This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft File: _zfWwfalxKkrv_2FxBQhJ_o-GjA.mft (raw, json) Hash identifier: 4uqp/iXWnRbIOmle60LaV4/ko4kzexI4XKL4r6pAAGI= Subject key identifier: A6:FA:FE:96:7E:7E:54:B5:55:5F:B1:25:84:D4:6D:85:C0:54:DC:AF Authority key identifier: FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30 Certificate issuer: /CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30 Certificate serial: 019B4814D9E3DE37F46D1192A76415E8FD77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft Manifest number: 1790 Signing time: Mon 22 Dec 2025 22:01:24 +0000 Manifest this update: Mon 22 Dec 2025 22:01:24 +0000 Manifest next update: Tue 23 Dec 2025 22:01:24 +0000 Files and hashes: 1: 95UilOURLat0lc9QoS7Ws8cK2EA.roa (hash: IqAjP92yfLol/XET3CMcHwom9MrBLP/CZ4kPceWSYnk=) 2: _zfWwfalxKkrv_2FxBQhJ_o-GjA.crl (hash: jSuv57ea/9AwsBENNG98cNEQ8eEhAaZnFuAAwnpPpJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:d9:e3:de:37:f4:6d:11:92:a7:64:15:e8:fd:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30 Validity Not Before: Dec 22 22:01:24 2025 GMT Not After : Dec 23 22:01:24 2025 GMT Subject: CN=a6fafe967e7e54b5555fb12584d46d85c054dcaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:d2:23:c6:f4:90:f6:a8:5b:24:61:2d:bb: ea:8e:b9:b4:38:bc:69:28:c6:0f:ae:e8:2a:7a:78: e0:3f:a3:21:d3:ab:02:75:23:16:6e:a8:ca:a4:8a: 01:1f:46:a0:78:1c:2c:16:79:3a:6a:ea:cd:ac:c6: c8:19:46:1c:15:54:a3:d8:dc:bd:69:bb:ea:31:34: 38:da:10:45:b5:ae:a6:41:38:f3:ba:00:f6:50:d2: 21:a3:f0:12:4d:62:f9:99:ce:29:4b:ad:91:11:b6: ad:7f:84:72:13:bc:34:1d:d1:50:cb:c4:d6:90:3a: e4:91:0a:61:6e:ce:ed:b8:31:92:5a:15:b0:4c:7b: 2e:07:dd:30:4d:54:8a:1b:3f:34:77:87:30:ae:05: ad:dd:bf:be:f5:f3:5b:e2:c1:92:80:12:92:c2:86: a9:8e:d9:a8:6f:7d:31:b6:1f:ab:e6:0f:22:b0:e9: 40:36:22:6b:6d:f4:d2:28:88:26:6b:41:96:41:d3: 12:58:cd:75:4c:84:3b:1a:bb:4a:39:8c:8e:08:a6: f1:4a:59:c8:10:12:59:08:f4:16:1d:2c:35:b2:8c: d6:57:20:b3:8f:e2:64:52:7a:d3:fb:08:7a:1c:71: 02:38:ed:f0:e5:23:58:ad:f7:ff:32:c4:c4:53:38: 3d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FA:FE:96:7E:7E:54:B5:55:5F:B1:25:84:D4:6D:85:C0:54:DC:AF X509v3 Authority Key Identifier: keyid:FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:9a:02:84:07:f1:43:f8:23:f7:3d:af:51:e0:99:23:50:fb: 1f:17:41:b9:bf:d6:e9:2e:a6:83:fc:b6:1f:14:0e:ab:20:bf: 