This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft File: zR9zNFeUzkgX6pno2M_OpxvXg2c.mft (raw, json) Hash identifier: dQn9dl3J+RejdMdXyiacA0sczT/Fm4riRjWuAI+n7Ak= Subject key identifier: 12:0C:1F:22:37:2E:57:9C:BD:C9:2B:27:C1:1D:34:EB:23:1B:8F:2A Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67 Certificate issuer: /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367 Certificate serial: 019B2EF95129FE2937A92D9267652741EFE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft Manifest number: 0769 Signing time: Thu 18 Dec 2025 01:00:49 +0000 Manifest this update: Thu 18 Dec 2025 01:00:49 +0000 Manifest next update: Fri 19 Dec 2025 01:00:49 +0000 Files and hashes: 1: EsGGI1P8V7qCIrWJmfPudsu7pMI.roa (hash: RgD/iTo2o3seqIZhRljS2dvXiiazUq7PXVkPQR+sYAc=) 2: zR9zNFeUzkgX6pno2M_OpxvXg2c.crl (hash: +c/ntevw5lUdgl8h3oXmMKloKC797Cz4IXYox+wTK6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:51:29:fe:29:37:a9:2d:92:67:65:27:41:ef:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367 Validity Not Before: Dec 18 01:00:49 2025 GMT Not After : Dec 19 01:00:49 2025 GMT Subject: CN=120c1f22372e579cbdc92b27c11d34eb231b8f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3e:22:88:55:a7:ba:4a:7d:30:5d:f8:7c:68: fe:79:ac:73:39:a3:22:bf:d9:b8:2e:03:01:49:f3: f1:d2:a6:26:bc:33:51:e5:11:1c:8a:20:80:19:65: d7:4c:20:f5:83:f6:e7:92:41:1e:03:c3:8a:b1:37: fe:20:9d:2d:29:b2:ac:60:df:98:97:1a:4e:f6:70: c9:7e:12:a2:dd:27:8f:1a:b0:d5:52:bf:2d:8e:b1: 32:0f:f2:92:fd:b7:42:a8:fa:65:27:c2:a1:0a:f5: ec:0e:7e:37:75:1b:98:c2:b1:dd:8b:2c:3a:71:65: 21:89:ff:2a:a0:c7:82:b9:0c:16:3e:6a:a6:e6:9a: 1e:e4:13:75:7a:15:1d:0c:c8:c4:a8:19:0a:69:b9: d2:1f:77:6b:2d:9c:9a:ac:32:c2:14:33:12:0c:7b: 14:59:d3:67:93:54:74:31:ff:83:52:5c:5f:b8:4e: c5:70:ea:32:5e:e9:14:c4:db:de:12:ad:f9:99:e3: bd:b0:6e:3d:29:b4:2c:73:5d:4a:fa:5e:83:4e:71: b9:05:bb:d7:0e:5f:fc:d3:90:ca:d6:e7:a8:44:99: 20:cc:18:ee:dd:48:33:e7:5a:1e:df:a2:3d:67:46: f2:2f:68:7e:c8:70:84:b7:5f:04:bc:29:99:a8:12: e0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0C:1F:22:37:2E:57:9C:BD:C9:2B:27:C1:1D:34:EB:23:1B:8F:2A X509v3 Authority Key Identifier: keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:31:a4:80:f2:6c:8b:0d:45:9b:6a:ca:ef:db:91:ce:83:83: 1c:05:f8:d8:7b:72:91:c7:1a:89:84:74:9b:66:fe:a9:d9:4d: 2b:31:9e:ac:a3:58:01:fc:63:53:84:f1:dc:d4:6d:a5:1b:2a: 9f:be:06:68:a9:c5:03:7d:4f:3b:05:ee:79:55:20:0a:80:54: f1:5b:e3:fb:00:0e:13:18:19:a3:aa:c9:9a:46:8e:59:93:97: 82:3a:ec:f1:e7:f6:1a:21:99:ef:0d:2b:1b:cc:02:f6:3b:38: 5e:f1:95:96:ab:50:d0:5b:57:eb:10:59:07:12:f3:a9:01:bd: bd:94:83:e8:55:5e:29:9f:3e:73:84:98:b5:db:f2:e3:56:32: 39:47:45:77:e3:4e:04:b9:09:21:63:ef:39:03:28:eb:b1:27: ea:29:df:14:66:a6:4c:5d:ac:e4:82:b8:19:e6:f8:4e:9e:37: 30:bc:23:d9:d4:47:95:83:59:9e:11:04:cf:d2:a0:d1:48:ab: ac:b5:0d:65:88:af:7f:be:ce:cd:7e:02:5f:59:c0:7f:52:db: 9f:56:92:13:8c:12:ed:6e:7c:70:ec:4e:ee:f2:cc:72:61:38: cb:b1:4b:f3:7d:dd:0f:09:51:87:22:06:9d:2d:f5:01:b9:da: 39:25:07:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+VEp/ik3qS2SZ2UnQe/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMWY3MzM0NTc5NGNlNDgxN2VhOTllOGQ4Y2ZjZWE3MWJk NzgzNjcwHhcNMjUxMjE4MDEwMDQ5WhcNMjUxMjE5MDEwMDQ5WjAzMTEwLwYDVQQD EygxMjBjMWYyMjM3MmU1NzljYmRjOTJiMjdjMTFkMzRlYjIzMWI4ZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j4iiFWnukp9MF34fGj+eaxzOaMi v9m4LgMBSfPx0qYmvDNR5REciiCAGWXXTCD1g/bnkkEeA8OKsTf+IJ0tKbKsYN+Y lxpO9nDJfhKi3SePGrDVUr8tjrEyD/KS/bdCqPplJ8KhCvXsDn43dRuYwrHdiyw6 cWUhif8qoMeCuQwWPmqm5poe5BN1ehUdDMjEqBkKabnSH3drLZyarDLCFDMSDHsU WdNnk1R0Mf+DUlxfuE7FcOoyXukUxNveEq35meO9sG49KbQsc11K+l6DTnG5BbvX Dl/805DK1ueoRJkgzBju3Ugz51oe36I9Z0byL2h+yHCEt18EvCmZqBLgTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIMHyI3LlecvckrJ8EdNOsjG48qMB8GA1UdIwQY MBaAFM0fczRXlM5IF+qZ6NjPzqcb14NnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MDExNzAtZTYwNi00ZmQxLTg1MDQt N2YwZDA3YmE0YWYzLzEvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MDExNzAtZTYwNi00ZmQxLTg1MDQtN2YwZDA3YmE0YWYz LzEvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDGkgPJs iw1Fm2rK79uRzoODHAX42HtykccaiYR0m2b+qdlNKzGerKNYAfxjU4Tx3NRtpRsq n74GaKnFA31POwXueVUgCoBU8Vvj+wAOExgZo6rJmkaOWZOXgjrs8ef2GiGZ7w0r G8wC9js4XvGVlqtQ0FtX6xBZBxLzqQG9vZSD6FVeKZ8+c4SYtdvy41YyOUdFd+NO BLkJIWPvOQMo67En6infFGamTF2s5IK4Geb4Tp43MLwj2dRHlYNZnhEEz9Kg0Uir rLUNZYivf77OzX4CX1nAf1Lbn1aSE4wS7W58cOxO7vLMcmE4y7FL833dDwlRhyIG nS31AbnaOSUHgQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:30:53 2025 by rpki-client