This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json) Hash identifier: sdQr22xLrHifwlhCttCc5xagq6/eI/oYaM3nxsV3OMk= Subject key identifier: B7:4D:46:CD:FB:02:9E:E4:C3:A4:AA:99:C0:FD:B6:01:F3:22:00:62 Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a Certificate serial: 019AF389D51A9D63A03DFAC0EFC3A56E59FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft Manifest number: 1635 Signing time: Sat 06 Dec 2025 12:01:27 +0000 Manifest this update: Sat 06 Dec 2025 12:01:27 +0000 Manifest next update: Sun 07 Dec 2025 12:01:27 +0000 Files and hashes: 1: 39Bz52ELCw7-ugSWUI3vnSlzFNg.roa (hash: rckVCS2UVoKbUdjWWt9CdJoQbIemzvnGfOdJDV2aAiA=) 2: Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa (hash: 6u7uSnyKmvTYrS//fLotXcXAf6aLw/ExzniA6nUG6Kk=) 3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: Y9O6fQF/i/eYxGGMWjdIml1WPJKqATSOOAtZaswngKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:d5:1a:9d:63:a0:3d:fa:c0:ef:c3:a5:6e:59:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a Validity Not Before: Dec 6 12:01:27 2025 GMT Not After : Dec 7 12:01:27 2025 GMT Subject: CN=b74d46cdfb029ee4c3a4aa99c0fdb601f3220062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:1c:cb:13:b0:c7:a9:18:e6:b0:7a:f2:59: a2:86:4d:d5:28:dc:9b:12:07:4f:e9:48:34:68:2d: 33:23:8d:d8:ab:f2:ee:ad:44:58:78:07:03:7f:b2: 1a:64:41:a7:13:89:a5:35:f4:91:8c:81:d9:43:5f: 3d:7d:67:0e:02:7d:13:47:f7:ea:48:aa:f0:f0:60: 9c:9b:a9:25:89:d8:54:f1:22:9b:20:63:e7:c2:92: 08:1c:e7:6f:54:7e:49:c7:61:10:9c:64:7a:9e:14: 9d:1d:17:67:83:2c:e3:3c:98:53:b6:29:8e:74:d3: 23:ad:54:8d:4e:8c:25:60:f5:a1:dd:b4:a7:ff:32: b3:2a:c4:43:2a:02:48:d6:57:0b:e3:c6:82:1b:89: e7:bd:22:3f:fc:67:95:b4:56:fe:f1:a4:38:5e:da: d9:bb:17:c8:a2:84:a4:35:2e:26:db:2e:92:73:75: 4b:ec:dc:12:16:01:26:25:d3:a1:6d:31:d1:b8:43: f7:11:49:c0:57:b3:8c:9e:97:0e:23:2f:a1:0f:f6: de:05:c4:51:a0:b2:14:ef:e0:bd:a4:c3:bc:f9:1d: 98:56:7c:ad:0d:47:c0:03:21:65:6a:6b:74:1a:ea: 03:df:dc:30:2a:b8:a9:e2:b9:a6:99:93:b5:d6:11: cd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4D:46:CD:FB:02:9E:E4:C3:A4:AA:99:C0:FD:B6:01:F3:22:00:62 X509v3 Authority Key Identifier: keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:17:21:90:77:70:31:17:67:6d:d8:1f:0d:27:4c:e2:f0:68: 48:08:51:8c:d6:42:ec:57:b0:a8:36:ed:b1:c6:16:ca:98:38: 3e:cc:6c:16:93:3d:58:be:2d:a2:6b:4e:09:c0:66:5e:45:31: 8c:ce:e1:e5:f8:07:ce:24:f8:8e:3c:d9:8a:fd:c5:76:57:3f: 0c:62:5d:06:a7:95:a6:3e:99:4b:71:12:94:54:7f:67:85:71: 1e:7f:b9:0e:63:8b:64:e3:b1:3a:3e:fe:36:23:70:48:9f:b4: 66:c7:bf:c6:14:c6:02:38:0c:d8:f7:82:5b:45:88:e0:ef:0e: 67:6f:76:6f:5c:f3:e7:1b:9f:06:78:fc:88:9e:ea:d1:be:4b: bb:6e:d1:6a:57:38:9c:7e:6b:33:ad:ad:d6:ef:24:f3:c9:7e: fc:54:88:b0:f8:0b:77:4c:7d:b5:3a:20:13:88:0b:d0:ce:f3: 65:a1:bb:78:65:9a:2f:5c:85:ed:0a:3d:3e:f7:c2:b2:f5:5c: ea:b0:0a:f6:94:93:d3:ce:ee:72:c0:c5:46:df:f2:45:64:1c: 02:f2:01:58:65:3f:b1:a3:cf:dc:a3:2c:e1:23:47:2e:8b:a3: 33:b0:c0:40:ad:15:45:83:8c:13:1b:98:36:3a:0f:d0:79:65: 66:50:93:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzidUanWOgPfrA78Olbln/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOTc3ZTlkNTJhZmJjNDc3OTlkMzk3NWZjZWU4YWM1MWNh MGNmNmEwHhcNMjUxMjA2MTIwMTI3WhcNMjUxMjA3MTIwMTI3WjAzMTEwLwYDVQQD EyhiNzRkNDZjZGZiMDI5ZWU0YzNhNGFhOTljMGZkYjYwMWYzMjIwMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbgcyxOwx6kY5rB68lmihk3VKNyb EgdP6Ug0aC0zI43Yq/LurURYeAcDf7IaZEGnE4mlNfSRjIHZQ189fWcOAn0TR/fq SKrw8GCcm6klidhU8SKbIGPnwpIIHOdvVH5Jx2EQnGR6nhSdHRdngyzjPJhTtimO dNMjrVSNTowlYPWh3bSn/zKzKsRDKgJI1lcL48aCG4nnvSI//GeVtFb+8aQ4XtrZ uxfIooSkNS4m2y6Sc3VL7NwSFgEmJdOhbTHRuEP3EUnAV7OMnpcOIy+hD/beBcRR oLIU7+C9pMO8+R2YVnytDUfAAyFlamt0GuoD39wwKrip4rmmmZO11hHN1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdNRs37Ap7kw6SqmcD9tgHzIgBiMB8GA1UdIwQY MBaAFMyXfp1Sr7xHeZ05dfzuisUcoM9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTkt ZTIzMDQ2MmZjNTdiLzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTktZTIzMDQ2MmZjNTdi LzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtRchkHdw MRdnbdgfDSdM4vBoSAhRjNZC7FewqDbtscYWypg4PsxsFpM9WL4tomtOCcBmXkUx jM7h5fgHziT4jjzZiv3Fdlc/DGJdBqeVpj6ZS3ESlFR/Z4VxHn+5DmOLZOOxOj7+ NiNwSJ+0Zse/xhTGAjgM2PeCW0WI4O8OZ292b1zz5xufBnj8iJ7q0b5Lu27Ralc4 nH5rM62t1u8k88l+/FSIsPgLd0x9tTogE4gL0M7zZaG7eGWaL1yF7Qo9PvfCsvVc 6rAK9pST087ucsDFRt/yRWQcAvIBWGU/saPP3KMs4SNHLoujM7DAQK0VRYOMExuY NjoP0HllZlCTbA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:44:10 2025 by rpki-client