This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json) Hash identifier: a6Gnw6Vdb2ko9Tjc9XcSHl5p3jHxi21O/QUtO9vqjJQ= Subject key identifier: AA:E2:6F:65:63:FD:6E:72:7F:D0:B2:7B:C1:68:25:CC:47:89:C4:63 Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd Certificate serial: 019B1FF41E1A5AC1E27388C6539778C19583 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft Manifest number: 0DA5 Signing time: Mon 15 Dec 2025 03:00:50 +0000 Manifest this update: Mon 15 Dec 2025 03:00:50 +0000 Manifest next update: Tue 16 Dec 2025 03:00:50 +0000 Files and hashes: 1: 1-WPhVRlAA6jPCwspck6vC93076I.roa (hash: kfO6p65RVm3Nr0Sh6nB6DU3tpOzF9iRvjAt+cnDEkzQ=) 2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: AP63F3GJkmQ+IEdhhuasNQFHiODz1U5THjjFYwXnUlc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:1e:1a:5a:c1:e2:73:88:c6:53:97:78:c1:95:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd Validity Not Before: Dec 15 03:00:50 2025 GMT Not After : Dec 16 03:00:50 2025 GMT Subject: CN=aae26f6563fd6e727fd0b27bc16825cc4789c463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8c:51:26:38:ee:03:4b:10:77:69:13:bb:f0: f2:2a:d2:eb:5d:a3:fa:48:e3:52:6a:dd:6e:6d:fa: 53:79:d4:e2:84:6f:49:12:56:22:fd:7f:e5:e3:11: 20:34:41:64:4b:01:4b:d6:5c:81:d2:ed:2a:60:1b: 63:00:06:74:48:14:da:11:57:ee:5d:33:2c:df:1b: 7e:7f:27:bc:91:9a:df:c3:ae:1c:f2:0e:de:23:9f: f5:34:17:97:bd:46:8d:e4:46:37:3c:39:ab:47:e9: 0a:49:14:43:c7:df:7a:58:cc:95:cb:78:ed:7d:79: 72:bd:65:01:2c:59:77:84:35:93:36:f9:5c:e4:9e: c2:5c:69:47:c1:f7:91:9c:89:9c:ec:c1:42:44:19: 4a:0f:62:cc:e3:8f:c7:e4:71:25:1c:88:12:61:2e: d2:7a:b4:bd:59:96:25:69:55:5c:d0:70:0f:8d:54: 8f:eb:49:0d:e3:2a:d3:5a:38:1a:37:1d:ed:09:80: 1e:ff:75:d3:57:04:19:f3:0d:36:82:04:fe:43:2c: 6d:c6:53:1b:cf:cc:bb:2e:37:0f:03:99:90:e2:4d: 65:50:98:9d:a7:ab:52:6e:b6:ec:0a:5e:98:0a:4d: 78:62:0e:86:26:0c:06:7d:c4:c7:dd:97:92:74:61: f7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E2:6F:65:63:FD:6E:72:7F:D0:B2:7B:C1:68:25:CC:47:89:C4:63 X509v3 Authority Key Identifier: keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5e:9d:4c:af:0e:71:fe:ff:81:bd:9d:07:67:0a:2e:44:22: 6b:09:d9:02:72:b4:56:f6:80:df:3e:06:19:49:2b:ec:2b:4a: 34:f7:30:1f:70:ca:43:8f:57:7b:c5:05:fd:7d:97:2d:a6:73: de:42:6f:32:7f:8d:17:d9:97:d8:e6:8f:8e:58:7e:ba:07:7d: f7:a8:7f:b7:69:d6:79:f7:5b:7d:4b:44:33:4d:35:36:61:a6: fe:28:9d:f6:7f:c8:e7:a2:af:40:bd:9e:0b:98:d7:a6:02:d9: 34:42:62:5c:fc:f6:5d:04:0b:b7:9a:0b:e1:69:4d:35:75:35: 19:be:03:3b:89:b5:62:ef:8b:06:92:fa:25:d9:a6:09:0d:ab: be:f4:be:3b:a3:c1:0a:91:e7:8f:bc:d3:93:90:ae:af:48:88: 76:65:d5:0b:c1:8a:d8:10:d1:ee:51:a5:45:8d:c2:3d:cd:b8: 4d:de:12:41:a5:43:3a:15:2f:a9:9c:f1:a6:63:c7:ab:70:ec: ae:97:4c:40:84:8e:e0:8f:0f:6d:1b:cd:29:36:b5:de:e7:bb: 71:d9:05:d0:a2:50:47:a4:71:9f:a4:d3:9c:e7:07:5b:46:38: 45:91:91:47:ac:99:fb:07:81:54:7a:8a:07:3a:ce:8f:5e:48: 09:9b:12:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9B4aWsHic4jGU5d4wZWDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTYzZGQwMWVjODBkZTllMTM4YzlkZTQ0YTM2ZDQ4ZjA2 YjkzZmQwHhcNMjUxMjE1MDMwMDUwWhcNMjUxMjE2MDMwMDUwWjAzMTEwLwYDVQQD EyhhYWUyNmY2NTYzZmQ2ZTcyN2ZkMGIyN2JjMTY4MjVjYzQ3ODljNDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYxRJjjuA0sQd2kTu/DyKtLrXaP6 SONSat1ubfpTedTihG9JElYi/X/l4xEgNEFkSwFL1lyB0u0qYBtjAAZ0SBTaEVfu XTMs3xt+fye8kZrfw64c8g7eI5/1NBeXvUaN5EY3PDmrR+kKSRRDx996WMyVy3jt fXlyvWUBLFl3hDWTNvlc5J7CXGlHwfeRnImc7MFCRBlKD2LM44/H5HElHIgSYS7S erS9WZYlaVVc0HAPjVSP60kN4yrTWjgaNx3tCYAe/3XTVwQZ8w02ggT+QyxtxlMb z8y7LjcPA5mQ4k1lUJidp6tSbrbsCl6YCk14Yg6GJgwGfcTH3ZeSdGH3FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrib2Vj/W5yf9Cye8FoJcxHicRjMB8GA1UdIwQY MBaAFM2WPdAeyA3p4TjJ3kSjbUjwa5P9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYt NmNmMTY1MjM5YmQ5LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYtNmNmMTY1MjM5YmQ5 LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjF6dTK8O cf7/gb2dB2cKLkQiawnZAnK0VvaA3z4GGUkr7CtKNPcwH3DKQ49Xe8UF/X2XLaZz 3kJvMn+NF9mX2OaPjlh+ugd996h/t2nWefdbfUtEM001NmGm/iid9n/I56KvQL2e C5jXpgLZNEJiXPz2XQQLt5oL4WlNNXU1Gb4DO4m1Yu+LBpL6JdmmCQ2rvvS+O6PB CpHnj7zTk5Cur0iIdmXVC8GK2BDR7lGlRY3CPc24Td4SQaVDOhUvqZzxpmPHq3Ds rpdMQISO4I8PbRvNKTa13ue7cdkF0KJQR6Rxn6TTnOcHW0Y4RZGRR6yZ+weBVHqK BzrOj15ICZsS6g== -----END CERTIFICATE-----Generated at Mon Dec 15 13:22:52 2025 by rpki-client