This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json) Hash identifier: r9tj1rn58UP/0UtfW6vrW/qn528Fok5xB8qEqfosdIw= Subject key identifier: 95:8D:64:6E:37:B7:68:0B:41:C1:A6:C8:AC:23:D9:3E:8A:2E:8D:72 Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc Certificate serial: 019B18A8AC486B3DB7838D21D94B345F74E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft Manifest number: 1777 Signing time: Sat 13 Dec 2025 17:01:05 +0000 Manifest this update: Sat 13 Dec 2025 17:01:05 +0000 Manifest next update: Sun 14 Dec 2025 17:01:05 +0000 Files and hashes: 1: DXSMQQoNY6zl2bbt_Qxl4yUZpo0.roa (hash: W1Qix1yXYt7eEDSw6BnO5hmas15FwfPB8Nypx8uQBss=) 2: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: /hSUEj7txcsBx/G0xvYn2Pb+C4scU9Nm5Y3HFRxC/LM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:ac:48:6b:3d:b7:83:8d:21:d9:4b:34:5f:74:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc Validity Not Before: Dec 13 17:01:05 2025 GMT Not After : Dec 14 17:01:05 2025 GMT Subject: CN=958d646e37b7680b41c1a6c8ac23d93e8a2e8d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:7a:7d:18:59:e8:3c:79:f8:fe:7a:5e:b7: b5:fb:86:9d:80:34:01:a8:00:61:3b:a3:15:ec:dd: da:14:d5:9e:d3:1d:3a:ed:6b:70:96:d7:cd:12:08: bd:a8:6d:36:72:c6:13:39:70:5f:61:16:fc:df:4f: 50:d2:79:13:82:cc:58:c8:05:7f:26:69:60:1d:a5: 25:1d:49:02:69:a4:c7:2b:13:e1:53:94:93:9f:85: a5:0e:d1:9b:e5:07:34:09:9e:ea:6c:2e:87:f3:e3: 4e:9d:93:20:b0:87:82:a0:77:b4:f1:19:0b:40:11: e2:da:b5:c9:c1:ce:6b:5f:a9:e5:19:ef:ca:87:4f: 69:c6:e2:7c:7e:94:47:9d:42:55:bd:03:cc:9c:95: 00:44:2d:1e:b1:86:28:a1:ce:c5:ba:de:dd:e6:ba: 09:1b:7d:83:03:9a:dd:d6:b4:d9:30:33:75:e5:ee: 33:87:9f:4c:f1:b3:52:23:87:06:5f:53:95:2b:2d: 7d:46:cf:ec:13:5c:fa:53:69:72:4d:a1:ce:1b:0a: 4e:4a:59:bb:82:e2:e8:04:f6:c1:b3:a2:68:d4:a2: f3:f6:71:b1:17:ec:8d:4d:9d:ae:a4:08:0b:32:2a: 24:50:00:54:7a:aa:d1:25:45:ae:dc:b7:b4:9f:72: 32:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8D:64:6E:37:B7:68:0B:41:C1:A6:C8:AC:23:D9:3E:8A:2E:8D:72 X509v3 Authority Key Identifier: keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:52:69:cc:7d:97:c2:39:40:c7:dc:7b:d9:83:ee:cc:d9:12: 39:e9:59:7c:de:5a:4c:79:51:98:6e:f3:3d:e6:22:df:fe:58: 6d:48:dd:bf:e2:0c:6b:ad:c7:15:27:18:51:96:e1:c0:39:e0: 00:60:ab:e5:6d:ed:27:91:5b:ef:fd:b6:00:8e:67:92:48:b4: 1c:97:0d:b3:d7:80:10:bd:c8:49:e2:84:5d:f8:18:fc:6a:fa: 1b:86:79:2c:f5:93:37:c2:69:9a:f7:e6:f8:3a:f2:76:98:7e: 47:8b:70:6c:6f:db:5b:f6:df:bb:a0:8b:9e:f7:03:3d:52:fd: 23:ef:bd:ca:96:da:db:f9:8f:25:ef:e4:b9:d4:5d:b3:68:93: 37:6f:7d:88:5b:ab:96:d0:18:e9:38:32:91:92:36:8b:a1:c5: 62:0d:5b:4e:06:3f:79:20:a2:28:fb:2b:1e:fb:7b:07:3b:19: 31:ed:1e:94:e9:ec:31:af:9f:3a:aa:c0:02:f7:c7:eb:ab:50: 06:f8:72:89:7e:c7:91:94:63:9f:8f:3a:a4:ec:62:c8:8b:53: fb:db:9c:9e:94:bd:1f:a5:14:74:40:1c:e3:82:87:1f:1c:98: ef:c1:5a:9c:5e:d8:7c:16:01:76:ee:4a:4e:d5:c6:4d:eb:47: 17:1a:01:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqKxIaz23g40h2Us0X3TlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YzI5MzM4MGJjNDFmNTJkOTEzMTU4NWE4NTgwMDM4Zjky ZjVkY2MwHhcNMjUxMjEzMTcwMTA1WhcNMjUxMjE0MTcwMTA1WjAzMTEwLwYDVQQD Eyg5NThkNjQ2ZTM3Yjc2ODBiNDFjMWE2YzhhYzIzZDkzZThhMmU4ZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4V6fRhZ6Dx5+P56Xre1+4adgDQB qABhO6MV7N3aFNWe0x067WtwltfNEgi9qG02csYTOXBfYRb8309Q0nkTgsxYyAV/ JmlgHaUlHUkCaaTHKxPhU5STn4WlDtGb5Qc0CZ7qbC6H8+NOnZMgsIeCoHe08RkL QBHi2rXJwc5rX6nlGe/Kh09pxuJ8fpRHnUJVvQPMnJUARC0esYYooc7Fut7d5roJ G32DA5rd1rTZMDN15e4zh59M8bNSI4cGX1OVKy19Rs/sE1z6U2lyTaHOGwpOSlm7 guLoBPbBs6Jo1KLz9nGxF+yNTZ2upAgLMiokUABUeqrRJUWu3Le0n3IyZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWNZG43t2gLQcGmyKwj2T6KLo1yMB8GA1UdIwQY MBaAFGXCkzgLxB9S2RMVhahYADj5L13MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYt ZmU2ZGMxNzU4M2UzLzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYtZmU2ZGMxNzU4M2Uz LzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVJpzH2X wjlAx9x72YPuzNkSOelZfN5aTHlRmG7zPeYi3/5YbUjdv+IMa63HFScYUZbhwDng AGCr5W3tJ5Fb7/22AI5nkki0HJcNs9eAEL3ISeKEXfgY/Gr6G4Z5LPWTN8Jpmvfm +Drydph+R4twbG/bW/bfu6CLnvcDPVL9I++9ypba2/mPJe/kudRds2iTN299iFur ltAY6TgykZI2i6HFYg1bTgY/eSCiKPsrHvt7BzsZMe0elOnsMa+fOqrAAvfH66tQ BvhyiX7HkZRjn486pOxiyItT+9ucnpS9H6UUdEAc44KHHxyY78FanF7YfBYBdu5K TtXGTetHFxoBpA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:51 2025 by rpki-client