This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft File: Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft (raw, json) Hash identifier: /lv61M0Vm6N8j3KSmEklsFWEUrA6LHkEGG2oxBszO+Q= Subject key identifier: EB:E8:AD:88:C9:DF:0F:FA:01:84:13:8B:0F:55:55:94:84:74:E2:98 Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC Certificate issuer: /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc Certificate serial: 019AF577C80B51C1A11FEA98BB060E37D423 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft Manifest number: 1737 Signing time: Sat 06 Dec 2025 21:00:59 +0000 Manifest this update: Sat 06 Dec 2025 21:00:59 +0000 Manifest next update: Sun 07 Dec 2025 21:00:59 +0000 Files and hashes: 1: 4cueVYGn7FG0ZEgg6Tbl8VUqwQ0.roa (hash: nftpb28hHTEVRFrgXZ0NAPskqh1IzDTL1Eib3OJFbuI=) 2: Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl (hash: Ladesx1Tb9yX4Gg+XCcnV3nQZ/J5Mhp2jF9U4K2ZlAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:c8:0b:51:c1:a1:1f:ea:98:bb:06:0e:37:d4:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc Validity Not Before: Dec 6 21:00:59 2025 GMT Not After : Dec 7 21:00:59 2025 GMT Subject: CN=ebe8ad88c9df0ffa0184138b0f5555948474e298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:65:9a:54:75:29:b2:df:f5:cf:ac:f6:a0:2f: b2:c3:4f:50:ea:ac:9a:00:0b:9c:2c:79:da:ac:41: ce:74:85:e6:03:d5:1c:42:18:bb:d3:f3:c6:d4:1e: a2:d2:f2:38:b3:9c:a6:28:d0:35:44:b8:58:b8:a2: ea:e0:55:01:95:50:57:f6:f3:be:a5:50:25:aa:2a: 54:c7:2d:81:11:1f:ba:6e:23:90:85:e6:d6:73:f6: e9:4e:95:21:45:e7:31:17:bd:a3:54:4e:24:dd:17: 0d:9b:11:27:bd:82:e0:c0:f4:49:b3:37:bd:94:72: ab:ed:61:9e:7a:04:10:c1:7a:5d:2a:57:83:9a:7e: 98:9a:3e:ae:91:47:0f:12:58:a5:65:fb:66:8e:af: 13:86:c4:c3:bb:76:4f:9d:cf:dc:f5:d5:7c:07:40: b1:f9:99:82:21:29:3f:99:20:2f:d9:d6:70:97:13: cf:fa:7e:55:c1:3e:67:4c:72:55:9b:ef:ab:77:80: 69:21:af:b1:f6:0d:af:ad:fd:57:81:9a:91:d7:eb: 95:af:35:9e:93:ba:47:47:22:6e:5a:4e:61:87:07: a3:df:12:cc:a9:4c:bd:65:93:cb:74:19:1e:3f:87: 64:75:89:43:20:94:36:e9:bf:35:c1:8b:92:a0:11: d3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E8:AD:88:C9:DF:0F:FA:01:84:13:8B:0F:55:55:94:84:74:E2:98 X509v3 Authority Key Identifier: keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:84:bb:60:c6:04:11:61:8d:54:07:79:0b:42:a6:7f:f8:a6: f2:34:01:b7:dc:44:bc:d2:aa:b6:54:83:b9:f7:0c:d3:0b:b6: ea:a9:db:06:8e:db:39:e6:33:58:d0:63:79:70:db:4a:5f:35: be:77:47:9a:20:9d:26:02:96:76:59:f2:5c:40:b8:5d:55:e5: 56:e6:ea:80:db:57:44:72:10:bb:8a:68:7b:a0:bd:28:13:c1: 5d:b5:b3:b3:10:f0:b7:34:8e:8d:9a:22:9e:5d:30:55:de:12: be:f3:61:c6:9b:eb:b9:23:33:df:76:6d:a2:0c:e9:ea:e0:99: 94:25:44:2f:16:75:25:21:81:82:9c:84:3b:cc:1b:03:e9:12: 1a:a9:7e:2e:63:18:58:96:da:25:f3:07:2b:45:eb:23:2b:06: 91:3e:70:c5:c5:34:92:94:fe:8b:1e:56:52:5d:08:90:bd:af: 27:db:22:52:34:16:e1:23:93:26:70:ae:bc:90:20:e7:73:40: 3d:75:5a:94:d3:e1:c8:e6:5b:c7:3b:f3:b6:19:f1:1d:20:6d: cb:a5:3e:06:bc:8d:14:24:7c:67:7f:49:08:1b:7a:87:24:89: d2:79:fb:da:37:de:24:b4:bd:34:79:03:a4:a6:e3:45:56:fe: 10:0a:a2:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d8gLUcGhH+qYuwYON9QjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OWY1YzhiOWI2M2FlNWUyODc4NmViYTEwYTFmNjU3MmE2 MGUzZmMwHhcNMjUxMjA2MjEwMDU5WhcNMjUxMjA3MjEwMDU5WjAzMTEwLwYDVQQD EyhlYmU4YWQ4OGM5ZGYwZmZhMDE4NDEzOGIwZjU1NTU5NDg0NzRlMjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmWaVHUpst/1z6z2oC+yw09Q6qya AAucLHnarEHOdIXmA9UcQhi70/PG1B6i0vI4s5ymKNA1RLhYuKLq4FUBlVBX9vO+ pVAlqipUxy2BER+6biOQhebWc/bpTpUhRecxF72jVE4k3RcNmxEnvYLgwPRJsze9 lHKr7WGeegQQwXpdKleDmn6Ymj6ukUcPElilZftmjq8ThsTDu3ZPnc/c9dV8B0Cx +ZmCISk/mSAv2dZwlxPP+n5VwT5nTHJVm++rd4BpIa+x9g2vrf1XgZqR1+uVrzWe k7pHRyJuWk5hhwej3xLMqUy9ZZPLdBkeP4dkdYlDIJQ26b81wYuSoBHTuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvorYjJ3w/6AYQTiw9VVZSEdOKYMB8GA1UdIwQY MBaAFGafXIubY65eKHhuuhCh9lcqYOP8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnA5Y2k1dGpybDRvZUc2NkVLSDJWeXBnNF93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zYzJlZmItMjI5Mi00YzZhLTkxNGIt NTVlYjgyMGZkNTk2LzEvWnA5Y2k1dGpybDRvZUc2NkVLSDJWeXBnNF93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8zYzJlZmItMjI5Mi00YzZhLTkxNGItNTVlYjgyMGZkNTk2 LzEvWnA5Y2k1dGpybDRvZUc2NkVLSDJWeXBnNF93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYS7YMYE EWGNVAd5C0Kmf/im8jQBt9xEvNKqtlSDufcM0wu26qnbBo7bOeYzWNBjeXDbSl81 vndHmiCdJgKWdlnyXEC4XVXlVubqgNtXRHIQu4poe6C9KBPBXbWzsxDwtzSOjZoi nl0wVd4SvvNhxpvruSMz33Ztogzp6uCZlCVELxZ1JSGBgpyEO8wbA+kSGql+LmMY WJbaJfMHK0XrIysGkT5wxcU0kpT+ix5WUl0IkL2vJ9siUjQW4SOTJnCuvJAg53NA PXValNPhyOZbxzvzthnxHSBty6U+BryNFCR8Z39JCBt6hySJ0nn72jfeJLS9NHkD pKbjRVb+EAqiGA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:23:58 2025 by rpki-client