This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft File: ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft (raw, json) Hash identifier: XH6nnMvCwspdS7AF+Hbzl12YvUntC3sFQka4Fhbj1dc= Subject key identifier: B2:DF:68:81:75:15:6D:E8:8C:DC:63:88:45:20:40:38:E0:6F:79:0D Authority key identifier: 66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99 Certificate issuer: /CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699 Certificate serial: 019AF31C8CEDC879A2F6B7C1AAA043727127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft Manifest number: 143F Signing time: Sat 06 Dec 2025 10:02:05 +0000 Manifest this update: Sat 06 Dec 2025 10:02:05 +0000 Manifest next update: Sun 07 Dec 2025 10:02:05 +0000 Files and hashes: 1: ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl (hash: N9IUfbhh+c6AdPJtJSKHE+b6VqBG/fLNjRY2tAvg1SM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:8c:ed:c8:79:a2:f6:b7:c1:aa:a0:43:72:71:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699 Validity Not Before: Dec 6 10:02:05 2025 GMT Not After : Dec 7 10:02:05 2025 GMT Subject: CN=b2df688175156de88cdc638845204038e06f790d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:75:05:5e:72:9c:3c:0b:03:17:1d:61:20:f7: 20:f6:5d:76:c6:15:fa:c4:fe:59:20:f0:dd:03:b5: ed:cb:eb:41:83:d5:5f:bd:34:81:ec:9c:cd:2d:25: 32:d7:9a:a1:5b:c4:01:df:c5:93:49:5d:a4:f7:73: 6e:c3:8d:97:59:28:6a:28:4e:4e:a2:38:2b:9b:f7: 37:fe:a0:c1:81:28:04:cd:ca:61:b3:cf:43:96:02: 3b:6c:e5:95:c1:e4:54:06:a4:47:7b:35:00:30:00: 56:0b:29:c1:50:04:3f:12:bc:dc:86:3e:df:2c:d1: f0:08:43:cb:70:5d:8b:64:e9:47:98:19:97:a6:8b: cf:86:99:3b:74:08:42:70:5a:da:1b:08:63:a8:7a: 9e:1b:34:e6:fa:73:a2:86:09:ec:56:45:53:77:0a: 3b:53:14:12:21:d1:83:33:07:45:22:19:f2:09:55: e6:01:67:81:c3:c9:fa:29:a3:61:2a:62:c4:d8:50: 4d:b2:50:05:ee:c5:0f:50:8f:a1:ac:2f:a0:52:02: ba:5b:ff:45:18:55:b2:b0:09:b6:ba:26:ce:70:bb: f0:09:0c:be:ec:8f:7a:30:35:ac:84:52:dd:c3:15: c5:3e:53:3b:0e:fb:74:7f:aa:e7:75:9b:aa:ac:65: 3b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DF:68:81:75:15:6D:E8:8C:DC:63:88:45:20:40:38:E0:6F:79:0D X509v3 Authority Key Identifier: keyid:66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:14:57:60:a2:45:ab:96:3d:ca:16:ff:be:ab:e2:bc:65:23: 8e:20:b6:a4:31:59:2e:6d:49:ba:17:c3:27:ee:a6:ac:a4:c7: db:ba:a1:e3:38:9e:24:98:c2:0a:74:07:e5:68:c3:d3:62:86: 58:94:e7:4b:f5:45:fc:3d:ce:bf:38:1e:a9:25:c0:7f:9e:79: 5d:98:66:0d:93:41:54:d5:d8:7b:73:ab:df:49:9d:96:ee:45: 71:1b:42:cf:64:64:9d:01:da:49:25:5e:c6:aa:33:e7:64:c0: f2:58:1f:f6:a8:dc:b9:7a:b5:ef:b2:8f:25:b2:3b:1b:9c:2e: ed:a5:8e:c8:fa:28:26:11:e7:a4:02:01:de:af:27:aa:a5:17: 8d:8a:3d:ae:e6:d9:46:0e:60:73:2d:ad:2c:45:cd:bf:d7:22: b1:f5:ee:79:e3:c7:a4:80:1a:93:a0:aa:2f:bc:1e:6b:3b:89: 75:42:28:9b:d0:ca:bd:56:ee:72:4f:a3:a6:22:34:69:05:50: 5b:a3:29:ba:e7:c8:1c:35:81:2d:3d:bb:ea:8b:ed:44:e6:ed: 35:94:5c:31:7b:54:e3:40:4f:f2:03:6f:75:09:01:9f:04:78: 41:51:b1:23:a2:83:71:7b:01:33:c3:bd:bd:cc:86:87:1b:1d: ab:66:0b:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIztyHmi9rfBqqBDcnEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NmE2ZjQzMmQwYzMxZmIxMDE3ZTJhYjY4YmIxZDZlZWZj Y2Y2OTkwHhcNMjUxMjA2MTAwMjA1WhcNMjUxMjA3MTAwMjA1WjAzMTEwLwYDVQQD EyhiMmRmNjg4MTc1MTU2ZGU4OGNkYzYzODg0NTIwNDAzOGUwNmY3OTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHUFXnKcPAsDFx1hIPcg9l12xhX6 xP5ZIPDdA7Xty+tBg9VfvTSB7JzNLSUy15qhW8QB38WTSV2k93Nuw42XWShqKE5O ojgrm/c3/qDBgSgEzcphs89DlgI7bOWVweRUBqRHezUAMABWCynBUAQ/Erzchj7f LNHwCEPLcF2LZOlHmBmXpovPhpk7dAhCcFraGwhjqHqeGzTm+nOihgnsVkVTdwo7 UxQSIdGDMwdFIhnyCVXmAWeBw8n6KaNhKmLE2FBNslAF7sUPUI+hrC+gUgK6W/9F GFWysAm2uibOcLvwCQy+7I96MDWshFLdwxXFPlM7Dvt0f6rndZuqrGU7kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLfaIF1FW3ojNxjiEUgQDjgb3kNMB8GA1UdIwQY MBaAFGZqb0MtDDH7EBfiq2i7HW7vzPaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1wdlF5ME1NZnNRRi1LcmFMc2RidV9NOXBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82NDY4OTEtMDQ1ZS00NGU1LTg5OTEt MjdjYzBhYTBjMDQ5LzEvWm1wdlF5ME1NZnNRRi1LcmFMc2RidV9NOXBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy82NDY4OTEtMDQ1ZS00NGU1LTg5OTEtMjdjYzBhYTBjMDQ5 LzEvWm1wdlF5ME1NZnNRRi1LcmFMc2RidV9NOXBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhRXYKJF q5Y9yhb/vqvivGUjjiC2pDFZLm1JuhfDJ+6mrKTH27qh4zieJJjCCnQH5WjD02KG WJTnS/VF/D3OvzgeqSXAf555XZhmDZNBVNXYe3Or30mdlu5FcRtCz2RknQHaSSVe xqoz52TA8lgf9qjcuXq177KPJbI7G5wu7aWOyPooJhHnpAIB3q8nqqUXjYo9rubZ Rg5gcy2tLEXNv9cisfXueePHpIAak6CqL7weazuJdUIom9DKvVbuck+jpiI0aQVQ W6MpuufIHDWBLT276ovtRObtNZRcMXtU40BP8gNvdQkBnwR4QVGxI6KDcXsBM8O9 vcyGhxsdq2YLdA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:00:44 2025 by rpki-client