This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft File: zR9zNFeUzkgX6pno2M_OpxvXg2c.mft (raw, json) Hash identifier: EMmOtv9Gc/MUfEuCY5aPcxhKD6N6KDzEXYQetYdDFoQ= Subject key identifier: ED:D3:9C:9B:7C:7E:38:16:21:C5:97:72:D2:E7:AC:E3:F7:7D:6A:91 Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67 Certificate issuer: /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367 Certificate serial: 019AF12D07D3783F2B1F3C0B9B9A882F42E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft Manifest number: 0749 Signing time: Sat 06 Dec 2025 01:00:51 +0000 Manifest this update: Sat 06 Dec 2025 01:00:51 +0000 Manifest next update: Sun 07 Dec 2025 01:00:51 +0000 Files and hashes: 1: EsGGI1P8V7qCIrWJmfPudsu7pMI.roa (hash: RgD/iTo2o3seqIZhRljS2dvXiiazUq7PXVkPQR+sYAc=) 2: zR9zNFeUzkgX6pno2M_OpxvXg2c.crl (hash: XUijpC5uVBlrnx6doVHUM9ChBpQhNWpHHH8vdhkJlos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:07:d3:78:3f:2b:1f:3c:0b:9b:9a:88:2f:42:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367 Validity Not Before: Dec 6 01:00:51 2025 GMT Not After : Dec 7 01:00:51 2025 GMT Subject: CN=edd39c9b7c7e381621c59772d2e7ace3f77d6a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:c0:ed:35:6f:2e:5e:da:ca:e7:80:ef:98: f3:6c:4b:c5:16:12:9b:ec:aa:48:34:94:c5:f1:ed: 95:85:78:e6:d5:ef:17:a1:6f:9a:bb:d1:7a:b0:9f: 00:f9:41:85:55:60:65:26:f6:c1:44:44:ea:75:89: a4:d2:13:5a:41:b4:c3:5e:7c:72:f8:df:3d:0c:fc: 56:56:72:1d:b4:d1:27:65:3a:8f:19:97:73:35:06: 75:f7:92:1b:ab:06:a1:4b:48:28:3b:37:a7:a6:22: cf:73:30:b7:d7:70:8d:77:89:40:63:77:89:8f:68: 17:6c:d7:c4:80:90:69:c2:24:fd:f1:25:14:d3:31: 8c:ed:b6:5d:f2:56:19:ab:50:95:d9:4e:a8:9e:fc: 87:25:a7:bf:6d:ab:20:fc:ec:ec:3b:77:38:18:6d: c4:e8:5e:a3:f4:b2:a7:3c:ce:cc:9c:32:84:6c:1d: 78:52:ff:d3:3f:6e:7b:bf:d8:63:0d:f0:a5:05:fc: 6f:6f:12:9f:30:0f:00:0c:f4:ab:41:5b:1d:58:6d: e0:20:5b:55:ab:a6:83:25:4c:57:ff:2b:3e:8b:b9: c6:e7:b8:24:8d:b7:da:18:05:92:b4:d4:e1:72:2c: 92:f9:3d:67:34:28:ea:76:e3:a0:d9:6e:18:07:bc: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D3:9C:9B:7C:7E:38:16:21:C5:97:72:D2:E7:AC:E3:F7:7D:6A:91 X509v3 Authority Key Identifier: keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b1:68:09:82:9c:fb:3b:01:df:24:ff:61:44:e7:42:87:c1: f5:71:bf:71:3b:90:bf:da:35:e6:51:d9:18:e1:59:b3:5b:1a: a6:d6:a5:61:6b:09:68:84:24:dc:15:55:90:b1:33:c0:3c:ad: d4:af:75:a1:44:d4:f9:0a:59:ce:2b:e7:2a:71:47:b1:80:a2: c0:00:37:f0:07:5e:5f:3f:26:7b:67:53:c6:95:bd:a8:f9:f6: 29:70:7c:04:2c:d2:43:e5:0a:74:56:ba:ff:cb:51:18:5a:93: 05:fa:8c:20:a8:b5:c0:f3:c5:e4:3b:eb:f4:09:b7:dd:5a:df: 31:3a:e4:ad:a4:75:ce:c8:40:d6:21:1b:c4:d4:1e:6c:de:2c: 77:33:0b:9f:47:77:2c:76:50:ab:a8:79:f0:4a:10:9d:17:71: ae:3f:ba:cf:2d:50:bd:51:ae:d9:59:31:34:5f:aa:d5:73:50: 9a:91:9a:fd:1c:24:69:8e:84:7f:9f:d7:53:5e:5d:e0:b2:b0: 6e:ca:73:b3:bb:9f:bd:0a:80:93:ed:a7:79:7a:46:5c:dc:5d: bf:ba:b7:08:11:57:5f:7a:9d:60:1e:1a:cd:be:35:0b:da:e3: 3a:51:4c:f3:26:2a:15:59:bf:aa:48:13:33:df:f3:73:d3:46: e5:60:22:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQfTeD8rHzwLm5qIL0LhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMWY3MzM0NTc5NGNlNDgxN2VhOTllOGQ4Y2ZjZWE3MWJk NzgzNjcwHhcNMjUxMjA2MDEwMDUxWhcNMjUxMjA3MDEwMDUxWjAzMTEwLwYDVQQD EyhlZGQzOWM5YjdjN2UzODE2MjFjNTk3NzJkMmU3YWNlM2Y3N2Q2YTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1/A7TVvLl7ayueA75jzbEvFFhKb 7KpINJTF8e2VhXjm1e8XoW+au9F6sJ8A+UGFVWBlJvbBRETqdYmk0hNaQbTDXnxy +N89DPxWVnIdtNEnZTqPGZdzNQZ195IbqwahS0goOzenpiLPczC313CNd4lAY3eJ j2gXbNfEgJBpwiT98SUU0zGM7bZd8lYZq1CV2U6onvyHJae/basg/OzsO3c4GG3E 6F6j9LKnPM7MnDKEbB14Uv/TP257v9hjDfClBfxvbxKfMA8ADPSrQVsdWG3gIFtV q6aDJUxX/ys+i7nG57gkjbfaGAWStNThciyS+T1nNCjqduOg2W4YB7whDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3TnJt8fjgWIcWXctLnrOP3fWqRMB8GA1UdIwQY MBaAFM0fczRXlM5IF+qZ6NjPzqcb14NnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MDExNzAtZTYwNi00ZmQxLTg1MDQt N2YwZDA3YmE0YWYzLzEvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MDExNzAtZTYwNi00ZmQxLTg1MDQtN2YwZDA3YmE0YWYz LzEvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbFoCYKc +zsB3yT/YUTnQofB9XG/cTuQv9o15lHZGOFZs1saptalYWsJaIQk3BVVkLEzwDyt 1K91oUTU+QpZzivnKnFHsYCiwAA38AdeXz8me2dTxpW9qPn2KXB8BCzSQ+UKdFa6 /8tRGFqTBfqMIKi1wPPF5Dvr9Am33VrfMTrkraR1zshA1iEbxNQebN4sdzMLn0d3 LHZQq6h58EoQnRdxrj+6zy1QvVGu2VkxNF+q1XNQmpGa/RwkaY6Ef5/XU15d4LKw bspzs7ufvQqAk+2neXpGXNxdv7q3CBFXX3qdYB4azb41C9rjOlFM8yYqFVm/qkgT M9/zc9NG5WAiog== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:34 2025 by rpki-client