This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft File: mZeck6ki-_c0k75q1l6zv-und8U.mft (raw, json) Hash identifier: lFNYx0xG/kJWxqkMeXe56ib2bOrqWRiQF/vjoFuPOWs= Subject key identifier: CC:B0:DE:23:73:D1:91:CD:85:A9:32:4C:07:0C:0F:EE:32:72:21:50 Authority key identifier: 99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5 Certificate issuer: /CN=99979c93a922fbf73493be6ad65eb3bfeba777c5 Certificate serial: 019AF19B0F7D0EF6DB289E209201448F3B97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:01:02 +0000 Manifest this update: Sat 06 Dec 2025 03:01:02 +0000 Manifest next update: Sun 07 Dec 2025 03:01:02 +0000 Files and hashes: 1: mZeck6ki-_c0k75q1l6zv-und8U.crl (hash: jmEE39R8wZSR4iRY4ivq3i+IREM2iQTBJkoijpzL2fk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0f:7d:0e:f6:db:28:9e:20:92:01:44:8f:3b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99979c93a922fbf73493be6ad65eb3bfeba777c5 Validity Not Before: Dec 6 03:01:02 2025 GMT Not After : Dec 7 03:01:02 2025 GMT Subject: CN=ccb0de2373d191cd85a9324c070c0fee32722150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:3a:87:66:a8:ad:ee:a2:d2:2e:a9:98:d5: 1c:11:a0:04:89:bf:cf:97:a4:88:fb:dc:75:98:5c: d7:99:2f:d8:cf:d5:2b:c5:59:29:b2:44:2b:af:37: 2d:dc:c8:3f:b7:1c:1f:28:ca:9a:7d:db:9a:60:c8: 7f:da:60:4a:c5:d3:a4:03:9b:3d:d7:9f:ea:18:5a: f1:43:c7:97:00:14:d7:c9:2d:4c:c0:85:38:d1:88: 85:2d:8c:7c:c7:f9:a3:d1:64:07:40:d4:5d:53:41: 04:77:03:54:34:fd:85:f0:81:0e:5f:da:74:e7:8d: fc:f5:cf:ff:39:a8:fc:bc:87:75:a0:46:da:9c:b0: c0:ce:5d:2b:46:2c:47:39:88:af:d9:ba:e1:6c:fa: 28:74:3d:25:93:98:5c:09:ac:e1:09:69:6d:37:12: 96:52:1c:50:7d:99:bc:ef:34:ba:37:21:63:1c:5b: 26:08:4f:de:26:28:dd:09:fb:dd:f6:ee:d4:ed:16: 0a:5c:fd:56:5d:be:90:36:5c:b1:1d:4c:42:e0:f0: f2:d8:86:fc:22:00:ae:fa:2b:9e:d5:a4:15:bc:36: ea:a1:ce:43:71:f5:27:88:14:fc:cd:60:b1:96:7e: c8:40:70:c6:23:18:79:db:29:5c:ed:c1:68:b9:23: 21:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B0:DE:23:73:D1:91:CD:85:A9:32:4C:07:0C:0F:EE:32:72:21:50 X509v3 Authority Key Identifier: keyid:99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e7:4d:9b:86:8a:12:44:47:b2:8c:a5:cc:93:98:16:e8:92: 07:59:2b:24:be:55:4f:20:75:cf:68:d4:5f:e2:e8:07:ec:fc: ca:00:bd:53:34:a6:d4:05:de:68:5a:b2:ed:b9:e6:f9:8d:a5: 8b:e6:b4:31:e7:58:b4:a7:a4:f8:0e:0c:ba:a9:4b:e1:36:73: 9a:e8:fb:aa:17:3c:52:ea:bd:a7:ac:6b:f7:85:87:7c:02:18: c2:3c:e8:1a:82:ed:5d:e1:5b:1a:c3:71:9e:f8:d6:0f:7f:cc: 0e:a6:35:35:6c:eb:bd:88:9b:00:0b:e2:1a:8d:03:ad:ab:40: b1:50:6e:10:a6:6e:ee:bd:ba:5f:d6:75:87:1e:9d:5a:d8:ad: 45:fc:7b:06:a0:84:a5:0d:a4:d5:d7:4b:87:c0:62:43:00:da: df:6c:b0:a2:53:65:a4:74:ea:9e:21:18:44:f6:83:03:e8:d2: 27:f2:38:d3:c5:e4:8c:51:83:3f:2d:9f:c8:61:8d:9e:86:e9: 01:7a:af:82:92:a3:40:40:62:e1:51:89:a2:3b:e6:17:f2:bf: 39:04:38:ba:88:5d:dc:97:18:67:a8:45:55:e0:11:a3:0f:3d: d6:c2:b4:08:ec:28:4b:9c:e9:42:c0:92:bc:f9:43:28:30:9f: 27:19:6c:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmw99DvbbKJ4gkgFEjzuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OTc5YzkzYTkyMmZiZjczNDkzYmU2YWQ2NWViM2JmZWJh Nzc3YzUwHhcNMjUxMjA2MDMwMTAyWhcNMjUxMjA3MDMwMTAyWjAzMTEwLwYDVQQD EyhjY2IwZGUyMzczZDE5MWNkODVhOTMyNGMwNzBjMGZlZTMyNzIyMTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4I6h2aore6i0i6pmNUcEaAEib/P l6SI+9x1mFzXmS/Yz9UrxVkpskQrrzct3Mg/txwfKMqafduaYMh/2mBKxdOkA5s9 15/qGFrxQ8eXABTXyS1MwIU40YiFLYx8x/mj0WQHQNRdU0EEdwNUNP2F8IEOX9p0 54389c//Oaj8vId1oEbanLDAzl0rRixHOYiv2brhbPoodD0lk5hcCazhCWltNxKW UhxQfZm87zS6NyFjHFsmCE/eJijdCfvd9u7U7RYKXP1WXb6QNlyxHUxC4PDy2Ib8 IgCu+iue1aQVvDbqoc5DcfUniBT8zWCxln7IQHDGIxh52ylc7cFouSMhPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyw3iNz0ZHNhakyTAcMD+4yciFQMB8GA1UdIwQY MBaAFJmXnJOpIvv3NJO+atZes7/rp3fFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVplY2s2a2ktX2Mwazc1cTFsNnp2LXVuZDhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hZGYxNzEtNWNjMy00YzZlLTgwOWQt YzA5MWRhNjg2OGM3LzEvbVplY2s2a2ktX2Mwazc1cTFsNnp2LXVuZDhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hZGYxNzEtNWNjMy00YzZlLTgwOWQtYzA5MWRhNjg2OGM3 LzEvbVplY2s2a2ktX2Mwazc1cTFsNnp2LXVuZDhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGedNm4aK EkRHsoylzJOYFuiSB1krJL5VTyB1z2jUX+LoB+z8ygC9UzSm1AXeaFqy7bnm+Y2l i+a0MedYtKek+A4MuqlL4TZzmuj7qhc8Uuq9p6xr94WHfAIYwjzoGoLtXeFbGsNx nvjWD3/MDqY1NWzrvYibAAviGo0DratAsVBuEKZu7r26X9Z1hx6dWtitRfx7BqCE pQ2k1ddLh8BiQwDa32ywolNlpHTqniEYRPaDA+jSJ/I408XkjFGDPy2fyGGNnobp AXqvgpKjQEBi4VGJojvmF/K/OQQ4uohd3JcYZ6hFVeARow891sK0COwoS5zpQsCS vPlDKDCfJxlsOg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:13 2025 by rpki-client