This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft File: zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json) Hash identifier: ozA6BMUaanWPtTlzzLBg64PgQ2I0l7O8Ixc54G16BGg= Subject key identifier: AA:36:49:37:31:ED:63:EC:8A:23:8D:DB:0F:E7:78:1B:0D:0E:E6:F3 Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B Certificate issuer: /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b Certificate serial: 019B3456514B7451354306B635D38AB792DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 02:00:30 +0000 Manifest this update: Fri 19 Dec 2025 02:00:30 +0000 Manifest next update: Sat 20 Dec 2025 02:00:30 +0000 Files and hashes: 1: 3UV0tf4TpPvOJSDiaLYyYXtXVvM.roa (hash: 91M1HXlX3TdwneLYlb0DmYCeKKtHfStsh7Dj5kd2gPQ=) 2: hTVB9eVU8NNiy6MIVDn_GhyE-TY.roa (hash: d7gEsYm91j6b+k2E5nN8wQQW4TMiwqo8rZZMnn76l+U=) 3: lmY3OHV06iQ2okHJC_xew_5c0LY.roa (hash: VAAXf3sc2kIcjjslDb0B8KOFlo5MNyl0zFRFKzuk/g0=) 4: r_1BD4QIwyD4kFSgnJUFtmINdFo.roa (hash: analV2m8+Aw9Y/v6KpT1JDqGOt2ZN0tCbqPYX5Hv+/c=) 5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: SnJMgkyoXZW9U2BCBCp0HLyJB3Yxfa7nmMTkDgmS5G8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:51:4b:74:51:35:43:06:b6:35:d3:8a:b7:92:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b Validity Not Before: Dec 19 02:00:30 2025 GMT Not After : Dec 20 02:00:30 2025 GMT Subject: CN=aa36493731ed63ec8a238ddb0fe7781b0d0ee6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5f:44:27:0b:59:d4:18:e4:a5:7d:45:ec:2f: e7:91:75:bb:0c:3d:c6:0a:e4:01:ef:86:93:d7:08: 0f:d1:7c:ae:5b:90:17:d4:a3:a8:6a:b0:b0:29:db: 83:eb:76:a4:bc:0c:2f:d5:f7:48:5b:2a:fd:4c:2f: 67:12:79:2b:d1:d4:66:21:b7:23:ed:90:42:ef:02: 7c:c1:76:73:2e:0e:a9:fd:e9:e4:05:b6:ba:d9:18: 3c:51:da:21:55:72:cb:72:9d:5e:d4:d6:22:a8:02: 2d:80:96:05:01:6f:3b:9d:4b:0f:fb:0b:74:19:fe: 4d:52:66:a8:d5:ed:52:de:fc:7a:b2:51:0a:90:88: 86:aa:e5:44:9e:b1:57:fb:4d:36:07:b8:85:59:f4: 16:9d:23:f8:07:7a:11:13:44:25:c3:b0:bb:a4:05: 2e:33:41:41:57:44:90:64:75:ce:9b:95:f8:c1:a4: ee:50:d4:cf:cd:2f:e0:c7:4b:be:08:75:da:8c:d4: f6:78:59:28:9e:30:59:fe:f9:59:26:14:46:6f:8e: 2a:86:b7:d7:e7:ee:ba:4b:11:a3:29:8c:1d:b5:d6: db:ea:13:ee:be:f5:16:cc:60:2d:7c:40:ad:e4:9d: 5e:db:0a:d8:66:15:19:d3:1d:3e:79:87:11:62:2a: 30:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:36:49:37:31:ED:63:EC:8A:23:8D:DB:0F:E7:78:1B:0D:0E:E6:F3 X509v3 