This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft File: zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json) Hash identifier: gfyECgJ2qbgL+jvxkQclEcKAFStqiWzY+VPB2bcXQoo= Subject key identifier: 16:2A:55:D2:DD:7A:06:DB:AF:83:70:DD:ED:58:36:B8:25:F2:E4:5B Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f Certificate serial: 019B439307124BA2AE2737843A0DA4C97BCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 01:01:07 +0000 Manifest this update: Mon 22 Dec 2025 01:01:07 +0000 Manifest next update: Tue 23 Dec 2025 01:01:07 +0000 Files and hashes: 1: SEgDWEU92zAnfdKKSLnIVh9oR0w.roa (hash: GA6e5Om3W8hxoIZHlBedjOBv7v6eWZGQfFv5Miq1TxA=) 2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: AvkJz42QOzkuq/sCwt4PBd+rKJgayrZSKtkngUrUzgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:07:12:4b:a2:ae:27:37:84:3a:0d:a4:c9:7b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f Validity Not Before: Dec 22 01:01:07 2025 GMT Not After : Dec 23 01:01:07 2025 GMT Subject: CN=162a55d2dd7a06dbaf8370dded5836b825f2e45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:37:27:9b:f0:bf:08:7b:28:02:b9:39:fe: ab:6c:f1:d9:96:f3:e8:da:ca:06:ac:37:fd:fe:42: be:c5:5f:ec:a4:e8:57:50:61:ef:53:ee:0b:8d:65: 4b:eb:32:88:8e:6d:83:19:9c:79:f9:ba:ba:3b:81: 4f:1a:3f:d3:c7:14:94:7e:a3:7c:f9:7e:23:54:10: a6:6b:5b:8b:e0:af:9a:57:59:7f:08:7d:61:d7:8f: 6c:66:6f:7a:af:11:ea:8a:b8:19:85:73:2b:2c:6e: 49:47:b5:59:50:dd:75:0a:17:0d:42:0d:c9:b9:a5: fd:56:69:8c:7b:5a:4f:58:6f:da:b6:af:3f:02:65: f3:1d:e9:e9:b5:62:d2:2f:1f:5d:d0:96:2f:7e:fa: 6e:b5:71:0d:01:39:44:bb:42:fd:2c:32:ff:59:a7: 0f:9d:f2:06:f5:fa:c7:23:99:8e:e1:a4:f5:94:d8: 7b:97:b2:bc:24:68:c3:77:94:0e:f8:05:a3:23:27: 66:da:f4:98:77:80:b1:3b:9e:ef:db:0d:a2:04:18: 98:7c:d4:7f:44:2c:61:25:41:8c:f9:28:5c:7c:0d: ba:6f:fc:47:8e:6c:47:d0:78:d8:73:54:b8:21:ce: 1f:a3:b6:75:e6:ed:39:37:22:81:d2:da:33:a3:02: 3e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2A:55:D2:DD:7A:06:DB:AF:83:70:DD:ED:58:36:B8:25:F2:E4:5B X509v3 Authority Key Identifier: keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:db:41:a6:ff:b4:9c:f4:ab:8d:64:8a:16:3a:63:9c:15:0d: 82:69:84:66:cb:c0:1d:78:a4:de:7a:1d:5e:d2:e8:31:ae:bf: 0f:1a:7b:28:2a:33:b2:1f:35:a1:74:5c:a6:92:b0:09:4a:02: fe:90:3d:13:34:73:47:7b:85:4a:c4:22:12:af:ef:a7:67:e3: 38:3d:90:5e:8f:c9:d5:3e:0c:19:fa:4f:38:53:c7:21:9f:e0: cf:8a:a6:96:6b:c1:8d:a3:53:19:e5:ff:ac:ac:b0:94:9b:ff: f1:f4:21:fd:d7:e1:d8:68:97:e5:0b:4f:ad:5d:e9:9c:10:ec: 55:a2:19:35:00:ef:31:e7:54:15:d9:d1:9a:fb:30:53:66:99: fd:0c:9c:85:84:66:9e:e3:3f:92:55:bb:08:8b:61:a8:ca:89: 49:0f:ed:e9:c5:93:0b:ac:34:fa:69:be:ff:0a:cb:f4:c3:ce: e7:69:db:7b:0f:10:a7:3a:13:39:64:b9:d1:9d:8d:e9:79:b5: 85:dd:4a:45:13:d2:28:3c:64:55:06:9b:2b:06:9b:0d:51:72: de:b3:42:81:6d:4a:df:b9:58:e5:91:0e:a4:6e:32:3b:d8:8d: 12:8a:f7:8d:b2:cf:78:98:b1:f6:d2:d5:b3:70:4b:a8:ae:5d: b9:22:34:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkwcSS6KuJzeEOg2kyXvMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNTdlYzRjNDAyNWFkYWI4OGI5MjA3NGFkNDYwNTZlOWY5 MzA5OWYwHhcNMjUxMjIyMDEwMTA3WhcNMjUxMjIzMDEwMTA3WjAzMTEwLwYDVQQD EygxNjJhNTVkMmRkN2EwNmRiYWY4MzcwZGRlZDU4MzZiODI1ZjJlNDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou03J5vwvwh7KAK5Of6rbPHZlvPo 2soGrDf9/kK+xV/spOhXUGHvU+4LjWVL6zKIjm2DGZx5+bq6O4FPGj/TxxSUfqN8 +X4jVBCma1uL4K+aV1l/CH1h149sZm96rxHqirgZhXMrLG5JR7VZUN11ChcNQg3J uaX9VmmMe1pPWG/atq8/AmXzHenptWLSLx9d0JYvfvputXENATlEu0L9LDL/WacP nfIG9frHI5mO4aT1lNh7l7K8JGjDd5QO+AWjIydm2vSYd4CxO57v2w2iBBiYfNR/ RCxhJUGM+ShcfA26b/xHjmxH0HjYc1S4Ic4fo7Z15u05NyKB0tozowI+5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYqVdLdegbbr4Nw3e1YNrgl8uRbMB8GA1UdIwQY MBaAFM1X7ExAJa2riLkgdK1GBW6fkwmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMmYzNTQtOThjZC00MzI1LTlmYmUt NzYyNDMyZmRkNGRkLzEvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wMmYzNTQtOThjZC00MzI1LTlmYmUtNzYyNDMyZmRkNGRk LzEvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANttBpv+0 nPSrjWSKFjpjnBUNgmmEZsvAHXik3nodXtLoMa6/Dxp7KCozsh81oXRcppKwCUoC /pA9EzRzR3uFSsQiEq/vp2fjOD2QXo/J1T4MGfpPOFPHIZ/gz4qmlmvBjaNTGeX/ rKywlJv/8fQh/dfh2GiX5QtPrV3pnBDsVaIZNQDvMedUFdnRmvswU2aZ/QychYRm nuM/klW7CIthqMqJSQ/t6cWTC6w0+mm+/wrL9MPO52nbew8QpzoTOWS50Z2N6Xm1 hd1KRRPSKDxkVQabKwabDVFy3rNCgW1K37lY5ZEOpG4yO9iNEor3jbLPeJix9tLV s3BLqK5duSI04A== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:46 2025 by rpki-client