This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft File: _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json) Hash identifier: zur+DG4ii0dHJD7vKbY0IjBpNeFeU3CIV4B78Qs+e4s= Subject key identifier: D5:BE:74:BB:5C:35:0C:05:97:F2:28:FC:D9:75:D1:B5:93:CF:3F:3D Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa Certificate serial: 019AF12EB5D36C3AE030B26BE4558164FB0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: ctQaLmvW9Lug/2uRV49ZXzv73vUAXR4qv3Ua3n5Ggeo=) 2: hb6ryi0zlarGbicwA660cAdO1uU.roa (hash: npI6mlOfecW2btMEPci2EHiqJhnGF4s0rXnIs0wQ4wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b5:d3:6c:3a:e0:30:b2:6b:e4:55:81:64:fb:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=d5be74bb5c350c0597f228fcd975d1b593cf3f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:17:79:ee:d8:51:73:79:f3:8e:3b:de:8c: 96:86:8f:b5:c2:d4:6d:f2:7a:29:df:e2:8c:fa:45: 25:34:76:fb:6e:ce:9e:2f:9b:67:f3:96:37:14:e8: 52:31:f9:0f:e0:81:81:0a:91:65:93:1a:e8:e3:0c: fb:b2:1f:c2:bf:7b:bc:f8:1a:65:16:99:e6:f9:e1: eb:86:4c:e8:11:3d:f8:7d:e9:d8:c5:8b:29:93:80: 14:69:d9:4b:0f:db:b6:b8:cd:32:fd:16:4d:b9:97: 14:d8:6c:56:77:8a:61:e2:78:80:f3:66:04:84:b1: e5:2f:3f:04:aa:8a:23:be:c7:23:2f:48:14:5e:de: 01:6a:1a:90:3e:27:e1:85:77:73:32:bb:a7:2c:76: d4:41:99:e5:76:c2:ff:a4:e8:a0:fb:ea:81:3e:eb: f1:66:b6:38:93:e4:83:a2:66:41:32:51:21:99:ef: c2:3d:d6:7c:42:36:f1:c3:27:86:9d:f2:8c:ae:2a: 09:53:da:4e:a1:e3:4c:01:c4:01:5a:87:96:1a:a7: fa:85:31:99:b9:75:83:4d:93:87:83:b6:47:cf:3b: 26:27:40:77:27:36:67:81:e6:a7:de:2b:fc:5a:b6: 0b:ce:06:5b:54:b4:d1:f5:f1:76:f3:63:48:65:35: 51:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BE:74:BB:5C:35:0C:05:97:F2:28:FC:D9:75:D1:B5:93:CF:3F:3D X509v3 Authority Key Identifier: keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:bb:47:ad:f3:75:68:73:32:90:17:9a:89:b8:0c:48:d1:79: 02:ee:e3:72:10:3f:8a:99:83:be:9a:8a:19:74:16:bb:7d:00: 8a:a5:72:95:32:4e:94:1b:bb:ef:14:a0:3a:3b:ec:a0:ef:b7: 50:d4:16:eb:60:7d:bb:f8:4e:5b:b2:4d:97:d0:90:1b:58:2a: d1:64:8f:62:4b:17:ea:43:16:20:48:82:21:f5:5a:9c:49:24: e5:dd:d9:f3:8a:ef:b4:87:82:11:01:31:fb:74:9d:ee:89:79: 5a:9e:8e:29:d2:1e:91:4a:cc:2d:af:f5:cb:ab:dd:55:fa:ac: ff:76:6b:12:c7:d7:72:8e:20:84:e1:96:eb:78:7b:39:64:8e: 0d:9f:fb:6f:6f:e8:69:28:49:46:85:fb:79:07:c8:ac:1d:9b: 81:72:e3:58:68:06:47:71:2f:be:43:f3:7e:bc:fa:6b:e9:36: bb:4d:44:b6:e1:b9:79:da:43:bc:cc:f1:ee:60:fd:92:eb:d9: b5:14:30:53:48:ad:38:38:6b:4f:80:e2:0f:7b:74:2c:5f:f4: 7f:e7:2d:86:6d:df:22:0c:7a:0a:90:3f:20:06:0e:3d:b9:80: c8:4e:93:d0:74:80:be:e8:31:01:e2:b2:12:f5:ac:6a:fa:bf: e2:2d:4d:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrXTbDrgMLJr5FWBZPsKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOWY3ZGM1MDk1YWJkYjQ0NWQxODk4NTdkMzEwMWE4YWVl MjlkZmEwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD EyhkNWJlNzRiYjVjMzUwYzA1OTdmMjI4ZmNkOTc1ZDFiNTkzY2YzZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxUXee7YUXN584473oyWho+1wtRt 8nop3+KM+kUlNHb7bs6eL5tn85Y3FOhSMfkP4IGBCpFlkxro4wz7sh/Cv3u8+Bpl Fpnm+eHrhkzoET34fenYxYspk4AUadlLD9u2uM0y/RZNuZcU2GxWd4ph4niA82YE hLHlLz8EqoojvscjL0gUXt4BahqQPifhhXdzMrunLHbUQZnldsL/pOig++qBPuvx ZrY4k+SDomZBMlEhme/CPdZ8QjbxwyeGnfKMrioJU9pOoeNMAcQBWoeWGqf6hTGZ uXWDTZOHg7ZHzzsmJ0B3JzZngean3iv8WrYLzgZbVLTR9fF282NIZTVRuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW+dLtcNQwFl/Io/Nl10bWTzz89MB8GA1UdIwQY MBaAFP2ffcUJWr20RdGJhX0xAaiu4p36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC81YjYwZTUtODIzNy00NjI4LTk0NmIt MjIyOWNkODNmM2U1LzEvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC81YjYwZTUtODIzNy00NjI4LTk0NmItMjIyOWNkODNmM2U1 LzEvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLtHrfN1 aHMykBeaibgMSNF5Au7jchA/ipmDvpqKGXQWu30AiqVylTJOlBu77xSgOjvsoO+3 UNQW62B9u/hOW7JNl9CQG1gq0WSPYksX6kMWIEiCIfVanEkk5d3Z84rvtIeCEQEx +3Sd7ol5Wp6OKdIekUrMLa/1y6vdVfqs/3ZrEsfXco4ghOGW63h7OWSODZ/7b2/o aShJRoX7eQfIrB2bgXLjWGgGR3EvvkPzfrz6a+k2u01EtuG5edpDvMzx7mD9kuvZ tRQwU0itODhrT4DiD3t0LF/0f+cthm3fIgx6CpA/IAYOPbmAyE6T0HSAvugxAeKy EvWsavq/4i1NBg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:10 2025 by rpki-client