This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json) Hash identifier: CC9df31CS1AOE7PPVe7BJWwr8UsgaeDVtxikTgSMXMM= Subject key identifier: BD:79:E5:A4:66:CE:4E:59:28:6B:4F:B9:0C:89:69:FC:10:7B:C3:79 Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd Certificate serial: 019B06D979A8C13A8822BDF6E7369AB558D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft Manifest number: 0D98 Signing time: Wed 10 Dec 2025 06:01:14 +0000 Manifest this update: Wed 10 Dec 2025 06:01:14 +0000 Manifest next update: Thu 11 Dec 2025 06:01:14 +0000 Files and hashes: 1: 1-WPhVRlAA6jPCwspck6vC93076I.roa (hash: kfO6p65RVm3Nr0Sh6nB6DU3tpOzF9iRvjAt+cnDEkzQ=) 2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: WiOaIeEbvkOWe4S8VNmt74FGu6QQ1DU596Xl9d1qxFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:d9:79:a8:c1:3a:88:22:bd:f6:e7:36:9a:b5:58:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd Validity Not Before: Dec 10 06:01:14 2025 GMT Not After : Dec 11 06:01:14 2025 GMT Subject: CN=bd79e5a466ce4e59286b4fb90c8969fc107bc379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:0c:f4:4d:1b:8b:6b:f6:95:f0:ae:7e:c3: 73:3b:f3:45:3b:2e:60:f1:79:7d:1f:0e:fc:91:0d: 33:55:af:7a:95:47:2f:60:75:d0:0a:61:39:ec:4b: 0a:86:0a:99:56:c5:51:d6:e3:d3:8e:60:fb:23:5d: 6a:68:15:fe:5b:13:63:8a:dc:a0:87:8d:48:14:2f: b1:c9:0f:15:b9:2b:6f:2a:1c:ec:fc:58:fe:33:d0: 53:78:37:02:01:d8:66:b4:ae:6a:fb:ca:e9:19:a1: 98:d2:fa:7f:51:0e:1a:7e:84:b0:0b:51:ac:37:16: a5:ee:cc:4a:2b:64:b0:70:a9:a0:c2:52:52:e1:17: ff:da:70:7b:7a:30:c1:01:4c:fe:75:9e:06:20:6c: ab:ae:43:0f:e4:39:70:89:95:97:67:17:a7:5c:a8: c9:a4:6a:cb:a9:23:af:ff:06:58:ed:2a:dc:3b:b8: 1d:a5:0f:89:bf:ea:e4:e9:56:b6:1f:b8:b7:3d:85: ad:88:5e:4b:b9:74:68:d9:f7:37:e8:d4:39:8e:83: cf:27:a9:82:8e:d8:a8:f3:11:a8:c4:5b:c8:ad:4f: 44:25:b1:54:d5:a2:88:30:d9:a5:c9:5f:b6:eb:66: 3d:01:3b:ca:11:46:38:51:40:90:e3:be:55:ca:97: 06:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:79:E5:A4:66:CE:4E:59:28:6B:4F:B9:0C:89:69:FC:10:7B:C3:79 X509v3 Authority Key Identifier: keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7e:29:3d:ba:aa:6d:84:9a:19:87:3d:4b:78:1e:09:67:e3: 8c:28:51:3c:23:c3:9d:99:15:3c:b3:4f:72:b4:46:18:f7:d9: 1f:76:70:c7:7b:00:59:68:74:28:b6:a2:03:82:ee:c2:16:02: 13:f8:0f:2d:ad:04:ce:f3:16:3f:d5:a0:e1:50:b0:6f:c4:0a: 04:dc:c0:5f:52:04:64:85:6c:cc:4e:10:7f:71:2b:79:f1:8d: 46:5f:97:b4:4d:28:fb:d1:21:03:2c:de:7a:29:3c:69:81:5f: 29:fc:01:20:a0:95:3b:0e:53:70:2f:0c:6e:2e:e8:14:5b:af: 9e:e6:ab:59:5e:5c:07:f7:55:13:c6:69:21:8f:05:7f:d9:d1: 48:87:ab:d2:3d:d8:34:42:ab:18:00:9a:da:3f:d0:ae:95:bd: a7:b3:7c:ce:8f:f1:31:e0:02:83:1a:4f:54:83:45:15:58:42: ae:41:63:27:b1:8d:0d:3a:15:49:84:28:64:7d:23:c6:86:9a: 6f:3a:e3:94:6b:1e:50:9f:f5:bc:ab:d6:f1:ff:35:5d:68:aa: a1:52:a7:cc:34:c7:e1:90:37:48:76:0a:19:07:d2:44:6b:ea: fb:e5:80:d6:7d:d5:c8:64:85:f1:61:b3:27:c4:38:3a:8a:99: bd:f5:7f:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsG2XmowTqIIr325zaatVjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTYzZGQwMWVjODBkZTllMTM4YzlkZTQ0YTM2ZDQ4ZjA2 YjkzZmQwHhcNMjUxMjEwMDYwMTE0WhcNMjUxMjExMDYwMTE0WjAzMTEwLwYDVQQD EyhiZDc5ZTVhNDY2Y2U0ZTU5Mjg2YjRmYjkwYzg5NjlmYzEwN2JjMzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUUM9E0bi2v2lfCufsNzO/NFOy5g 8Xl9Hw78kQ0zVa96lUcvYHXQCmE57EsKhgqZVsVR1uPTjmD7I11qaBX+WxNjityg h41IFC+xyQ8VuStvKhzs/Fj+M9BTeDcCAdhmtK5q+8rpGaGY0vp/UQ4afoSwC1Gs Nxal7sxKK2SwcKmgwlJS4Rf/2nB7ejDBAUz+dZ4GIGyrrkMP5DlwiZWXZxenXKjJ pGrLqSOv/wZY7SrcO7gdpQ+Jv+rk6Va2H7i3PYWtiF5LuXRo2fc36NQ5joPPJ6mC jtio8xGoxFvIrU9EJbFU1aKIMNmlyV+262Y9ATvKEUY4UUCQ475VypcGbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL155aRmzk5ZKGtPuQyJafwQe8N5MB8GA1UdIwQY MBaAFM2WPdAeyA3p4TjJ3kSjbUjwa5P9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYt NmNmMTY1MjM5YmQ5LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYtNmNmMTY1MjM5YmQ5 LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAen4pPbqq bYSaGYc9S3geCWfjjChRPCPDnZkVPLNPcrRGGPfZH3Zwx3sAWWh0KLaiA4LuwhYC E/gPLa0EzvMWP9Wg4VCwb8QKBNzAX1IEZIVszE4Qf3ErefGNRl+XtE0o+9EhAyze eik8aYFfKfwBIKCVOw5TcC8Mbi7oFFuvnuarWV5cB/dVE8ZpIY8Ff9nRSIer0j3Y NEKrGACa2j/QrpW9p7N8zo/xMeACgxpPVINFFVhCrkFjJ7GNDToVSYQoZH0jxoaa bzrjlGseUJ/1vKvW8f81XWiqoVKnzDTH4ZA3SHYKGQfSRGvq++WA1n3VyGSF8WGz J8Q4OoqZvfV/RA== -----END CERTIFICATE-----Generated at Wed Dec 10 11:16:33 2025 by rpki-client