This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json) Hash identifier: J2P4r+GntQySzmd3gXjwz1jFAYBbgQluwAEnA+O++gs= Subject key identifier: 80:AF:CD:38:16:F3:80:DC:EF:43:BF:D8:8C:18:D3:D1:53:BF:39:E4 Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38 Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138 Certificate serial: 019AF61C75CD105AA933EAFFE51E48F52EEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft Manifest number: 1224 Signing time: Sun 07 Dec 2025 00:00:51 +0000 Manifest this update: Sun 07 Dec 2025 00:00:51 +0000 Manifest next update: Mon 08 Dec 2025 00:00:51 +0000 Files and hashes: 1: ZzKeKFnkyYHVYzD_pBU_7j7GG50.roa (hash: eOvLaalF9JX35YbTIgyHeogUDwT0C/FDn0Iw2feFdmo=) 2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: kmAKYTZo9I0QjCO5VpTTPtCM1W3GiF2oEMmlc7qo8/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:75:cd:10:5a:a9:33:ea:ff:e5:1e:48:f5:2e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138 Validity Not Before: Dec 7 00:00:51 2025 GMT Not After : Dec 8 00:00:51 2025 GMT Subject: CN=80afcd3816f380dcef43bfd88c18d3d153bf39e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:20:35:18:5a:87:8e:36:76:5e:a3:a4:78: cf:03:cd:05:4a:74:a6:da:b5:85:69:80:0b:d7:76: 4c:ac:0c:63:f1:10:fd:95:db:cf:ec:6f:0f:77:9c: a8:89:84:79:2e:bc:6d:e9:d1:41:07:de:b1:65:52: 77:3b:6b:4b:8f:88:2d:f4:3d:f4:46:81:28:00:f7: 45:88:17:40:78:54:6d:c3:8d:40:92:c4:3f:98:f6: 98:fe:87:c8:05:91:e7:55:ba:2e:83:4f:4a:f9:76: e4:f8:80:cf:a6:31:c0:d9:b1:ef:ed:01:c8:7d:79: 8a:ca:1c:9e:9f:d9:ac:47:70:64:20:b7:d4:cf:b0: 37:7f:b7:fb:8c:99:71:f7:9f:ca:84:59:65:1e:8e: 91:43:85:d6:06:09:0a:87:62:a2:58:bb:fa:d9:eb: e4:cf:fd:e7:a8:db:d8:c0:70:c3:db:51:96:b0:94: 30:bc:8c:c5:80:2e:20:bc:43:53:7d:e3:98:c3:d3: 0c:34:bf:fa:c1:f3:10:7f:6e:4c:0d:86:e7:29:80: 4d:ee:5e:2d:ea:3e:84:56:72:40:85:95:de:34:de: e8:f1:22:a5:a1:79:79:76:7a:cb:d8:3a:98:87:df: d5:e4:0f:55:ca:ef:b8:cd:d8:e6:82:9b:1f:bf:8d: 6a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AF:CD:38:16:F3:80:DC:EF:43:BF:D8:8C:18:D3:D1:53:BF:39:E4 X509v3 Authority Key Identifier: keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:5e:ba:df:44:87:50:45:dc:50:98:63:8f:86:a8:a8:b8:7f: 14:95:7c:60:00:8c:d6:6f:2d:3d:fe:f8:3d:97:6c:7c:88:53: 2f:33:81:c5:0d:b9:b3:7a:9b:41:fd:50:d4:ba:44:84:85:c0: 6d:fa:5a:4a:3e:8f:1c:b1:6d:8d:a3:dc:05:dd:43:64:f7:5c: e9:e2:6a:04:ba:b4:bf:10:cf:35:55:20:39:bb:a9:92:b2:a5: b3:7a:13:30:ce:0c:b0:bb:c6:cd:e8:ed:1f:fa:20:cf:00:e6: 36:73:8d:69:42:21:53:53:da:b2:4a:fe:cc:89:f5:6c:04:5c: 71:b4:c4:3d:9e:af:f6:f1:7d:b9:4a:b8:e6:08:73:08:4a:0d: 22:06:f5:ab:32:ad:04:d3:f3:26:11:cf:2b:30:bc:a9:af:c1: ef:35:43:c2:56:4e:11:a7:c2:f5:e1:e2:2b:90:2f:34:36:84: f7:de:59:9a:a3:cc:bc:ed:1b:5f:f5:06:13:25:55:26:7d:6f: 68:31:59:fa:77:b0:21:79:5f:63:5d:b8:61:7a:43:69:6d:35: 35:3e:8a:6d:7b:75:32:be:a6:a7:bb:39:6d:fb:44:b2:61:1c: d4:68:34:10:0c:9e:54:fb:6e:f1:50:70:28:4d:fe:4d:ef:aa: a8:24:c6:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HHXNEFqpM+r/5R5I9S7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMDBlMTEyYzAzZjY5NWY5ZjI1ZDNiNzJiYjIzYTRjMzRl ZDIxMzgwHhcNMjUxMjA3MDAwMDUxWhcNMjUxMjA4MDAwMDUxWjAzMTEwLwYDVQQD Eyg4MGFmY2QzODE2ZjM4MGRjZWY0M2JmZDg4YzE4ZDNkMTUzYmYzOWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJggNRhah442dl6jpHjPA80FSnSm 2rWFaYAL13ZMrAxj8RD9ldvP7G8Pd5yoiYR5Lrxt6dFBB96xZVJ3O2tLj4gt9D30 RoEoAPdFiBdAeFRtw41AksQ/mPaY/ofIBZHnVboug09K+Xbk+IDPpjHA2bHv7QHI fXmKyhyen9msR3BkILfUz7A3f7f7jJlx95/KhFllHo6RQ4XWBgkKh2KiWLv62evk z/3nqNvYwHDD21GWsJQwvIzFgC4gvENTfeOYw9MMNL/6wfMQf25MDYbnKYBN7l4t 6j6EVnJAhZXeNN7o8SKloXl5dnrL2DqYh9/V5A9Vyu+4zdjmgpsfv41qFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICvzTgW84Dc70O/2IwY09FTvznkMB8GA1UdIwQY MBaAFM4A4RLAP2lfnyXTtyuyOkw07SE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTkt ZjM0NjNmYzcyY2I1LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xMDBjMjUtZTAyNS00NWVmLTkwYTktZjM0NjNmYzcyY2I1 LzEvemdEaEVzQV9hVi1mSmRPM0s3STZURFR0SVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgV6630SH UEXcUJhjj4aoqLh/FJV8YACM1m8tPf74PZdsfIhTLzOBxQ25s3qbQf1Q1LpEhIXA bfpaSj6PHLFtjaPcBd1DZPdc6eJqBLq0vxDPNVUgObupkrKls3oTMM4MsLvGzejt H/ogzwDmNnONaUIhU1Paskr+zIn1bARccbTEPZ6v9vF9uUq45ghzCEoNIgb1qzKt BNPzJhHPKzC8qa/B7zVDwlZOEafC9eHiK5AvNDaE995ZmqPMvO0bX/UGEyVVJn1v aDFZ+newIXlfY124YXpDaW01NT6KbXt1Mr6mp7s5bftEsmEc1Gg0EAyeVPtu8VBw KE3+Te+qqCTGxA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:41:28 2025 by rpki-client