This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft File: ZrB43tN1kjDKLho76QZjjRMGuQg.mft (raw, json) Hash identifier: QvXnIEtRajWYlE9JhyKQWjJ44NFrqC7ytrK1TMioDRw= Subject key identifier: 1D:91:EE:B7:EF:01:33:D3:94:06:D7:6E:23:F0:F8:7F:C2:19:F5:BC Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08 Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908 Certificate serial: 019AF24029142914E3FFB4E139BBA6FECC00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft Manifest number: 0AA8 Signing time: Sat 06 Dec 2025 06:01:22 +0000 Manifest this update: Sat 06 Dec 2025 06:01:22 +0000 Manifest next update: Sun 07 Dec 2025 06:01:22 +0000 Files and hashes: 1: ZrB43tN1kjDKLho76QZjjRMGuQg.crl (hash: 5A9iwplfr9csEQgOUJKamF8HQYEUbV2R6hBDrmTxZHw=) 2: mHxy9rJdZpH5hrd46ZQbudzuLF8.roa (hash: xwokQPLLEdy+DbSgYqJ8Dht6nsu849d5eiNxGGm9TUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:29:14:29:14:e3:ff:b4:e1:39:bb:a6:fe:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908 Validity Not Before: Dec 6 06:01:22 2025 GMT Not After : Dec 7 06:01:22 2025 GMT Subject: CN=1d91eeb7ef0133d39406d76e23f0f87fc219f5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:43:10:a8:28:de:fa:00:b9:33:63:1b:4d:7c: 8a:e9:51:05:a3:1e:90:b6:b1:34:f8:01:db:a6:cd: 5f:20:07:9c:1a:f6:8f:ef:2f:7a:b4:ca:cd:f3:4b: aa:07:e1:a4:74:8b:73:a6:8b:3c:9a:63:4c:71:02: 39:b1:19:6a:08:5d:3b:13:60:45:68:1c:47:f9:5e: 57:15:f8:ea:18:f4:bd:16:7b:7c:fa:72:e0:46:d0: 85:50:ed:17:4e:b6:b7:e2:8b:d0:d8:40:b2:55:a2: ac:19:74:51:f6:05:d0:21:f4:a6:da:7b:7a:13:df: 27:3a:09:27:84:4a:c7:22:3d:69:7b:17:ee:ec:00: 6e:ff:61:f9:8e:f8:c0:32:0d:8c:72:a4:f8:91:f4: 9e:cb:a5:a8:54:43:93:a2:87:74:27:9e:63:d0:c9: 45:42:d8:a8:9f:e2:30:60:39:2a:5f:ad:66:09:7a: b4:83:b2:91:d3:0d:09:8a:66:18:7a:9b:5f:b6:2a: 43:db:47:f2:f1:31:7c:49:32:25:f5:3a:cc:21:f1: 6c:b5:ec:f9:15:5c:b9:ec:98:9b:5a:40:73:f4:ae: 5a:b8:da:72:a0:f2:02:0e:31:28:9b:75:73:e7:78: 9c:a5:22:f9:25:8b:48:43:5f:54:70:01:e1:ca:5c: d6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:91:EE:B7:EF:01:33:D3:94:06:D7:6E:23:F0:F8:7F:C2:19:F5:BC X509v3 Authority Key Identifier: keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:2d:b3:ba:da:38:37:43:ae:26:16:2c:c7:23:38:4a:a6:3f: b2:b0:4d:28:6e:42:d3:b3:61:29:c3:44:ca:4c:d9:f6:50:fa: c6:e5:49:bf:76:6d:5d:db:66:6e:fc:0c:4f:14:22:f2:0a:ed: 57:a0:c5:b0:17:3f:db:30:33:8b:0a:7f:f0:2a:5d:82:02:f6: c0:7f:d5:d8:c6:7d:eb:1a:b2:cb:37:a1:b7:7e:b0:88:3a:21: 5c:b0:58:ce:00:9f:31:9d:9b:2e:df:df:ed:f5:b3:f3:38:89: ad:7c:1a:a6:a7:46:75:fd:88:43:b3:1e:09:47:b3:7d:b9:65: ba:f6:cb:02:79:d4:aa:a0:60:42:a2:09:35:f5:bc:67:6a:20: 49:8a:d3:f1:fb:df:a3:c7:a0:3b:77:7d:27:bc:2c:c9:35:a0: 38:9f:a5:71:26:15:22:83:d6:a5:91:e7:83:70:e3:9d:38:24: 07:6d:da:01:1c:40:71:65:96:15:15:05:2f:e1:5a:e0:b7:1c: 11:54:7b:2f:65:29:29:2f:38:71:7c:32:9d:8e:1d:69:0c:33: 0e:ed:e9:c7:e5:96:e3:ec:a7:70:d8:4c:33:ae:52:a4:6a:f1: 67:29:04:74:ac:b9:27:46:74:14:e3:da:7d:10:c4:26:cf:08: c5:e1:53:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCkUKRTj/7ThObum/swAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YjA3OGRlZDM3NTkyMzBjYTJlMWEzYmU5MDY2MzhkMTMw NmI5MDgwHhcNMjUxMjA2MDYwMTIyWhcNMjUxMjA3MDYwMTIyWjAzMTEwLwYDVQQD EygxZDkxZWViN2VmMDEzM2QzOTQwNmQ3NmUyM2YwZjg3ZmMyMTlmNWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEMQqCje+gC5M2MbTXyK6VEFox6Q trE0+AHbps1fIAecGvaP7y96tMrN80uqB+GkdItzpos8mmNMcQI5sRlqCF07E2BF aBxH+V5XFfjqGPS9Fnt8+nLgRtCFUO0XTra34ovQ2ECyVaKsGXRR9gXQIfSm2nt6 E98nOgknhErHIj1pexfu7ABu/2H5jvjAMg2McqT4kfSey6WoVEOTood0J55j0MlF Qtion+IwYDkqX61mCXq0g7KR0w0JimYYeptftipD20fy8TF8STIl9TrMIfFstez5 FVy57JibWkBz9K5auNpyoPICDjEom3Vz53icpSL5JYtIQ19UcAHhylzWJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2R7rfvATPTlAbXbiPw+H/CGfW8MB8GA1UdIwQY MBaAFGaweN7TdZIwyi4aO+kGY40TBrkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NjM1OTItYTQ4MC00NDRmLWE4ODEt NDAyZTYyYzU0ZDMyLzEvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC83NjM1OTItYTQ4MC00NDRmLWE4ODEtNDAyZTYyYzU0ZDMy LzEvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhy2zuto4 N0OuJhYsxyM4SqY/srBNKG5C07NhKcNEykzZ9lD6xuVJv3ZtXdtmbvwMTxQi8grt V6DFsBc/2zAziwp/8CpdggL2wH/V2MZ96xqyyzeht36wiDohXLBYzgCfMZ2bLt/f 7fWz8ziJrXwapqdGdf2IQ7MeCUezfblluvbLAnnUqqBgQqIJNfW8Z2ogSYrT8fvf o8egO3d9J7wsyTWgOJ+lcSYVIoPWpZHng3DjnTgkB23aARxAcWWWFRUFL+Fa4Lcc EVR7L2UpKS84cXwynY4daQwzDu3px+WW4+yncNhMM65SpGrxZykEdKy5J0Z0FOPa fRDEJs8IxeFTdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:54 2025 by rpki-client