed:6f:ee:06:47:c9:b8:a8:86:12:2d:05:71:d9:b1:5c: 77:cb:4f:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/t3riDzxdJx7rNbbsxcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZjY2NTIyZjQwM2Q4Yzk5NGE0ODQ2ODI4NzA3OTk0MTdj ZTFlODEwHhcNMjUxMjIwMjMwMTExWhcNMjUxMjIxMjMwMTExWjAzMTEwLwYDVQQD Eyg1MDJjNzdkNjkxZGIzYjRlYTJhNDUwMDIyZjY5OTI3NWYyOTdlOWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsJnymKcakIAhH5crqfbD4OoEuCV OioOH0LHSuecqoNeSXZtyR5+xo4rKsjnp4P9K9boD5fHrun36f5vWjxSfDG/cNZp gHqFBW46v+P22RjaW9fRZao03zhnuoJAgxJUcrKwJzKfHFIeF2s6Ce/KKeZx+xJq F4UpplzoEg4xLGfZWI5mde9RkUT2nvJFFnDJq8Tw6MN6AqRwJv3xD9oktnn/3prs WppcZIcr5wcMRmD37a9AJbszPvRLYC5IJTqlHuf8yYgSXNBv/Ms4cyI23DtxnSyE nkTALKx/0JmuThhLtsoaxVMwlK/iZoE/BPgo02zPHjVta2pc/9LOKupsdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAsd9aR2ztOoqRQAi9pknXyl+mpMB8GA1UdIwQY MBaAFKf2ZSL0A9jJlKSEaChweZQXzh6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MmQwZmUtY2M2ZS00MWQ5LTk2NDMt YzVkMzYwZmNkZjBlLzEvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81MmQwZmUtY2M2ZS00MWQ5LTk2NDMtYzVkMzYwZmNkZjBl LzEvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtrmLxge Obk5hX/qsLzBRhACTCaC7J96460BVksZNBMxhccz35CAyVfE+Xp2dROJQOJ2w8pf O0QE7mpbUEQVneNcaQ8C8gRpkWAr1pYzroC1QmbVU2L90P7mLUvF/0dO6i2Y/ZF6 08uJQio5WzaUvvsuNHoFXfB3DdcGfyrnWBy3h5DpbGT15AdViGwj/s3EbDURZOqw bQZ3oQ6MgavR34DebPDUF8F08A+CmOEWNxcLqu84A/U2vPhqD2DY+icLaTVntkZS geXYiGggdRp5eqC6uJB552L5LkcyLRPqp3ti6UWixBV6cT7zdYbtb+4GR8m4qIYS LQVx2bFcd8tPwQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:43:57 2025 by rpki-client