This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json) Hash identifier: IJBWX03CbwYyQz532NavKz10LovF8S1xYLHlMpy30Hs= Subject key identifier: 66:44:F7:24:1A:DD:7D:58:5E:F6:58:08:62:77:CD:7A:57:87:09:DD Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b Certificate serial: 019AF12D93FFF7DE3A1AC4A1DBC21B1E47A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft Manifest number: 14A8 Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: MDKaV1lNx8jXBA4g/QzO+7NS4F4nAN+IMHPvwK6F8uo=) 2: x2vhjp4ROCl1f2P_fCn9QrzE2Y8.roa (hash: QnHMlxe02f4k1tZI5zHGxQjLOy1IlK/sA708CDdDH5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:93:ff:f7:de:3a:1a:c4:a1:db:c2:1b:1e:47:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=6644f7241add7d585ef658086277cd7a578709dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:eb:0c:41:fe:91:a9:57:09:29:4f:b0:cd:03: 08:25:df:64:09:2f:b4:b9:2e:b3:71:88:22:5d:af: 9a:38:59:de:bc:cb:7c:83:48:b7:3a:c8:d7:64:46: e9:cb:18:1a:87:06:b6:cc:52:81:c5:be:12:69:fd: fb:17:0f:6f:7a:2b:8d:04:44:f1:90:2e:88:2d:e2: 65:e7:3a:8a:e7:1e:3e:ec:22:fb:ee:8a:f4:88:bf: 13:8c:ae:d2:b7:b9:b5:a6:cd:70:ff:2a:a1:23:ce: b8:9f:36:f0:bd:63:45:f9:b3:2a:c6:2b:0e:af:44: 3d:a9:b1:0e:5b:f0:5b:12:2b:c3:3e:ee:72:b5:9d: f0:89:44:b7:85:b2:eb:4b:6e:8a:d2:d9:37:b1:4e: a5:f7:1d:60:55:02:02:34:f0:2c:da:a0:15:a6:83: 70:47:97:32:cd:2d:9f:ff:fe:0a:a9:1f:9a:58:69: 34:c8:a9:f3:31:09:62:3a:dc:19:04:8c:09:2d:73: b2:c0:d2:2d:24:56:f4:b6:c9:e1:6a:1e:1d:2b:6e: 5e:15:0b:77:4d:5c:7a:57:89:a7:e3:6d:a0:8e:4c: 99:56:76:37:01:1b:09:35:e7:80:42:99:b9:c6:44: 3c:12:51:da:eb:3c:30:29:d0:91:13:25:24:a4:46: 52:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:44:F7:24:1A:DD:7D:58:5E:F6:58:08:62:77:CD:7A:57:87:09:DD X509v3 Authority Key Identifier: keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1c:52:13:9b:e0:2a:99:b7:75:2b:64:6b:65:7d:83:6a:01: 75:82:ac:84:c3:94:31:45:74:56:d1:e7:f0:cf:dd:6d:e0:c5: 23:5f:b8:86:1b:82:2c:99:46:2d:8d:f6:93:76:93:78:34:d9: e7:39:03:1d:ba:13:95:41:78:e8:cc:55:8c:89:1c:df:cb:c1: 04:2b:78:f5:38:20:10:9c:ce:1f:8e:f1:d7:bf:b8:e7:cb:20: 4c:d5:dc:ac:ca:da:01:76:ea:76:b3:11:54:2c:f0:68:4c:e9: 25:71:ea:1f:1e:78:53:00:78:f8:67:99:60:ab:24:0e:69:df: 0f:6e:fe:1b:7e:f3:0f:04:05:27:6c:cb:7c:c5:80:d5:17:1c: fe:9c:56:3c:9f:9b:de:c0:21:02:da:72:b1:40:d4:7c:a7:64: 75:f1:43:66:0a:2e:c0:8b:45:4b:ff:89:d1:ce:a3:d1:4d:3a: 3f:ed:73:3c:38:fd:25:ce:69:b0:51:79:8c:db:75:61:09:f6: 61:30:a1:7f:3f:14:59:ca:0d:56:d4:43:75:36:ab:ec:2c:ca: f9:32:e1:b1:b2:d9:fb:86:1d:f6:27:59:84:72:cb:47:18:8a: a8:97:14:a8:8a:94:19:48:c8:88:63:3e:a1:ff:37:28:db:0e: 76:37:8f:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZP/9946GsSh28IbHkekMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MmY1NWQzNzcxMjdmMjhjZTI2Yjc4ZmQ4M2JlY2Y0MWJl Y2FkNGIwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD Eyg2NjQ0ZjcyNDFhZGQ3ZDU4NWVmNjU4MDg2Mjc3Y2Q3YTU3ODcwOWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+sMQf6RqVcJKU+wzQMIJd9kCS+0 uS6zcYgiXa+aOFnevMt8g0i3OsjXZEbpyxgahwa2zFKBxb4Saf37Fw9veiuNBETx kC6ILeJl5zqK5x4+7CL77or0iL8TjK7St7m1ps1w/yqhI864nzbwvWNF+bMqxisO r0Q9qbEOW/BbEivDPu5ytZ3wiUS3hbLrS26K0tk3sU6l9x1gVQICNPAs2qAVpoNw R5cyzS2f//4KqR+aWGk0yKnzMQliOtwZBIwJLXOywNItJFb0tsnhah4dK25eFQt3 TVx6V4mn422gjkyZVnY3ARsJNeeAQpm5xkQ8ElHa6zwwKdCREyUkpEZSnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZE9yQa3X1YXvZYCGJ3zXpXhwndMB8GA1UdIwQY MBaAFGYvVdN3En8ozia3j9g77PQb7K1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zODhjNzAtZTRjNy00MjBkLTgxODgt OGJlMTQ2MjUzMzU2LzEvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zODhjNzAtZTRjNy00MjBkLTgxODgtOGJlMTQ2MjUzMzU2 LzEvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxxSE5vg Kpm3dStka2V9g2oBdYKshMOUMUV0VtHn8M/dbeDFI1+4hhuCLJlGLY32k3aTeDTZ 5zkDHboTlUF46MxVjIkc38vBBCt49TggEJzOH47x17+458sgTNXcrMraAXbqdrMR VCzwaEzpJXHqHx54UwB4+GeZYKskDmnfD27+G37zDwQFJ2zLfMWA1Rcc/pxWPJ+b 3sAhAtpysUDUfKdkdfFDZgouwItFS/+J0c6j0U06P+1zPDj9Jc5psFF5jNt1YQn2 YTChfz8UWcoNVtRDdTar7CzK+TLhsbLZ+4Yd9idZhHLLRxiKqJcUqIqUGUjIiGM+ of83KNsOdjePKA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:27 2025 by rpki-client