This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft File: zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft (raw, json) Hash identifier: +csrJLRebu7ELS2BDY1ccr1wBOL3s+v6f//cSv3tUJU= Subject key identifier: AF:68:91:BB:8B:66:06:47:77:A1:45:26:F9:DC:8E:72:20:F0:C4:E4 Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52 Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52 Certificate serial: 019B378F3995F44E22157480988DD98999E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft Manifest number: 0F51 Signing time: Fri 19 Dec 2025 17:01:31 +0000 Manifest this update: Fri 19 Dec 2025 17:01:31 +0000 Manifest next update: Sat 20 Dec 2025 17:01:31 +0000 Files and hashes: 1: F8CkVi3Azk4IP8l0xbj9A7utWT4.roa (hash: E5Iv0quJqPnudHATWcToHknlwXYMpaxnHvHdqASmVUA=) 2: zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl (hash: Nt31v4ilnYUfi82jypdaEm5JQNQ5x5pD4bnYTSr8DWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:39:95:f4:4e:22:15:74:80:98:8d:d9:89:99:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52 Validity Not Before: Dec 19 17:01:31 2025 GMT Not After : Dec 20 17:01:31 2025 GMT Subject: CN=af6891bb8b66064777a14526f9dc8e7220f0c4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:23:c1:bc:2c:f3:f6:32:49:b6:d3:be:ea:79: 58:e8:e6:ce:ed:17:87:55:16:cf:bc:07:7e:52:4b: 1f:35:7d:29:69:4f:dd:d9:de:90:21:f5:84:e4:3d: 29:1d:3e:c3:3a:e9:9c:22:4f:a3:11:69:04:f2:89: b6:c8:b6:41:0f:34:4a:82:af:98:eb:15:e9:c4:42: a0:e7:8f:1e:47:68:1c:ed:e7:56:37:db:f2:5a:de: b6:77:6c:ca:b9:c1:6f:38:ad:a6:a9:8d:8b:69:5f: 81:d1:69:3e:cc:90:3a:d7:26:9a:6b:40:42:db:7b: 28:24:f7:5b:22:ca:a6:62:27:69:53:07:a8:cb:91: fb:b5:c8:c0:42:4d:d5:f8:70:89:cd:08:12:ae:e1: c3:ea:c2:85:97:6f:35:5e:ef:ba:10:cf:f0:89:73: 10:5b:6c:44:51:b4:cd:c2:09:b1:ca:5a:ce:f4:9d: ad:26:73:b4:97:f5:2d:c8:3c:62:e7:28:62:81:36: 1d:51:af:dc:f8:c0:59:95:e8:60:bb:a8:4d:cc:a1: 25:85:80:29:b4:b0:5c:7e:b1:aa:59:0c:43:23:ca: d6:bf:79:ad:5f:db:cb:3f:12:b0:30:c0:13:9a:06: 1e:6c:8b:ba:82:ae:ee:94:9a:43:86:30:03:eb:ee: 81:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:68:91:BB:8B:66:06:47:77:A1:45:26:F9:DC:8E:72:20:F0:C4:E4 X509v3 Authority Key Identifier: keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:14:67:e7:e9:41:0c:ec:f8:62:53:fd:c3:89:67:ee:bf:75: b1:62:a1:f8:63:29:de:2b:31:75:5e:50:4a:55:c4:44:2a:93: 78:a0:2c:8e:b4:cd:0f:5c:f4:1d:67:95:fe:95:59:66:5d:de: 13:71:bd:eb:50:93:38:19:7d:bc:f9:d4:72:9c:fa:9c:32:d4: 1c:32:98:31:ac:89:99:7b:30:2b:c9:52:d8:1e:83:e6:26:cc: 62:37:5d:4f:f8:ca:42:5a:7e:1d:8a:87:16:06:b2:23:f6:db: a5:b3:cf:56:83:3d:97:a1:3e:d5:a8:a8:cd:f0:3b:b6:34:18: bb:76:2c:5b:69:97:1e:62:4e:90:6e:48:35:ef:77:6c:63:72: 06:93:9c:a0:6e:9f:af:47:34:5a:a8:6f:ae:e0:1e:12:92:01: 6b:c3:5c:ae:c4:ab:40:ff:47:e2:f4:5b:25:68:70:10:fc:50: a7:e7:93:3a:d0:1c:2b:0b:27:28:ad:8e:ea:cb:c0:be:35:af: a0:4f:0b:ae:8c:b1:2f:94:62:37:c8:31:dc:f5:49:81:e0:7c: a7:fe:49:95:4f:3c:6b:be:bc:35:19:b3:07:ea:40:0d:04:d1: f9:ee:eb:b4:67:73:6b:2f:8a:78:00:49:ef:1b:45:40:ed:b7: 1a:00:e1:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jzmV9E4iFXSAmI3ZiZnkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZTU3ZGM4MjM0ZGY1ZjU5ZDY3ZmRjNjg1NmJiMjYyZTcx OTNmNTIwHhcNMjUxMjE5MTcwMTMxWhcNMjUxMjIwMTcwMTMxWjAzMTEwLwYDVQQD EyhhZjY4OTFiYjhiNjYwNjQ3NzdhMTQ1MjZmOWRjOGU3MjIwZjBjNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yPBvCzz9jJJttO+6nlY6ObO7ReH VRbPvAd+UksfNX0paU/d2d6QIfWE5D0pHT7DOumcIk+jEWkE8om2yLZBDzRKgq+Y 6xXpxEKg548eR2gc7edWN9vyWt62d2zKucFvOK2mqY2LaV+B0Wk+zJA61yaaa0BC 23soJPdbIsqmYidpUweoy5H7tcjAQk3V+HCJzQgSruHD6sKFl281Xu+6EM/wiXMQ W2xEUbTNwgmxylrO9J2tJnO0l/UtyDxi5yhigTYdUa/c+MBZlehgu6hNzKElhYAp tLBcfrGqWQxDI8rWv3mtX9vLPxKwMMATmgYebIu6gq7ulJpDhjAD6+6B6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9okbuLZgZHd6FFJvncjnIg8MTkMB8GA1UdIwQY MBaAFMzlfcgjTfX1nWf9xoVrsmLnGT9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8zNGFjZjQtNzQ3Zi00NWZlLTgxMjkt NDAyZjFmYjg0OGNmLzEvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8zNGFjZjQtNzQ3Zi00NWZlLTgxMjktNDAyZjFmYjg0OGNm LzEvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihRn5+lB DOz4YlP9w4ln7r91sWKh+GMp3isxdV5QSlXERCqTeKAsjrTND1z0HWeV/pVZZl3e E3G961CTOBl9vPnUcpz6nDLUHDKYMayJmXswK8lS2B6D5ibMYjddT/jKQlp+HYqH FgayI/bbpbPPVoM9l6E+1aiozfA7tjQYu3YsW2mXHmJOkG5INe93bGNyBpOcoG6f r0c0WqhvruAeEpIBa8NcrsSrQP9H4vRbJWhwEPxQp+eTOtAcKwsnKK2O6svAvjWv oE8LroyxL5RiN8gx3PVJgeB8p/5JlU88a768NRmzB+pADQTR+e7rtGdzay+KeABJ 7xtFQO23GgDhng== -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:01 2025 by rpki-client