This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json) Hash identifier: iPoqtbX3S2WSwnJBE1JldvK5OivpUHW8NzXmE/V+qag= Subject key identifier: 89:66:06:B6:44:75:31:C2:50:A4:39:15:28:A4:63:08:C2:85:AC:22 Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08 Certificate serial: 019B11258600DC201680D27F852A04A64B5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 06:00:30 +0000 Manifest this update: Fri 12 Dec 2025 06:00:30 +0000 Manifest next update: Sat 13 Dec 2025 06:00:30 +0000 Files and hashes: 1: Q47WtOQCnZpCmGtfa6Ew40Gy4MM.roa (hash: duMBQWWRYKd9t18S6r0lV3zHXTUBGHlTePHIZBRiz1Q=) 2: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: A6tKMCx4GYrauVTfVJ+QD86K7xO/RHLz+o+t0fM/AA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:86:00:dc:20:16:80:d2:7f:85:2a:04:a6:4b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08 Validity Not Before: Dec 12 06:00:30 2025 GMT Not After : Dec 13 06:00:30 2025 GMT Subject: CN=896606b6447531c250a4391528a46308c285ac22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d6:f9:a2:d4:e6:cf:22:6c:48:8f:aa:41:ef: 4b:2c:be:ad:5b:b4:ac:6e:22:6a:d7:3a:80:14:5e: 7c:9c:18:c8:ef:17:98:db:71:8c:7c:36:da:61:2e: eb:74:d2:b3:c3:9b:c3:d4:58:68:dd:b8:cc:94:7c: 78:c5:68:04:3d:89:a1:d4:66:7a:1d:56:b9:f3:7f: 45:dc:19:51:65:0e:4a:b7:49:80:30:c4:7e:38:c1: 48:94:af:49:b0:ac:29:d6:15:82:0f:62:fe:c8:a2: 8f:ca:bd:db:a1:ba:42:f8:3f:16:a8:fe:43:11:ae: 51:a6:e7:d9:64:a8:71:e0:04:d7:99:2c:54:ef:25: 48:2d:23:2b:54:2d:0e:11:12:18:49:fe:12:ec:79: 12:68:3e:33:3a:8c:3a:65:2a:8a:57:97:c9:43:d0: 8e:8c:3e:d2:93:29:6a:a4:cb:65:5d:7c:44:25:0e: fd:da:9a:a1:6e:ac:5b:30:03:b5:00:12:b2:82:bc: e0:2a:4e:33:7f:40:8b:46:ce:d4:dd:0a:a2:f1:28: 81:68:36:05:4e:39:10:98:c3:14:50:58:93:15:33: ee:c5:ab:b0:7a:07:d8:c6:00:d1:1b:46:d8:14:a7: 9b:61:8b:7a:cc:4d:55:9b:38:b9:d8:55:33:9c:9b: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:66:06:B6:44:75:31:C2:50:A4:39:15:28:A4:63:08:C2:85:AC:22 X509v3 Authority Key Identifier: keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:82:0d:95:66:31:04:ca:86:fb:2c:db:7f:8e:35:f9:2c:fc: 0a:9d:c4:80:63:b2:5c:eb:fd:4d:1a:6d:02:4b:28:99:7e:71: b4:ca:6b:40:d1:c5:17:4f:30:21:0e:f8:8f:cb:ed:a2:86:4e: 0b:47:85:65:be:59:98:ec:e8:a7:b4:18:2e:70:3e:ab:ed:b7: 72:c0:49:ed:7d:cb:bd:23:6a:27:bd:03:e2:aa:ae:a5:e2:26: 98:db:09:5c:af:e9:82:2f:e5:d9:7f:35:07:81:1d:e0:0e:60: 61:92:2c:b4:75:ce:7d:ed:bb:e9:c9:89:56:24:5c:8e:8f:8f: 71:9d:0c:46:10:7c:4a:e5:a5:bc:2e:21:3e:fb:4c:62:0a:96: 47:cb:bf:ff:33:40:ea:cf:c7:4f:5e:bf:7f:35:78:0a:69:8d: c5:69:50:df:bc:c2:4a:ff:37:83:b1:e8:e5:35:6c:51:e3:99: e6:c1:a2:73:b0:ee:ce:a5:18:15:45:df:9b:59:15:2a:b1:65: 78:72:d3:a8:c0:b8:8a:43:c9:79:68:58:9d:ff:a9:87:f9:26: b7:18:f1:b9:56:dc:55:00:20:64:4c:93:3e:2f:ce:a8:0f:14: 26:a6:55:19:33:2f:c7:26:90:e4:67:96:95:ce:fa:a9:b9:7e: 71:2a:f3:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJYYA3CAWgNJ/hSoEpkteMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTIxYzNmOTIwN2EzNzM0NWUzODcwMmM4OWQxNzliZjQ0 NGFhMDgwHhcNMjUxMjEyMDYwMDMwWhcNMjUxMjEzMDYwMDMwWjAzMTEwLwYDVQQD Eyg4OTY2MDZiNjQ0NzUzMWMyNTBhNDM5MTUyOGE0NjMwOGMyODVhYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1db5otTmzyJsSI+qQe9LLL6tW7Ss biJq1zqAFF58nBjI7xeY23GMfDbaYS7rdNKzw5vD1Fho3bjMlHx4xWgEPYmh1GZ6 HVa5839F3BlRZQ5Kt0mAMMR+OMFIlK9JsKwp1hWCD2L+yKKPyr3bobpC+D8WqP5D Ea5RpufZZKhx4ATXmSxU7yVILSMrVC0OERIYSf4S7HkSaD4zOow6ZSqKV5fJQ9CO jD7SkylqpMtlXXxEJQ792pqhbqxbMAO1ABKygrzgKk4zf0CLRs7U3Qqi8SiBaDYF TjkQmMMUUFiTFTPuxauwegfYxgDRG0bYFKebYYt6zE1Vmzi52FUznJtujQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlmBrZEdTHCUKQ5FSikYwjChawiMB8GA1UdIwQY MBaAFGUSHD+SB6NzReOHAsidF5v0RKoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYt NDhkM2NhMTYxYmIwLzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYtNDhkM2NhMTYxYmIw LzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4INlWYx BMqG+yzbf441+Sz8Cp3EgGOyXOv9TRptAksomX5xtMprQNHFF08wIQ74j8vtooZO C0eFZb5ZmOzop7QYLnA+q+23csBJ7X3LvSNqJ70D4qqupeImmNsJXK/pgi/l2X81 B4Ed4A5gYZIstHXOfe276cmJViRcjo+PcZ0MRhB8SuWlvC4hPvtMYgqWR8u//zNA 6s/HT16/fzV4CmmNxWlQ37zCSv83g7Ho5TVsUeOZ5sGic7DuzqUYFUXfm1kVKrFl eHLTqMC4ikPJeWhYnf+ph/kmtxjxuVbcVQAgZEyTPi/OqA8UJqZVGTMvxyaQ5GeW lc76qbl+cSrzpQ== -----END CERTIFICATE-----Generated at Fri Dec 12 13:18:06 2025 by rpki-client