This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.mft File: zCdbIX3x3piMohkqg64R3fQjpE8.mft (raw, json) Hash identifier: 7EOjVDZxVnr6FaK1lGNzpUR/a9jkGVYDdiI0sizMbyE= Subject key identifier: 64:52:F9:F5:35:45:39:82:BC:E2:0F:94:50:91:E9:75:B7:AC:FE:F3 Authority key identifier: CC:27:5B:21:7D:F1:DE:98:8C:A2:19:2A:83:AE:11:DD:F4:23:A4:4F Certificate issuer: /CN=cc275b217df1de988ca2192a83ae11ddf423a44f Certificate serial: 019B3456CC997E626B46A7C2456CE8CC9AFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdbIX3x3piMohkqg64R3fQjpE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.mft Manifest number: 0C3B Signing time: Fri 19 Dec 2025 02:01:02 +0000 Manifest this update: Fri 19 Dec 2025 02:01:02 +0000 Manifest next update: Sat 20 Dec 2025 02:01:02 +0000 Files and hashes: 1: Nr1R18FVhyzjXhL2YKl54Kz1CcM.roa (hash: Ka3gajN2kG5bn7od03MC2i4kFc5aTTook8osIu09I1U=) 2: zCdbIX3x3piMohkqg64R3fQjpE8.crl (hash: Eb/C1OVMnnalDJz+ZRUjTpwmjP9lJ8i3dtIauIUrHZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.mft rsync://rpki.ripe.net/repository/DEFAULT/zCdbIX3x3piMohkqg64R3fQjpE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:cc:99:7e:62:6b:46:a7:c2:45:6c:e8:cc:9a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc275b217df1de988ca2192a83ae11ddf423a44f Validity Not Before: Dec 19 02:01:02 2025 GMT Not After : Dec 20 02:01:02 2025 GMT Subject: CN=6452f9f535453982bce20f945091e975b7acfef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:8a:ec:fb:e0:97:40:bb:e4:61:78:2a:e7: cc:83:21:ce:ff:1a:83:f6:71:fc:37:54:a0:30:0e: 39:6c:9a:77:4d:10:c4:5c:49:e9:59:50:36:16:5d: ed:5c:ee:a3:19:e7:50:e8:ad:77:5d:42:3b:93:48: aa:ba:73:f3:67:cb:19:7e:07:41:92:ce:72:88:6e: 79:17:94:42:7b:f3:c2:c8:e9:d8:cf:f1:78:54:31: e8:14:ee:23:8b:1b:68:f4:21:ac:06:c6:fa:99:30: 01:50:9c:8c:71:8f:c2:93:6a:c5:9b:5a:8d:e4:7a: c9:b4:22:a6:11:51:e7:fa:8f:60:a4:92:09:2e:d3: 12:40:3c:3b:04:a1:1f:2b:66:68:9a:32:bc:0e:9c: f3:30:d1:50:09:45:90:15:58:68:00:a2:83:42:69: be:1f:18:8e:6a:5f:c0:f4:91:03:ce:8f:14:73:65: 83:89:0a:03:f8:9c:9f:1a:d6:15:79:04:48:fe:e7: 76:aa:4d:95:b3:3b:fb:a3:e6:67:0d:ec:e0:4c:69: 40:98:59:47:1f:11:55:bb:44:d8:01:e3:8f:27:19: e3:c0:df:be:c7:eb:a6:51:da:c5:0e:22:c9:b5:56: fd:d7:b2:9b:9b:c4:2a:63:af:0f:40:dc:1e:be:8c: 17:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:52:F9:F5:35:45:39:82:BC:E2:0F:94:50:91:E9:75:B7:AC:FE:F3 X509v3 Authority Key Identifier: