This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft File: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json) Hash identifier: kQpWSbuyfK3C74HjDh9qF8coMtivzH69M0WA9teBwbg= Subject key identifier: EF:00:FC:B2:0A:E3:61:63:C1:2E:63:F9:CC:25:26:24:FF:E9:5F:B7 Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa Certificate serial: 019AF2402911A3A59991220769ADBFBBAE34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:22 +0000 Manifest this update: Sat 06 Dec 2025 06:01:22 +0000 Manifest next update: Sun 07 Dec 2025 06:01:22 +0000 Files and hashes: 1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: iI06vKBZClZQDUJHzSOGzehBBzFMb1lTwTwL5Do2l3w=) 2: qflKZTF3zhSp7clCgQY6deaVcuQ.roa (hash: YrrT0H2VFpPiuVpFBvUMkkYVOwRQGbWJWicWDvr4Ns0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:29:11:a3:a5:99:91:22:07:69:ad:bf:bb:ae:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa Validity Not Before: Dec 6 06:01:22 2025 GMT Not After : Dec 7 06:01:22 2025 GMT Subject: CN=ef00fcb20ae36163c12e63f9cc252624ffe95fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:6c:e2:24:98:3d:9d:a3:a6:5f:1d:b1:b7: 03:e0:39:82:74:02:70:b1:21:c1:0b:b1:85:27:f7: 5e:cc:92:69:fb:4a:91:b6:ae:c2:e7:d3:65:d0:15: f2:13:46:48:7f:e3:33:fb:05:1c:5e:b2:9e:da:1d: 18:c6:08:93:13:77:2e:87:08:bc:a5:de:50:1b:88: 71:d0:a7:1f:0e:c0:4c:d7:15:ce:84:56:d7:54:be: e8:e5:00:09:9d:17:0a:38:02:22:62:5a:8d:c6:77: 65:f6:1a:c5:24:a0:ea:7c:3d:8f:e4:7b:5f:35:62: af:d9:14:d2:f4:b3:9f:24:8d:8e:1b:7d:74:22:19: ad:b4:c9:a7:d0:be:4f:2e:a4:19:88:36:b3:ae:1d: a0:c3:dd:b0:38:cd:e5:3a:5d:d8:02:19:c9:42:e1: 24:ea:90:88:14:a4:fd:1c:20:50:3f:c8:21:a6:9e: de:f6:5b:96:10:ab:c1:c5:2f:21:05:f7:86:3e:08: 21:2a:96:f9:90:18:c4:f5:41:a6:74:e6:ce:ac:15: 70:48:ea:7b:b6:17:db:76:f7:3f:0e:b6:75:19:81: 0b:51:c5:7d:57:06:23:c4:99:b9:8d:e8:a0:64:01: 02:9b:e4:65:c8:b5:39:b1:3b:14:96:1d:67:7a:05: 36:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:00:FC:B2:0A:E3:61:63:C1:2E:63:F9:CC:25:26:24:FF:E9:5F:B7 X509v3 Authority Key Identifier: keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:38:fe:53:c9:6f:b9:16:d2:ac:cc:2c:26:1a:f8:02:22:e2: 1f:c1:e5:de:86:e4:a7:e1:61:10:91:92:e4:05:6d:ed:81:70: 07:06:ea:d5:92:0d:92:7e:8b:98:99:43:30:3a:d3:b5:f7:97: 64:0f:f5:b3:24:8f:2d:2f:8b:7c:98:f3:0e:72:13:34:99:25: 35:94:76:de:29:23:17:5d:7d:91:be:f0:91:49:54:45:b2:fe: 39:6e:20:17:66:4f:06:c4:e9:7c:e3:28:fb:7d:d1:6b:1e:b0: e7:3e:d3:8e:ec:e3:fc:11:17:3b:14:24:db:19:58:db:90:8a: 38:ac:33:63:c0:ff:13:4e:80:da:9b:26:bc:8c:16:96:c3:df: 19:f0:b0:16:b2:4d:d2:77:df:6c:61:79:0e:28:27:98:b7:ea: 0b:bf:0c:8f:01:1f:e9:0c:99:a0:e8:e9:ae:71:f5:cc:05:da: bb:cf:15:17:9b:e9:c6:fe:d6:e1:75:6b:3b:0f:25:8c:60:54: 21:84:0f:0a:37:42:3b:79:9c:c3:7a:b9:09:d0:f7:aa:4f:46: fa:fd:5f:f9:38:c1:fd:54:38:b3:fc:92:55:ed:57:51:7e:b6: e6:b8:73:72:b5:bd:82:70:9d:f8:12:2e:9d:cb:ed:99:84:e0: 55:10:1c:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCkRo6WZkSIHaa2/u640MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzY3ZmMyNGQwMDRmNzFkZDJhZWYwM2Y5Y2I0ZjJlM2Y5 MDg2YWEwHhcNMjUxMjA2MDYwMTIyWhcNMjUxMjA3MDYwMTIyWjAzMTEwLwYDVQQD EyhlZjAwZmNiMjBhZTM2MTYzYzEyZTYzZjljYzI1MjYyNGZmZTk1ZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK5s4iSYPZ2jpl8dsbcD4DmCdAJw sSHBC7GFJ/dezJJp+0qRtq7C59Nl0BXyE0ZIf+Mz+wUcXrKe2h0YxgiTE3cuhwi8 pd5QG4hx0KcfDsBM1xXOhFbXVL7o5QAJnRcKOAIiYlqNxndl9hrFJKDqfD2P5Htf NWKv2RTS9LOfJI2OG310IhmttMmn0L5PLqQZiDazrh2gw92wOM3lOl3YAhnJQuEk 6pCIFKT9HCBQP8ghpp7e9luWEKvBxS8hBfeGPgghKpb5kBjE9UGmdObOrBVwSOp7 thfbdvc/DrZ1GYELUcV9VwYjxJm5jeigZAECm+RlyLU5sTsUlh1negU2TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8A/LIK42FjwS5j+cwlJiT/6V+3MB8GA1UdIwQY MBaAFNc2f8JNAE9x3SrvA/nLTy4/kIaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQt YjljNzk0ZTAzY2JhLzEvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQtYjljNzk0ZTAzY2Jh LzEvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzj+U8lv uRbSrMwsJhr4AiLiH8Hl3obkp+FhEJGS5AVt7YFwBwbq1ZINkn6LmJlDMDrTtfeX ZA/1sySPLS+LfJjzDnITNJklNZR23ikjF119kb7wkUlURbL+OW4gF2ZPBsTpfOMo +33Rax6w5z7Tjuzj/BEXOxQk2xlY25CKOKwzY8D/E06A2psmvIwWlsPfGfCwFrJN 0nffbGF5DignmLfqC78MjwEf6QyZoOjprnH1zAXau88VF5vpxv7W4XVrOw8ljGBU IYQPCjdCO3mcw3q5CdD3qk9G+v1f+TjB/VQ4s/ySVe1XUX625rhzcrW9gnCd+BIu ncvtmYTgVRAcoA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:49 2025 by rpki-client