This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json) Hash identifier: RiPYPljwi+PdwSnyTxpRlO5Yzhr+KytpM1uVYIs/1k8= Subject key identifier: E0:F9:BD:E9:29:67:D1:57:E1:8E:9A:C6:0E:DC:C4:AC:CF:9E:77:0B Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3 Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3 Certificate serial: 019AAC4C0C91AC13A9C3E8D0A60C1380D7A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft Manifest number: 0775 Signing time: Sat 22 Nov 2025 16:00:56 +0000 Manifest this update: Sat 22 Nov 2025 16:00:56 +0000 Manifest next update: Sun 23 Nov 2025 16:00:56 +0000 Files and hashes: 1: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (hash: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=) 2: tkPBYkbqHBQBIn0BHV-X-SO1suM.roa (hash: UbAqMwZmfegZ1hqELkSkDP8x8h7o/IponAOjYN5W65Y=) 3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: nLgaEkmJELdBZP7S/07Dw6ZhbZfiUAG+zTzDHu2g9jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:4c:0c:91:ac:13:a9:c3:e8:d0:a6:0c:13:80:d7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3 Validity Not Before: Nov 22 16:00:56 2025 GMT Not After : Nov 23 16:00:56 2025 GMT Subject: CN=e0f9bde92967d157e18e9ac60edcc4accf9e770b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:e9:f1:f7:17:7d:d1:2d:47:37:7d:5e:33: 31:a9:75:cf:f9:7a:43:77:df:24:d8:ae:8b:d0:32: 64:4d:4e:d4:eb:ec:4b:63:8d:b2:ca:02:51:47:ab: 6b:82:1d:11:e2:58:b2:37:cb:99:ac:4a:74:f2:9a: 99:fe:fe:7b:84:9c:79:18:e4:c3:24:6d:84:36:f1: 91:08:cb:51:e2:38:cb:42:d9:5e:d0:31:91:16:c0: 4c:03:48:56:53:bc:06:04:64:bd:04:a2:47:2e:b6: 88:6c:51:27:e3:06:0b:a3:11:9e:39:81:7f:33:2d: dd:80:73:34:5b:05:bf:35:a8:8f:6e:4c:6a:97:5d: 0a:24:db:49:37:dd:c1:3a:1f:31:17:ad:c3:a6:fe: b1:85:b7:42:5c:06:ad:64:e1:5d:f8:b2:0c:cd:48: d5:52:ff:7b:39:a7:c2:16:39:fb:4c:c4:27:5c:58: 26:73:08:b8:81:82:f4:df:90:d3:3d:a2:94:f9:d1: a4:7f:34:76:65:44:3a:36:a2:a2:ba:b7:ba:c2:c0: 2b:3e:62:b3:29:80:0f:0e:31:b3:01:23:e3:18:88: af:e8:04:39:03:a2:b2:6b:24:45:68:18:76:6b:97: 08:2d:fa:8d:74:63:a2:c4:f7:6d:77:ee:3d:65:53: 8f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F9:BD:E9:29:67:D1:57:E1:8E:9A:C6:0E:DC:C4:AC:CF:9E:77:0B X509v3 Authority Key Identifier: keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:95:a9:3b:ce:e1:13:e5:1f:b9:96:1f:1f:0c:63:45:b5:12: a9:2c:60:63:ec:52:65:08:43:a3:e1:6b:7f:fc:aa:f9:c6:c2: 82:69:d0:82:34:1d:82:d0:ad:7e:bc:8c:6c:a9:a4:eb:f5:4d: 9e:f1:0d:c3:77:77:3e:1e:f1:d2:c8:36:0a:34:06:4e:f3:4a: ef:e8:cf:3f:a3:c3:83:1d:93:8e:d7:5d:f7:0a:8c:e6:41:18: a7:06:e9:ce:83:17:37:b9:10:15:8f:aa:14:f2:50:e1:c9:e5: 4f:38:1a:9a:2c:22:4c:1a:e6:3f:70:f4:9f:f0:4e:a0:91:be: bc:ce:54:a0:b8:a2:ac:c1:a3:7b:64:33:e8:88:8c:29:cb:83: cd:f9:ff:f9:c3:e7:bf:67:28:b7:7b:72:97:83:b6:53:7a:b2: 27:ad:43:79:80:c4:a0:0d:36:ae:f8:17:35:e9:9b:92:51:6a: de:c7:6c:de:ba:eb:b0:c0:50:6d:7d:6a:d2:13:0c:c4:f1:9f: 37:af:54:ca:3f:c7:22:ed:d8:e4:30:ba:45:2b:6a:3b:f8:d6: c0:62:ca:cc:1c:95:62:21:11:3b:9b:ad:e5:25:58:a8:1f:72: a6:c3:2d:40:75:3e:38:2e:e0:d2:fb:fe:ad:52:65:4d:5d:e3: 8b:ef:4d:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsTAyRrBOpw+jQpgwTgNenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZWZmZmMxNWE4M2EzOGJkZGE4Y2ZlMTIwYzMzNTI2N2Rj ZTUwZjMwHhcNMjUxMTIyMTYwMDU2WhcNMjUxMTIzMTYwMDU2WjAzMTEwLwYDVQQD EyhlMGY5YmRlOTI5NjdkMTU3ZTE4ZTlhYzYwZWRjYzRhY2NmOWU3NzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9fp8fcXfdEtRzd9XjMxqXXP+XpD d98k2K6L0DJkTU7U6+xLY42yygJRR6trgh0R4liyN8uZrEp08pqZ/v57hJx5GOTD JG2ENvGRCMtR4jjLQtle0DGRFsBMA0hWU7wGBGS9BKJHLraIbFEn4wYLoxGeOYF/ My3dgHM0WwW/NaiPbkxql10KJNtJN93BOh8xF63Dpv6xhbdCXAatZOFd+LIMzUjV Uv97OafCFjn7TMQnXFgmcwi4gYL035DTPaKU+dGkfzR2ZUQ6NqKiure6wsArPmKz KYAPDjGzASPjGIiv6AQ5A6KyayRFaBh2a5cILfqNdGOixPdtd+49ZVOP2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOD5vekpZ9FX4Y6axg7cxKzPnncLMB8GA1UdIwQY MBaAFMzv/8Fag6OL3ajP4SDDNSZ9zlDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTct NGJlYjVkZmYxNzAxLzEvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTctNGJlYjVkZmYxNzAx LzEvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJWpO87h E+UfuZYfHwxjRbUSqSxgY+xSZQhDo+Frf/yq+cbCgmnQgjQdgtCtfryMbKmk6/VN nvENw3d3Ph7x0sg2CjQGTvNK7+jPP6PDgx2Tjtdd9wqM5kEYpwbpzoMXN7kQFY+q FPJQ4cnlTzgamiwiTBrmP3D0n/BOoJG+vM5UoLiirMGje2Qz6IiMKcuDzfn/+cPn v2cot3tyl4O2U3qyJ61DeYDEoA02rvgXNembklFq3sds3rrrsMBQbX1q0hMMxPGf N69Uyj/HIu3Y5DC6RStqO/jWwGLKzByVYiERO5ut5SVYqB9ypsMtQHU+OC7g0vv+ rVJlTV3ji+9NQg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:45:28 2025 by rpki-client