keyid:CC:27:5B:21:7D:F1:DE:98:8C:A2:19:2A:83:AE:11:DD:F4:23:A4:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdbIX3x3piMohkqg64R3fQjpE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5124d0-2b3f-4dab-857d-2e639fca4640/1/zCdbIX3x3piMohkqg64R3fQjpE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c1:95:6e:51:f0:97:c1:17:3c:a8:0e:f4:9c:48:42:b1:ad: 42:a7:d2:db:6b:24:7e:23:db:a9:cb:42:71:29:f4:04:8c:29: f7:b7:b7:df:01:93:ef:78:f7:9c:a7:04:cd:05:7c:a5:ea:89: 03:5a:83:d5:52:42:e9:f8:6e:1c:fb:3e:61:b7:e3:e0:01:ff: 97:c0:77:1f:b6:0f:ba:e7:1d:dc:96:56:75:51:29:26:1e:7a: d3:b6:1e:4a:f0:52:4a:b5:02:f8:f8:51:33:a8:bd:f1:28:1a: e5:fd:0a:90:27:c4:99:81:6b:4a:4a:1b:fd:45:f4:8a:fe:b2: 12:c9:c8:50:ab:ef:96:85:b0:4e:18:10:7d:0e:ec:f8:0f:19: 85:1a:a7:3c:dc:b2:b6:ec:73:d3:9e:68:45:1e:3a:39:53:61: 42:2a:55:e2:7c:18:58:7f:a7:ab:77:65:24:1d:8f:fa:f8:e2: 61:ce:a1:a8:25:07:33:ed:7a:0e:67:7f:2c:11:6c:22:e6:ca: 4f:c2:bc:3d:da:09:ec:29:0e:62:30:09:1c:71:94:c8:34:e1: 48:4a:dd:a6:ae:c8:c7:30:ab:3a:c7:9e:cf:98:7c:30:65:38: 1b:40:48:3b:90:99:61:d2:5d:3b:92:7c:d5:db:48:19:1e:b6: 43:d0:22:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VsyZfmJrRqfCRWzozJr6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMjc1YjIxN2RmMWRlOTg4Y2EyMTkyYTgzYWUxMWRkZjQy M2E0NGYwHhcNMjUxMjE5MDIwMTAyWhcNMjUxMjIwMDIwMTAyWjAzMTEwLwYDVQQD Eyg2NDUyZjlmNTM1NDUzOTgyYmNlMjBmOTQ1MDkxZTk3NWI3YWNmZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6yK7Pvgl0C75GF4KufMgyHO/xqD 9nH8N1SgMA45bJp3TRDEXEnpWVA2Fl3tXO6jGedQ6K13XUI7k0iqunPzZ8sZfgdB ks5yiG55F5RCe/PCyOnYz/F4VDHoFO4jixto9CGsBsb6mTABUJyMcY/Ck2rFm1qN 5HrJtCKmEVHn+o9gpJIJLtMSQDw7BKEfK2ZomjK8DpzzMNFQCUWQFVhoAKKDQmm+ HxiOal/A9JEDzo8Uc2WDiQoD+JyfGtYVeQRI/ud2qk2Vszv7o+ZnDezgTGlAmFlH HxFVu0TYAeOPJxnjwN++x+umUdrFDiLJtVb917Kbm8QqY68PQNwevowXqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRS+fU1RTmCvOIPlFCR6XW3rP7zMB8GA1UdIwQY MBaAFMwnWyF98d6YjKIZKoOuEd30I6RPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekNkYklYM3gzcGlNb2hrcWc2NFIzZlFqcEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81MTI0ZDAtMmIzZi00ZGFiLTg1N2Qt MmU2MzlmY2E0NjQwLzEvekNkYklYM3gzcGlNb2hrcWc2NFIzZlFqcEU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS81MTI0ZDAtMmIzZi00ZGFiLTg1N2QtMmU2MzlmY2E0NjQw LzEvekNkYklYM3gzcGlNb2hrcWc2NFIzZlFqcEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8GVblHw l8EXPKgO9JxIQrGtQqfS22skfiPbqctCcSn0BIwp97e33wGT73j3nKcEzQV8peqJ A1qD1VJC6fhuHPs+Ybfj4AH/l8B3H7YPuucd3JZWdVEpJh5607YeSvBSSrUC+PhR M6i98Sga5f0KkCfEmYFrSkob/UX0iv6yEsnIUKvvloWwThgQfQ7s+A8ZhRqnPNyy tuxz055oRR46OVNhQipV4nwYWH+nq3dlJB2P+vjiYc6hqCUHM+16Dmd/LBFsIubK T8K8PdoJ7CkOYjAJHHGUyDThSErdpq7IxzCrOseez5h8MGU4G0BIO5CZYdJdO5J8 1dtIGR62Q9Aibw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:50:21 2025 by rpki-client