This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json) Hash identifier: oyhSlLdJievLOxumoVdWHquSkVNJuKAnTNNgJZLEiAQ= Subject key identifier: C6:18:59:35:B6:F7:3B:22:8C:14:F6:4B:40:7E:C4:42:B4:EE:BE:23 Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd Certificate serial: 019AF19AE4584525EEC2123AA75CA293CFEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft Manifest number: 0D8D Signing time: Sat 06 Dec 2025 03:00:51 +0000 Manifest this update: Sat 06 Dec 2025 03:00:51 +0000 Manifest next update: Sun 07 Dec 2025 03:00:51 +0000 Files and hashes: 1: 1-WPhVRlAA6jPCwspck6vC93076I.roa (hash: kfO6p65RVm3Nr0Sh6nB6DU3tpOzF9iRvjAt+cnDEkzQ=) 2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: BYq/3yx4HrjDlzMB1U0YjFmumSHpYq2/17U7Zt5ra6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e4:58:45:25:ee:c2:12:3a:a7:5c:a2:93:cf:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd Validity Not Before: Dec 6 03:00:51 2025 GMT Not After : Dec 7 03:00:51 2025 GMT Subject: CN=c6185935b6f73b228c14f64b407ec442b4eebe23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:25:27:46:4d:c7:09:40:a3:7a:73:06:f1: 45:7b:62:f3:d1:48:4e:f5:97:6d:15:f2:79:32:53: 7c:73:e8:44:61:db:94:a5:43:93:b3:d7:1b:db:97: 6a:57:b2:12:9b:9f:08:ab:36:89:ed:08:56:ad:d1: 3d:b2:17:a4:95:5d:22:d4:04:de:88:3c:31:f2:f5: f6:8a:0f:41:84:1f:30:cd:85:99:92:73:2e:2f:7f: 84:ab:64:1f:e9:d0:27:ad:e0:e8:89:be:ac:53:0a: 17:d1:5c:06:fe:27:e7:4b:ea:c9:3b:ae:15:1e:85: 59:4a:08:c8:6c:78:ed:e5:3c:0b:65:e9:6f:ff:b2: 38:16:08:d8:67:04:4d:6e:f1:02:67:90:17:51:0a: ee:c4:3a:d9:e7:b1:38:d6:50:d5:9a:eb:68:18:83: 12:20:fd:3d:45:0d:10:29:4e:1f:63:02:a6:87:42: 29:0b:12:71:d2:a0:88:00:35:7a:07:87:7c:46:83: 7d:59:3a:ab:c2:fb:84:c1:af:96:7a:e3:96:a8:03: 12:58:77:79:68:84:55:2f:d8:9f:7b:10:1a:97:6c: 32:39:95:1d:89:3e:dc:cf:b9:41:70:34:4a:24:58: 88:4e:b5:10:39:24:91:84:0e:4b:78:45:52:e9:83: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:18:59:35:B6:F7:3B:22:8C:14:F6:4B:40:7E:C4:42:B4:EE:BE:23 X509v3 Authority Key Identifier: keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:fb:7f:d7:93:bc:73:90:75:88:a7:d9:68:8a:b2:53:85:b8: 69:ad:12:e1:2a:7d:f3:0b:f7:d1:be:c7:98:06:f5:ec:aa:81: 1a:9a:63:9a:99:3f:9c:cd:16:90:cf:88:53:cc:88:3e:0c:be: 0b:6b:27:7a:4c:a9:92:b9:de:ca:a6:39:b5:b6:58:25:0a:5c: e4:bc:57:a3:10:0a:3a:21:bd:a1:ef:a6:4e:23:e2:e3:49:36: 2c:1a:7a:15:f7:1e:9f:18:22:52:bb:be:97:07:b4:a1:83:d4: 3e:8e:58:2a:a3:51:3d:82:45:74:51:43:75:87:48:eb:15:ad: 3c:f6:72:c1:64:f9:dc:97:90:b5:d2:d8:b9:94:bb:b1:cd:e6: 2b:5c:b2:a6:8e:ae:3b:ca:a9:9f:55:2b:3d:18:38:a0:bc:8f: de:f3:e9:33:a4:36:a7:eb:fe:a2:ac:3d:22:e6:f2:f8:af:5f: 42:15:5a:ec:9f:30:a8:a1:c6:b5:eb:6d:6e:83:3b:cc:3c:da: 6e:61:aa:91:59:e3:8a:82:ee:19:d0:8f:a5:e8:41:64:ed:60: 04:7a:a9:8a:62:24:df:29:b1:70:0c:a3:2b:7c:fe:c6:bf:c6: 27:bc:ca:2e:83:0f:3c:c3:87:9b:59:80:5e:5a:fb:e6:6e:ac: 69:22:b2:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuRYRSXuwhI6p1yik8/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTYzZGQwMWVjODBkZTllMTM4YzlkZTQ0YTM2ZDQ4ZjA2 YjkzZmQwHhcNMjUxMjA2MDMwMDUxWhcNMjUxMjA3MDMwMDUxWjAzMTEwLwYDVQQD EyhjNjE4NTkzNWI2ZjczYjIyOGMxNGY2NGI0MDdlYzQ0MmI0ZWViZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgElJ0ZNxwlAo3pzBvFFe2Lz0UhO 9ZdtFfJ5MlN8c+hEYduUpUOTs9cb25dqV7ISm58IqzaJ7QhWrdE9sheklV0i1ATe iDwx8vX2ig9BhB8wzYWZknMuL3+Eq2Qf6dAnreDoib6sUwoX0VwG/ifnS+rJO64V HoVZSgjIbHjt5TwLZelv/7I4FgjYZwRNbvECZ5AXUQruxDrZ57E41lDVmutoGIMS IP09RQ0QKU4fYwKmh0IpCxJx0qCIADV6B4d8RoN9WTqrwvuEwa+WeuOWqAMSWHd5 aIRVL9ifexAal2wyOZUdiT7cz7lBcDRKJFiITrUQOSSRhA5LeEVS6YPodwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYYWTW29zsijBT2S0B+xEK07r4jMB8GA1UdIwQY MBaAFM2WPdAeyA3p4TjJ3kSjbUjwa5P9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYt NmNmMTY1MjM5YmQ5LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYtNmNmMTY1MjM5YmQ5 LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvt/15O8 c5B1iKfZaIqyU4W4aa0S4Sp98wv30b7HmAb17KqBGppjmpk/nM0WkM+IU8yIPgy+ C2snekypkrneyqY5tbZYJQpc5LxXoxAKOiG9oe+mTiPi40k2LBp6FfcenxgiUru+ lwe0oYPUPo5YKqNRPYJFdFFDdYdI6xWtPPZywWT53JeQtdLYuZS7sc3mK1yypo6u O8qpn1UrPRg4oLyP3vPpM6Q2p+v+oqw9Iuby+K9fQhVa7J8wqKHGtettboM7zDza bmGqkVnjioLuGdCPpehBZO1gBHqpimIk3ymxcAyjK3z+xr/GJ7zKLoMPPMOHm1mA Xlr75m6saSKyKw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:12 2025 by rpki-client