This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json) Hash identifier: c/xJgpT0+N5mYHXVyG8yGPhGFCBQFYnb4nxG4MmP8SI= Subject key identifier: CC:5A:1B:5C:10:A0:DF:26:46:55:C3:E8:80:C8:05:94:5E:CA:FE:73 Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f Certificate serial: 019B4EBB01F341DF420C7113DB1E6C4294CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft Manifest number: 0B8D Signing time: Wed 24 Dec 2025 05:00:37 +0000 Manifest this update: Wed 24 Dec 2025 05:00:37 +0000 Manifest next update: Thu 25 Dec 2025 05:00:37 +0000 Files and hashes: 1: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: aUx3IdgWsGj4U8GsoMRBMqxP5aU8/EYau0igTErPsSQ=) 2: kvXcpQTzKfI6gYewmYSpRpe0IKs.roa (hash: My61/36Uwh1IIiMu1AIZdI2rmfYYECW0U4UcdSmLLaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:01:f3:41:df:42:0c:71:13:db:1e:6c:42:94:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f Validity Not Before: Dec 24 05:00:37 2025 GMT Not After : Dec 25 05:00:37 2025 GMT Subject: CN=cc5a1b5c10a0df264655c3e880c805945ecafe73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:51:97:e1:5d:a4:ac:50:95:56:bc:c5:cb: 61:1d:04:d3:f5:b4:f6:c7:96:83:20:b1:d9:75:25: b2:10:b0:7a:79:e0:a0:ef:bd:aa:48:f7:82:8c:57: fb:e1:7a:8d:0b:3c:1b:5c:a7:ff:00:3d:b7:4e:53: ab:8a:26:1e:4c:4f:60:e1:af:58:d0:c8:67:21:bd: b4:7f:36:c0:e2:76:34:ad:01:20:b6:c8:00:47:16: 64:64:2d:53:ee:1b:cf:3f:70:2d:31:4c:22:96:f3: 57:c7:28:b6:7e:07:48:6f:a4:2a:ee:6b:c9:d7:2e: 78:32:53:43:95:c1:be:17:5f:76:3b:70:2f:e9:2f: 15:2d:a2:c5:2f:6d:fd:e2:62:a1:47:38:98:a2:b5: 03:40:ae:73:89:69:dd:dd:89:88:e1:a6:13:bd:db: b6:1a:41:a8:90:66:f2:b5:47:03:2b:d4:43:9c:e3: c8:f9:cb:7d:06:6c:52:45:cb:11:a2:65:74:3f:06: 08:9e:1d:40:1f:c3:f7:b0:d1:18:c5:ad:c6:5d:7e: 9e:bc:27:70:48:0e:90:cd:10:b2:09:3f:1f:40:c3: b5:b6:6a:82:ae:99:ad:0e:e8:5d:44:cd:ae:2c:71: 5f:97:d5:c6:5d:9c:da:29:86:18:de:b4:d5:ec:cf: 06:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5A:1B:5C:10:A0:DF:26:46:55:C3:E8:80:C8:05:94:5E:CA:FE:73 X509v3 Authority Key Identifier: keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:86:25:27:d2:ef:94:0c:81:03:c6:34:34:e2:2c:64:ef:da: 17:28:17:c5:eb:21:d5:84:4f:ee:be:6c:81:d5:ff:15:a4:22: e2:ae:b9:c9:69:81:d3:2b:33:bc:21:eb:8f:a8:f5:6b:21:c3: 83:9c:af:6c:08:74:74:77:f6:9b:51:8c:25:7a:63:4f:a1:29: 45:fe:17:97:b2:6d:41:b2:35:66:ca:47:d8:df:5f:a9:cc:6f: b7:25:47:68:f9:7b:70:7e:76:4e:b8:d3:9f:06:27:6d:5c:df: 51:08:cb:18:b4:15:b9:55:4b:a1:66:77:7f:eb:b3:13:cb:24: f0:e4:38:e3:5d:d8:cb:04:35:33:25:b2:d2:c0:99:11:26:fa: f5:c7:4f:29:bd:b6:3e:ce:ad:22:98:80:8b:e7:2d:be:c2:aa: f5:cc:0c:36:86:17:d5:fe:3d:9c:1a:98:67:84:a6:4e:7a:28: 44:c2:ea:bc:09:48:47:fb:45:1f:f7:cd:55:c2:13:e7:f5:5c: ab:fb:3e:a6:06:1f:04:d1:99:5a:a1:05:bf:f8:88:c9:57:53: 18:9b:8b:42:99:d8:dd:47:9d:de:86:de:57:22:33:eb:52:eb: 9c:a6:36:e0:9a:1b:86:87:ef:0f:7e:90:df:3a:86:f0:f0:11: 5c:ee:d3:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOuwHzQd9CDHET2x5sQpTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDkxODgzY2I0YzUwMTIyZmRiMjc1NGI2MjUyZmRkNmZj OWQ1MWYwHhcNMjUxMjI0MDUwMDM3WhcNMjUxMjI1MDUwMDM3WjAzMTEwLwYDVQQD EyhjYzVhMWI1YzEwYTBkZjI2NDY1NWMzZTg4MGM4MDU5NDVlY2FmZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKlRl+FdpKxQlVa8xcthHQTT9bT2 x5aDILHZdSWyELB6eeCg772qSPeCjFf74XqNCzwbXKf/AD23TlOriiYeTE9g4a9Y 0MhnIb20fzbA4nY0rQEgtsgARxZkZC1T7hvPP3AtMUwilvNXxyi2fgdIb6Qq7mvJ 1y54MlNDlcG+F192O3Av6S8VLaLFL2394mKhRziYorUDQK5ziWnd3YmI4aYTvdu2 GkGokGbytUcDK9RDnOPI+ct9BmxSRcsRomV0PwYInh1AH8P3sNEYxa3GXX6evCdw SA6QzRCyCT8fQMO1tmqCrpmtDuhdRM2uLHFfl9XGXZzaKYYY3rTV7M8GXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxaG1wQoN8mRlXD6IDIBZReyv5zMB8GA1UdIwQY MBaAFGZJGIPLTFASL9snVLYlL91vydUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEt NzVkNmJlNGU1YzM3LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEtNzVkNmJlNGU1YzM3 LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4YlJ9Lv lAyBA8Y0NOIsZO/aFygXxesh1YRP7r5sgdX/FaQi4q65yWmB0yszvCHrj6j1ayHD g5yvbAh0dHf2m1GMJXpjT6EpRf4Xl7JtQbI1ZspH2N9fqcxvtyVHaPl7cH52TrjT nwYnbVzfUQjLGLQVuVVLoWZ3f+uzE8sk8OQ4413YywQ1MyWy0sCZESb69cdPKb22 Ps6tIpiAi+ctvsKq9cwMNoYX1f49nBqYZ4SmTnooRMLqvAlIR/tFH/fNVcIT5/Vc q/s+pgYfBNGZWqEFv/iIyVdTGJuLQpnY3Ued3obeVyIz61LrnKY24JobhofvD36Q 3zqG8PARXO7TJQ== -----END CERTIFICATE-----Generated at Wed Dec 24 12:33:16 2025 by rpki-client