70:54:3d:e4:81:41:e9:76:7e:d1:6d:3a:3b:cc:bc:4b:c5:91: 76:66:68:d9:78:2c:b2:6f:96:4e:1f:d2:70:98:ef:05:26:06: cd:60:be:5e:2e:fa:7a:4a:bf:a6:d5:33:53:2e:cc:6e:e8:39: 67:ce:ed:f7:1b:9f:0c:57:13:23:25:ae:dc:cc:6c:0f:75:f2: 8f:7b:e3:de:c7:ff:b3:7c:c8:21:4b:93:48:b1:b1:e2:02:4a: 70:5b:d3:f0:d7:bb:c9:db:a7:dc:dd:9e:66:9e:d4:07:52:d1: 7c:24:6b:f4:67:9b:6e:d1:d3:51:51:5b:e5:57:1a:24:10:65: 29:40:97:de:61:d2:ca:c8:4b:1f:e3:8d:b5:20:ad:11:5d:90: 2c:c5:fe:94:4e:a5:88:d0:ae:5f:ca:d4:b0:7b:4e:54:7f:46: 8a:d5:15:b7:cd:60:22:71:80:d4:e4:77:1e:91:35:ce:b2:11: c0:b9:6c:b1:ce:6b:86:80:14:25:3c:67:65:ba:ac:cb:b7:57: 1d:73:9d:36:33:d7:d2:15:98:ed:bb:b5:fe:3a:df:55:b9:3d: 88:e7:d8:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFNnj3jf0bRGSp2QV6P13MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzdkNmMxZjZhNWM0YTkyYmJmZmQ4NWM0MTQyMTI3ZmEz ZTFhMzAwHhcNMjUxMjIyMjIwMTI0WhcNMjUxMjIzMjIwMTI0WjAzMTEwLwYDVQQD EyhhNmZhZmU5NjdlN2U1NGI1NTU1ZmIxMjU4NGQ0NmQ4NWMwNTRkY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+nSI8b0kPaoWyRhLbvqjrm0OLxp KMYPrugqenjgP6Mh06sCdSMWbqjKpIoBH0ageBwsFnk6aurNrMbIGUYcFVSj2Ny9 abvqMTQ42hBFta6mQTjzugD2UNIho/ASTWL5mc4pS62REbatf4RyE7w0HdFQy8TW kDrkkQphbs7tuDGSWhWwTHsuB90wTVSKGz80d4cwrgWt3b++9fNb4sGSgBKSwoap jtmob30xth+r5g8isOlANiJrbfTSKIgma0GWQdMSWM11TIQ7GrtKOYyOCKbxSlnI EBJZCPQWHSw1sozWVyCzj+JkUnrT+wh6HHECOO3w5SNYrff/MsTEUzg9SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKb6/pZ+flS1VV+xJYTUbYXAVNyvMB8GA1UdIwQY MBaAFP831sH2pcSpK7/9hcQUISf6PhowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pmV3dmYWx4S2tydl8yRnhCUWhKX28tR2pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84N2Q0M2MtZTBlZC00OGIzLWI0ZTMt MDVlZDg2NzM1MzA2LzEvX3pmV3dmYWx4S2tydl8yRnhCUWhKX28tR2pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84N2Q0M2MtZTBlZC00OGIzLWI0ZTMtMDVlZDg2NzM1MzA2 LzEvX3pmV3dmYWx4S2tydl8yRnhCUWhKX28tR2pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5oChAfx Q/gj9z2vUeCZI1D7HxdBub/W6S6mg/y2HxQOqyC/cFQ95IFB6XZ+0W06O8y8S8WR dmZo2Xgssm+WTh/ScJjvBSYGzWC+Xi76ekq/ptUzUy7Mbug5Z87t9xufDFcTIyWu 3MxsD3Xyj3vj3sf/s3zIIUuTSLGx4gJKcFvT8Ne7ydun3N2eZp7UB1LRfCRr9Geb btHTUVFb5VcaJBBlKUCX3mHSyshLH+ONtSCtEV2QLMX+lE6liNCuX8rUsHtOVH9G itUVt81gInGA1OR3HpE1zrIRwLlssc5rhoAUJTxnZbqsy7dXHXOdNjPX0hWY7bu1 /jrfVbk9iOfYBQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:46:10 2025 by rpki-client