This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft File: ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft (raw, json) Hash identifier: HjzvEXsBQlhXvvc9snY0kU58zUoJ2ZqNzWXlmbFgpJA= Subject key identifier: 40:B6:F2:DA:B3:22:F4:00:A7:2B:71:9C:2D:FF:16:71:0C:04:B0:5E Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7 Certificate issuer: /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7 Certificate serial: 019B0F3791E72ECB5C519A44CB02E5C34A5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft Manifest number: 1359 Signing time: Thu 11 Dec 2025 21:00:58 +0000 Manifest this update: Thu 11 Dec 2025 21:00:58 +0000 Manifest next update: Fri 12 Dec 2025 21:00:58 +0000 Files and hashes: 1: ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl (hash: jAjB733BwFOOiHVqHMy8BeR2jB0N2O1ROFdJciRzDWI=) 2: zysotr6Zh0JowEPpxerhuN8FsPI.roa (hash: m7vcKgaxDGAMU/aHqkxYhIsxn/ZRzduC29i2UI0iCuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:91:e7:2e:cb:5c:51:9a:44:cb:02:e5:c3:4a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7 Validity Not Before: Dec 11 21:00:58 2025 GMT Not After : Dec 12 21:00:58 2025 GMT Subject: CN=40b6f2dab322f400a72b719c2dff16710c04b05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f2:74:88:df:b6:a5:cd:22:f4:ad:cd:e7:4d: 83:31:d8:55:be:01:3c:42:00:7a:c8:b7:e4:30:c0: 39:ae:02:b4:ec:16:84:fa:07:dd:aa:af:84:f6:03: 89:8c:ab:a6:82:41:c5:cf:15:46:50:a4:e1:cf:77: 8d:e8:e8:f9:e8:74:f4:3b:07:ba:4b:29:cd:5e:71: bd:de:4e:ed:b9:72:85:0a:00:c6:71:c6:12:c0:a8: 68:69:66:00:5b:0e:8c:95:57:6d:7f:40:9b:b1:0f: 4c:8e:56:ae:25:94:cb:c4:99:f0:3e:91:69:6d:38: ad:f2:11:1a:c0:9f:7b:9b:98:ba:e3:fd:27:59:b9: 23:26:cf:18:1e:1a:e9:83:72:f8:12:63:2a:4c:af: 93:56:77:16:90:6c:6c:b5:dc:35:fa:27:84:6d:f9: 7f:cb:e6:59:99:ff:f0:6c:36:a4:4c:63:37:2a:06: 37:cf:37:b6:48:00:b7:bc:0c:c1:35:98:c3:a3:de: a5:78:ef:a5:fe:99:4f:48:65:94:66:fb:f6:11:50: e4:5e:2a:a9:20:af:b6:c2:33:c4:aa:43:7c:9c:f4: f5:f2:e2:c3:04:a1:5f:cb:41:6f:af:98:a7:53:37: 08:76:0b:1f:1e:49:d3:da:cf:ba:c0:b3:d2:a9:ac: b9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B6:F2:DA:B3:22:F4:00:A7:2B:71:9C:2D:FF:16:71:0C:04:B0:5E X509v3 Authority Key Identifier: keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:36:d2:e7:b2:3d:44:5d:da:03:6e:39:07:ce:97:23:c3:82: 93:e0:a7:ef:c5:9f:3b:c6:f6:06:f2:43:57:a7:7c:3d:8a:0f: bc:16:91:a2:4c:62:1c:9e:08:85:e5:8c:6a:3c:dd:b8:d5:fc: 9f:0d:b2:35:5a:1a:8d:87:c5:0d:55:c3:6b:39:f2:b0:77:56: 2f:68:7e:c7:fa:aa:f1:1c:5e:56:54:f3:95:10:b0:62:4d:7e: a9:ca:a6:04:f4:6e:2e:43:d7:5e:9f:0a:70:bb:dd:3f:20:2f: 4f:39:95:69:59:75:af:b7:e1:4c:13:67:80:41:12:4a:24:9e: ae:eb:61:69:af:ba:08:40:e8:26:24:cf:49:f1:42:45:f8:db: 3c:c4:1a:bc:42:fc:c6:b6:a4:90:9e:39:8a:8e:ac:b2:24:8a: 44:4f:1e:8a:5a:31:1a:01:82:44:33:a8:52:03:f9:5a:19:6b: cd:17:a2:6c:a9:5f:89:13:a6:a9:31:ca:2d:07:22:99:d2:6d: 09:63:a5:ab:87:6f:39:b0:ab:bc:b5:c5:ce:89:9f:58:b4:51: 77:c4:75:8c:9b:a1:80:04:d8:da:81:5a:7f:c8:ea:78:97:22: ab:f1:7c:61:d5:8f:e6:fc:67:dc:41:28:2a:e3:7c:83:58:aa: a7:d4:65:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN5HnLstcUZpEywLlw0pbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NmI1MzI1NWU2YzhmYjc2ZmFjMWNjYjg0OGZlZTQ1NjAw YjU1ZjcwHhcNMjUxMjExMjEwMDU4WhcNMjUxMjEyMjEwMDU4WjAzMTEwLwYDVQQD Eyg0MGI2ZjJkYWIzMjJmNDAwYTcyYjcxOWMyZGZmMTY3MTBjMDRiMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PJ0iN+2pc0i9K3N502DMdhVvgE8 QgB6yLfkMMA5rgK07BaE+gfdqq+E9gOJjKumgkHFzxVGUKThz3eN6Oj56HT0Owe6 SynNXnG93k7tuXKFCgDGccYSwKhoaWYAWw6MlVdtf0CbsQ9MjlauJZTLxJnwPpFp bTit8hEawJ97m5i64/0nWbkjJs8YHhrpg3L4EmMqTK+TVncWkGxstdw1+ieEbfl/ y+ZZmf/wbDakTGM3KgY3zze2SAC3vAzBNZjDo96leO+l/plPSGWUZvv2EVDkXiqp IK+2wjPEqkN8nPT18uLDBKFfy0Fvr5inUzcIdgsfHknT2s+6wLPSqay5UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEC28tqzIvQApytxnC3/FnEMBLBeMB8GA1UdIwQY MBaAFGVrUyVebI+3b6wcy4SP7kVgC1X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWld0VEpWNXNqN2R2ckJ6TGhJX3VSV0FMVmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YzhlYWMtYmRjYi00ZjBkLWIyZDgt ZWE0MTgzMmFkMTcyLzEvWld0VEpWNXNqN2R2ckJ6TGhJX3VSV0FMVmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YzhlYWMtYmRjYi00ZjBkLWIyZDgtZWE0MTgzMmFkMTcy LzEvWld0VEpWNXNqN2R2ckJ6TGhJX3VSV0FMVmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzbS57I9 RF3aA245B86XI8OCk+Cn78WfO8b2BvJDV6d8PYoPvBaRokxiHJ4IheWMajzduNX8 nw2yNVoajYfFDVXDaznysHdWL2h+x/qq8RxeVlTzlRCwYk1+qcqmBPRuLkPXXp8K cLvdPyAvTzmVaVl1r7fhTBNngEESSiSeruthaa+6CEDoJiTPSfFCRfjbPMQavEL8 xrakkJ45io6ssiSKRE8eiloxGgGCRDOoUgP5WhlrzReibKlfiROmqTHKLQcimdJt CWOlq4dvObCrvLXFzomfWLRRd8R1jJuhgATY2oFaf8jqeJciq/F8YdWP5vxn3EEo KuN8g1iqp9Rlqg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:50:32 2025 by rpki-client