This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json) Hash identifier: Yzkx7XHAEFJiam0rOadeePwxuJB+1QCBHeVHU6nM7SQ= Subject key identifier: B2:72:28:FB:42:97:88:F8:65:AE:C6:98:6C:73:15:D0:7C:84:9D:E1 Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af Certificate serial: 019AF5778F61D65719A268EB7D1AFAE9CCD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 21:00:44 +0000 Manifest this update: Sat 06 Dec 2025 21:00:44 +0000 Manifest next update: Sun 07 Dec 2025 21:00:44 +0000 Files and hashes: 1: 2gXpcecRRCZij4ZXTFv5wgCwpoc.roa (hash: XTp2a7d9Z4/ce0bBWK6Hs10N2L5hCV8LpzUzoDu0gs0=) 2: 6UlZFNCUrDjb89rguKwpyS9qT0g.roa (hash: D/Hmsl6tGFB+vz20t6vs0y0e3hMtr6xcd6Lxa8Hmltk=) 3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: bRj15xya0ONVsEQwxMaJcB9ATOS+ijFwvVOytVqREBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:8f:61:d6:57:19:a2:68:eb:7d:1a:fa:e9:cc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af Validity Not Before: Dec 6 21:00:44 2025 GMT Not After : Dec 7 21:00:44 2025 GMT Subject: CN=b27228fb429788f865aec6986c7315d07c849de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:98:b3:2b:83:e4:ab:6d:4f:03:58:50:15: 79:66:95:54:eb:d3:54:8d:fd:19:1e:f6:f8:fc:1c: 00:a5:47:1d:50:53:a2:77:16:1b:70:23:74:c8:14: 45:c0:5a:a7:7f:29:c2:a2:7d:48:9c:69:17:fc:be: 1e:1f:6f:f5:db:4d:7f:c5:47:57:d2:f8:cd:6e:35: 72:15:dd:58:1d:5d:ac:d8:d6:ab:86:1c:13:4f:d6: 6f:d1:36:fb:ce:3c:fb:86:68:8f:f7:78:f5:bb:42: ce:56:14:1d:63:a2:9f:39:9a:eb:52:a7:ef:2c:db: 65:f0:4b:b8:b0:2d:4e:ed:5f:ae:96:b4:6c:09:e1: 31:56:02:4a:c4:76:9a:ac:bb:05:3b:cb:18:61:7c: 87:7a:fb:36:ad:5e:4a:9d:b2:cb:11:6a:47:db:3f: 5a:ae:28:b0:b9:75:62:1c:6f:7f:e3:56:8e:3d:e6: fb:c2:f9:2d:c4:15:0d:92:bf:b7:24:c5:c5:9d:83: 8c:6d:ed:d3:34:bb:e6:86:6c:70:78:b0:60:82:2e: ee:a1:54:c4:30:e9:ee:1c:73:3c:24:47:0a:b3:0e: 45:88:13:f0:7b:84:40:7b:2b:06:e5:83:a5:51:f0: 1e:97:e6:43:0d:f4:dc:da:6d:ed:b7:8b:25:1f:b8: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:72:28:FB:42:97:88:F8:65:AE:C6:98:6C:73:15:D0:7C:84:9D:E1 X509v3 Authority Key Identifier: keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8a:a3:d9:cd:b0:e6:22:b3:34:79:79:2b:b0:44:18:4b:85: 76:b3:69:83:f9:2c:39:2b:e2:de:2b:58:44:35:23:e6:87:6d: 51:3a:8f:77:e5:f1:c3:65:62:44:3e:9b:14:ab:3a:5d:38:06: 95:f4:8b:91:0a:fc:c1:98:d8:ee:8c:1b:7a:6d:f9:e8:0d:06: 9c:7a:2b:a2:4b:52:09:af:05:18:12:b5:df:13:cb:a3:ab:6d: ed:50:dd:77:22:2a:65:0b:fd:d1:5c:41:1e:09:c9:c8:5a:bd: 95:18:14:a6:75:8b:4e:64:40:01:fb:0e:49:30:ef:b9:8f:c2: 46:32:6d:c7:97:77:b2:4e:f7:3f:e2:d6:c4:d7:a0:6e:e9:9a: de:c1:ca:82:d6:9c:8d:d7:9f:d8:5b:ce:dc:ef:0c:61:19:23: 54:9d:e4:5d:32:f7:35:57:86:c7:65:45:2c:57:ad:02:3e:03: a4:71:62:b7:b9:f5:a5:2c:77:ee:da:92:5b:ca:2d:2a:2a:36: 6d:ec:d1:87:a0:93:1d:d3:34:6d:28:a9:e1:f2:dc:c5:ec:5f: e9:4a:95:0a:32:7d:0b:c6:87:05:fe:49:a8:64:37:84:d2:e4: b9:e8:e0:87:39:63:4a:19:04:8e:c2:26:0c:a6:c3:4a:46:f7: 3f:ef:0b:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d49h1lcZomjrfRr66czQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMzllNmJlNDBkODAxMjg4OTZjY2QxMzFmNjVhNTVhZDk4 YTQwYWYwHhcNMjUxMjA2MjEwMDQ0WhcNMjUxMjA3MjEwMDQ0WjAzMTEwLwYDVQQD EyhiMjcyMjhmYjQyOTc4OGY4NjVhZWM2OTg2YzczMTVkMDdjODQ5ZGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9+YsyuD5KttTwNYUBV5ZpVU69NU jf0ZHvb4/BwApUcdUFOidxYbcCN0yBRFwFqnfynCon1InGkX/L4eH2/1201/xUdX 0vjNbjVyFd1YHV2s2NarhhwTT9Zv0Tb7zjz7hmiP93j1u0LOVhQdY6KfOZrrUqfv LNtl8Eu4sC1O7V+ulrRsCeExVgJKxHaarLsFO8sYYXyHevs2rV5KnbLLEWpH2z9a riiwuXViHG9/41aOPeb7wvktxBUNkr+3JMXFnYOMbe3TNLvmhmxweLBggi7uoVTE MOnuHHM8JEcKsw5FiBPwe4RAeysG5YOlUfAel+ZDDfTc2m3tt4slH7iHcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJyKPtCl4j4Za7GmGxzFdB8hJ3hMB8GA1UdIwQY MBaAFMw55r5A2AEoiWzNEx9lpVrZikCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYt NjA5ZDhmNTY1ZmZjLzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYtNjA5ZDhmNTY1ZmZj LzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYqj2c2w 5iKzNHl5K7BEGEuFdrNpg/ksOSvi3itYRDUj5odtUTqPd+Xxw2ViRD6bFKs6XTgG lfSLkQr8wZjY7owbem356A0GnHoroktSCa8FGBK13xPLo6tt7VDddyIqZQv90VxB HgnJyFq9lRgUpnWLTmRAAfsOSTDvuY/CRjJtx5d3sk73P+LWxNegbuma3sHKgtac jdef2FvO3O8MYRkjVJ3kXTL3NVeGx2VFLFetAj4DpHFit7n1pSx37tqSW8otKio2 bezRh6CTHdM0bSip4fLcxexf6UqVCjJ9C8aHBf5JqGQ3hNLkuejghzljShkEjsIm DKbDSkb3P+8LTw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:42:52 2025 by rpki-client