This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json) Hash identifier: rAeyH0kv5jB14HvlReKHJOwsQW/46Tds+OEiT6hs/dc= Subject key identifier: 39:51:A1:A4:80:CC:E8:71:86:D5:5E:AA:22:8F:DE:04:55:A5:59:AD Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd Certificate serial: 019B3155F61E4074171ACF47BAE2DDD16040 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft Manifest number: 0DAE Signing time: Thu 18 Dec 2025 12:01:15 +0000 Manifest this update: Thu 18 Dec 2025 12:01:15 +0000 Manifest next update: Fri 19 Dec 2025 12:01:15 +0000 Files and hashes: 1: 1-WPhVRlAA6jPCwspck6vC93076I.roa (hash: kfO6p65RVm3Nr0Sh6nB6DU3tpOzF9iRvjAt+cnDEkzQ=) 2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: aSC75rZLtGZGNpKmkGZfngt+BDbfQUBvcDdeRG8mU8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:f6:1e:40:74:17:1a:cf:47:ba:e2:dd:d1:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd Validity Not Before: Dec 18 12:01:15 2025 GMT Not After : Dec 19 12:01:15 2025 GMT Subject: CN=3951a1a480cce87186d55eaa228fde0455a559ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:1f:04:ce:75:5f:a9:76:8d:4a:3a:2f:28: ea:05:9c:0c:2e:21:b1:6d:b9:38:07:36:36:ec:cb: d7:0e:7d:be:f4:1e:02:bb:4f:f2:ff:ce:4c:d1:11: 93:05:73:76:cc:f9:c6:39:1b:d8:cc:a6:72:3a:f1: d5:8f:bd:44:35:e3:65:91:e0:e8:d3:47:4a:ff:59: 94:c8:5f:55:0f:bd:7c:6b:4c:00:4e:fa:f1:be:2e: 5b:97:af:fc:c2:1e:fe:ed:e8:64:1a:3c:c7:7b:33: 8f:50:c7:b8:3c:a7:45:c5:78:c0:ea:95:1c:eb:fa: a2:52:4e:cb:bf:35:41:40:81:ea:65:f6:72:22:54: a1:19:a7:d9:7a:8f:90:a8:78:c1:99:71:68:39:10: a5:c3:c2:eb:9f:bf:19:76:c9:ef:bc:8a:24:ac:91: 7c:e6:cf:5d:6f:6f:f4:3d:16:e6:46:7b:15:0f:47: 49:7e:6f:2c:9c:44:94:a5:52:61:93:db:31:93:54: 82:d6:32:8b:5b:72:62:c7:ff:be:1a:64:27:74:c9: 3d:72:13:bd:6a:3c:13:e5:6e:0d:d3:41:e1:f7:b3: 27:0c:3d:16:c1:3a:77:e8:b1:ef:72:4a:3c:da:aa: 2f:38:46:da:63:8b:5c:f1:d9:8d:84:d2:cf:30:8a: 31:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:51:A1:A4:80:CC:E8:71:86:D5:5E:AA:22:8F:DE:04:55:A5:59:AD X509v3 Authority Key Identifier: keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:1f:89:59:45:3c:42:03:32:82:b7:4f:ba:a9:f8:c1:b0:95: 7b:5b:57:23:b2:9c:67:29:b6:0e:11:fd:0e:ab:a1:b7:11:28: f4:2a:25:7b:8f:05:fd:12:b3:c8:a7:8d:8b:77:c3:c2:8e:f1: 16:a2:5d:8b:29:77:2b:a8:be:36:33:06:03:bc:31:ef:0d:7a: dd:94:f2:a1:e3:3e:b6:55:c7:3e:52:b1:ab:7e:3a:13:18:93: f4:9f:b0:b7:41:eb:47:8f:9f:e2:3f:0a:63:44:a2:fa:53:33: a7:e8:17:7f:6f:5c:31:32:60:cf:86:d9:7a:4d:34:eb:56:5f: 51:08:5d:c7:d1:3d:08:a6:b0:d7:d2:1a:c7:e5:9b:59:89:2c: 20:db:e2:b4:70:33:22:49:7e:19:6b:fb:b2:40:a4:da:55:1f: c0:ed:b4:46:e2:df:29:12:2c:f6:49:37:b6:08:01:56:8f:5c: 05:05:2d:a3:b6:b6:0c:0e:77:9e:1e:c7:61:ec:af:01:56:ec: b6:57:d0:08:0d:82:4f:12:90:c7:90:6d:98:32:1d:dd:6c:e5: a3:7c:be:b6:1d:6b:52:9f:65:c6:f6:1b:09:10:ed:bf:d6:1e: 75:1e:34:49:b2:18:ef:ab:cb:96:d2:71:46:3f:e3:02:86:6f: 6f:90:90:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVfYeQHQXGs9HuuLd0WBAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTYzZGQwMWVjODBkZTllMTM4YzlkZTQ0YTM2ZDQ4ZjA2 YjkzZmQwHhcNMjUxMjE4MTIwMTE1WhcNMjUxMjE5MTIwMTE1WjAzMTEwLwYDVQQD EygzOTUxYTFhNDgwY2NlODcxODZkNTVlYWEyMjhmZGUwNDU1YTU1OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstQfBM51X6l2jUo6LyjqBZwMLiGx bbk4BzY27MvXDn2+9B4Cu0/y/85M0RGTBXN2zPnGORvYzKZyOvHVj71ENeNlkeDo 00dK/1mUyF9VD718a0wATvrxvi5bl6/8wh7+7ehkGjzHezOPUMe4PKdFxXjA6pUc 6/qiUk7LvzVBQIHqZfZyIlShGafZeo+QqHjBmXFoORClw8Lrn78ZdsnvvIokrJF8 5s9db2/0PRbmRnsVD0dJfm8snESUpVJhk9sxk1SC1jKLW3Jix/++GmQndMk9chO9 ajwT5W4N00Hh97MnDD0WwTp36LHvcko82qovOEbaY4tc8dmNhNLPMIoxuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlRoaSAzOhxhtVeqiKP3gRVpVmtMB8GA1UdIwQY MBaAFM2WPdAeyA3p4TjJ3kSjbUjwa5P9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYt NmNmMTY1MjM5YmQ5LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYtNmNmMTY1MjM5YmQ5 LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuh+JWUU8 QgMygrdPuqn4wbCVe1tXI7KcZym2DhH9DquhtxEo9Cole48F/RKzyKeNi3fDwo7x FqJdiyl3K6i+NjMGA7wx7w163ZTyoeM+tlXHPlKxq346ExiT9J+wt0HrR4+f4j8K Y0Si+lMzp+gXf29cMTJgz4bZek0061ZfUQhdx9E9CKaw19Iax+WbWYksINvitHAz Ikl+GWv7skCk2lUfwO20RuLfKRIs9kk3tggBVo9cBQUto7a2DA53nh7HYeyvAVbs tlfQCA2CTxKQx5BtmDId3Wzlo3y+th1rUp9lxvYbCRDtv9YedR40SbIY76vLltJx Rj/jAoZvb5CQGA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:22:09 2025 by rpki-client