This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json) Hash identifier: faWPgFBwoPc8UMCybDKMQc5orFYTCfqLXuFUuI8O9MU= Subject key identifier: 7D:06:0C:E4:7A:D9:92:01:19:E4:E6:F4:F5:DE:89:86:49:30:5B:DC Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f Certificate serial: 019AF2098BA90B89CAB44FAD15760EAC45BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft Manifest number: 11D9 Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (hash: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=) 2: ifcwYHfmty9P7YlJSIwto5Z8mhc.roa (hash: j3Q6hvt9y1dRnxH4mfVL1HI6Z3oaft4npRVPXBxnB5Y=) 3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: JJG0vFZJjx6C+6CpUW9IBqZ68aeLsDuFOdiCIYF3XJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8b:a9:0b:89:ca:b4:4f:ad:15:76:0e:ac:45:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=7d060ce47ad9920119e4e6f4f5de898649305bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:96:da:d1:3f:a1:fc:15:a0:6f:28:7f:1d:11: 0b:f5:e3:bf:2d:a1:a3:1a:79:5c:3b:2d:0b:a1:30: 75:5c:ba:81:7f:df:1a:3d:d5:2d:25:f5:74:69:77: b8:f3:da:f8:6e:1d:18:c7:d6:00:a5:12:84:a3:40: 19:d2:b5:93:33:d8:64:a7:ea:2b:35:34:2d:1e:c2: 1b:15:f5:3c:bf:58:e6:08:53:10:26:af:03:28:1d: c7:52:c6:84:8d:16:33:20:22:75:68:cd:ee:41:70: d3:c2:8f:34:d7:89:6f:6a:f1:19:0a:55:be:25:67: ee:46:a0:fe:8c:4b:1f:69:0d:4a:3a:43:85:67:00: 96:c8:1a:20:ec:05:47:64:c9:0d:aa:a3:1e:a6:27: f1:b7:03:a7:be:12:2a:6f:99:ee:03:c5:f0:10:6c: f2:45:6f:4c:65:ae:44:29:50:2b:f6:64:3b:65:e4: ca:fe:b0:db:42:c5:24:93:e1:28:9f:21:f1:5c:fb: 5a:91:ff:d2:be:d7:ad:dc:1e:63:f8:f6:78:6d:73: 55:67:3e:5a:f8:22:50:58:e3:92:3b:f1:4e:de:7e: c3:f5:3a:c1:af:b3:9e:4d:00:bf:a7:5f:bd:f8:bb: dc:0e:74:1a:11:eb:69:87:f5:81:6e:1f:7f:61:ff: a4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:06:0C:E4:7A:D9:92:01:19:E4:E6:F4:F5:DE:89:86:49:30:5B:DC X509v3 Authority Key Identifier: keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:01:1d:01:91:54:cb:0c:15:53:52:34:7c:db:aa:38:bf:93: 6f:74:8a:57:97:8f:36:91:1f:15:17:86:6c:74:4a:c1:bf:7a: 58:77:ab:7d:24:47:e0:93:bd:1a:7b:e9:b7:00:87:a9:a6:82: 86:41:39:9d:39:9b:f2:b3:cc:66:73:b2:79:12:eb:08:d2:0a: a7:ef:2b:7f:ee:81:87:99:d3:15:b0:47:45:5c:ab:90:52:80: 20:15:16:bb:e8:bd:35:53:c8:30:5a:51:9d:43:47:53:f9:b5: 86:e5:03:ee:5e:e8:5f:3e:f7:b5:f6:f2:90:cc:4a:29:e6:db: 82:6b:9e:37:a7:e1:59:94:d8:cf:89:38:70:d2:72:8c:c4:aa: 86:7b:3a:c0:d6:6c:c1:0b:fe:ef:29:e3:4c:c0:01:31:f7:9c: 7e:5d:b0:c5:c6:45:e5:e2:89:79:5a:34:af:c9:7a:05:f7:c1: a1:87:06:c9:5a:1b:db:7c:3d:3b:d3:4e:5a:53:51:11:dd:00: ac:63:f1:c7:34:ad:18:57:bd:22:38:f9:d0:15:94:66:88:88: 2f:18:c0:09:f9:6b:a7:b4:5f:3e:42:a1:49:1c:5f:84:31:ec: db:20:dc:d8:37:f6:1d:df:65:a3:bf:3b:1c:27:4f:81:0f:d7: af:25:34:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYupC4nKtE+tFXYOrEW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDM1NzkwODMwY2U3NDY5YTk0YzU5YjJlMmNjYmJmNWUz NmQxM2YwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD Eyg3ZDA2MGNlNDdhZDk5MjAxMTllNGU2ZjRmNWRlODk4NjQ5MzA1YmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipba0T+h/BWgbyh/HREL9eO/LaGj GnlcOy0LoTB1XLqBf98aPdUtJfV0aXe489r4bh0Yx9YApRKEo0AZ0rWTM9hkp+or NTQtHsIbFfU8v1jmCFMQJq8DKB3HUsaEjRYzICJ1aM3uQXDTwo8014lvavEZClW+ JWfuRqD+jEsfaQ1KOkOFZwCWyBog7AVHZMkNqqMepifxtwOnvhIqb5nuA8XwEGzy RW9MZa5EKVAr9mQ7ZeTK/rDbQsUkk+EonyHxXPtakf/Svtet3B5j+PZ4bXNVZz5a +CJQWOOSO/FO3n7D9TrBr7OeTQC/p1+9+LvcDnQaEetph/WBbh9/Yf+kjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0GDOR62ZIBGeTm9PXeiYZJMFvcMB8GA1UdIwQY MBaAFMzTV5CDDOdGmpTFmy4sy79eNtE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAt YzVkMTNlODhlNGRlLzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAtYzVkMTNlODhlNGRl LzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQEdAZFU ywwVU1I0fNuqOL+Tb3SKV5ePNpEfFReGbHRKwb96WHerfSRH4JO9GnvptwCHqaaC hkE5nTmb8rPMZnOyeRLrCNIKp+8rf+6Bh5nTFbBHRVyrkFKAIBUWu+i9NVPIMFpR nUNHU/m1huUD7l7oXz73tfbykMxKKebbgmueN6fhWZTYz4k4cNJyjMSqhns6wNZs wQv+7ynjTMABMfecfl2wxcZF5eKJeVo0r8l6BffBoYcGyVob23w9O9NOWlNREd0A rGPxxzStGFe9Ijj50BWUZoiILxjACflrp7RfPkKhSRxfhDHs2yDc2Df2Hd9lo787 HCdPgQ/XryU0Eg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:13 2025 by rpki-client