This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json) Hash identifier: uxqh1jh6wCL4aaXg3TF1FUnX1tMUDWXN6KL7lnl5QLA= Subject key identifier: 58:56:89:CF:F1:C5:D2:89:DB:B1:96:10:83:4E:0C:D4:67:B6:F4:AF Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2 Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2 Certificate serial: 019B42B74A54C266D572E20BDF6B26CD0E51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft Manifest number: 1452 Signing time: Sun 21 Dec 2025 21:01:06 +0000 Manifest this update: Sun 21 Dec 2025 21:01:06 +0000 Manifest next update: Mon 22 Dec 2025 21:01:06 +0000 Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=) 2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=) 3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: O/nB0ut+dOOR9tfSQcEmpopCfHsQIDm9PcWLoPx9EVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:4a:54:c2:66:d5:72:e2:0b:df:6b:26:cd:0e:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2 Validity Not Before: Dec 21 21:01:06 2025 GMT Not After : Dec 22 21:01:06 2025 GMT Subject: CN=585689cff1c5d289dbb19610834e0cd467b6f4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:b6:37:b1:15:e3:79:ea:9c:21:d3:96:2c: 95:b9:47:d5:f8:4d:58:c9:ed:1e:5d:24:22:60:e0: 25:12:da:fb:d3:58:b1:e0:a5:89:46:a5:59:e9:97: 58:b0:ba:2c:08:ba:0e:48:c2:6c:bf:47:b3:62:62: 19:83:63:20:ea:6f:75:58:0f:b9:b9:85:b3:28:ce: f7:6c:63:ba:52:2a:85:fa:c3:15:7a:56:44:20:c8: 80:bb:59:69:d5:cf:64:d9:c6:0f:03:4b:e9:c9:6b: e3:5a:69:2c:49:46:b9:e0:d9:87:67:55:2a:fb:76: aa:e5:f1:fe:cd:8c:3a:01:75:58:45:18:76:b4:91: ea:87:aa:05:50:24:7b:e4:25:31:ea:57:66:a5:d9: 4c:84:1c:91:0e:8f:c7:c8:63:6a:d8:a1:ff:c2:57: 83:22:e4:ba:2b:d2:7e:40:3d:67:54:76:f7:ef:cc: aa:e4:31:21:0d:04:f4:7e:4a:e9:56:08:20:d0:bc: cd:0d:50:67:38:17:4f:c4:5f:5e:5a:8f:55:99:27: ac:95:58:e1:bd:aa:e8:56:a8:eb:be:f4:6a:00:3f: a3:5b:20:0b:08:a2:3f:ca:98:dd:61:9a:af:47:23: 7f:8e:77:9b:4b:a5:c5:0e:6a:a8:84:06:d4:3c:d6: 94:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:56:89:CF:F1:C5:D2:89:DB:B1:96:10:83:4E:0C:D4:67:B6:F4:AF X509v3 Authority Key Identifier: keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:61:27:24:ff:a1:83:c3:1b:04:58:c2:81:03:99:4e:1f:55: c2:5b:fe:67:f7:57:3a:b1:18:ea:06:e1:58:f8:b1:a6:b1:fe: 7b:e2:10:74:34:93:0d:65:0a:29:4e:35:69:6e:43:37:65:85: c6:dc:54:e7:81:7f:7d:30:32:0f:f0:5f:09:6b:9a:20:51:cc: b1:f6:94:c2:89:cb:22:aa:45:ac:4c:4b:6b:70:3f:9b:12:bc: 60:e6:4c:54:1e:7d:e7:a6:47:cc:ed:a2:ea:0f:04:9f:e8:a5: d4:53:c9:27:1e:bf:ef:55:4e:c9:55:26:07:ab:3c:e1:74:91: f2:50:93:6d:fb:3f:af:14:76:d0:7a:46:7d:23:22:5c:37:e5: 0a:fb:21:02:e3:2b:7f:37:a5:c2:91:43:02:ce:72:d5:55:d8: 24:c8:9b:83:80:26:fa:ab:4f:d7:83:f2:56:e4:62:fb:09:9a: cb:0b:2d:9a:5d:bc:57:fc:7a:c5:53:43:8e:8b:bb:69:f8:a4: 06:9f:c4:b3:e8:72:09:81:c9:1b:e7:cc:d3:62:78:36:ac:55: 0e:ac:bf:ba:70:a2:f8:99:a2:cf:1c:82:d5:80:7c:4d:08:a5: 47:1d:a2:b6:4e:e4:19:c0:f8:9e:5e:dc:e8:71:b8:f0:8f:3b: cd:63:8e:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt0pUwmbVcuIL32smzQ5RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMTU5YzhhMWU2NGZjNjRmZjY2NmJkOTIxOWRjZTE3NDM3 M2NhZjIwHhcNMjUxMjIxMjEwMTA2WhcNMjUxMjIyMjEwMTA2WjAzMTEwLwYDVQQD Eyg1ODU2ODljZmYxYzVkMjg5ZGJiMTk2MTA4MzRlMGNkNDY3YjZmNGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJe2N7EV43nqnCHTliyVuUfV+E1Y ye0eXSQiYOAlEtr701ix4KWJRqVZ6ZdYsLosCLoOSMJsv0ezYmIZg2Mg6m91WA+5 uYWzKM73bGO6UiqF+sMVelZEIMiAu1lp1c9k2cYPA0vpyWvjWmksSUa54NmHZ1Uq +3aq5fH+zYw6AXVYRRh2tJHqh6oFUCR75CUx6ldmpdlMhByRDo/HyGNq2KH/wleD IuS6K9J+QD1nVHb378yq5DEhDQT0fkrpVggg0LzNDVBnOBdPxF9eWo9VmSeslVjh varoVqjrvvRqAD+jWyALCKI/ypjdYZqvRyN/jnebS6XFDmqohAbUPNaUMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhWic/xxdKJ27GWEINODNRntvSvMB8GA1UdIwQY MBaAFMwVnIoeZPxk/2Zr2SGdzhdDc8ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYt NjQ4MjA0MWE4MjQ2LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYtNjQ4MjA0MWE4MjQ2 LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2EnJP+h g8MbBFjCgQOZTh9Vwlv+Z/dXOrEY6gbhWPixprH+e+IQdDSTDWUKKU41aW5DN2WF xtxU54F/fTAyD/BfCWuaIFHMsfaUwonLIqpFrExLa3A/mxK8YOZMVB5956ZHzO2i 6g8En+il1FPJJx6/71VOyVUmB6s84XSR8lCTbfs/rxR20HpGfSMiXDflCvshAuMr fzelwpFDAs5y1VXYJMibg4Am+qtP14PyVuRi+wmaywstml28V/x6xVNDjou7afik Bp/Es+hyCYHJG+fM02J4NqxVDqy/unCi+JmizxyC1YB8TQilRx2itk7kGcD4nl7c 6HG48I87zWOOIw== -----END CERTIFICATE-----Generated at Mon Dec 22 05:37:46 2025 by rpki-client