This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json) Hash identifier: LjncQIXmQBeeGdjtOe76R1IKbdcAOpj1dpsXoPRBqQI= Subject key identifier: 05:5A:6D:43:D5:BA:45:C4:78:1B:14:76:19:21:0C:66:AE:42:08:DB Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86 Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086 Certificate serial: 019AF19B9C435A874E0570AFACD574C5DB2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft Manifest number: 1010 Signing time: Sat 06 Dec 2025 03:01:38 +0000 Manifest this update: Sat 06 Dec 2025 03:01:38 +0000 Manifest next update: Sun 07 Dec 2025 03:01:38 +0000 Files and hashes: 1: WmCvFXCeg0oTa1TckRvrs8RNar8.roa (hash: Mzv2Vj1XxZUvLysQKOIpSBENViQwEO98u/fFHAl/Wq0=) 2: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: AFDprReZv0t+t3BjnMxObSt3sR0XhNYZKK14gFIBmSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9c:43:5a:87:4e:05:70:af:ac:d5:74:c5:db:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086 Validity Not Before: Dec 6 03:01:38 2025 GMT Not After : Dec 7 03:01:38 2025 GMT Subject: CN=055a6d43d5ba45c4781b147619210c66ae4208db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:a3:9b:bf:34:3e:61:57:cd:f8:38:d0:a3: a2:a5:2e:83:94:2c:c2:11:fd:81:9d:f8:ad:4a:50: e1:23:d8:b9:b9:2d:7e:53:ce:40:f1:bf:67:1e:af: 93:e6:f6:b5:35:a8:eb:79:dd:41:bc:e4:cf:ab:de: a9:46:c5:8e:c0:0b:93:40:29:d6:ab:92:00:b2:54: c9:85:8a:4c:00:2a:7a:77:d0:88:c1:1e:db:a9:a8: 41:01:dd:34:68:08:b3:41:35:41:6f:86:64:2c:e8: 6a:74:99:91:cc:03:6a:47:ec:b8:68:cb:de:f9:77: 2b:8f:24:e7:da:04:fe:f9:45:b7:b8:7d:51:c4:a3: ab:ca:bb:82:6e:fa:09:09:23:09:c9:ba:3e:66:06: e9:25:d5:1f:c7:00:e3:87:47:23:85:68:7d:2e:a3: 4d:71:e5:7f:f7:a8:e7:39:ab:12:e4:5d:b0:61:70: 57:e2:4f:24:eb:77:9d:37:aa:2a:6c:19:3d:fb:a4: b2:c9:8d:67:a1:e1:05:61:bf:3d:38:28:57:de:20: 25:1b:12:11:70:1a:7a:10:6d:24:34:cd:5f:16:e0: 7a:e7:30:80:2c:25:df:16:59:b9:3e:6e:62:ff:f5: 6c:4e:c3:d7:22:f0:cc:ca:fd:2f:b0:07:15:27:e8: c2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5A:6D:43:D5:BA:45:C4:78:1B:14:76:19:21:0C:66:AE:42:08:DB X509v3 Authority Key Identifier: keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:9a:6e:64:25:64:b2:ef:25:be:e3:a5:b5:63:39:63:14:cb: 53:20:b2:de:a7:f0:e4:0b:2c:0e:de:1b:ee:c8:78:5d:63:b4: 43:68:44:4f:14:43:d8:db:5f:d1:e9:74:6e:b1:6b:64:d9:62: 39:b8:ec:a6:d8:60:ed:cb:69:67:72:ed:eb:19:62:46:43:b4: 2a:df:82:d2:1b:dd:15:bc:38:56:2d:56:17:ad:c3:a6:ff:0c: 63:68:a8:28:a4:8d:11:0e:1c:77:68:b4:6b:d5:ee:22:4f:92: 07:18:64:1c:03:ef:41:77:c8:83:48:66:3d:a6:e4:c0:16:a8: b7:9e:a0:f7:69:46:f5:f7:32:88:fc:ea:68:bc:ef:7d:9f:ce: d8:be:66:2a:b7:65:ac:18:b4:36:49:77:46:1d:72:f0:94:7a: e3:8c:48:e2:1f:04:52:40:27:92:5b:f3:e9:b9:ab:40:69:1c: 49:16:38:b2:df:55:f8:ba:df:0d:d4:3a:73:68:11:dd:4b:37: 67:a9:ce:45:9c:b3:87:29:c2:68:bf:38:32:b5:74:35:e4:87: 4a:04:e8:96:26:53:76:d8:2b:97:37:bc:e8:1f:30:4d:bf:dd: f2:be:e6:32:1a:57:44:20:48:2d:99:f4:87:68:c3:55:e1:eb: 5c:5b:71:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5xDWodOBXCvrNV0xdsuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YTcxNTZiOGFhODlmNzZlNGQzOGFmMmMxMDlmYmMxNDkx N2IwODYwHhcNMjUxMjA2MDMwMTM4WhcNMjUxMjA3MDMwMTM4WjAzMTEwLwYDVQQD EygwNTVhNmQ0M2Q1YmE0NWM0NzgxYjE0NzYxOTIxMGM2NmFlNDIwOGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyROjm780PmFXzfg40KOipS6DlCzC Ef2BnfitSlDhI9i5uS1+U85A8b9nHq+T5va1Najred1BvOTPq96pRsWOwAuTQCnW q5IAslTJhYpMACp6d9CIwR7bqahBAd00aAizQTVBb4ZkLOhqdJmRzANqR+y4aMve +XcrjyTn2gT++UW3uH1RxKOryruCbvoJCSMJybo+ZgbpJdUfxwDjh0cjhWh9LqNN ceV/96jnOasS5F2wYXBX4k8k63edN6oqbBk9+6SyyY1noeEFYb89OChX3iAlGxIR cBp6EG0kNM1fFuB65zCALCXfFlm5Pm5i//VsTsPXIvDMyv0vsAcVJ+jCLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVabUPVukXEeBsUdhkhDGauQgjbMB8GA1UdIwQY MBaAFGSnFWuKqJ925NOK8sEJ+8FJF7CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zZGY2MmQtNWQ1Ny00ZDdlLTk0NDQt NTM1MWYxYmRlNzJmLzEvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zZGY2MmQtNWQ1Ny00ZDdlLTk0NDQtNTM1MWYxYmRlNzJm LzEvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJpuZCVk su8lvuOltWM5YxTLUyCy3qfw5AssDt4b7sh4XWO0Q2hETxRD2Ntf0el0brFrZNli Objspthg7ctpZ3Lt6xliRkO0Kt+C0hvdFbw4Vi1WF63Dpv8MY2ioKKSNEQ4cd2i0 a9XuIk+SBxhkHAPvQXfIg0hmPabkwBaot56g92lG9fcyiPzqaLzvfZ/O2L5mKrdl rBi0Nkl3Rh1y8JR644xI4h8EUkAnklvz6bmrQGkcSRY4st9V+LrfDdQ6c2gR3Us3 Z6nORZyzhynCaL84MrV0NeSHSgToliZTdtgrlze86B8wTb/d8r7mMhpXRCBILZn0 h2jDVeHrXFtxWg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:35 2025 by rpki-client