This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft File: 1ZTpX6WbUrWZ26QG17dvODypD6g.mft (raw, json) Hash identifier: a+y+/XgPTRK+Y1Ur9p5KdgaAP9Mg/Q73FLJeNdpz03o= Subject key identifier: 95:F6:07:A4:EA:DF:6E:06:81:D3:55:84:F6:72:38:C8:BD:D2:CD:1C Authority key identifier: D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8 Certificate issuer: /CN=d594e95fa59b52b599dba406d7b76f383ca90fa8 Certificate serial: 019B2DE67B6EE5A26B6B1EA32A53DDA88FE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft Manifest number: 0F29 Signing time: Wed 17 Dec 2025 20:00:38 +0000 Manifest this update: Wed 17 Dec 2025 20:00:38 +0000 Manifest next update: Thu 18 Dec 2025 20:00:38 +0000 Files and hashes: 1: 1ZTpX6WbUrWZ26QG17dvODypD6g.crl (hash: dm/lUQiGG+SAuKonV2rrUsXK66lk8+omhvVQ5fV28hE=) 2: z4wMvnR06etPJrAf1XPqDyyKG9U.roa (hash: 8KNgBhE6X84KnuAvLvDQHDciy51ch4R+wm0a94sf8fk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:7b:6e:e5:a2:6b:6b:1e:a3:2a:53:dd:a8:8f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d594e95fa59b52b599dba406d7b76f383ca90fa8 Validity Not Before: Dec 17 20:00:38 2025 GMT Not After : Dec 18 20:00:38 2025 GMT Subject: CN=95f607a4eadf6e0681d35584f67238c8bdd2cd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:9c:3d:c3:39:1e:db:ab:57:fd:77:04:88: 09:eb:e9:a0:45:18:8e:b3:58:d9:e7:95:87:9b:d7: 65:2d:ae:b6:3a:be:4e:8b:93:54:9d:87:30:66:48: d0:80:97:f8:a0:7b:ed:36:a7:a3:a0:0d:09:47:fb: b9:ea:80:b2:d9:2e:ed:39:09:61:6d:20:71:00:28: bd:8c:a4:45:b8:10:a8:ae:11:ef:de:de:35:8f:44: d5:9d:a2:15:9f:76:28:eb:95:f5:f6:19:fc:8c:ff: 73:84:98:31:8e:34:7e:8b:a4:45:e6:04:98:c1:01: 26:47:f8:23:d3:ce:e2:39:eb:7d:df:68:86:da:58: 61:4a:66:7d:89:3e:09:b8:21:27:bc:9a:20:fd:5e: 77:29:71:97:8d:f1:73:dd:94:11:f0:c7:66:bc:80: 4c:5b:5d:2c:78:c9:4b:4b:f8:ec:b9:a9:db:56:77: be:7c:71:bf:65:34:b0:15:b6:b7:2e:a2:ca:0a:db: 8f:e1:74:0c:4c:f0:26:10:aa:2e:3d:a8:31:fe:4e: c8:60:91:e7:8a:fc:2e:6f:d9:82:d6:ef:79:cf:ba: 46:70:c3:3f:88:8d:83:b2:d9:b0:8a:22:15:61:5e: 3a:1a:35:5f:3b:6f:29:3a:57:04:ef:11:a4:ff:c3: a9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F6:07:A4:EA:DF:6E:06:81:D3:55:84:F6:72:38:C8:BD:D2:CD:1C X509v3 Authority Key Identifier: keyid:D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:40:d5:58:1f:e5:81:83:ba:39:74:5f:36:06:0f:a2:77:b0: 7a:7c:2e:7f:c0:5c:56:5f:47:e9:83:86:de:93:be:43:fd:15: