This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft File: zsY7h6iuwJPb5H3MqShg6oQSKOA.mft (raw, json) Hash identifier: kjex+2Tj+8lSJ6oY7Plqvb+283IersjjVayUJ+qShOc= Subject key identifier: E4:60:BC:23:04:A2:8A:B7:EB:56:B7:B5:3E:AA:04:FF:2E:4A:19:AA Authority key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0 Certificate issuer: /CN=cec63b87a8aec093dbe47dcca92860ea841228e0 Certificate serial: 019B360E2595928E046C8C1FF4C4E12260BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft Manifest number: 0C8D Signing time: Fri 19 Dec 2025 10:00:55 +0000 Manifest this update: Fri 19 Dec 2025 10:00:55 +0000 Manifest next update: Sat 20 Dec 2025 10:00:55 +0000 Files and hashes: 1: oDVjxYPm7vPq-9FQVAv-wdPcmhE.roa (hash: SVNTWU/SFE8BeAZ7Bb0M+S0ysWhdx0WLLM1QECYtWDg=) 2: zsY7h6iuwJPb5H3MqShg6oQSKOA.crl (hash: 3VfcSAWMpDnss4iL56z3I7pEgUSt3M+PqXi9QHqAf0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:25:95:92:8e:04:6c:8c:1f:f4:c4:e1:22:60:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec63b87a8aec093dbe47dcca92860ea841228e0 Validity Not Before: Dec 19 10:00:55 2025 GMT Not After : Dec 20 10:00:55 2025 GMT Subject: CN=e460bc2304a28ab7eb56b7b53eaa04ff2e4a19aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:d1:c5:60:2f:2d:6c:89:15:6e:7f:26:0e: d7:8b:f6:2c:3a:84:49:1b:35:11:ad:0f:e6:36:fe: d0:5a:10:b1:c6:b4:7b:4a:ac:bc:77:6b:bd:a2:1f: 26:7e:79:5f:26:c2:e3:31:41:16:8c:7d:2c:9b:c2: 09:85:5c:f9:63:42:c8:ce:a3:78:d8:89:59:49:26: 2e:5b:d7:2e:65:a1:0e:e5:91:7e:32:cf:74:6f:33: 45:d8:30:e9:f8:d6:b9:84:9c:0c:a0:86:f7:f0:46: 62:e1:9a:08:f0:80:54:9e:72:34:c1:45:16:c8:9f: 12:ca:24:84:48:15:88:c6:1a:df:d9:7c:b2:60:3e: fb:12:0f:b9:c3:72:7f:90:58:2d:fa:8c:dc:12:47: b4:db:65:46:db:5e:5e:b5:69:df:84:3f:7f:42:9a: ed:5a:6e:b9:49:a8:37:da:3e:e0:29:cf:be:72:4b: b9:22:8d:39:b5:f6:03:39:e4:a6:7c:93:85:b2:fc: dd:1f:36:8f:13:48:18:3f:4b:37:a0:05:70:39:06: c0:97:e0:62:c1:bb:f5:c6:2d:12:6b:f8:51:f6:e1: 15:4f:4e:8b:64:8f:e2:c3:21:19:6c:08:31:bb:13: 7d:93:af:84:b3:a3:aa:91:5d:d2:a1:19:9d:ab:cd: 45:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:60:BC:23:04:A2:8A:B7:EB:56:B7:B5:3E:AA:04:FF:2E:4A:19:AA X509v3 Authority Key Identifier: keyid:CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ff:66:76:8b:a7:c9:44:9e:0f:9a:79:35:36:02:bf:de:25: 9a:f9:b9:21:7b:0c:4e:05:dd:04:a4:2d:12:cf:ba:44:f1:2c: 