This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft File: ziLdGXJbalnnnw_zl4mlZY5KX90.mft (raw, json) Hash identifier: DyDa9OwUwIHEl6CryK+Xpxnks4izEs/faOI+/zFisrk= Subject key identifier: 71:23:61:4B:92:5E:8C:85:A3:1B:B6:50:B9:29:05:A8:2C:26:ED:19 Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD Certificate issuer: /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd Certificate serial: 019B330CFCA0B30EB06A51E0FA06E63AF5D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 20:00:47 +0000 Manifest this update: Thu 18 Dec 2025 20:00:47 +0000 Manifest next update: Fri 19 Dec 2025 20:00:47 +0000 Files and hashes: 1: vCN5n7XgRlbJNVyUvtiVehd0W-c.roa (hash: doLyWpoVrhe1vhRGrAeN+5Um0tW+zvGku8pJrn/YoG0=) 2: ziLdGXJbalnnnw_zl4mlZY5KX90.crl (hash: Mvwv05lisHjWLHRJv6CCwb41mO0LaGtxlnB85qfvsHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:fc:a0:b3:0e:b0:6a:51:e0:fa:06:e6:3a:f5:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd Validity Not Before: Dec 18 20:00:47 2025 GMT Not After : Dec 19 20:00:47 2025 GMT Subject: CN=7123614b925e8c85a31bb650b92905a82c26ed19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:8d:5f:f6:99:32:02:2d:7c:fe:5f:be:4b: 03:dc:27:5a:d0:cc:92:60:82:b2:be:e1:85:9d:ee: a4:c4:92:66:10:2e:5f:93:34:7d:9b:58:08:0b:c4: b3:ec:e4:24:90:a6:82:f2:ca:44:96:b5:35:19:41: 16:2e:dc:f3:c3:a4:e3:33:b0:c9:fa:87:73:6f:1f: 4b:fb:db:cd:5f:2b:86:3f:04:83:30:8e:0b:5b:93: 84:64:c7:9a:58:63:d4:27:5c:66:24:e9:3d:f8:53: 43:e6:77:a2:6b:84:dc:ba:44:2d:3e:e1:33:f4:b9: bc:d0:6d:5f:15:b6:d3:53:d6:7c:32:29:5c:af:d0: 17:da:cf:38:1a:0c:ac:2e:41:9f:6d:d8:fe:5c:a1: f4:98:1b:33:76:06:d2:a4:97:f6:a6:10:34:ee:bf: f1:75:4d:1a:56:1c:eb:0c:db:c2:90:34:37:ef:c2: c1:f6:fc:59:cb:0c:f5:9b:b7:93:33:e9:e9:3c:57: ca:13:65:57:38:8f:33:3b:98:1a:60:cb:4e:93:86: 86:32:a6:e7:95:cb:bc:05:d0:d7:50:9d:13:1f:79: 89:3d:77:58:72:76:0a:f9:bd:95:75:aa:0b:e8:52: 60:2b:ae:76:61:85:70:a0:dc:72:d4:84:df:9c:7d: 9b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:23:61:4B:92:5E:8C:85:A3:1B:B6:50:B9:29:05:A8:2C:26:ED:19 X509v3 Authority Key Identifier: keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2d:bf:a5:a7:c2:b4:8d:05:5d:af:02:be:fc:10:f9:32:ed: dd:7a:76:8c:9b:51:ec:ae:1f:76:12:59:79:a9:3f:ce:c5:7d: 25:c2:72:f9:18:41:ff:62:cc:e1:7b:9f:c9:69:83:15:eb:a4: 7e:c6:4d:c6:cf:8e:d5:b4:b0:05:0f:60:f7:30:f7:3a:9e:ce: 9c:97:d8:69:60:db:27:c3:a1:e9:64:43:b0:db:5f:88:d0:47: 47:61:15:56:9e:2c:9e:db:64:52:be:d3:bd:e0:e4:a8:46:b8: 44:8a:eb:26:cf:18:ca:54:a1:e6:65:37:b9:0a:5b:d3:3d:b9: db:50:aa:68:25:80:54:e2:d7:99:4d:8c:c7:97:0b:d2:6c:4a: 01:03:7b:74:14:96:ed:46:6a:00:ce:9d:25:fc:67:28:5d:31: 0c:cd:03:10:74:8a:dd:e8:c1:3c:81:33:0e:75:41:e7:ea:9d: 5f:ed:aa:9e:39:e3:19:f3:d5:14:b7:40:d5:0e:9c:f2:48:bc: fc:ea:fe:89:1a:3d:60:dc:d1:86:77:4c:69:9d:40:43:90:40: d5:87:d2:d9:81:7b:84:da:7a:1c:2d:9a:db:30:19:02:a4:d1: d1:c4:9d:fb:b7:31:4a:b7:11:b8:18:ff:f2:43:48:dd:85:95: f2:3f:0e:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDPygsw6walHg+gbmOvXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMjJkZDE5NzI1YjZhNTllNzlmMGZmMzk3ODlhNTY1OGU0 YTVmZGQwHhcNMjUxMjE4MjAwMDQ3WhcNMjUxMjE5MjAwMDQ3WjAzMTEwLwYDVQQD Eyg3MTIzNjE0YjkyNWU4Yzg1YTMxYmI2NTBiOTI5MDVhODJjMjZlZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOqNX/aZMgItfP5fvksD3Cda0MyS YIKyvuGFne6kxJJmEC5fkzR9m1gIC8Sz7OQkkKaC8spElrU1GUEWLtzzw6TjM7DJ +odzbx9L+9vNXyuGPwSDMI4LW5OEZMeaWGPUJ1xmJOk9+FND5neia4TcukQtPuEz 9Lm80G1fFbbTU9Z8Milcr9AX2s84GgysLkGfbdj+XKH0mBszdgbSpJf2phA07r/x dU0aVhzrDNvCkDQ378LB9vxZywz1m7eTM+npPFfKE2VXOI8zO5gaYMtOk4aGMqbn lcu8BdDXUJ0TH3mJPXdYcnYK+b2VdaoL6FJgK652YYVwoNxy1ITfnH2bCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEjYUuSXoyFoxu2ULkpBagsJu0ZMB8GA1UdIwQY MBaAFM4i3RlyW2pZ558P85eJpWWOSl/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlMZEdYSmJhbG5ubndfemw0bWxaWTVLWDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jNzVmMTItOTdhNC00ZDllLTk5Nzgt YjE4MjI3NTVmNzEyLzEvemlMZEdYSmJhbG5ubndfemw0bWxaWTVLWDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jNzVmMTItOTdhNC00ZDllLTk5NzgtYjE4MjI3NTVmNzEy LzEvemlMZEdYSmJhbG5ubndfemw0bWxaWTVLWDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfi2/pafC tI0FXa8CvvwQ+TLt3Xp2jJtR7K4fdhJZeak/zsV9JcJy+RhB/2LM4XufyWmDFeuk fsZNxs+O1bSwBQ9g9zD3Op7OnJfYaWDbJ8Oh6WRDsNtfiNBHR2EVVp4snttkUr7T veDkqEa4RIrrJs8YylSh5mU3uQpb0z2521CqaCWAVOLXmU2Mx5cL0mxKAQN7dBSW 7UZqAM6dJfxnKF0xDM0DEHSK3ejBPIEzDnVB5+qdX+2qnjnjGfPVFLdA1Q6c8ki8 /Or+iRo9YNzRhndMaZ1AQ5BA1YfS2YF7hNp6HC2a2zAZAqTR0cSd+7cxSrcRuBj/ 8kNI3YWV8j8OGw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:54:44 2025 by rpki-client