This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft File: ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json) Hash identifier: jseiNS0I5NPfmVJ13urK9Ui7OJQyBxKQzIeTNaFxMSQ= Subject key identifier: 17:DB:9F:77:79:FF:3E:51:B5:DA:E1:4B:38:70:00:2C:D1:95:9E:E8 Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C Certificate issuer: /CN=66f8206e3311df394f48389b8122b94aa1f0b05c Certificate serial: 019B3DFEF7FD19130DCD0FB2ED91F87DEFEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft Manifest number: 1797 Signing time: Sat 20 Dec 2025 23:01:18 +0000 Manifest this update: Sat 20 Dec 2025 23:01:18 +0000 Manifest next update: Sun 21 Dec 2025 23:01:18 +0000 Files and hashes: 1: 1-aRCdRBpKSBpGR4v9msgat9V61M.roa (hash: BYs6ku3Xn4FdJ9wa1nH/1VswjYO1JqNKzo75omWp/nM=) 2: BKrQXqfrcTeiKgHXj86E48D-w8g.roa (hash: L26jc+T0fl1hv7R2zWx4ljKg9N/dLOL1UCp15HLrhrY=) 3: Pl-xLYhjY5YlhNM49xs9QKMtfBU.roa (hash: UmyMwMyNw8j81M3/HKdHg6H50eTkm3sFnC7O9PysISQ=) 4: Smd34xeFUEeunOCrNaNvyPItMW4.roa (hash: tLjLkBtCoEO7JoIBI3BKAYDHLRl3QBXXfkRn3x13Z0I=) 5: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: JqBja2vFEZIqKq9pjl7bpWrgYikLvDXriN8PAy87pmQ=) 6: iI9-w7tHXxNtTl_I4COghj0uNew.roa (hash: b/PEDW5ud97u67vxZ3rzQUfyJtK+SNRKCKr9PKh3cqQ=) 7: q_SHJ5IyXsykFgek4t_KsFaEQ5U.roa (hash: A4mKYpa62e2fZARPUeUv3pe7BMEESkmU9sbUJFjOPCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:f7:fd:19:13:0d:cd:0f:b2:ed:91:f8:7d:ef:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c Validity Not Before: Dec 20 23:01:18 2025 GMT Not After : Dec 21 23:01:18 2025 GMT Subject: CN=17db9f7779ff3e51b5dae14b3870002cd1959ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8d:a5:76:ec:8e:4a:87:33:3b:55:52:a9:3b: c4:1f:a0:35:d4:e8:b6:cf:75:ee:03:5f:7d:f1:f7: ad:3a:36:bb:3f:5a:6c:ef:76:25:75:79:53:8c:c7: 11:3f:a1:51:bf:04:2f:5b:2a:3e:d9:f3:ee:8c:f4: 77:62:56:59:5f:30:92:c3:8c:29:68:ac:3f:62:71: bd:fa:58:ab:4c:6c:4b:fa:82:f5:05:e9:28:2d:37: 0b:5b:d6:e3:6a:97:18:ec:41:af:cb:d1:15:7e:02: ae:72:cd:38:a9:86:c9:f1:a3:de:b7:97:4a:c4:d2: b2:fc:5e:66:90:c4:5d:67:19:75:0b:3f:bd:5b:a2: 07:92:30:29:fb:64:56:b0:3a:b1:a9:24:63:86:93: 10:bd:bc:7e:52:7a:16:d6:9e:bd:92:03:08:ac:a3: bf:70:9a:fe:4c:2e:c8:73:fd:e2:73:0b:3d:8d:7f: c8:14:28:44:38:2c:d3:81:69:c5:a0:fe:55:ec:c1: 05:2d:65:20:8b:13:e6:a3:86:4c:43:d9:9f:b9:6f: 7c:c7:2b:72:d0:c5:e3:47:d4:01:28:49:79:cd:43: 1c:8d:17:26:17:18:ab:39:16:60:98:a6:f1:0c:be: 89:47:3a:f6:5a:09:48:c7:df:8b:a4:d0:ae:f5:88: 20:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DB:9F:77:79:FF:3E:51:B5:DA:E1:4B:38:70:00:2C:D1:95:9E:E8 X509v3 Authority Key Identifier: keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:80:4d:a1:58:ef:72:15:63:3c:f6:52:63:35:65:f6:e0:c1: f1:8e:e0:28:71:e8:7f:30:e9:4a:74:8f:1a:21:49:20:75:f6: 0d:f3:35:bc:38:a7:85:96:d7:9b:95:e0:5b:32:00:8d:15:a1: 53:23:c7:8a:17:3c:7a:92:3f:2d:de:54:ae:9c:3e:3c:14:df: 3a:fd:63:f8:80:ce:89:73:9e:53:42:7a:42:a6:da:5e:ec:83: b9:fd:39:5d:f0:1c:0b:07:48:55:8b:2a:41:cf:fc:58:ff:cf: e2:30:2d:a3:37:38:4a:ab:75:1d:1b:cd:69:e8:1b:11:63:64: e6:87:3c:57:22:f0:d9:77:02:5a:37:5b:ee:cd:25:ad:5a:92: b3:43:80:31:f2:92:06:c5:6c:43:2a:e5:d8:e2:0b:2a:94:42: 37:40:fb:b9:e2:1b:66:12:15:6e:6b:ba:ab:a7:df:5b:78:6b: 02:96:f5:6f:2b:17:e5:63:a2:c5:3f:c0:35:e7:e9:d6:f3:54: 72:c5:8c:04:19:95:d4:55:06:df:00:d7:cb:02:9f:c9:3d:69: 1e:7a:78:2e:4e:cb:5c:82:5c:87:83:45:4d:d0:52:c9:78:31: ee:0b:27:74:4e:bf:58:b7:93:02:10:fc:e4:29:e6:79:0a:5c: 84:d3:26:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/vf9GRMNzQ+y7ZH4fe/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjgyMDZlMzMxMWRmMzk0ZjQ4Mzg5YjgxMjJiOTRhYTFm MGIwNWMwHhcNMjUxMjIwMjMwMTE4WhcNMjUxMjIxMjMwMTE4WjAzMTEwLwYDVQQD EygxN2RiOWY3Nzc5ZmYzZTUxYjVkYWUxNGIzODcwMDAyY2QxOTU5ZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y2lduyOSoczO1VSqTvEH6A11Oi2 z3XuA1998fetOja7P1ps73YldXlTjMcRP6FRvwQvWyo+2fPujPR3YlZZXzCSw4wp aKw/YnG9+lirTGxL+oL1BekoLTcLW9bjapcY7EGvy9EVfgKucs04qYbJ8aPet5dK xNKy/F5mkMRdZxl1Cz+9W6IHkjAp+2RWsDqxqSRjhpMQvbx+UnoW1p69kgMIrKO/ cJr+TC7Ic/3icws9jX/IFChEOCzTgWnFoP5V7MEFLWUgixPmo4ZMQ9mfuW98xyty 0MXjR9QBKEl5zUMcjRcmFxirORZgmKbxDL6JRzr2WglIx9+LpNCu9YggRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfbn3d5/z5RtdrhSzhwACzRlZ7oMB8GA1UdIwQY MBaAFGb4IG4zEd85T0g4m4EiuUqh8LBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt YmJmZDQ1Yzg0YmVhLzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh LzEvWnZnZ2JqTVIzemxQU0RpYmdTSzVTcUh3c0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4BNoVjv chVjPPZSYzVl9uDB8Y7gKHHofzDpSnSPGiFJIHX2DfM1vDinhZbXm5XgWzIAjRWh UyPHihc8epI/Ld5Urpw+PBTfOv1j+IDOiXOeU0J6QqbaXuyDuf05XfAcCwdIVYsq Qc/8WP/P4jAtozc4Sqt1HRvNaegbEWNk5oc8VyLw2XcCWjdb7s0lrVqSs0OAMfKS BsVsQyrl2OILKpRCN0D7ueIbZhIVbmu6q6ffW3hrApb1bysX5WOixT/ANefp1vNU csWMBBmV1FUG3wDXywKfyT1pHnp4Lk7LXIJch4NFTdBSyXgx7gsndE6/WLeTAhD8 5CnmeQpchNMmgA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:47:30 2025 by rpki-client