This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft File: ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json) Hash identifier: FQ5/S4n4Tc2b6Vvd/ku5qHPB6u847YwO26EDjMHxKOk= Subject key identifier: 3A:98:71:F9:DE:49:52:5D:BA:5E:A4:51:2F:23:AF:37:94:41:6E:5D Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC Certificate issuer: /CN=659abae2b0cae86c4196b020765b823a203207fc Certificate serial: 019B40FFFB37E0352779B83E319DF6E85A01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 13:01:16 +0000 Manifest this update: Sun 21 Dec 2025 13:01:16 +0000 Manifest next update: Mon 22 Dec 2025 13:01:16 +0000 Files and hashes: 1: O5xBU8VL53qxjYE82WOYcODpGTk.roa (hash: T0jCYlMlaGotp+vjckUxtBiuT4d14wsO10or/VNnLsU=) 2: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: RDtVEir43MDFvZHbxlultvZxQ4fGVnBfCNU8tWJuafk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:fb:37:e0:35:27:79:b8:3e:31:9d:f6:e8:5a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc Validity Not Before: Dec 21 13:01:16 2025 GMT Not After : Dec 22 13:01:16 2025 GMT Subject: CN=3a9871f9de49525dba5ea4512f23af3794416e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:f6:14:35:52:00:11:15:cd:26:31:4a:92: 38:49:f1:81:ea:6b:56:d0:88:2e:11:61:1d:d8:f2: 9e:b7:69:90:6d:68:1a:cf:e7:b0:3b:0e:14:11:a2: b2:fb:b2:07:de:04:d3:ed:d8:7d:3d:31:f4:1a:55: 3f:a5:ab:4c:2c:80:7c:03:5c:86:06:f0:7f:5f:49: 5c:5f:b3:63:0a:cd:b7:a1:62:1c:e9:dd:df:2c:8a: 67:1b:cb:8c:a9:50:4a:e1:ca:71:b5:d7:d3:c9:57: f9:37:f8:24:66:a6:e4:9c:4a:cb:34:48:37:88:f2: b6:6f:5f:fc:69:42:bf:51:da:e9:2d:71:a3:e4:3d: 93:e5:09:8c:70:95:97:6c:c3:b1:cb:9c:31:13:75: 6d:51:d4:f2:6d:a1:09:65:0b:de:a8:3e:d1:c4:0b: 62:7d:7c:95:ad:e8:e6:b2:ff:93:37:59:97:18:9c: 35:72:58:82:c4:91:f1:7b:a1:8a:62:83:1d:67:d7: 10:76:52:d7:77:9d:a9:f9:98:6c:30:92:5b:d7:52: c0:45:47:f5:4e:3e:0d:58:5a:b8:b8:b7:ad:a2:43: cc:d0:25:d7:8d:88:f8:e6:51:b1:f1:70:f1:79:48: bc:be:a7:ca:6d:3f:8f:7f:cd:ad:79:8c:02:5b:28: ce:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:98:71:F9:DE:49:52:5D:BA:5E:A4:51:2F:23:AF:37:94:41:6E:5D X509v3 Authority Key Identifier: keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d6:c1:f6:21:fe:9e:64:b9:ff:25:e5:4b:4d:f7:4d:5c:cf: e6:23:73:99:30:f4:00:7e:df:9f:4b:7e:19:29:f2:b6:fe:c1: 2a:d2:8f:69:67:f6:19:25:37:6b:fc:9a:b3:70:d4:d6:5f:ea: aa:25:7f:f3:52:6b:d6:49:58:41:10:2d:f6:ed:89:04:35:cb: c0:41:b8:1f:9c:a8:80:71:eb:eb:e0:a1:01:2c:5a:2c:c9:ed: 63:fd:a4:de:da:c7:95:9a:cb:0d:1b:34:0a:e1:a4:83:36:5c: 6e:2b:4b:c3:e8:ab:17:fa:fd:af:d2:f2:7d:c7:d4:98:fc:df: 6a:1d:39:1f:66:35:79:11:62:af:b6:03:02:4f:d1:b3:87:50: 97:93:c1:f3:90:58:93:7a:07:46:31:1a:97:c9:f3:2b:1f:74: 30:ca:36:6d:05:b1:85:19:13:ec:f4:6a:27:f5:b9:f0:a9:1b: 7c:33:1f:ec:a9:6d:27:6d:95:25:04:31:94:42:17:eb:81:95: 47:ee:e1:b9:d6:a2:09:d0:cd:c7:8d:6e:40:ac:5d:03:9f:d0: 9d:db:b0:5d:41:da:ac:71:47:b1:a8:64:60:d4:4f:23:d0:c5: ba:07:bd:23:fc:a2:2d:5a:7a:05:83:bf:6f:97:b5:c3:80:65: 11:4c:49:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA//s34DUnebg+MZ326FoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OWFiYWUyYjBjYWU4NmM0MTk2YjAyMDc2NWI4MjNhMjAz MjA3ZmMwHhcNMjUxMjIxMTMwMTE2WhcNMjUxMjIyMTMwMTE2WjAzMTEwLwYDVQQD EygzYTk4NzFmOWRlNDk1MjVkYmE1ZWE0NTEyZjIzYWYzNzk0NDE2ZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQz2FDVSABEVzSYxSpI4SfGB6mtW 0IguEWEd2PKet2mQbWgaz+ewOw4UEaKy+7IH3gTT7dh9PTH0GlU/patMLIB8A1yG BvB/X0lcX7NjCs23oWIc6d3fLIpnG8uMqVBK4cpxtdfTyVf5N/gkZqbknErLNEg3 iPK2b1/8aUK/UdrpLXGj5D2T5QmMcJWXbMOxy5wxE3VtUdTybaEJZQveqD7RxAti fXyVrejmsv+TN1mXGJw1cliCxJHxe6GKYoMdZ9cQdlLXd52p+ZhsMJJb11LARUf1 Tj4NWFq4uLetokPM0CXXjYj45lGx8XDxeUi8vqfKbT+Pf82teYwCWyjO3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqYcfneSVJdul6kUS8jrzeUQW5dMB8GA1UdIwQY MBaAFGWauuKwyuhsQZawIHZbgjogMgf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgt MDJhYWM4YjU5NmRjLzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgtMDJhYWM4YjU5NmRj LzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNbB9iH+ nmS5/yXlS033TVzP5iNzmTD0AH7fn0t+GSnytv7BKtKPaWf2GSU3a/yas3DU1l/q qiV/81Jr1klYQRAt9u2JBDXLwEG4H5yogHHr6+ChASxaLMntY/2k3trHlZrLDRs0 CuGkgzZcbitLw+irF/r9r9LyfcfUmPzfah05H2Y1eRFir7YDAk/Rs4dQl5PB85BY k3oHRjEal8nzKx90MMo2bQWxhRkT7PRqJ/W58KkbfDMf7KltJ22VJQQxlEIX64GV R+7hudaiCdDNx41uQKxdA5/QnduwXUHarHFHsahkYNRPI9DFuge9I/yiLVp6BYO/ b5e1w4BlEUxJNg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:48:42 2025 by rpki-client