Authority Key Identifier: keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:36:c9:76:c8:cf:4c:c0:5f:50:bb:ac:a1:86:55:3c:7b:b8: 92:09:82:86:d7:55:27:b2:c4:25:57:59:d9:8f:32:32:c7:be: 95:ec:3f:5e:d7:e0:57:e2:b7:fc:75:9d:80:0c:9f:3a:3e:fb: 8f:5a:c9:be:19:ba:94:9f:66:18:e3:74:40:b9:c3:28:cd:02: 48:aa:39:7c:a8:18:ef:9b:5a:d1:99:ac:fd:6b:4d:7b:a1:5a: fc:2f:d5:35:64:9d:22:67:c9:1f:60:86:ee:85:74:6c:ee:43: e3:08:06:8c:97:a6:18:52:45:a2:fb:51:75:3e:2d:a4:ca:ac: 4e:27:9a:49:39:3d:99:68:04:f8:7e:c1:b5:b8:d7:7e:c9:ef: bd:6f:b8:e5:ab:87:41:4a:79:bd:bb:76:76:a5:b2:44:cd:b2: 0c:43:1d:b8:f0:c1:85:fa:69:62:5e:00:28:d0:89:49:5b:f6: 9f:aa:17:a1:d4:f3:a6:a3:1c:1d:b2:67:88:9f:c8:0c:f0:25: 64:61:59:a1:d2:5e:f3:12:14:50:54:63:af:02:71:24:19:91: 47:21:5f:28:11:99:97:05:36:ce:d0:07:40:74:a3:6b:88:fb: 0c:fe:b1:a0:0a:cd:9c:63:e1:82:4d:a5:a1:39:1c:bb:4a:09: b1:94:f4:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VlFLdFE1Qwa2NdOKt5LaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzNiMzQ3YTIxNmJjNDM3YjBiZDRjZjBiYzhjZGE2NWU4 YzJkM2IwHhcNMjUxMjE5MDIwMDMwWhcNMjUxMjIwMDIwMDMwWjAzMTEwLwYDVQQD EyhhYTM2NDkzNzMxZWQ2M2VjOGEyMzhkZGIwZmU3NzgxYjBkMGVlNmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl9EJwtZ1BjkpX1F7C/nkXW7DD3G CuQB74aT1wgP0XyuW5AX1KOoarCwKduD63akvAwv1fdIWyr9TC9nEnkr0dRmIbcj 7ZBC7wJ8wXZzLg6p/enkBba62Rg8UdohVXLLcp1e1NYiqAItgJYFAW87nUsP+wt0 Gf5NUmao1e1S3vx6slEKkIiGquVEnrFX+002B7iFWfQWnSP4B3oRE0Qlw7C7pAUu M0FBV0SQZHXOm5X4waTuUNTPzS/gx0u+CHXajNT2eFkonjBZ/vlZJhRGb44qhrfX 5+66SxGjKYwdtdbb6hPuvvUWzGAtfECt5J1e2wrYZhUZ0x0+eYcRYiowRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKo2STcx7WPsiiON2w/neBsNDubzMB8GA1UdIwQY MBaAFM7Ds0eiFrxDewvUzwvIzaZejC07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYt MTU1ZmIzZmUyODdlLzEvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYtMTU1ZmIzZmUyODdl LzEvenNPelI2SVd2RU43QzlUUEM4ak5wbDZNTFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDbJdsjP TMBfULusoYZVPHu4kgmChtdVJ7LEJVdZ2Y8yMse+lew/XtfgV+K3/HWdgAyfOj77 j1rJvhm6lJ9mGON0QLnDKM0CSKo5fKgY75ta0Zms/WtNe6Fa/C/VNWSdImfJH2CG 7oV0bO5D4wgGjJemGFJFovtRdT4tpMqsTieaSTk9mWgE+H7BtbjXfsnvvW+45auH QUp5vbt2dqWyRM2yDEMduPDBhfppYl4AKNCJSVv2n6oXodTzpqMcHbJniJ/IDPAl ZGFZodJe8xIUUFRjrwJxJBmRRyFfKBGZlwU2ztAHQHSja4j7DP6xoArNnGPhgk2l oTkcu0oJsZT0Jw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:57:55 2025 by rpki-client