This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft File: _zfWwfalxKkrv_2FxBQhJ_o-GjA.mft (raw, json) Hash identifier: yuuiASdWSDI0cOMWMLUyvmjpjk1cJf58KoOWrNpigJ0= Subject key identifier: 86:D2:73:0B:6C:86:D1:85:13:B7:EB:61:5D:D6:13:99:8F:3E:2C:1B Authority key identifier: FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30 Certificate issuer: /CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30 Certificate serial: 019B10147F3A6BEE8DD7C2B9907D797DEFA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 01:02:17 +0000 Manifest this update: Fri 12 Dec 2025 01:02:17 +0000 Manifest next update: Sat 13 Dec 2025 01:02:17 +0000 Files and hashes: 1: 95UilOURLat0lc9QoS7Ws8cK2EA.roa (hash: IqAjP92yfLol/XET3CMcHwom9MrBLP/CZ4kPceWSYnk=) 2: _zfWwfalxKkrv_2FxBQhJ_o-GjA.crl (hash: R5TN5CBG9wxM6igwWWcAecrAeNpMrzKwbeVjwiwZATQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:7f:3a:6b:ee:8d:d7:c2:b9:90:7d:79:7d:ef:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30 Validity Not Before: Dec 12 01:02:17 2025 GMT Not After : Dec 13 01:02:17 2025 GMT Subject: CN=86d2730b6c86d18513b7eb615dd613998f3e2c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:13:e6:bb:55:6c:e0:a6:4f:fa:a7:1a:5e:f2: 12:60:f3:43:77:db:b8:3a:c0:af:14:73:e9:1d:2b: df:b0:46:74:a2:cb:1e:d3:6a:9c:e7:06:4b:70:3d: 23:56:b3:d1:98:cd:b3:c6:92:1a:05:1e:07:27:26: ba:3e:5e:29:9f:ee:e4:16:f6:ad:57:0c:8c:3f:e9: 4b:c2:88:f4:2b:e7:ca:3e:ce:85:2c:55:02:bb:a3: e7:66:8d:ee:5d:5b:36:ed:98:89:6f:96:3d:b5:b6: 51:b3:bd:17:85:f4:e5:da:38:ca:57:2e:4b:9b:fb: 51:b8:f0:61:24:0e:d2:09:f3:6b:6e:1c:f4:fb:e8: 05:f9:9b:ce:05:cb:6c:ae:cd:2e:5b:6a:04:91:5b: 11:b1:13:26:06:b1:d9:ac:00:9a:9e:99:3f:83:69: 71:27:25:16:8d:04:e6:94:75:52:03:b1:8d:62:0d: 81:54:f1:29:5c:48:de:80:e5:f9:55:86:4e:88:92: ec:6a:d3:1d:f4:05:f5:12:db:4c:46:17:92:a5:66: 69:e6:d3:e0:70:8c:7e:85:11:d3:0b:5e:e6:87:1f: 01:8f:f2:b0:14:d1:c7:a0:1a:2b:59:53:6b:fc:32: 2c:b2:a5:24:b8:62:ea:3d:fe:87:f9:f0:15:a8:03: 77:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D2:73:0B:6C:86:D1:85:13:B7:EB:61:5D:D6:13:99:8F:3E:2C:1B X509v3 Authority Key Identifier: keyid:FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:02:60:39:58:b7:88:23:59:32:48:ef:d4:e1:ff:c3:85:56: c3:b5:42:a3:f5:50:43:0c:24:55:39:a1:37:07:16:89:f4:3e: 74:fe:0d:78:1e:4d:6d:c9:e6:11:8f:7c:8e:25:9e:bf:ed:19: 