This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft File: zT5kktRzFSDB7tvNopZ5UArAg6s.mft (raw, json) Hash identifier: lDmfyco2QsTIOcE7QoYpgHnqCChKUyZaKLeUOabSA34= Subject key identifier: 1C:F6:86:F6:57:11:8D:33:E1:41:1E:37:1C:8D:58:4D:A9:3F:89:75 Authority key identifier: CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB Certificate issuer: /CN=cd3e6492d4731520c1eedbcda29679500ac083ab Certificate serial: 019B5A88B822BC35EA54D2337019BF4BE954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft Manifest number: 0665 Signing time: Fri 26 Dec 2025 12:01:07 +0000 Manifest this update: Fri 26 Dec 2025 12:01:07 +0000 Manifest next update: Sat 27 Dec 2025 12:01:07 +0000 Files and hashes: 1: COOSirhVHTLVRSIt4NAQH8L8vr4.roa (hash: tu1lQ0uqkhi4vcEmV6leM3hmh+odZkH5lyLz+npAcNE=) 2: zT5kktRzFSDB7tvNopZ5UArAg6s.crl (hash: 12j8MQRGNeYUSIqsSC3aUbYswkOch1nz8cm7gWAV2zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:b8:22:bc:35:ea:54:d2:33:70:19:bf:4b:e9:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd3e6492d4731520c1eedbcda29679500ac083ab Validity Not Before: Dec 26 12:01:07 2025 GMT Not After : Dec 27 12:01:07 2025 GMT Subject: CN=1cf686f657118d33e1411e371c8d584da93f8975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:3b:8f:eb:2a:a6:10:10:67:0f:92:f0:7c: 69:f8:50:db:e2:79:cf:2c:38:c6:51:0e:29:c7:af: b9:d8:3d:a3:cb:58:d0:23:3e:79:36:d9:c3:a7:17: 5c:b1:8f:23:18:d9:9c:6f:4e:92:14:ba:fb:21:dd: 5e:3c:06:7c:c0:63:99:9b:b8:87:97:21:dd:1c:11: 0b:03:95:f9:c0:d9:62:cf:44:92:8c:58:4f:24:4b: 95:31:21:39:54:ca:fc:ae:63:77:73:a4:45:7d:68: 00:26:1d:73:49:86:a9:14:1e:80:28:a3:5a:39:bd: 0d:33:bb:8a:d0:58:54:59:0d:43:e4:8c:1b:cb:28: 20:60:60:27:f6:5d:c3:05:f0:8c:6b:46:fa:7d:1a: 21:a7:cc:ad:ca:80:81:4a:fb:dd:21:71:16:bc:11: 2c:59:b1:09:fd:9f:d2:5f:52:27:67:3c:ab:20:89: 22:e2:78:bc:2b:2b:ae:00:78:06:c6:ff:e4:01:a5: 34:a3:05:23:9a:17:6f:b5:5c:85:c0:e0:75:32:0b: bd:ff:34:3c:95:41:29:db:0d:fe:ca:dc:87:0f:52: 8d:16:b5:21:29:c0:2c:ea:0e:6a:ad:09:27:17:09: 1b:2e:0a:7e:3a:6c:73:d7:4a:a3:52:26:03:49:b7: fc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F6:86:F6:57:11:8D:33:E1:41:1E:37:1C:8D:58:4D:A9:3F:89:75 X509v3 Authority Key Identifier: keyid:CD:3E:64:92:D4:73:15:20:C1:EE:DB:CD:A2:96:79:50:0A:C0:83:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT5kktRzFSDB7tvNopZ5UArAg6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a1274-03ac-494d-ba8e-cfcffa3c0665/1/zT5kktRzFSDB7tvNopZ5UArAg6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:9c:a5:29:1e:b1:10:37:a3:ce:d0:49:9b:17:01:dc:3a:68: 