This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft File: 1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json) Hash identifier: BQf9tkc0SXJ1jGOKnsW+0NdZD8cyYdubW9CQ+l3+wPU= Subject key identifier: DB:36:02:6F:C7:05:B6:B5:99:4C:30:15:94:6E:97:62:82:14:35:42 Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28 Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328 Certificate serial: 019AF49C667094F63C9BB8C75B52C36E2969 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft Manifest number: 06CE Signing time: Sat 06 Dec 2025 17:01:21 +0000 Manifest this update: Sat 06 Dec 2025 17:01:21 +0000 Manifest next update: Sun 07 Dec 2025 17:01:21 +0000 Files and hashes: 1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: DcnJAX0goP6/qZJSilqZq0NgadzkUjREfJsOvx2xTYI=) 2: oZt6wOeBPRzgxfrSHyQvaXZ61CE.roa (hash: 0c3+xTwK5KGYXpDaZhmc1MdZZB2Ym1lrAvZHlgXOKE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:66:70:94:f6:3c:9b:b8:c7:5b:52:c3:6e:29:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328 Validity Not Before: Dec 6 17:01:21 2025 GMT Not After : Dec 7 17:01:21 2025 GMT Subject: CN=db36026fc705b6b5994c3015946e976282143542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:07:af:da:b4:15:9d:99:a7:c0:33:01:e9:5d: 13:9c:f8:ca:0d:a2:d1:3e:26:8b:fe:29:64:25:28: 39:45:2e:6e:ac:6e:08:75:f3:62:63:3a:32:f0:37: fb:2f:1e:4a:64:51:2e:15:88:e3:a5:0f:05:5d:dc: 63:90:8d:8c:da:07:ac:5b:11:85:6c:c3:ef:4b:73: 33:2b:09:75:2f:63:6e:c1:65:90:76:1b:90:06:11: 6f:63:05:e5:53:c2:4b:a2:43:e5:99:f2:30:4e:b5: 25:04:ee:b5:f6:4f:26:cb:01:b4:d2:50:71:fd:ea: 25:c9:99:ac:7d:01:b8:a7:68:2b:ba:66:d6:96:ce: cf:c6:5d:cd:dd:e7:08:b0:9a:59:64:04:be:c3:c0: 99:62:be:57:b4:47:76:2a:9d:d7:ad:45:ce:32:92: f4:c3:25:8d:b5:ba:9c:fb:2f:d8:ec:46:74:1f:3a: bc:c9:08:94:82:12:3a:5d:62:26:1d:af:68:8e:7b: 35:d1:af:1a:9f:b5:f0:99:68:ec:25:42:a2:b7:03: 10:0f:5c:94:e6:88:9c:96:5a:94:6c:ec:52:83:1b: a9:c9:63:d0:7d:7f:71:82:98:45:9b:4a:b4:42:98: 8b:56:8b:11:2a:02:e1:c3:19:41:7f:d9:90:55:45: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:36:02:6F:C7:05:B6:B5:99:4C:30:15:94:6E:97:62:82:14:35:42 X509v3 Authority Key Identifier: keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:cf:31:99:81:5b:a6:d2:b8:34:8d:42:8b:bc:c6:eb:2c:48: f4:75:7d:18:47:45:a1:59:90:b6:17:8c:52:82:ab:dc:cc:b7: 1c:b9:92:84:f0:a0:bb:b8:98:68:47:4f:ee:4f:ba:01:98:a0: 8f:04:ca:d9:1b:1b:21:d7:a5:19:8c:d1:00:26:04:fe:6e:f0: 17:c7:9a:5c:e9:8d:01:c8:2f:cd:ac:63:50:97:a8:0d:e7:99: 15:e4:78:9f:cc:db:ba:1d:a5:08:ba:41:c2:9f:28:11:45:29: d0:bc:dd:76:fa:53:e6:e3:02:e2:b0:42:21:53:33:7d:f3:c7: c3:66:95:c9:ba:f0:13:b2:bd:46:d2:17:f5:a3:99:80:02:0c: 3a:27:92:a8:3a:1d:93:19:57:7a:32:b9:d1:c3:77:62:92:a4: c4:1b:3e:f4:ff:b2:7d:4e:60:a6:3a:50:49:87:0e:ef:be:b9: 07:45:38:a5:ed:a4:e5:14:6c:5c:91:88:f5:df:a4:df:52:d4: e8:a2:b1:8b:85:d7:87:78:3e:69:c3:76:e9:26:4a:23:ab:41: c9:2b:71:01:b4:72:00:db:c5:fd:8c:59:1d:45:6d:5f:38:30: f8:20:0b:4d:e3:a3:65:0c:7e:9e:f3:08:88:ab:b6:58:6d:7e: 58:e4:0e:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nGZwlPY8m7jHW1LDbilpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1OTU2Y2IyZThiYmI0ZDQyOTcyOGUwMWUyMGZkM2M4ZTA1 ZjMzMjgwHhcNMjUxMjA2MTcwMTIxWhcNMjUxMjA3MTcwMTIxWjAzMTEwLwYDVQQD EyhkYjM2MDI2ZmM3MDViNmI1OTk0YzMwMTU5NDZlOTc2MjgyMTQzNTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAev2rQVnZmnwDMB6V0TnPjKDaLR PiaL/ilkJSg5RS5urG4IdfNiYzoy8Df7Lx5KZFEuFYjjpQ8FXdxjkI2M2gesWxGF bMPvS3MzKwl1L2NuwWWQdhuQBhFvYwXlU8JLokPlmfIwTrUlBO619k8mywG00lBx /eolyZmsfQG4p2grumbWls7Pxl3N3ecIsJpZZAS+w8CZYr5XtEd2Kp3XrUXOMpL0 wyWNtbqc+y/Y7EZ0Hzq8yQiUghI6XWImHa9ojns10a8an7XwmWjsJUKitwMQD1yU 5oicllqUbOxSgxupyWPQfX9xgphFm0q0QpiLVosRKgLhwxlBf9mQVUWfawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNs2Am/HBba1mUwwFZRul2KCFDVCMB8GA1UdIwQY MBaAFNWVbLLou7TUKXKOAeIP08jgXzMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jYmE3MTgtYWE3My00ZDM3LTlhMDQt OThkYWJlM2UyNjYyLzEvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jYmE3MTgtYWE3My00ZDM3LTlhMDQtOThkYWJlM2UyNjYy LzEvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJs8xmYFb ptK4NI1Ci7zG6yxI9HV9GEdFoVmQtheMUoKr3My3HLmShPCgu7iYaEdP7k+6AZig jwTK2RsbIdelGYzRACYE/m7wF8eaXOmNAcgvzaxjUJeoDeeZFeR4n8zbuh2lCLpB wp8oEUUp0LzddvpT5uMC4rBCIVMzffPHw2aVybrwE7K9RtIX9aOZgAIMOieSqDod kxlXejK50cN3YpKkxBs+9P+yfU5gpjpQSYcO7765B0U4pe2k5RRsXJGI9d+k31LU 6KKxi4XXh3g+acN26SZKI6tByStxAbRyANvF/YxZHUVtXzgw+CALTeOjZQx+nvMI iKu2WG1+WOQOVg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:25:07 2025 by rpki-client