58:16:46:9e:7b:be:67:0b:4b:ab:12:85:5e:42:be:b0:a7:06: a6:18:90:95:1e:b6:27:41:de:dd:51:d3:4a:47:ce:6d:23:2c: 64:81:10:e1:cb:39:9e:7b:9a:f4:4d:54:19:43:25:40:98:27: a1:81:63:3a:8b:49:3f:2d:14:aa:aa:c2:57:84:b6:25:d2:86: a4:2a:f3:a5:75:4c:45:4c:39:a5:30:7a:80:ef:c3:7b:97:5b: 4f:b6:6c:61:51:84:f4:e9:52:a4:64:da:8f:bc:f6:5f:48:c4: e6:56:0b:ae:15:89:c3:03:8e:a3:fb:46:f3:6a:ef:e7:7a:8c: dd:00:b3:30:6c:56:0f:9b:b2:32:cb:4b:cf:ba:cd:99:c8:bd: 1d:26:d7:8e:40:2c:0a:d8:72:f7:da:9c:b4:e6:36:21:43:4b: 24:7a:f2:10:3a:8c:91:a5:71:b0:b5:4b:14:41:3a:ed:60:9a: 50:d3:51:9f:75:e8:68:1a:4d:ce:a9:b6:16:35:f6:e5:b6:8c: a3:bf:5b:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFH86a+6N18K5kH15fe+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzdkNmMxZjZhNWM0YTkyYmJmZmQ4NWM0MTQyMTI3ZmEz ZTFhMzAwHhcNMjUxMjEyMDEwMjE3WhcNMjUxMjEzMDEwMjE3WjAzMTEwLwYDVQQD Eyg4NmQyNzMwYjZjODZkMTg1MTNiN2ViNjE1ZGQ2MTM5OThmM2UyYzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xPmu1Vs4KZP+qcaXvISYPNDd9u4 OsCvFHPpHSvfsEZ0osse02qc5wZLcD0jVrPRmM2zxpIaBR4HJya6Pl4pn+7kFvat VwyMP+lLwoj0K+fKPs6FLFUCu6PnZo3uXVs27ZiJb5Y9tbZRs70XhfTl2jjKVy5L m/tRuPBhJA7SCfNrbhz0++gF+ZvOBctsrs0uW2oEkVsRsRMmBrHZrACanpk/g2lx JyUWjQTmlHVSA7GNYg2BVPEpXEjegOX5VYZOiJLsatMd9AX1EttMRheSpWZp5tPg cIx+hRHTC17mhx8Bj/KwFNHHoBorWVNr/DIssqUkuGLqPf6H+fAVqAN3qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbScwtshtGFE7frYV3WE5mPPiwbMB8GA1UdIwQY MBaAFP831sH2pcSpK7/9hcQUISf6PhowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pmV3dmYWx4S2tydl8yRnhCUWhKX28tR2pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84N2Q0M2MtZTBlZC00OGIzLWI0ZTMt MDVlZDg2NzM1MzA2LzEvX3pmV3dmYWx4S2tydl8yRnhCUWhKX28tR2pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84N2Q0M2MtZTBlZC00OGIzLWI0ZTMtMDVlZDg2NzM1MzA2 LzEvX3pmV3dmYWx4S2tydl8yRnhCUWhKX28tR2pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwJgOVi3 iCNZMkjv1OH/w4VWw7VCo/VQQwwkVTmhNwcWifQ+dP4NeB5NbcnmEY98jiWev+0Z WBZGnnu+ZwtLqxKFXkK+sKcGphiQlR62J0He3VHTSkfObSMsZIEQ4cs5nnua9E1U GUMlQJgnoYFjOotJPy0UqqrCV4S2JdKGpCrzpXVMRUw5pTB6gO/De5dbT7ZsYVGE 9OlSpGTaj7z2X0jE5lYLrhWJwwOOo/tG82rv53qM3QCzMGxWD5uyMstLz7rNmci9 HSbXjkAsCthy99qctOY2IUNLJHryEDqMkaVxsLVLFEE67WCaUNNRn3XoaBpNzqm2 FjX25baMo79b/w== -----END CERTIFICATE-----Generated at Fri Dec 12 03:21:19 2025 by rpki-client