This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json) Hash identifier: IfPbjEP6DvuUutD5Aqdc8B9MVW/O4EXCkm4zudZqmxY= Subject key identifier: AA:27:25:46:14:37:94:4F:57:58:46:92:C7:2B:15:C5:EE:31:00:08 Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a Certificate serial: 019AF31C6B42616C33B8D1D0E3B68749C3E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:01:57 +0000 Manifest this update: Sat 06 Dec 2025 10:01:57 +0000 Manifest next update: Sun 07 Dec 2025 10:01:57 +0000 Files and hashes: 1: oi2OU2MII40wJvGP04NHRArOFvs.roa (hash: VTkXyNDb4jg5wGXFkKirwnltERuwe0Q4j4rmz+H0ul4=) 2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: Yb4Ut7Wd1U+6WOsxCYeDxEchONcMlWzEyvA/Fw0YAfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:6b:42:61:6c:33:b8:d1:d0:e3:b6:87:49:c3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a Validity Not Before: Dec 6 10:01:57 2025 GMT Not After : Dec 7 10:01:57 2025 GMT Subject: CN=aa2725461437944f57584692c72b15c5ee310008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:85:71:9f:1e:49:30:47:5e:db:f9:e9:e9:a4: ab:c3:9a:09:87:e8:de:47:f3:32:07:2e:09:a9:85: be:33:d2:d5:ae:ae:5a:35:a8:39:33:1d:47:ef:be: 8a:84:16:c9:fa:f5:53:00:20:88:c3:98:5d:e3:85: 9a:14:2c:fd:46:2e:66:82:fa:7c:52:55:aa:54:60: 9f:9f:e1:cb:83:6f:60:4c:c3:d8:13:3a:fe:51:16: dd:16:2d:f9:78:13:32:85:48:78:08:84:42:1e:c9: b9:ab:52:5c:ce:22:9e:fb:0e:38:2f:e9:7f:ec:23: 21:11:e3:76:40:4e:a2:3e:aa:c1:ca:9d:87:71:6e: d6:b1:31:61:f7:27:7c:2c:75:aa:62:2e:f7:af:55: cc:2c:ac:a9:26:63:40:2f:dc:a2:e4:11:7f:81:4f: 9d:01:51:15:97:96:0d:83:91:68:72:52:90:04:37: 67:8b:f9:f7:f8:49:22:51:e3:bd:d5:69:73:d4:8d: df:5a:fe:10:63:20:e9:81:48:4f:55:10:a4:b1:51: 48:d5:47:47:a9:0b:85:1f:a1:51:94:36:61:00:5c: 33:fd:eb:ff:1c:84:bb:76:69:50:20:65:0b:2f:e0: 57:33:55:21:08:1d:13:ab:b2:17:3f:4f:77:a5:c8: ed:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:27:25:46:14:37:94:4F:57:58:46:92:C7:2B:15:C5:EE:31:00:08 X509v3 Authority Key Identifier: keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:30:a8:e1:48:8a:df:2c:21:64:16:b8:0a:46:e7:e5:8c:67: 58:ca:99:6d:eb:29:aa:7c:d0:00:3e:c5:27:a2:f6:a8:f8:f0: 2d:54:66:2d:ee:a3:9d:4d:50:de:a9:e8:86:31:29:cc:9b:6e: 86:4f:05:18:62:b7:0a:fc:46:a0:34:c3:ff:5c:1b:81:ee:a6: d1:6a:0c:f8:21:11:2d:be:bb:ff:86:1e:08:f3:c8:15:1f:43: 2e:a0:6b:f8:4f:ec:f7:b6:7e:8b:a3:2b:97:3b:6a:9f:4b:63: 6b:cb:15:16:51:d7:26:37:83:69:64:26:6e:43:4a:14:eb:0e: 6b:e9:c4:81:d1:ad:e9:60:16:d0:54:a2:4e:af:c2:af:dd:25: 2d:4a:c6:e1:25:6c:2d:e9:6b:d1:da:b8:a7:58:6f:ff:fb:cd: 5f:70:b3:b2:3f:05:c1:06:59:39:21:97:b4:66:ed:94:26:8f: 04:4f:a8:76:05:64:ba:54:a3:25:96:5d:40:9d:7e:74:a2:9c: 69:e5:43:e6:0d:c1:a8:ca:81:d7:04:2f:21:52:70:b4:6d:59: d1:8f:dd:60:11:f7:8f:aa:4c:b2:78:aa:6b:11:f1:3e:04:d5: a3:76:6b:18:e3:e6:4b:40:93:4e:63:95:b0:65:8c:84:2c:47: 31:6e:86:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGtCYWwzuNHQ47aHScPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMjc1MzFhZDk5OWI2ZDVhMDQ0MWI3NWZhZWE3ZDU3ODY1 M2U0MmEwHhcNMjUxMjA2MTAwMTU3WhcNMjUxMjA3MTAwMTU3WjAzMTEwLwYDVQQD EyhhYTI3MjU0NjE0Mzc5NDRmNTc1ODQ2OTJjNzJiMTVjNWVlMzEwMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIVxnx5JMEde2/np6aSrw5oJh+je R/MyBy4JqYW+M9LVrq5aNag5Mx1H776KhBbJ+vVTACCIw5hd44WaFCz9Ri5mgvp8 UlWqVGCfn+HLg29gTMPYEzr+URbdFi35eBMyhUh4CIRCHsm5q1JcziKe+w44L+l/ 7CMhEeN2QE6iPqrByp2HcW7WsTFh9yd8LHWqYi73r1XMLKypJmNAL9yi5BF/gU+d AVEVl5YNg5FoclKQBDdni/n3+EkiUeO91Wlz1I3fWv4QYyDpgUhPVRCksVFI1UdH qQuFH6FRlDZhAFwz/ev/HIS7dmlQIGULL+BXM1UhCB0Tq7IXP093pcjtsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKonJUYUN5RPV1hGkscrFcXuMQAIMB8GA1UdIwQY MBaAFMwnUxrZmbbVoEQbdfrqfVeGU+QqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekNkVEd0bVp0dFdnUkJ0MS11cDlWNFpUNUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85MjUyZTItNDVkZS00YmNjLThmNTgt ZmE0MTE3ZGIxNTU1LzEvekNkVEd0bVp0dFdnUkJ0MS11cDlWNFpUNUNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC85MjUyZTItNDVkZS00YmNjLThmNTgtZmE0MTE3ZGIxNTU1 LzEvekNkVEd0bVp0dFdnUkJ0MS11cDlWNFpUNUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTCo4UiK 3ywhZBa4Ckbn5YxnWMqZbespqnzQAD7FJ6L2qPjwLVRmLe6jnU1Q3qnohjEpzJtu hk8FGGK3CvxGoDTD/1wbge6m0WoM+CERLb67/4YeCPPIFR9DLqBr+E/s97Z+i6Mr lztqn0tja8sVFlHXJjeDaWQmbkNKFOsOa+nEgdGt6WAW0FSiTq/Cr90lLUrG4SVs Lelr0dq4p1hv//vNX3Czsj8FwQZZOSGXtGbtlCaPBE+odgVkulSjJZZdQJ1+dKKc aeVD5g3BqMqB1wQvIVJwtG1Z0Y/dYBH3j6pMsniqaxHxPgTVo3ZrGOPmS0CTTmOV sGWMhCxHMW6GcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:47:03 2025 by rpki-client