This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json) Hash identifier: YjzAxE2pgI0kq4Ll6fXtm4Bkw4OoiVyxwCTbuI7ILco= Subject key identifier: 65:D8:5B:87:26:B2:8B:B6:BD:C2:C4:A3:62:90:62:2D:0E:B3:2B:10 Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e Certificate serial: 019AF2AD94E74FB208AA2BC987699EC18A1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft Manifest number: 0708 Signing time: Sat 06 Dec 2025 08:00:53 +0000 Manifest this update: Sat 06 Dec 2025 08:00:53 +0000 Manifest next update: Sun 07 Dec 2025 08:00:53 +0000 Files and hashes: 1: GnRBgfOJgqgbCKfVmItzXv5DJ54.roa (hash: MiCCH7uvupnb1UHdVT5mWDwROiRyBunRSB+jjWhogas=) 2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: Mie92qKcTzRJc2ORNuo97ApOyefSiMC1WYM58G+ze3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:94:e7:4f:b2:08:aa:2b:c9:87:69:9e:c1:8a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e Validity Not Before: Dec 6 08:00:53 2025 GMT Not After : Dec 7 08:00:53 2025 GMT Subject: CN=65d85b8726b28bb6bdc2c4a36290622d0eb32b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:10:6e:e5:e2:f4:64:80:99:e2:3d:83:fc: cc:df:ea:ab:ef:36:7b:2a:7a:08:d3:26:10:4e:9e: fd:25:9a:e9:04:c3:40:87:7d:6d:66:1c:b3:39:e1: 8f:69:78:d8:2a:a5:06:3d:d3:e9:b2:bc:0e:81:80: bd:74:a1:99:fb:19:d7:5f:ea:43:66:3e:55:d1:44: 9b:3d:64:04:3f:a3:64:dd:82:2f:6a:ad:fc:68:ba: 63:e8:1d:71:60:34:e8:9f:9a:ff:23:5e:fe:bb:a9: 3e:30:37:1b:df:0b:2b:59:47:eb:67:0d:8f:9e:38: 52:f4:61:d2:87:04:bc:ce:11:0f:66:9c:b5:ad:d1: 57:2a:d3:3e:42:56:d9:55:b0:95:85:33:fb:a4:08: f1:47:7a:0e:b8:06:a5:b2:02:11:cd:d7:b2:31:00: ae:e8:9d:65:85:73:fd:ae:51:21:84:8f:05:9f:3d: f5:b6:a4:63:43:00:42:fd:86:fd:96:84:d1:ea:1f: 7d:b9:4a:1e:1c:a9:be:9b:f3:01:a7:a5:4b:39:d0: 2a:0c:df:6f:ea:18:92:16:cf:88:e8:84:ec:5c:94: bd:cf:38:2e:c5:d6:95:ce:61:31:10:40:6e:cd:c1: 09:7f:40:4f:dc:0e:15:8d:24:51:af:f4:bc:38:57: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D8:5B:87:26:B2:8B:B6:BD:C2:C4:A3:62:90:62:2D:0E:B3:2B:10 X509v3 Authority Key Identifier: keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a5:fa:35:22:33:54:d3:a9:81:65:cf:82:62:10:67:df:bd: bd:e3:93:45:4c:e3:c1:f6:33:1c:9b:d2:be:93:dc:95:03:17: 64:7e:af:3c:39:32:4f:6c:03:a3:39:56:57:6b:32:bf:a8:11: ac:21:32:be:75:e6:da:ea:4c:65:9e:e6:13:12:0c:51:8a:d1: 0d:fb:d2:74:5a:a1:7a:01:75:da:d2:e6:3f:21:c9:87:84:b6: 86:26:cd:ea:3f:f5:ae:09:bb:ae:ae:56:f2:5b:6c:bb:0c:c5: 48:75:c5:10:5b:5c:75:85:31:a0:9f:86:3f:64:6d:80:7e:ea: d1:00:c8:66:5d:14:20:9e:72:d3:d2:b4:20:16:ab:4f:fb:cc: a8:72:0c:8e:6e:59:b8:cd:9d:e9:e6:4a:9b:dc:aa:67:22:ef: 10:e2:27:50:fd:ee:ca:9e:4f:df:fd:02:c1:22:98:d2:3b:81: ef:d6:2c:42:24:29:dc:37:fb:f0:53:a0:da:96:7b:51:a6:7d: b1:a0:3f:e4:7b:2d:b1:28:98:37:bd:dc:7a:fd:5c:be:33:ad: be:18:a7:2e:62:f5:1e:a2:cd:05:2b:a8:cb:ab:48:89:8e:6a: bf:da:e3:2f:b0:8c:2f:cc:a4:09:96:e5:2d:67:03:a6:7e:cc: 38:ba:87:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZTnT7IIqivJh2mewYobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkM2RiZDVmYzZmOTFiODA3YjdiYzRjZjZlNjQ2ZTM0NTg2 MmFmM2UwHhcNMjUxMjA2MDgwMDUzWhcNMjUxMjA3MDgwMDUzWjAzMTEwLwYDVQQD Eyg2NWQ4NWI4NzI2YjI4YmI2YmRjMmM0YTM2MjkwNjIyZDBlYjMyYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugMQbuXi9GSAmeI9g/zM3+qr7zZ7 KnoI0yYQTp79JZrpBMNAh31tZhyzOeGPaXjYKqUGPdPpsrwOgYC9dKGZ+xnXX+pD Zj5V0USbPWQEP6Nk3YIvaq38aLpj6B1xYDTon5r/I17+u6k+MDcb3wsrWUfrZw2P njhS9GHShwS8zhEPZpy1rdFXKtM+QlbZVbCVhTP7pAjxR3oOuAalsgIRzdeyMQCu 6J1lhXP9rlEhhI8Fnz31tqRjQwBC/Yb9loTR6h99uUoeHKm+m/MBp6VLOdAqDN9v 6hiSFs+I6ITsXJS9zzguxdaVzmExEEBuzcEJf0BP3A4VjSRRr/S8OFfmQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXYW4cmsou2vcLEo2KQYi0OsysQMB8GA1UdIwQY MBaAFM09vV/G+RuAe3vEz25kbjRYYq8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNGI5MzMtN2UzNC00YTg3LWIyMTUt OGNhYWQzZTMxYWRjLzEvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xNGI5MzMtN2UzNC00YTg3LWIyMTUtOGNhYWQzZTMxYWRj LzEvelQyOVg4YjVHNEI3ZThUUGJtUnVORmhpcno0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaX6NSIz VNOpgWXPgmIQZ9+9veOTRUzjwfYzHJvSvpPclQMXZH6vPDkyT2wDozlWV2syv6gR rCEyvnXm2upMZZ7mExIMUYrRDfvSdFqhegF12tLmPyHJh4S2hibN6j/1rgm7rq5W 8ltsuwzFSHXFEFtcdYUxoJ+GP2RtgH7q0QDIZl0UIJ5y09K0IBarT/vMqHIMjm5Z uM2d6eZKm9yqZyLvEOInUP3uyp5P3/0CwSKY0juB79YsQiQp3Df78FOg2pZ7UaZ9 saA/5HstsSiYN73cev1cvjOtvhinLmL1HqLNBSuoy6tIiY5qv9rjL7CML8ykCZbl LWcDpn7MOLqH0g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:14 2025 by rpki-client