This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json) Hash identifier: ee0tdgs2buOCmCIy+HqdNbMMAC6sIrHxdRzO96ILtrk= Subject key identifier: D1:92:E4:81:D7:3D:81:30:0C:99:3A:02:19:B4:35:E6:00:1A:0A:DC Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc Certificate serial: 019AF38976AC38F7AC55A41CC5716974EB10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 12:01:03 +0000 Manifest this update: Sat 06 Dec 2025 12:01:03 +0000 Manifest next update: Sun 07 Dec 2025 12:01:03 +0000 Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=) 2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=) 3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: Al96oMhPQeh6PD1i+r/m3BGqz/9cBZrdonwIMvEpMMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:76:ac:38:f7:ac:55:a4:1c:c5:71:69:74:eb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc Validity Not Before: Dec 6 12:01:03 2025 GMT Not After : Dec 7 12:01:03 2025 GMT Subject: CN=d192e481d73d81300c993a0219b435e6001a0adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:5a:35:0a:f7:82:66:42:1a:86:d2:94:ce: 05:c1:db:21:60:73:d4:cf:92:56:5e:9c:7a:af:86: 04:49:40:bb:2b:c8:4f:ab:f3:33:f2:18:b3:83:ae: 72:a2:12:fa:fb:5e:50:22:26:f4:06:fe:22:7b:97: 25:5b:46:16:53:84:9c:19:0c:fc:d8:70:b4:9b:1f: cf:d5:ae:72:90:11:55:91:06:ac:7a:fd:6d:76:95: 86:57:c9:ca:a0:5a:78:5a:68:77:05:92:23:25:fb: 79:a8:83:6a:96:25:e5:d9:fa:66:27:f4:79:53:c7: 75:72:76:6f:fa:c8:03:28:16:4d:3d:8a:26:ea:e6: 61:78:3e:e2:78:c7:db:1f:74:6e:90:d2:89:d8:61: 16:ae:08:ff:5c:b6:6d:2a:d6:c1:9c:b6:4a:39:d8: 7c:95:0c:2f:d3:f9:77:0c:0b:cf:3d:f7:48:cf:11: b7:69:cc:89:da:1d:54:16:90:27:01:a1:e6:cc:06: f8:10:25:f1:a3:eb:f1:4b:62:0b:e5:05:32:e3:1e: a6:46:91:78:34:07:50:58:0a:c4:aa:af:1f:e0:77: ce:7d:d6:53:d3:31:5d:ae:06:f7:d2:0b:40:6b:2d: 90:20:23:0b:89:41:ea:0a:60:30:24:89:83:40:1f: 2c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:92:E4:81:D7:3D:81:30:0C:99:3A:02:19:B4:35:E6:00:1A:0A:DC X509v3 Authority Key Identifier: keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:af:4d:4d:7b:b4:4d:ca:74:0d:1e:26:be:30:c7:3b:0c:dd: 0c:ad:f1:ef:83:00:a6:83:13:ed:35:57:49:e1:46:dd:98:de: 9e:db:65:42:b2:7f:6d:37:74:97:56:c8:75:df:7f:f7:3b:15: 8b:c1:76:61:68:9c:f4:0d:c7:90:40:9e:f8:ac:15:9e:f5:6d: f3:d9:77:3c:f2:28:2b:05:43:ef:c1:41:3e:3c:fb:85:92:7f: 3d:88:f9:63:b1:b8:81:dd:f7:c0:7d:ae:f1:7d:44:14:18:57: a1:88:87:86:fb:82:e1:65:b3:50:01:3e:60:bd:66:95:47:12: 69:2b:11:d4:5a:21:7b:31:78:dd:be:3b:7e:ed:1e:7e:9d:a2: c1:0c:31:64:a9:9c:7b:c2:10:c7:78:34:71:a8:02:dd:dc:63: 81:6a:b7:b2:5c:3f:3b:07:ff:e5:06:b5:39:df:a8:35:6a:43: 8c:02:f8:4d:f2:1b:fa:99:92:ee:6c:25:f8:7a:f8:eb:b5:6a: b9:9e:4f:3f:2d:09:9c:d7:d4:45:29:63:13:85:93:8c:92:50: b8:87:ab:63:31:b1:56:00:d4:2f:85:34:54:4e:be:fe:09:84: 85:ea:8f:6b:80:62:f1:bd:95:3a:27:cc:d1:5d:c9:91:20:6f: ed:cc:3c:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziXasOPesVaQcxXFpdOsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNzJlNjMzZGY1NjM1YTlmOThkMmY2OGE2ZDJhZGNiNDQx NTVjZGMwHhcNMjUxMjA2MTIwMTAzWhcNMjUxMjA3MTIwMTAzWjAzMTEwLwYDVQQD EyhkMTkyZTQ4MWQ3M2Q4MTMwMGM5OTNhMDIxOWI0MzVlNjAwMWEwYWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAxaNQr3gmZCGobSlM4FwdshYHPU z5JWXpx6r4YESUC7K8hPq/Mz8hizg65yohL6+15QIib0Bv4ie5clW0YWU4ScGQz8 2HC0mx/P1a5ykBFVkQasev1tdpWGV8nKoFp4Wmh3BZIjJft5qINqliXl2fpmJ/R5 U8d1cnZv+sgDKBZNPYom6uZheD7ieMfbH3RukNKJ2GEWrgj/XLZtKtbBnLZKOdh8 lQwv0/l3DAvPPfdIzxG3acyJ2h1UFpAnAaHmzAb4ECXxo+vxS2IL5QUy4x6mRpF4 NAdQWArEqq8f4HfOfdZT0zFdrgb30gtAay2QICMLiUHqCmAwJImDQB8s9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGS5IHXPYEwDJk6Ahm0NeYAGgrcMB8GA1UdIwQY MBaAFMxy5jPfVjWp+Y0vaKbSrctEFVzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQt ZDAxMmNhOWVjMTk3LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQtZDAxMmNhOWVjMTk3 LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGa9NTXu0 Tcp0DR4mvjDHOwzdDK3x74MApoMT7TVXSeFG3ZjenttlQrJ/bTd0l1bIdd9/9zsV i8F2YWic9A3HkECe+KwVnvVt89l3PPIoKwVD78FBPjz7hZJ/PYj5Y7G4gd33wH2u 8X1EFBhXoYiHhvuC4WWzUAE+YL1mlUcSaSsR1FohezF43b47fu0efp2iwQwxZKmc e8IQx3g0cagC3dxjgWq3slw/Owf/5Qa1Od+oNWpDjAL4TfIb+pmS7mwl+Hr467Vq uZ5PPy0JnNfURSljE4WTjJJQuIerYzGxVgDUL4U0VE6+/gmEheqPa4Bi8b2VOifM 0V3JkSBv7cw8Bw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:49 2025 by rpki-client