This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft File: ziLdGXJbalnnnw_zl4mlZY5KX90.mft (raw, json) Hash identifier: iYUrWJ0KLVJhMg2LWrlHBPB7JZjkvyQq8KotKQ6kvYM= Subject key identifier: 9E:6A:91:66:1E:CA:33:56:E6:2B:A2:73:41:23:E4:D7:B2:C2:51:ED Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD Certificate issuer: /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd Certificate serial: 019AF3524ED4C7B8B7EFC9F88735C3764384 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 11:00:48 +0000 Manifest this update: Sat 06 Dec 2025 11:00:48 +0000 Manifest next update: Sun 07 Dec 2025 11:00:48 +0000 Files and hashes: 1: vCN5n7XgRlbJNVyUvtiVehd0W-c.roa (hash: doLyWpoVrhe1vhRGrAeN+5Um0tW+zvGku8pJrn/YoG0=) 2: ziLdGXJbalnnnw_zl4mlZY5KX90.crl (hash: 26tounkIeOKCh0qZb879Y0ET76dRdB5Og51iLhsgu6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:4e:d4:c7:b8:b7:ef:c9:f8:87:35:c3:76:43:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd Validity Not Before: Dec 6 11:00:48 2025 GMT Not After : Dec 7 11:00:48 2025 GMT Subject: CN=9e6a91661eca3356e62ba2734123e4d7b2c251ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:8e:5a:bc:c6:a7:bd:02:f4:4b:76:0e:ac: d1:6a:35:1c:cd:ad:31:a3:b5:13:61:32:66:b8:94: 30:c8:c4:d9:8b:9d:61:a9:cc:96:bb:c0:42:b4:16: d5:1b:8f:22:bc:60:80:12:ef:7a:af:8f:49:e5:7c: a4:94:51:0f:f9:34:7e:45:9f:9d:89:0f:ca:06:fd: 5d:ef:c1:37:23:6d:05:44:04:48:03:56:c4:f2:4f: 92:61:83:ee:02:e6:bb:fc:0d:95:ac:a4:77:f1:af: e7:7d:f7:09:43:79:68:ba:d7:c7:66:57:14:0f:fc: b8:4e:84:28:6f:8f:1d:d2:79:b9:e2:b9:1e:97:ce: a4:3b:6b:72:03:c8:49:69:be:c3:7b:d1:45:72:59: 44:17:20:fc:98:54:53:f8:38:ee:f9:e4:a6:80:d2: 1d:97:94:b9:d1:a9:ba:19:91:7f:77:08:65:87:11: 52:d1:15:5d:b6:40:c5:ff:fa:de:32:93:e0:9d:af: 9c:6c:39:65:81:7b:db:c0:cb:d5:22:65:9b:19:ad: 64:4d:99:b2:b1:64:6a:f8:27:41:cf:16:52:20:aa: 49:18:d2:05:d6:24:6b:ae:43:11:ce:b7:71:8d:3f: 84:14:fe:6c:84:72:af:9a:70:96:68:52:0f:28:1c: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6A:91:66:1E:CA:33:56:E6:2B:A2:73:41:23:E4:D7:B2:C2:51:ED X509v3 Authority Key Identifier: keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:15:4e:6c:39:69:1f:0f:4a:58:ae:3b:cd:cd:a8:64:5e:85: c0:a9:59:1a:9a:bb:af:77:93:00:79:44:a8:ed:cc:2b:2c:d0: 88:52:25:d0:73:20:f0:bf:82:33:6c:ee:72:f9:b7:39:77:e9: 44:a9:30:38:dc:75:11:f5:42:38:09:c5:fa:f2:3f:ab:dc:78: ec:1f:39:ef:a2:aa:cb:62:7e:0f:9b:07:67:76:c8:21:01:69: d8:2b:ac:af:10:c2:74:37:fa:fb:03:45:b1:12:27:c6:79:d4: 12:05:f3:fa:8a:b2:3c:60:a5:74:a9:9e:32:eb:b8:ea:52:f8: 7d:b0:1a:be:5b:b8:97:1d:1d:ce:0c:55:62:17:91:23:23:5e: af:59:e1:9e:36:16:98:d4:ef:46:7e:20:c0:8b:ca:4b:45:ba: 2f:1e:38:f1:d7:1d:c7:56:b3:08:d7:e4:d4:43:95:29:b0:f5: 15:40:73:87:00:a0:3d:61:be:cf:25:83:b6:4c:68:4f:94:79: 7e:b8:16:14:55:04:46:72:9e:f3:83:db:63:eb:98:08:a4:24: bc:d1:76:54:35:ed:50:0e:be:af:4c:44:de:5b:d6:79:3b:b6: 46:4a:9d:ef:2d:4f:2f:1b:54:1a:50:cf:cf:2e:17:a4:95:fa: 1f:69:a6:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUk7Ux7i378n4hzXDdkOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMjJkZDE5NzI1YjZhNTllNzlmMGZmMzk3ODlhNTY1OGU0 YTVmZGQwHhcNMjUxMjA2MTEwMDQ4WhcNMjUxMjA3MTEwMDQ4WjAzMTEwLwYDVQQD Eyg5ZTZhOTE2NjFlY2EzMzU2ZTYyYmEyNzM0MTIzZTRkN2IyYzI1MWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq2OWrzGp70C9Et2DqzRajUcza0x o7UTYTJmuJQwyMTZi51hqcyWu8BCtBbVG48ivGCAEu96r49J5XyklFEP+TR+RZ+d iQ/KBv1d78E3I20FRARIA1bE8k+SYYPuAua7/A2VrKR38a/nffcJQ3loutfHZlcU D/y4ToQob48d0nm54rkel86kO2tyA8hJab7De9FFcllEFyD8mFRT+Dju+eSmgNId l5S50am6GZF/dwhlhxFS0RVdtkDF//reMpPgna+cbDllgXvbwMvVImWbGa1kTZmy sWRq+CdBzxZSIKpJGNIF1iRrrkMRzrdxjT+EFP5shHKvmnCWaFIPKByl1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5qkWYeyjNW5iuic0Ej5NeywlHtMB8GA1UdIwQY MBaAFM4i3RlyW2pZ558P85eJpWWOSl/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlMZEdYSmJhbG5ubndfemw0bWxaWTVLWDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jNzVmMTItOTdhNC00ZDllLTk5Nzgt YjE4MjI3NTVmNzEyLzEvemlMZEdYSmJhbG5ubndfemw0bWxaWTVLWDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jNzVmMTItOTdhNC00ZDllLTk5NzgtYjE4MjI3NTVmNzEy LzEvemlMZEdYSmJhbG5ubndfemw0bWxaWTVLWDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBVObDlp Hw9KWK47zc2oZF6FwKlZGpq7r3eTAHlEqO3MKyzQiFIl0HMg8L+CM2zucvm3OXfp RKkwONx1EfVCOAnF+vI/q9x47B8576Kqy2J+D5sHZ3bIIQFp2CusrxDCdDf6+wNF sRInxnnUEgXz+oqyPGCldKmeMuu46lL4fbAavlu4lx0dzgxVYheRIyNer1nhnjYW mNTvRn4gwIvKS0W6Lx448dcdx1azCNfk1EOVKbD1FUBzhwCgPWG+zyWDtkxoT5R5 frgWFFUERnKe84PbY+uYCKQkvNF2VDXtUA6+r0xE3lvWeTu2Rkqd7y1PLxtUGlDP zy4XpJX6H2mmHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:10:10 2025 by rpki-client