This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json) Hash identifier: WrLdrlvarQ1oOeM8k4N4yUZ3/iKBizNhx6R/MNH+NlY= Subject key identifier: 2D:B4:1C:05:56:7E:AB:84:B8:76:1C:82:A3:90:48:97:AA:53:20:A7 Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b Certificate serial: 019B26648385DDA70A155A44CF28E829A20E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft Manifest number: 0495 Signing time: Tue 16 Dec 2025 09:01:19 +0000 Manifest this update: Tue 16 Dec 2025 09:01:19 +0000 Manifest next update: Wed 17 Dec 2025 09:01:19 +0000 Files and hashes: 1: seG0cSvUmJpa8tNqX_V-DMKTXGE.roa (hash: 0BF0vQ0Y+DaO6qvrnPzJ13hBughhON940nySfXNNYFI=) 2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: fwWed9SdAymNQu3W3CJQrMU5i7JtEfBLTUUI8//iVbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:83:85:dd:a7:0a:15:5a:44:cf:28:e8:29:a2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b Validity Not Before: Dec 16 09:01:19 2025 GMT Not After : Dec 17 09:01:19 2025 GMT Subject: CN=2db41c05567eab84b8761c82a3904897aa5320a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:93:79:08:a2:4a:8c:3b:65:7e:23:7a:98: b2:16:ce:f8:05:cf:9e:ca:cd:cc:60:9a:58:4e:67: 11:00:ba:f3:f7:0c:9d:a6:47:e0:de:d4:fa:58:95: e4:ac:f4:ca:39:6b:40:dc:38:a4:7d:41:6b:4d:21: b3:5b:c5:ef:d7:4b:99:8b:86:2a:0e:c4:16:ce:18: ce:78:e0:f6:43:d6:46:dc:5d:97:c0:4d:fc:43:23: 6a:47:8c:6e:e7:db:cf:9a:12:4d:e1:29:f9:bf:c4: 64:f9:a8:ed:46:22:72:05:46:ed:73:e3:a4:57:0b: f5:cc:7a:fb:dc:4e:f6:05:2e:bb:7a:68:54:f0:fa: 7e:15:54:6a:99:10:8c:44:bd:09:98:8e:e0:33:fe: 85:ab:27:05:02:89:ec:5f:42:b9:55:1e:3f:ae:29: ea:42:e6:d8:28:2c:24:f5:dd:33:6a:68:88:55:d1: b5:95:f5:72:70:67:e3:86:93:d6:79:30:30:a5:2a: b0:86:4d:98:d6:a8:cf:53:89:62:ee:10:6c:a9:1e: 73:b5:bb:e8:82:9c:98:8e:ea:00:65:59:61:ac:f4: 9a:5e:df:21:7b:b7:37:76:a6:92:4f:55:25:6f:52: aa:e9:5a:c8:8d:4c:7f:e4:0b:a6:b0:09:4c:7d:59: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B4:1C:05:56:7E:AB:84:B8:76:1C:82:A3:90:48:97:AA:53:20:A7 X509v3 Authority Key Identifier: keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:c4:3d:ae:41:b7:7a:db:4b:ea:0b:00:80:92:99:86:2b:54: e1:bc:c1:b4:f8:a8:0d:36:48:ef:83:77:3f:cf:eb:6c:df:45: e6:a5:95:5e:5f:15:0b:a6:1b:08:9f:db:17:a1:8c:1f:88:93: 73:ef:01:92:33:ab:ef:3a:00:fd:ae:3b:c6:c6:dd:6b:6a:e1: 5f:cb:5d:77:33:cf:8d:94:91:43:be:14:55:d1:4e:a2:da:27: 33:65:4e:81:ad:99:9c:25:0a:f0:ff:f0:da:dc:91:48:9f:a1: 38:64:79:20:55:12:e4:11:8a:13:d7:7f:03:5b:98:e2:c8:31: 1e:96:1c:ca:9c:c6:dc:39:a1:83:0b:e0:7d:44:04:5c:7e:fd: 0e:53:9c:da:de:73:5a:07:31:b7:33:5e:b4:8d:ae:52:6e:eb: d3:a5:bb:00:4a:d2:0f:cf:5a:84:4f:49:4f:f3:8c:53:44:7f: 51:0b:fb:ab:4f:16:a5:af:72:80:80:8b:b2:fa:95:8e:2f:17: 1e:71:b6:3f:42:50:44:de:9e:61:47:ce:8c:6b:a0:e1:8a:24: 5c:e9:0b:ab:5a:d6:aa:00:b4:27:8b:d0:c1:dd:dd:04:8e:82: 46:3c:28:48:ad:00:c9:b4:94:20:26:04:ae:c7:44:0d:a8:c3: 09:22:67:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZIOF3acKFVpEzyjoKaIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkN2NiOTdiNTIzYzczZjE0MDZkNjNjNzY3YzczZDljOTU3 ZDQzM2IwHhcNMjUxMjE2MDkwMTE5WhcNMjUxMjE3MDkwMTE5WjAzMTEwLwYDVQQD EygyZGI0MWMwNTU2N2VhYjg0Yjg3NjFjODJhMzkwNDg5N2FhNTMyMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2yTeQiiSow7ZX4jepiyFs74Bc+e ys3MYJpYTmcRALrz9wydpkfg3tT6WJXkrPTKOWtA3DikfUFrTSGzW8Xv10uZi4Yq DsQWzhjOeOD2Q9ZG3F2XwE38QyNqR4xu59vPmhJN4Sn5v8Rk+ajtRiJyBUbtc+Ok Vwv1zHr73E72BS67emhU8Pp+FVRqmRCMRL0JmI7gM/6FqycFAonsX0K5VR4/rinq QubYKCwk9d0zamiIVdG1lfVycGfjhpPWeTAwpSqwhk2Y1qjPU4li7hBsqR5ztbvo gpyYjuoAZVlhrPSaXt8he7c3dqaST1Ulb1Kq6VrIjUx/5AumsAlMfVkx3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC20HAVWfquEuHYcgqOQSJeqUyCnMB8GA1UdIwQY MBaAFM18uXtSPHPxQG1jx2fHPZyVfUM7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jMmUxOGMtYzYzZi00ZGQzLTg5MjEt MDUxMTZjOWY4YWVmLzEvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9jMmUxOGMtYzYzZi00ZGQzLTg5MjEtMDUxMTZjOWY4YWVm LzEvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMQ9rkG3 ettL6gsAgJKZhitU4bzBtPioDTZI74N3P8/rbN9F5qWVXl8VC6YbCJ/bF6GMH4iT c+8BkjOr7zoA/a47xsbda2rhX8tddzPPjZSRQ74UVdFOotonM2VOga2ZnCUK8P/w 2tyRSJ+hOGR5IFUS5BGKE9d/A1uY4sgxHpYcypzG3DmhgwvgfUQEXH79DlOc2t5z WgcxtzNetI2uUm7r06W7AErSD89ahE9JT/OMU0R/UQv7q08Wpa9ygICLsvqVji8X HnG2P0JQRN6eYUfOjGug4YokXOkLq1rWqgC0J4vQwd3dBI6CRjwoSK0AybSUICYE rsdEDajDCSJnrA== -----END CERTIFICATE-----Generated at Tue Dec 16 14:10:27 2025 by rpki-client