50:97:86:76:ec:31:54:0c:15:c4:51:fd:60:b2:94:f9:d3:bc: cf:2f:6f:97:95:f8:0d:8f:a3:80:73:ba:9d:fa:1b:84:31:c9: f3:2f:c0:6d:52:0d:71:56:4f:b4:fa:bb:49:60:9e:5c:ff:ee: 48:c1:25:c0:44:02:4c:17:6f:00:9f:b6:bd:0d:03:ab:c8:a9: 1e:23:e1:e4:4f:a5:84:73:44:0e:bc:9e:81:aa:22:9b:61:86: 36:30:7e:b7:32:92:2a:4c:d7:a5:f5:cc:69:f5:bf:0b:f4:bd: 66:a1:60:ec:38:1d:26:52:9c:af:a4:e6:15:e2:b1:ec:da:f6: 40:be:b0:4e:95:f1:f8:7a:61:a6:79:bf:99:27:97:dd:36:d0: 23:68:22:6c:39:32:f1:59:21:5f:2e:3a:9b:df:fc:ff:ba:1b: 9b:a5:7b:75:ba:10:48:4d:8f:3a:21:93:72:10:06:78:df:4b: 09:1e:34:31:07:31:aa:59:dc:75:6a:de:17:27:95:87:de:5a: 64:7e:10:01:21:23:77:67:c9:08:86:1b:e0:14:81:b5:eb:3c: c5:41:4d:ca:47:b9:14:25:10:f6:20:7e:e7:a3:9f:85:3a:74: 25:2b:3a:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiLgivDXqVNIzcBm/S+lUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkM2U2NDkyZDQ3MzE1MjBjMWVlZGJjZGEyOTY3OTUwMGFj MDgzYWIwHhcNMjUxMjI2MTIwMTA3WhcNMjUxMjI3MTIwMTA3WjAzMTEwLwYDVQQD EygxY2Y2ODZmNjU3MTE4ZDMzZTE0MTFlMzcxYzhkNTg0ZGE5M2Y4OTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5c7j+sqphAQZw+S8Hxp+FDb4nnP LDjGUQ4px6+52D2jy1jQIz55NtnDpxdcsY8jGNmcb06SFLr7Id1ePAZ8wGOZm7iH lyHdHBELA5X5wNliz0SSjFhPJEuVMSE5VMr8rmN3c6RFfWgAJh1zSYapFB6AKKNa Ob0NM7uK0FhUWQ1D5IwbyyggYGAn9l3DBfCMa0b6fRohp8ytyoCBSvvdIXEWvBEs WbEJ/Z/SX1InZzyrIIki4ni8KyuuAHgGxv/kAaU0owUjmhdvtVyFwOB1Mgu9/zQ8 lUEp2w3+ytyHD1KNFrUhKcAs6g5qrQknFwkbLgp+Omxz10qjUiYDSbf8xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBz2hvZXEY0z4UEeNxyNWE2pP4l1MB8GA1UdIwQY MBaAFM0+ZJLUcxUgwe7bzaKWeVAKwIOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelQ1a2t0UnpGU0RCN3R2Tm9wWjVVQXJBZzZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YTEyNzQtMDNhYy00OTRkLWJhOGUt Y2ZjZmZhM2MwNjY1LzEvelQ1a2t0UnpGU0RCN3R2Tm9wWjVVQXJBZzZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83YTEyNzQtMDNhYy00OTRkLWJhOGUtY2ZjZmZhM2MwNjY1 LzEvelQ1a2t0UnpGU0RCN3R2Tm9wWjVVQXJBZzZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpylKR6x EDejztBJmxcB3DpoUJeGduwxVAwVxFH9YLKU+dO8zy9vl5X4DY+jgHO6nfobhDHJ 8y/AbVINcVZPtPq7SWCeXP/uSMElwEQCTBdvAJ+2vQ0Dq8ipHiPh5E+lhHNEDrye gaoim2GGNjB+tzKSKkzXpfXMafW/C/S9ZqFg7DgdJlKcr6TmFeKx7Nr2QL6wTpXx +Hphpnm/mSeX3TbQI2gibDky8VkhXy46m9/8/7obm6V7dboQSE2POiGTchAGeN9L CR40MQcxqlncdWreFyeVh95aZH4QASEjd2fJCIYb4BSBtes8xUFNyke5FCUQ9iB+ 56OfhTp0JSs6SQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:38 2025 by rpki-client