This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json) Hash identifier: 1otQevnntAK5T9hgNl94qw3EsY6zLkmUyUejKwX1JSc= Subject key identifier: BD:D2:7D:29:4E:DA:24:BA:F5:CF:0E:71:F5:54:E9:06:92:CB:8F:46 Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d Certificate serial: 019AF389D744D7B4C6555246074074F3BB88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft Manifest number: 15A4 Signing time: Sat 06 Dec 2025 12:01:28 +0000 Manifest this update: Sat 06 Dec 2025 12:01:28 +0000 Manifest next update: Sun 07 Dec 2025 12:01:28 +0000 Files and hashes: 1: OsY0TtzQwg_k6WVAlCJ4j1X5_HQ.roa (hash: xdb+Fodrj/gwgOeHGwol/lGn/WJOAqWqApZA+WvwzsI=) 2: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: jOeOYP3VCGruqItFd5ZghjSWLTmYsHluAWLr5TqNeyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:d7:44:d7:b4:c6:55:52:46:07:40:74:f3:bb:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d Validity Not Before: Dec 6 12:01:28 2025 GMT Not After : Dec 7 12:01:28 2025 GMT Subject: CN=bdd27d294eda24baf5cf0e71f554e90692cb8f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:8a:91:ce:d1:ac:05:f6:a9:47:6f:3e:43: 23:dc:e2:a7:65:68:96:93:74:13:e7:d5:e3:86:42: fe:69:5b:3a:fe:00:f3:84:13:bf:dd:ad:3c:53:75: 82:17:44:4c:44:76:78:57:f8:b1:9a:b6:be:6c:27: 10:ec:f1:71:17:9b:08:b3:6f:eb:ae:b9:e0:4c:4c: da:5e:4f:5a:75:d3:ed:33:17:79:24:f5:c0:27:19: bf:01:88:a9:75:28:57:97:85:79:54:5b:5b:3c:91: 91:ca:a8:04:00:32:65:da:cd:09:90:f3:60:f7:64: ca:e4:1d:74:f0:e8:14:c6:de:e0:f2:32:cc:62:1c: f3:2e:91:b5:e1:67:be:47:c6:10:84:a9:56:90:c2: b8:ca:01:4d:35:b1:da:74:7b:6e:df:ce:6a:b1:33: 08:4d:dd:2e:a4:a2:cb:e2:b2:39:15:5a:50:51:51: fd:75:65:01:c0:b0:a9:2b:b3:f6:d1:d8:a2:8b:bb: b9:63:82:21:4a:80:ac:48:4f:8e:fe:5e:75:c4:d4: 21:31:d1:4c:53:ff:57:a0:44:09:d9:60:e1:7f:e9: 32:4d:ca:0d:91:2e:00:f0:0b:dc:a2:d1:b5:a9:a2: 38:78:2d:aa:3f:95:2c:ce:a7:46:5a:e1:17:1b:e7: 06:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D2:7D:29:4E:DA:24:BA:F5:CF:0E:71:F5:54:E9:06:92:CB:8F:46 X509v3 Authority Key Identifier: keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:31:e8:08:5f:a5:b7:a4:89:f8:36:09:6e:9b:91:0e:1e:3b: c2:73:0e:7c:29:f4:1e:9e:49:39:09:41:ce:7f:ca:20:2c:fb: 27:a5:94:3b:3c:de:09:95:02:74:36:a9:d0:2f:49:99:b7:a1: 13:6e:3a:f2:c5:46:79:ab:72:01:b2:eb:90:bb:af:39:df:f3: 76:db:9e:87:d8:9e:a0:af:2d:5d:82:f1:c1:3e:11:58:16:75: ab:f5:81:e7:fd:00:b7:63:90:4d:7c:6c:5b:f0:ff:41:2d:54: c6:e1:0f:32:85:a8:a6:9d:31:86:7b:53:d0:e9:a2:7e:44:ef: 71:dd:de:c6:53:6b:01:9e:1e:e4:21:0e:25:44:12:69:5f:cb: b3:2a:46:e4:9d:ad:01:3e:30:7f:6c:07:19:b5:4d:27:f6:dd: 75:f1:c0:08:49:93:cd:03:16:6f:d1:5f:0b:4b:ae:9f:0c:03: fb:df:3e:eb:52:fe:50:0f:7d:3f:a0:78:12:db:7c:14:dc:40: 46:0e:7e:48:56:17:93:03:65:b7:52:84:15:4f:de:ec:d7:19: 32:c6:4d:d9:15:3a:9a:f0:50:d4:30:5e:c0:3f:f3:1b:f2:b6: c1:84:d0:5a:6b:d6:47:9f:30:a5:92:eb:a7:b0:70:85:72:87: df:cd:aa:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziddE17TGVVJGB0B087uIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0OTZhZTM4YWVkYWNiYmVlZWUxZTA5Mzk1NmRiMzI4N2Fl N2I1M2QwHhcNMjUxMjA2MTIwMTI4WhcNMjUxMjA3MTIwMTI4WjAzMTEwLwYDVQQD EyhiZGQyN2QyOTRlZGEyNGJhZjVjZjBlNzFmNTU0ZTkwNjkyY2I4ZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWGKkc7RrAX2qUdvPkMj3OKnZWiW k3QT59XjhkL+aVs6/gDzhBO/3a08U3WCF0RMRHZ4V/ixmra+bCcQ7PFxF5sIs2/r rrngTEzaXk9addPtMxd5JPXAJxm/AYipdShXl4V5VFtbPJGRyqgEADJl2s0JkPNg 92TK5B108OgUxt7g8jLMYhzzLpG14We+R8YQhKlWkMK4ygFNNbHadHtu385qsTMI Td0upKLL4rI5FVpQUVH9dWUBwLCpK7P20diii7u5Y4IhSoCsSE+O/l51xNQhMdFM U/9XoEQJ2WDhf+kyTcoNkS4A8AvcotG1qaI4eC2qP5UszqdGWuEXG+cGwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3SfSlO2iS69c8OcfVU6QaSy49GMB8GA1UdIwQY MBaAFGSWrjiu2su+7uHgk5Vtsyh657U9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkphdU9LN2F5Nzd1NGVDVGxXMnpLSHJudFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82YzMxMjUtZmZmMS00ZGEwLThhMzIt NzY2NGU4YTIxZmM3LzEvWkphdU9LN2F5Nzd1NGVDVGxXMnpLSHJudFQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82YzMxMjUtZmZmMS00ZGEwLThhMzItNzY2NGU4YTIxZmM3 LzEvWkphdU9LN2F5Nzd1NGVDVGxXMnpLSHJudFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzHoCF+l t6SJ+DYJbpuRDh47wnMOfCn0Hp5JOQlBzn/KICz7J6WUOzzeCZUCdDap0C9Jmbeh E2468sVGeatyAbLrkLuvOd/zdtueh9ieoK8tXYLxwT4RWBZ1q/WB5/0At2OQTXxs W/D/QS1UxuEPMoWopp0xhntT0OmifkTvcd3exlNrAZ4e5CEOJUQSaV/LsypG5J2t AT4wf2wHGbVNJ/bddfHACEmTzQMWb9FfC0uunwwD+98+61L+UA99P6B4Ett8FNxA Rg5+SFYXkwNlt1KEFU/e7NcZMsZN2RU6mvBQ1DBewD/zG/K2wYTQWmvWR58wpZLr p7BwhXKH382qlg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:23 2025 by rpki-client