c5:24:1c:45:3b:99:06:c9:78:e1:bd:3d:15:4d:26:37:f4:7f: 0d:91:d9:58:b4:99:0b:6e:32:12:fb:3a:cb:5a:73:1a:25:d9: 7d:cb:66:27:39:f0:ee:32:f7:06:40:75:25:29:1f:f4:f2:c2: cb:63:b0:32:60:c5:5e:a0:f1:6d:d6:dd:76:00:99:84:ed:d7: 25:30:ce:c8:86:cc:89:cd:5e:b2:da:42:ec:ff:59:48:97:c7: e1:1d:e6:1a:2b:66:4c:a9:c0:95:d6:f0:b6:b9:7f:ee:98:4b: 1b:9a:2c:b0:85:2a:02:70:d0:66:60:77:4a:41:26:8e:cc:0d: 42:72:80:30:f6:61:31:6c:89:d2:0a:08:ae:b1:91:0f:c5:60: 83:95:76:f2:72:fa:0b:68:38:b6:65:bc:20:fd:47:39:87:b2: c7:08:99:6a:d5:9b:1b:1d:b5:63:aa:5f:5b:ec:a6:ae:66:c7: b8:ad:91:0b:62:92:3e:69:9a:7c:2f:51:9d:c9:bf:59:36:c7: b3:c4:9c:cf:7d:c4:93:84:33:15:ba:a4:80:2c:bf:c8:05:19: e8:ee:bc:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5ntu5aJrax6jKlPdqI/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1OTRlOTVmYTU5YjUyYjU5OWRiYTQwNmQ3Yjc2ZjM4M2Nh OTBmYTgwHhcNMjUxMjE3MjAwMDM4WhcNMjUxMjE4MjAwMDM4WjAzMTEwLwYDVQQD Eyg5NWY2MDdhNGVhZGY2ZTA2ODFkMzU1ODRmNjcyMzhjOGJkZDJjZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszucPcM5HturV/13BIgJ6+mgRRiO s1jZ55WHm9dlLa62Or5Oi5NUnYcwZkjQgJf4oHvtNqejoA0JR/u56oCy2S7tOQlh bSBxACi9jKRFuBCorhHv3t41j0TVnaIVn3Yo65X19hn8jP9zhJgxjjR+i6RF5gSY wQEmR/gj087iOet932iG2lhhSmZ9iT4JuCEnvJog/V53KXGXjfFz3ZQR8MdmvIBM W10seMlLS/jsuanbVne+fHG/ZTSwFba3LqLKCtuP4XQMTPAmEKouPagx/k7IYJHn ivwub9mC1u95z7pGcMM/iI2DstmwiiIVYV46GjVfO28pOlcE7xGk/8OpFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJX2B6Tq324GgdNVhPZyOMi90s0cMB8GA1UdIwQY MBaAFNWU6V+lm1K1mdukBte3bzg8qQ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVpUcFg2V2JVcldaMjZRRzE3ZHZPRHlwRDZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lZWRiY2QtYWIxOC00YWIzLWI1ZGQt ZTNiMGI0MWUyNWM1LzEvMVpUcFg2V2JVcldaMjZRRzE3ZHZPRHlwRDZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9lZWRiY2QtYWIxOC00YWIzLWI1ZGQtZTNiMGI0MWUyNWM1 LzEvMVpUcFg2V2JVcldaMjZRRzE3ZHZPRHlwRDZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUDVWB/l gYO6OXRfNgYPonewenwuf8BcVl9H6YOG3pO+Q/0VxSQcRTuZBsl44b09FU0mN/R/ DZHZWLSZC24yEvs6y1pzGiXZfctmJznw7jL3BkB1JSkf9PLCy2OwMmDFXqDxbdbd dgCZhO3XJTDOyIbMic1estpC7P9ZSJfH4R3mGitmTKnAldbwtrl/7phLG5ossIUq AnDQZmB3SkEmjswNQnKAMPZhMWyJ0goIrrGRD8Vgg5V28nL6C2g4tmW8IP1HOYey xwiZatWbGx21Y6pfW+ymrmbHuK2RC2KSPmmafC9Rncm/WTbHs8Scz33Ek4QzFbqk gCy/yAUZ6O68Lw== -----END CERTIFICATE-----Generated at Wed Dec 17 22:21:53 2025 by rpki-client