This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json) Hash identifier: W+99uUiAEV7K7j25Rjj/wu5NS7gDj/t/V2IT1ypuUZg= Subject key identifier: AA:02:5D:02:CC:25:1D:2B:0D:6B:4F:AB:4B:2B:F3:DD:4C:BD:96:A6 Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74 Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874 Certificate serial: 019B22510EEF45319F325BFE661873A5DF1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft Manifest number: 1230 Signing time: Mon 15 Dec 2025 14:01:36 +0000 Manifest this update: Mon 15 Dec 2025 14:01:36 +0000 Manifest next update: Tue 16 Dec 2025 14:01:36 +0000 Files and hashes: 1: sQGDlHpoLDO9MGkxSeBWC8uppqs.roa (hash: 6KgDIkevhFyVfhdKRkIXWLxH6LsOjOgpwNrZ+fmFguE=) 2: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: G/aOBCUNJ3RmlKsFI7brh8oHN/2Mz5216RoPvuUyi70=) 3: ziOY-6fncsLuQQzVu0Sf6c2Hbmk.roa (hash: AVAQzd3M8IxybV2CUgMzwoAYpnE92DpPd7dWpe04sBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:51:0e:ef:45:31:9f:32:5b:fe:66:18:73:a5:df:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874 Validity Not Before: Dec 15 14:01:36 2025 GMT Not After : Dec 16 14:01:36 2025 GMT Subject: CN=aa025d02cc251d2b0d6b4fab4b2bf3dd4cbd96a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:23:20:60:a8:e1:99:0f:1f:21:ce:01:4b: be:b0:4e:5d:71:a3:1e:e1:ac:3a:63:61:28:de:bf: 9a:bd:ec:3a:d6:51:a6:ba:04:10:dc:b4:07:49:83: 56:75:47:36:67:c7:2f:e2:20:b2:5c:a3:b7:9f:bf: a4:e0:99:bd:9e:24:e9:ad:53:09:93:a0:a0:12:ac: 1f:49:30:81:10:f4:1b:3a:af:5f:ad:20:02:0e:63: b8:c7:e4:42:30:90:0a:dc:f3:3b:ec:49:b6:fa:c6: 7e:0b:db:d0:cb:52:58:78:a2:2c:a6:b2:93:25:ec: ec:17:a3:de:36:f2:8f:e6:63:4c:5c:b9:59:c4:29: 5f:fa:61:46:c2:81:b1:8f:05:10:52:ec:ae:99:ff: c1:7d:eb:fe:a8:cb:01:61:4e:b8:e1:98:d7:eb:4f: 25:49:4c:02:04:e7:ca:43:b7:d5:48:4e:6f:87:bd: 66:ef:16:2a:61:50:ba:2c:92:ea:b7:2d:43:f4:3c: 94:77:70:39:d1:a3:24:94:00:14:37:81:79:94:fd: 21:3b:52:ad:2e:5c:6a:20:75:21:d4:95:b0:7f:8c: c9:10:3f:6b:15:fb:08:9c:04:2b:00:f3:fb:ad:ca: cc:ba:5d:3a:38:58:f2:7b:63:d3:35:55:dd:aa:85: 31:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:02:5D:02:CC:25:1D:2B:0D:6B:4F:AB:4B:2B:F3:DD:4C:BD:96:A6 X509v3 Authority Key Identifier: keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f6:ec:7c:5a:f4:d3:f2:a3:c6:a3:13:fe:0b:8f:7a:7a:12: f9:b3:51:31:95:56:e0:62:0a:a8:e8:a5:36:f1:dc:62:5d:3f: 04:f2:1b:21:73:4c:4d:0c:e5:5d:81:0e:b9:a3:f0:38:65:80: 19:e9:5d:a1:24:af:3b:41:e1:34:95:07:11:05:a4:ca:2e:f6: d5:ea:36:aa:06:90:c7:f2:b0:38:33:cd:c4:23:21:a5:72:f2: 2d:f0:37:6a:43:93:42:a7:2d:c8:98:15:d2:06:3e:56:3a:5d: 85:a6:4a:1c:8e:02:88:ff:52:bf:a7:d4:62:9e:81:59:a9:3c: 52:0a:93:33:55:c1:23:79:92:55:ee:80:c3:eb:9a:b7:0b:69: 58:7d:3a:7b:a2:c7:ce:92:61:b0:64:66:fd:60:c9:2b:e3:cd: 3e:a9:b5:4b:72:dd:48:fa:ca:dc:0f:9c:bf:ee:2a:67:7a:e9: 5b:f7:73:b1:19:6e:e3:f1:de:af:89:ed:dd:44:37:e6:13:e3: 27:d9:f5:f0:d4:0a:ad:cd:9c:73:44:26:9c:35:50:e3:1b:19: cc:f5:05:63:0b:f0:f9:33:a5:cd:1b:70:90:47:00:a7:cf:0a: de:55:47:d4:08:11:b5:67:72:5f:a9:b6:c3:79:ab:f8:37:8f: 06:e9:e6:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUQ7vRTGfMlv+Zhhzpd8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWE1MzU5MzVhNGJjNzg2YzFkZDc1YjdmMTA4N2YxM2Yz ZTA4NzQwHhcNMjUxMjE1MTQwMTM2WhcNMjUxMjE2MTQwMTM2WjAzMTEwLwYDVQQD EyhhYTAyNWQwMmNjMjUxZDJiMGQ2YjRmYWI0YjJiZjNkZDRjYmQ5NmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6wjIGCo4ZkPHyHOAUu+sE5dcaMe 4aw6Y2Eo3r+avew61lGmugQQ3LQHSYNWdUc2Z8cv4iCyXKO3n7+k4Jm9niTprVMJ k6CgEqwfSTCBEPQbOq9frSACDmO4x+RCMJAK3PM77Em2+sZ+C9vQy1JYeKIsprKT JezsF6PeNvKP5mNMXLlZxClf+mFGwoGxjwUQUuyumf/Bfev+qMsBYU644ZjX608l SUwCBOfKQ7fVSE5vh71m7xYqYVC6LJLqty1D9DyUd3A50aMklAAUN4F5lP0hO1Kt LlxqIHUh1JWwf4zJED9rFfsInAQrAPP7rcrMul06OFjye2PTNVXdqoUx7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoCXQLMJR0rDWtPq0sr891MvZamMB8GA1UdIwQY MBaAFM1aU1k1pLx4bB3XW38Qh/E/Pgh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iOWFhZDUtY2ZlMi00NDgwLWFjNWUt MDVjMTNmODkwYjljLzEvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iOWFhZDUtY2ZlMi00NDgwLWFjNWUtMDVjMTNmODkwYjlj LzEvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfbsfFr0 0/KjxqMT/guPenoS+bNRMZVW4GIKqOilNvHcYl0/BPIbIXNMTQzlXYEOuaPwOGWA GeldoSSvO0HhNJUHEQWkyi721eo2qgaQx/KwODPNxCMhpXLyLfA3akOTQqctyJgV 0gY+VjpdhaZKHI4CiP9Sv6fUYp6BWak8UgqTM1XBI3mSVe6Aw+uatwtpWH06e6LH zpJhsGRm/WDJK+PNPqm1S3LdSPrK3A+cv+4qZ3rpW/dzsRlu4/Her4nt3UQ35hPj J9n18NQKrc2cc0QmnDVQ4xsZzPUFYwvw+TOlzRtwkEcAp88K3lVH1AgRtWdyX6m2 w3mr+DePBunmRA== -----END CERTIFICATE-----Generated at Mon Dec 15 20:16:06 2025 by rpki-client