5e:a6:b0:d9:90:e6:e8:ed:1a:67:57:1b:fd:fe:78:10:e8:ad: f7:bf:16:69:fd:86:b2:42:a2:94:69:56:26:39:d7:2a:94:17: 86:85:2d:7d:25:9b:61:b8:f0:d0:65:0a:99:38:7b:63:cd:5d: bd:d9:cb:18:d5:6c:4b:66:b0:42:35:f6:bc:9d:31:42:13:e8: fd:2c:79:9d:fb:76:27:28:fb:b7:39:ee:75:f3:59:ea:2f:ce: da:fc:81:bb:84:57:29:29:ca:c3:f3:d4:04:c8:7d:21:56:50: 83:d5:f1:dd:cc:42:9e:67:1c:55:08:cf:4b:64:ed:56:ba:32: 2c:3d:41:b2:89:6e:a0:57:4a:e5:0a:69:43:c2:6c:c1:87:ab: 06:09:cf:73:f2:fb:39:dd:6c:25:00:86:d7:6d:b4:d1:0c:ea: 3e:d9:e8:89:1d:8b:85:4e:93:d0:5f:fb:c8:83:b9:9a:5f:a2: 23:99:be:03:b4:68:ee:1c:56:dd:fc:4c:cc:07:83:16:c4:ad: a5:f3:e2:5a:7f:5f:2e:c0:18:dd:4f:56:9c:9f:3b:99:f8:19: 4f:fd:8f:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DiWVko4EbIwf9MThImC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzYzYjg3YThhZWMwOTNkYmU0N2RjY2E5Mjg2MGVhODQx MjI4ZTAwHhcNMjUxMjE5MTAwMDU1WhcNMjUxMjIwMTAwMDU1WjAzMTEwLwYDVQQD EyhlNDYwYmMyMzA0YTI4YWI3ZWI1NmI3YjUzZWFhMDRmZjJlNGExOWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK3RxWAvLWyJFW5/Jg7Xi/YsOoRJ GzURrQ/mNv7QWhCxxrR7Sqy8d2u9oh8mfnlfJsLjMUEWjH0sm8IJhVz5Y0LIzqN4 2IlZSSYuW9cuZaEO5ZF+Ms90bzNF2DDp+Na5hJwMoIb38EZi4ZoI8IBUnnI0wUUW yJ8SyiSESBWIxhrf2XyyYD77Eg+5w3J/kFgt+ozcEke022VG215etWnfhD9/Qprt Wm65Sag32j7gKc++cku5Io05tfYDOeSmfJOFsvzdHzaPE0gYP0s3oAVwOQbAl+Bi wbv1xi0Sa/hR9uEVT06LZI/iwyEZbAgxuxN9k6+Es6OqkV3SoRmdq81FFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORgvCMEooq361a3tT6qBP8uShmqMB8GA1UdIwQY MBaAFM7GO4eorsCT2+R9zKkoYOqEEijgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNZN2g2aXV3SlBiNUgzTXFTaGc2b1FTS09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hODJmNDMtNTAyYi00MmZiLTg4ZWIt ODNiZDY2ZjRlNmY2LzEvenNZN2g2aXV3SlBiNUgzTXFTaGc2b1FTS09BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9hODJmNDMtNTAyYi00MmZiLTg4ZWItODNiZDY2ZjRlNmY2 LzEvenNZN2g2aXV3SlBiNUgzTXFTaGc2b1FTS09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/9mdoun yUSeD5p5NTYCv94lmvm5IXsMTgXdBKQtEs+6RPEsXqaw2ZDm6O0aZ1cb/f54EOit 978Waf2GskKilGlWJjnXKpQXhoUtfSWbYbjw0GUKmTh7Y81dvdnLGNVsS2awQjX2 vJ0xQhPo/Sx5nft2Jyj7tznudfNZ6i/O2vyBu4RXKSnKw/PUBMh9IVZQg9Xx3cxC nmccVQjPS2TtVroyLD1BsoluoFdK5QppQ8JswYerBgnPc/L7Od1sJQCG12200Qzq PtnoiR2LhU6T0F/7yIO5ml+iI5m+A7Ro7hxW3fxMzAeDFsStpfPiWn9fLsAY3U9W nJ87mfgZT/2PKw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:38:03 2025 by rpki-client