This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json) Hash identifier: 1QJv3hYRee0Ja8Ce//qDPq21ZdZ/1E1PA5/X7HRUviM= Subject key identifier: 3A:EF:F0:C0:56:52:A3:D6:AE:AE:B7:B1:37:15:EC:1B:AC:E0:90:2E Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d Certificate serial: 019AF1D1F489953B4B3735DC422F8A47E87A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: puw08h74TtFA6oc3LqSJELivWac.roa (hash: 6izoAc/QEsoM8sPaZbI92YMt+TMYy+EV7r4bwPmo4dA=) 2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: TWk9W6+4lznVpKi9Jblm6WLbTFGmygGnyX7S7irNhEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f4:89:95:3b:4b:37:35:dc:42:2f:8a:47:e8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=3aeff0c05652a3d6aeaeb7b13715ec1bace0902e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:89:3e:86:92:07:b8:1f:04:25:7a:ab:ba:69: 8f:e9:8e:cd:a4:e9:14:1f:f2:1b:b4:a5:11:f4:c8: 88:21:40:99:01:c7:65:31:ba:67:1d:3b:12:c0:1f: cf:44:f1:6d:8e:e2:30:fd:9c:0a:b5:c3:05:8d:58: 1f:b7:08:05:a6:f6:6c:07:c9:6b:f1:c6:2b:f3:75: f4:1e:ae:85:4f:7e:a8:42:69:7c:0a:76:88:cf:62: bd:74:5c:36:43:7f:50:7a:30:65:73:e9:57:90:c0: 73:56:e6:fe:cc:60:5e:5b:dc:4d:2a:d6:70:95:a6: bd:81:52:76:12:42:9a:d0:a2:fa:03:4a:6c:93:65: b7:06:19:57:7d:ce:5e:57:94:a6:8a:98:51:a3:f6: 26:0e:80:d6:c7:6a:1e:e1:80:de:60:1c:e2:1e:4b: 44:d5:6d:64:e2:5a:b6:93:26:f7:10:a2:15:00:ec: b8:58:59:87:8b:f7:93:d0:99:2a:9b:59:9a:38:bf: 28:9e:d2:dd:4c:36:e0:c9:62:f6:37:91:db:ee:4d: 9e:f2:9e:6b:e9:17:ea:89:62:26:1d:d3:d0:3f:83: 42:5a:ee:75:ab:25:9d:c5:10:14:c0:e0:c0:2f:35: 3e:be:3b:8f:2d:3c:84:b5:79:c9:00:7c:65:78:0d: f3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EF:F0:C0:56:52:A3:D6:AE:AE:B7:B1:37:15:EC:1B:AC:E0:90:2E X509v3 Authority Key Identifier: keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d6:08:61:47:41:e8:0c:33:02:94:f4:7a:22:e3:e8:c2:93: 4e:3e:b8:24:1b:2f:4a:8f:ae:c1:68:ed:56:1b:0d:dc:cc:4e: 0b:f8:60:80:ec:11:e4:b6:46:db:db:5e:60:84:7b:18:00:0a: 96:c2:64:51:7d:c4:64:fe:c1:5d:01:79:ed:ed:2a:16:2b:18: a2:78:a6:c7:c2:ec:0d:f4:39:c1:a4:92:73:7a:14:3b:92:fc: dd:72:fa:30:f8:7e:c5:7e:1a:c2:c0:cf:df:43:b4:ea:2b:a7: 23:25:08:ba:8e:34:d8:9b:74:63:e4:93:08:b5:ff:c2:d8:ad: 94:46:f3:c3:35:db:c9:fc:72:c1:ae:91:02:0d:8b:7a:2b:34: c5:87:4d:fd:98:ba:28:2c:14:e6:a8:19:cc:e6:32:31:ea:ea: 12:95:e5:44:6d:b5:43:24:21:b0:02:a9:a2:25:f7:19:07:ce: ef:88:72:bc:3b:ff:0d:d2:61:46:d5:86:34:ff:54:ae:17:06: a5:65:a6:3b:3c:02:4b:d7:b7:2b:19:c4:10:c8:8a:c2:f6:29: a8:1d:f8:98:e8:ca:58:74:2d:00:2e:e9:48:62:db:c7:b2:2c: e9:76:ac:48:5b:ba:62:0c:7e:c6:7a:9b:96:d2:df:cb:8f:2e: 9d:89:aa:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fSJlTtLNzXcQi+KR+h6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMmIxMGQ4OWI1NTM3OTEzNTAzMTI3ZWI4NzIyNmFmYjg5 ZDFiMmQwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD EygzYWVmZjBjMDU2NTJhM2Q2YWVhZWI3YjEzNzE1ZWMxYmFjZTA5MDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYk+hpIHuB8EJXqrummP6Y7NpOkU H/IbtKUR9MiIIUCZAcdlMbpnHTsSwB/PRPFtjuIw/ZwKtcMFjVgftwgFpvZsB8lr 8cYr83X0Hq6FT36oQml8CnaIz2K9dFw2Q39QejBlc+lXkMBzVub+zGBeW9xNKtZw laa9gVJ2EkKa0KL6A0psk2W3BhlXfc5eV5SmiphRo/YmDoDWx2oe4YDeYBziHktE 1W1k4lq2kyb3EKIVAOy4WFmHi/eT0Jkqm1maOL8ontLdTDbgyWL2N5Hb7k2e8p5r 6RfqiWImHdPQP4NCWu51qyWdxRAUwODALzU+vjuPLTyEtXnJAHxleA3zJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrv8MBWUqPWrq63sTcV7Bus4JAuMB8GA1UdIwQY MBaAFM4rENibVTeRNQMSfrhyJq+4nRstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kM2IyNjMtYjBmMS00YTZiLTkxMmUt MzczZGRhNDNmNzkyLzEvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kM2IyNjMtYjBmMS00YTZiLTkxMmUtMzczZGRhNDNmNzky LzEvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtYIYUdB 6AwzApT0eiLj6MKTTj64JBsvSo+uwWjtVhsN3MxOC/hggOwR5LZG29teYIR7GAAK lsJkUX3EZP7BXQF57e0qFisYonimx8LsDfQ5waSSc3oUO5L83XL6MPh+xX4awsDP 30O06iunIyUIuo402Jt0Y+STCLX/wtitlEbzwzXbyfxywa6RAg2Leis0xYdN/Zi6 KCwU5qgZzOYyMerqEpXlRG21QyQhsAKpoiX3GQfO74hyvDv/DdJhRtWGNP9UrhcG pWWmOzwCS9e3KxnEEMiKwvYpqB34mOjKWHQtAC7pSGLbx7Is6XasSFu6Ygx+xnqb ltLfy48unYmqvA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:16 2025 by rpki-client