This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json) Hash identifier: 8nGvfdn3yZaclijV49sz0Q9vWpMq30HCfr5iF1Poer4= Subject key identifier: FC:8E:36:63:58:05:24:B0:0F:4D:47:D0:8D:BF:6B:CD:51:0A:9B:18 Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82 Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782 Certificate serial: 019B5A8843E36CDDAC48D55C80651A390097 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 12:00:38 +0000 Manifest this update: Fri 26 Dec 2025 12:00:38 +0000 Manifest next update: Sat 27 Dec 2025 12:00:38 +0000 Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=) 2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=) 3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: L4Y9ZAaB1E9eWz3iefLg3MLp2jDEyOUMxHy4n2X2pZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:43:e3:6c:dd:ac:48:d5:5c:80:65:1a:39:00:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc4491558cd24875db524273410502fdae3a6782 Validity Not Before: Dec 26 12:00:38 2025 GMT Not After : Dec 27 12:00:38 2025 GMT Subject: CN=fc8e3663580524b00f4d47d08dbf6bcd510a9b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:c4:b7:0d:5c:4d:53:31:05:bf:12:c8:ad: 11:30:78:c5:18:a1:66:24:87:c6:e9:ac:b0:76:5a: 74:2a:d5:2b:b0:08:4c:85:7a:a5:4e:47:99:91:9e: b5:f5:cf:28:60:4d:60:6f:3e:e2:b7:f6:b1:91:a5: 71:04:c6:da:84:08:b9:87:a4:4d:e5:d4:86:83:06: af:11:b2:53:1b:04:4a:fb:03:37:bd:a3:59:2e:55: 35:36:32:2c:fa:64:81:f2:3b:2a:7e:56:7f:bb:37: 48:b0:a6:c9:d7:d8:4d:91:1f:e2:13:28:91:00:a9: 17:d1:da:08:0b:a3:38:8f:92:a4:12:10:f4:a2:57: 1d:34:20:72:ea:54:34:c5:e0:42:46:14:72:03:2b: 47:f6:12:1a:c5:f9:2f:d8:be:68:ce:90:f1:84:ae: 62:29:3b:66:ca:3f:e5:3b:cc:75:1b:a5:89:49:db: 0e:66:44:1b:56:66:b5:44:5c:09:7a:72:7a:64:ff: 42:71:81:61:d7:f7:15:53:32:98:38:9c:4c:03:68: e2:ae:1e:b7:23:31:d0:82:ce:8a:16:10:34:c0:3d: 71:bb:31:fc:42:e9:66:2c:89:a8:bd:23:9d:34:22: 02:64:fc:a6:df:28:29:b4:24:9a:2e:b5:89:16:80: 71:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8E:36:63:58:05:24:B0:0F:4D:47:D0:8D:BF:6B:CD:51:0A:9B:18 X509v3 Authority Key Identifier: keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:0a:d1:65:e9:cb:89:9b:24:51:ba:d0:f0:40:5c:1e:42:86: 36:86:49:52:d8:21:80:45:11:0f:3a:5e:8d:c8:73:e9:57:9f: f8:82:75:e6:f2:dc:75:01:7e:2b:5d:53:40:4b:d5:fb:76:e7: 6b:87:cb:29:60:6e:08:db:38:52:2e:e3:9d:43:58:c2:88:9a: bb:b1:e8:79:6b:a7:fe:3f:23:57:b2:5c:bb:2c:e1:52:b4:3b: 1e:ea:dc:74:50:c7:b0:ee:b7:89:3c:94:e2:b2:da:02:33:8a: 1d:bb:35:5c:04:8f:bd:c7:e2:9d:2b:82:86:47:48:45:ef:3a: a9:62:fb:cd:9a:4f:71:cc:d6:cd:70:9f:bc:f2:e3:68:05:04: e6:77:1b:e7:82:c3:76:f2:37:68:06:40:28:05:62:e8:6f:da: 81:c3:64:43:92:85:0c:55:bc:ff:86:5f:ce:b3:c6:eb:ad:72: af:cd:25:0d:d0:10:e8:89:e6:ee:05:cb:5f:60:c9:c6:30:da: 82:81:ed:94:f6:df:80:e9:48:7c:2a:27:e9:c6:ed:c2:22:30: db:1f:31:18:0c:0b:89:77:97:f3:e3:fd:2d:68:93:81:21:d3: d6:a6:56:8a:f1:5b:06:e1:58:83:ad:41:c7:a7:9c:f4:fc:f1: 0e:d2:ad:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiEPjbN2sSNVcgGUaOQCXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDQ5MTU1OGNkMjQ4NzVkYjUyNDI3MzQxMDUwMmZkYWUz YTY3ODIwHhcNMjUxMjI2MTIwMDM4WhcNMjUxMjI3MTIwMDM4WjAzMTEwLwYDVQQD EyhmYzhlMzY2MzU4MDUyNGIwMGY0ZDQ3ZDA4ZGJmNmJjZDUxMGE5YjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPXEtw1cTVMxBb8SyK0RMHjFGKFm JIfG6aywdlp0KtUrsAhMhXqlTkeZkZ619c8oYE1gbz7it/axkaVxBMbahAi5h6RN 5dSGgwavEbJTGwRK+wM3vaNZLlU1NjIs+mSB8jsqflZ/uzdIsKbJ19hNkR/iEyiR AKkX0doIC6M4j5KkEhD0olcdNCBy6lQ0xeBCRhRyAytH9hIaxfkv2L5ozpDxhK5i KTtmyj/lO8x1G6WJSdsOZkQbVma1RFwJenJ6ZP9CcYFh1/cVUzKYOJxMA2jirh63 IzHQgs6KFhA0wD1xuzH8QulmLImovSOdNCICZPym3ygptCSaLrWJFoBxIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyONmNYBSSwD01H0I2/a81RCpsYMB8GA1UdIwQY MBaAFMxEkVWM0kh121JCc0EFAv2uOmeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80MzllZmUtZjEzMC00OTMxLTkzMWMt YzhkNWMwNGUzZDQzLzEvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80MzllZmUtZjEzMC00OTMxLTkzMWMtYzhkNWMwNGUzZDQz LzEvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgrRZenL iZskUbrQ8EBcHkKGNoZJUtghgEURDzpejchz6Vef+IJ15vLcdQF+K11TQEvV+3bn a4fLKWBuCNs4Ui7jnUNYwoiau7HoeWun/j8jV7JcuyzhUrQ7HurcdFDHsO63iTyU 4rLaAjOKHbs1XASPvcfinSuChkdIRe86qWL7zZpPcczWzXCfvPLjaAUE5ncb54LD dvI3aAZAKAVi6G/agcNkQ5KFDFW8/4ZfzrPG661yr80lDdAQ6Inm7gXLX2DJxjDa goHtlPbfgOlIfCon6cbtwiIw2x8xGAwLiXeX8+P9LWiTgSHT1qZWivFbBuFYg61B x6ec9PzxDtKtHg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:42 2025 by rpki-client