This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json) Hash identifier: bmJV8wfXPkbEfCWX1TjcXzHxqmAxwNwKZeQI+V0iR/8= Subject key identifier: C5:5C:37:F1:5A:B5:CB:6D:59:63:65:5A:2E:94:58:A8:86:16:39:1D Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2 Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2 Certificate serial: 019B1014881C8E07BAF4CEE018DC9A9D6BE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft Manifest number: 1703 Signing time: Fri 12 Dec 2025 01:02:19 +0000 Manifest this update: Fri 12 Dec 2025 01:02:19 +0000 Manifest next update: Sat 13 Dec 2025 01:02:19 +0000 Files and hashes: 1: PEJYOS_vVNkG3PT0lDgVcUmmsls.roa (hash: KVkQ78uD9atyqWMvkFGtksD/JLOGloRiyuEg1Z4DFEc=) 2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: P3FZW84Rbojhq2BjjKjzj4SwUYPGj7AyuD66p/3WEtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:88:1c:8e:07:ba:f4:ce:e0:18:dc:9a:9d:6b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2 Validity Not Before: Dec 12 01:02:19 2025 GMT Not After : Dec 13 01:02:19 2025 GMT Subject: CN=c55c37f15ab5cb6d5963655a2e9458a88616391d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:52:ab:5c:4a:a9:13:8b:df:4e:f4:4f:85: df:8b:c4:4b:08:e0:5a:8a:67:7b:bb:88:4a:37:6e: 45:83:b6:b6:f4:92:49:ba:35:0e:58:3e:63:d8:60: 9e:b7:0f:d6:b3:04:dc:97:9d:78:e4:0d:18:41:13: 2b:d3:90:37:39:5e:7d:90:c7:e5:c9:dc:35:86:5e: 01:49:29:86:cf:64:e2:84:21:5a:d5:ef:b6:3d:8b: ca:0f:bd:3d:b0:73:c3:c6:98:d5:43:c7:6c:1e:2b: 64:af:5f:98:cf:1e:10:35:05:00:fb:4d:d8:4a:de: 3c:4f:e4:a1:2a:d4:d4:4b:0e:ab:7c:d8:7a:90:7d: 8e:3d:de:cc:5c:a9:74:b0:4f:10:8e:0a:9d:fa:55: 5c:ba:68:13:b2:fa:02:9d:d0:b9:ac:a9:0c:78:83: 6d:3a:ca:68:ef:99:f5:19:93:d0:20:35:ea:e7:3a: 49:7e:c2:ef:52:dd:9a:f1:8c:e4:9c:c1:d1:f2:97: 11:bd:b4:59:d8:07:31:6b:3f:45:94:ae:22:e4:45: b7:b1:55:86:1e:5f:1f:c7:0a:85:60:a6:67:aa:d7: b8:9b:c5:09:9c:2b:60:cb:8f:5e:db:e1:94:ed:01: 23:71:e0:e0:c7:cf:76:b9:fb:bd:9c:61:76:07:82: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5C:37:F1:5A:B5:CB:6D:59:63:65:5A:2E:94:58:A8:86:16:39:1D X509v3 Authority Key Identifier: keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:35:64:3e:33:2b:e3:a6:19:60:e8:a5:3e:14:63:3e:b4:35: f2:37:a0:1b:48:03:d5:eb:6a:a5:19:b2:be:d1:e5:63:b5:f5: ca:8b:40:6b:d1:37:28:d5:35:b7:14:3c:34:fe:b6:80:1f:65: 2b:06:b3:3f:9b:f1:1d:f4:c5:f2:4c:0b:1e:51:b3:d4:a3:43: 3c:1b:a6:ba:5b:5a:98:d1:3a:0f:ec:23:6f:01:72:46:86:01: f6:eb:85:a6:f0:8f:68:e0:b0:4a:a9:14:e0:4b:63:65:1a:8c: d7:1b:5d:bc:1f:a2:60:91:22:24:43:a8:a8:70:f7:fd:c7:a4: 45:1e:77:df:ef:6b:b7:07:5b:2d:23:43:e4:39:67:7d:30:e6: 33:c8:ed:5c:ce:57:cc:b0:b0:10:1b:35:72:08:32:81:1a:9d: e2:55:93:87:b6:0c:10:93:7a:fd:25:fb:d8:db:63:c9:a9:46: 9c:d2:6c:18:9c:21:56:bb:1d:3a:4b:9b:e7:43:92:36:a3:7f: ae:8f:e8:b8:64:95:c9:79:f8:92:37:61:69:88:d0:c9:98:4f: b9:84:ac:48:a5:a9:fb:0b:7e:b9:0e:94:2e:20:2d:c9:64:91: 69:3a:cc:20:f2:e4:3f:b5:7a:13:99:fd:c0:83:73:6b:08:a8: ba:63:a6:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFIgcjge69M7gGNyanWvhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzI5Yjk4OTA0YTJlY2U4NDgyZTBmMjU4ZjVjMzRmZWFk NThjZTIwHhcNMjUxMjEyMDEwMjE5WhcNMjUxMjEzMDEwMjE5WjAzMTEwLwYDVQQD EyhjNTVjMzdmMTVhYjVjYjZkNTk2MzY1NWEyZTk0NThhODg2MTYzOTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzNSq1xKqROL3070T4Xfi8RLCOBa imd7u4hKN25Fg7a29JJJujUOWD5j2GCetw/WswTcl5145A0YQRMr05A3OV59kMfl ydw1hl4BSSmGz2TihCFa1e+2PYvKD709sHPDxpjVQ8dsHitkr1+Yzx4QNQUA+03Y St48T+ShKtTUSw6rfNh6kH2OPd7MXKl0sE8Qjgqd+lVcumgTsvoCndC5rKkMeINt Ospo75n1GZPQIDXq5zpJfsLvUt2a8YzknMHR8pcRvbRZ2Acxaz9FlK4i5EW3sVWG Hl8fxwqFYKZnqte4m8UJnCtgy49e2+GU7QEjceDgx892ufu9nGF2B4KEcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVcN/FatcttWWNlWi6UWKiGFjkdMB8GA1UdIwQY MBaAFP8ym5iQSi7OhILg8lj1w0/q1YziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pLYm1KQktMczZFZ3VEeVdQWERULXJWak9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9jN2NiYjEtMGRjZC00MmY0LWJmNjMt M2RmNDcxYzAxYzllLzEvX3pLYm1KQktMczZFZ3VEeVdQWERULXJWak9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9jN2NiYjEtMGRjZC00MmY0LWJmNjMtM2RmNDcxYzAxYzll LzEvX3pLYm1KQktMczZFZ3VEeVdQWERULXJWak9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDVkPjMr 46YZYOilPhRjPrQ18jegG0gD1etqpRmyvtHlY7X1yotAa9E3KNU1txQ8NP62gB9l KwazP5vxHfTF8kwLHlGz1KNDPBumultamNE6D+wjbwFyRoYB9uuFpvCPaOCwSqkU 4EtjZRqM1xtdvB+iYJEiJEOoqHD3/cekRR533+9rtwdbLSND5DlnfTDmM8jtXM5X zLCwEBs1cggygRqd4lWTh7YMEJN6/SX72NtjyalGnNJsGJwhVrsdOkub50OSNqN/ ro/ouGSVyXn4kjdhaYjQyZhPuYSsSKWp+wt+uQ6ULiAtyWSRaTrMIPLkP7V6E5n9 wINzawioumOmPw== -----END CERTIFICATE-----Generated at Fri Dec 12 03:41:58 2025 by rpki-client