This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft File: zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json) Hash identifier: ihc3oZES9jdeOqhUPuONTgAi3GYO+j2dGhZbwR4M4xQ= Subject key identifier: 9B:A4:CD:03:E0:C7:61:A6:C6:07:71:DD:76:0D:A5:DE:98:8A:C2:1A Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c Certificate serial: 019B341FB6215B401D1DE2EAA9C1CB4F1A0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft Manifest number: 0A0B Signing time: Fri 19 Dec 2025 01:00:51 +0000 Manifest this update: Fri 19 Dec 2025 01:00:51 +0000 Manifest next update: Sat 20 Dec 2025 01:00:51 +0000 Files and hashes: 1: ECAqPGx51Z00QIK2nsNsbPmpugU.roa (hash: HZJH2KP+4GUjxS9EOgilXL7MO2BjwBbNTgaJKakCYf0=) 2: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: fhJLxHdIgh8NKk1cRH+3E9I0iTmbFK9VKe3LRGMaQ20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:b6:21:5b:40:1d:1d:e2:ea:a9:c1:cb:4f:1a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c Validity Not Before: Dec 19 01:00:51 2025 GMT Not After : Dec 20 01:00:51 2025 GMT Subject: CN=9ba4cd03e0c761a6c60771dd760da5de988ac21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:be:fc:a7:12:6d:02:e4:f2:c5:9b:79:b7:41: 0d:82:25:13:f6:ab:e1:08:00:a9:56:18:ea:1f:23: fb:cc:71:0b:6f:16:e5:24:1c:40:24:8d:64:27:09: 61:9b:8f:fd:03:6c:a3:74:7c:42:e3:44:1c:cf:d5: 29:36:8c:c6:5a:96:ad:f6:ff:c1:77:c2:02:eb:35: 71:49:d4:92:56:3e:c2:46:f7:24:c1:cc:3a:56:a2: b3:2e:c3:2f:ae:1a:4c:d0:d8:98:11:e0:35:26:9a: ef:00:e7:66:b2:9d:28:7e:34:29:58:96:40:c6:db: 71:f6:41:75:f0:26:b2:00:fd:18:27:78:95:08:c6: a8:7f:77:bb:f4:6b:6d:f2:32:5c:66:7f:87:12:66: ad:28:03:fe:8b:c6:ee:d7:92:7c:28:80:1b:61:09: 25:d3:e0:63:44:6d:3d:48:5b:50:d5:7d:4a:8d:91: 11:db:2a:48:74:e5:c4:9f:2d:43:28:65:e7:e3:76: 8e:96:f4:b0:be:62:5f:46:11:7c:1a:86:d4:28:00: 20:b0:32:5d:2b:aa:11:7c:5c:cb:c0:f9:b8:65:5b: e3:83:b8:0e:9e:12:8c:96:4b:4b:ef:9b:bc:cb:96: f0:ef:36:4e:86:18:d5:d9:30:b1:73:dd:5f:c4:6f: b8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A4:CD:03:E0:C7:61:A6:C6:07:71:DD:76:0D:A5:DE:98:8A:C2:1A X509v3 Authority Key Identifier: keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:54:7a:1e:09:f2:96:07:1f:c3:d9:95:d3:8d:a0:68:1d:33: ea:25:af:9b:a1:f1:ca:69:dc:ce:c5:52:a7:40:0e:ba:64:1e: 17:2c:cc:45:54:51:71:f8:11:73:6d:af:91:2a:f4:49:5a:17: 43:3e:53:01:05:82:8f:61:ff:1c:b8:97:58:17:78:a6:eb:f7: ff:9a:ae:19:14:75:a3:40:55:34:0d:c0:9d:88:bc:7a:b2:82: 57:26:6e:4e:c0:2a:6c:a0:8b:14:1e:91:d0:38:c2:21:66:5a: af:c5:6e:8c:37:97:95:90:3a:ed:3e:0b:2d:f8:66:7a:c1:86: 78:c3:c9:9a:a7:82:29:0f:bc:c4:e7:3e:27:b7:78:32:bb:51: bc:2e:34:28:17:64:ad:08:0e:02:40:ff:d0:11:76:93:67:dc: 1d:42:c9:70:66:ff:57:2d:0e:84:f6:bd:1b:12:02:5f:da:b3: 90:32:23:4f:5c:e4:fc:f0:09:ce:8d:56:08:47:75:db:ea:c9: 41:38:05:20:4c:69:3a:3c:f3:d3:68:0c:af:7e:6f:f2:42:c3: 8f:46:67:df:3d:dc:b6:28:07:ae:33:da:8b:00:ff:d2:9d:f0: 31:c0:50:7b:29:2e:da:ab:a3:0d:64:ef:6d:de:21:c7:cf:b8: 50:e3:63:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H7YhW0AdHeLqqcHLTxoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjYyY2JkNmNmN2U4MDgyMjRmNmNmODcyNWUzNmUyYTk2 NTM1MmMwHhcNMjUxMjE5MDEwMDUxWhcNMjUxMjIwMDEwMDUxWjAzMTEwLwYDVQQD Eyg5YmE0Y2QwM2UwYzc2MWE2YzYwNzcxZGQ3NjBkYTVkZTk4OGFjMjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb78pxJtAuTyxZt5t0ENgiUT9qvh CACpVhjqHyP7zHELbxblJBxAJI1kJwlhm4/9A2yjdHxC40Qcz9UpNozGWpat9v/B d8IC6zVxSdSSVj7CRvckwcw6VqKzLsMvrhpM0NiYEeA1JprvAOdmsp0ofjQpWJZA xttx9kF18CayAP0YJ3iVCMaof3e79Gtt8jJcZn+HEmatKAP+i8bu15J8KIAbYQkl 0+BjRG09SFtQ1X1KjZER2ypIdOXEny1DKGXn43aOlvSwvmJfRhF8GobUKAAgsDJd K6oRfFzLwPm4ZVvjg7gOnhKMlktL75u8y5bw7zZOhhjV2TCxc91fxG+4ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJukzQPgx2Gmxgdx3XYNpd6YisIaMB8GA1UdIwQY MBaAFM32LL1s9+gIIk9s+HJeNuKpZTUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUt ODQ5NDE3YWU2MzRkLzEvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUtODQ5NDE3YWU2MzRk LzEvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFR6Hgny lgcfw9mV042gaB0z6iWvm6HxymnczsVSp0AOumQeFyzMRVRRcfgRc22vkSr0SVoX Qz5TAQWCj2H/HLiXWBd4puv3/5quGRR1o0BVNA3AnYi8erKCVyZuTsAqbKCLFB6R 0DjCIWZar8VujDeXlZA67T4LLfhmesGGeMPJmqeCKQ+8xOc+J7d4MrtRvC40KBdk rQgOAkD/0BF2k2fcHULJcGb/Vy0OhPa9GxICX9qzkDIjT1zk/PAJzo1WCEd12+rJ QTgFIExpOjzz02gMr35v8kLDj0Zn3z3ctigHrjPaiwD/0p3wMcBQeyku2qujDWTv bd4hx8+4UONjig== -----END CERTIFICATE-----Generated at Fri Dec 19 07:49:36 2025 by rpki-client