This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft File: ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json) Hash identifier: 6FWy4UrB1CbZTZYzo6PZU9dsjAFIhrSEu1eUyIuQ/7M= Subject key identifier: AB:D5:A9:3C:9E:E5:11:02:A5:CC:95:C8:A1:9C:97:3E:C2:0A:EF:97 Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27 Certificate issuer: /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27 Certificate serial: 019AF19ACF7111DEA8070807299880135CDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 03:00:45 +0000 Manifest this update: Sat 06 Dec 2025 03:00:45 +0000 Manifest next update: Sun 07 Dec 2025 03:00:45 +0000 Files and hashes: 1: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: c20VZ72/y3UfLiFj6UjswcIta/o9EGInSiVHkAkNHVY=) 2: jl2QMltgucjm6DsSRtvejzHwgVk.roa (hash: 2ICsrOX/Ng80gGFWmU3eag4CX8TEZwSeNwBpo27725Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:cf:71:11:de:a8:07:08:07:29:98:80:13:5c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27 Validity Not Before: Dec 6 03:00:45 2025 GMT Not After : Dec 7 03:00:45 2025 GMT Subject: CN=abd5a93c9ee51102a5cc95c8a19c973ec20aef97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d3:30:a4:68:95:99:37:72:cb:85:11:13:7e: f8:cb:a6:74:08:4e:ce:35:d4:35:12:f8:80:03:08: 5e:3b:84:a7:13:50:4e:f5:05:3a:9b:72:8f:a5:07: fc:87:07:c3:02:e5:ea:bc:16:b7:b5:35:18:e0:bd: 29:6b:b2:fb:bf:92:5b:21:39:13:d4:70:98:14:b4: c0:f5:44:47:eb:46:a0:f2:a2:e0:5b:08:fd:ff:9f: 7c:27:cc:3e:40:fd:ad:11:d0:0a:0b:19:56:8f:4a: b0:5a:66:48:40:fd:54:5a:ee:c5:07:80:e2:eb:86: e7:d1:2b:e6:25:a2:82:bf:8e:c1:9e:b8:c0:71:88: 56:fd:a8:08:48:c9:29:83:e1:b1:a8:7f:1a:4b:31: a1:91:00:8d:50:2f:de:36:90:f8:eb:3b:9a:42:3c: 9d:ef:31:79:14:3c:cb:7c:e3:dc:fc:74:df:62:3e: 2e:02:83:c8:1e:89:23:93:5a:fc:c4:dd:d2:81:fb: c0:52:76:a1:bd:aa:90:a3:57:d3:f8:b0:15:bb:72: a7:6c:0b:cd:49:cb:75:8f:80:6b:f7:6e:0b:fb:b7: 44:53:0d:e5:09:87:80:ad:3a:a5:57:1c:d4:04:a9: 7b:0e:43:d3:bd:5e:c5:5c:34:31:1f:35:57:a4:54: 93:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D5:A9:3C:9E:E5:11:02:A5:CC:95:C8:A1:9C:97:3E:C2:0A:EF:97 X509v3 Authority Key Identifier: keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1e:4a:11:1f:23:fc:c5:db:97:78:7a:d0:78:03:d9:21:ff: e7:64:fd:26:60:ed:fd:73:1c:bf:da:a4:0f:bf:fa:30:fa:16: a5:7c:76:6d:67:37:1d:39:e4:c3:7c:3d:25:8b:2e:f3:c9:73: 96:cf:ca:ff:0b:11:ab:98:98:eb:f3:27:85:9c:51:85:ec:51: 55:68:cb:91:64:22:db:5e:87:01:77:b9:3e:fb:79:41:d4:ac: ce:f2:00:4a:5f:a0:a2:82:db:a4:4a:fb:3c:2a:6f:9c:db:4c: 2b:cc:82:e6:0b:e4:4e:9d:b8:cb:47:06:ab:fd:41:80:02:bd: ae:a5:47:08:07:60:66:27:85:25:ec:d6:1c:c8:d4:08:7f:58: 4c:61:9c:2b:25:13:fe:9e:4a:83:3c:4b:ae:0a:de:4e:68:51: 08:3a:3f:7d:55:f0:0c:e5:08:61:8c:c7:c5:d5:5d:9f:61:b3: ee:97:2a:6a:a5:33:ec:75:9a:1a:7e:d1:39:81:4b:c3:53:f9: e4:52:47:a0:d3:4e:2a:dd:47:32:df:14:52:e6:ff:ef:a4:fb: c1:45:bc:fe:18:02:e9:0a:6b:81:5a:63:f1:34:57:1a:a8:fd: b8:5e:00:1f:c1:5c:1c:08:cd:0c:41:fe:18:37:a9:4b:21:28: 63:0e:c9:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxms9xEd6oBwgHKZiAE1zeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZDllOTI2NmVlY2FiYzBmZDRhNjA3N2ViMGJhOGZhOWYz YmRlMjcwHhcNMjUxMjA2MDMwMDQ1WhcNMjUxMjA3MDMwMDQ1WjAzMTEwLwYDVQQD EyhhYmQ1YTkzYzllZTUxMTAyYTVjYzk1YzhhMTljOTczZWMyMGFlZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dMwpGiVmTdyy4URE374y6Z0CE7O NdQ1EviAAwheO4SnE1BO9QU6m3KPpQf8hwfDAuXqvBa3tTUY4L0pa7L7v5JbITkT 1HCYFLTA9URH60ag8qLgWwj9/598J8w+QP2tEdAKCxlWj0qwWmZIQP1UWu7FB4Di 64bn0SvmJaKCv47BnrjAcYhW/agISMkpg+GxqH8aSzGhkQCNUC/eNpD46zuaQjyd 7zF5FDzLfOPc/HTfYj4uAoPIHokjk1r8xN3SgfvAUnahvaqQo1fT+LAVu3KnbAvN Sct1j4Br924L+7dEUw3lCYeArTqlVxzUBKl7DkPTvV7FXDQxHzVXpFSTrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvVqTye5RECpcyVyKGclz7CCu+XMB8GA1UdIwQY MBaAFGXZ6SZu7KvA/Upgd+sLqPqfO94nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmRucEptN3NxOEQ5U21CMzZ3dW8tcDg3M2ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iYTQwMmMtYjAwZS00YTI2LWJmNTMt OGU3NDdlMzRlMTYyLzEvWmRucEptN3NxOEQ5U21CMzZ3dW8tcDg3M2ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iYTQwMmMtYjAwZS00YTI2LWJmNTMtOGU3NDdlMzRlMTYy LzEvWmRucEptN3NxOEQ5U21CMzZ3dW8tcDg3M2ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGh5KER8j /MXbl3h60HgD2SH/52T9JmDt/XMcv9qkD7/6MPoWpXx2bWc3HTnkw3w9JYsu88lz ls/K/wsRq5iY6/MnhZxRhexRVWjLkWQi216HAXe5Pvt5QdSszvIASl+gooLbpEr7 PCpvnNtMK8yC5gvkTp24y0cGq/1BgAK9rqVHCAdgZieFJezWHMjUCH9YTGGcKyUT /p5KgzxLrgreTmhRCDo/fVXwDOUIYYzHxdVdn2Gz7pcqaqUz7HWaGn7ROYFLw1P5 5FJHoNNOKt1HMt8UUub/76T7wUW8/hgC6QprgVpj8TRXGqj9uF4AH8FcHAjNDEH+ GDepSyEoYw7J7w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:22 2025 by rpki-client