This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json) Hash identifier: JmnzOhn4DNqf+9u4x2M9vCZuMSnDnhdlPSQJmkXpsZc= Subject key identifier: 6E:D3:2E:C5:4A:4B:22:52:B1:F0:D2:B7:E4:7F:E4:D8:28:99:A9:22 Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a Certificate serial: 019B3CEBEB53BD19E550D0DE0DF00537EB3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft Manifest number: 165B Signing time: Sat 20 Dec 2025 18:00:52 +0000 Manifest this update: Sat 20 Dec 2025 18:00:52 +0000 Manifest next update: Sun 21 Dec 2025 18:00:52 +0000 Files and hashes: 1: 39Bz52ELCw7-ugSWUI3vnSlzFNg.roa (hash: rckVCS2UVoKbUdjWWt9CdJoQbIemzvnGfOdJDV2aAiA=) 2: Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa (hash: 6u7uSnyKmvTYrS//fLotXcXAf6aLw/ExzniA6nUG6Kk=) 3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: FZFoCouaT8ZOQqaZN9RWtQNEIGLMIrWinOYn3P6x+Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:eb:53:bd:19:e5:50:d0:de:0d:f0:05:37:eb:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a Validity Not Before: Dec 20 18:00:52 2025 GMT Not After : Dec 21 18:00:52 2025 GMT Subject: CN=6ed32ec54a4b2252b1f0d2b7e47fe4d82899a922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bd:35:4b:c6:38:fb:1d:b5:56:ca:f5:12:bb: 23:5e:d9:eb:8a:4c:5d:9b:40:01:37:61:87:0d:3d: 02:19:29:c2:ad:d7:1d:ad:54:1d:5b:db:b9:98:e4: 8d:b4:1e:24:7e:06:24:5f:4f:a0:29:8e:ae:cb:5c: c9:3b:a6:25:df:f7:57:08:11:7f:a1:5d:c1:c6:06: 71:40:36:c1:59:79:95:bf:fd:fb:be:b4:57:33:a7: f5:1e:2f:79:ad:42:3d:c0:7e:83:e4:ec:2b:15:e4: b7:5a:b2:06:43:95:2b:81:64:98:84:f9:45:4d:59: f8:99:ce:f4:9d:ce:f3:e0:3f:20:8f:77:e4:42:91: eb:6c:57:98:9e:e7:68:bf:8c:60:7a:a0:b2:9d:07: f0:1c:68:62:55:4e:b7:0e:24:8d:4f:48:01:b8:d5: d3:c9:64:2f:0c:f8:e1:c9:4c:88:ae:5f:b4:37:93: 88:9f:26:e0:9a:8e:6b:9f:07:60:1e:f8:c3:cf:ee: c9:c3:5c:6d:dc:a5:5f:96:ac:04:f8:4d:38:e3:4b: 7e:d9:12:73:ac:a1:c7:45:f9:8d:b1:a5:12:5a:ec: da:38:9a:1d:81:3b:ad:0f:d8:71:20:13:f9:01:58: 23:a0:e2:0a:3f:18:45:71:5c:35:2a:bb:83:d5:a1: aa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D3:2E:C5:4A:4B:22:52:B1:F0:D2:B7:E4:7F:E4:D8:28:99:A9:22 X509v3 Authority Key Identifier: keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:73:c8:23:55:dc:3b:8b:e9:0e:dc:00:50:59:d5:35:f8:63: 5e:34:e4:ff:25:94:39:84:f9:10:26:1a:a9:33:27:b1:35:a3: f1:0b:f6:37:38:f4:0c:02:2e:54:40:15:ea:89:d3:ba:42:f3: bb:32:18:5d:15:c8:4e:4b:74:8e:04:d4:0a:7e:3a:f5:35:57: 7f:e6:de:66:c6:9a:58:71:be:93:ee:fb:42:76:f0:85:4f:2f: 88:90:d6:c2:29:3f:cd:db:07:6a:df:36:9b:9e:b9:3a:0a:55: 8f:e8:7d:74:47:33:3a:4d:46:e5:20:07:6b:88:72:eb:ce:e6: 1a:a2:de:e1:46:0f:fd:e5:4a:b4:12:c7:01:88:d3:3e:22:ba: 6a:67:ca:88:8c:d6:b4:e1:04:68:71:dd:52:c4:86:07:00:8d: 9b:f0:d5:91:9e:09:d7:4a:52:2a:bc:1e:00:99:11:b9:89:38: a3:45:db:5d:ee:c0:22:fe:36:ca:31:94:09:f4:4c:fe:b3:a4: 70:ed:e9:bc:c7:58:4e:3e:a6:41:a8:65:ff:98:bf:4c:01:ab: d4:f6:a2:41:81:48:73:d2:ec:03:53:45:0f:15:14:12:98:71: 4c:e6:30:72:07:97:d3:17:61:d1:46:af:c3:3c:d0:5f:a5:f3: 0a:6e:9d:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86+tTvRnlUNDeDfAFN+s6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOTc3ZTlkNTJhZmJjNDc3OTlkMzk3NWZjZWU4YWM1MWNh MGNmNmEwHhcNMjUxMjIwMTgwMDUyWhcNMjUxMjIxMTgwMDUyWjAzMTEwLwYDVQQD Eyg2ZWQzMmVjNTRhNGIyMjUyYjFmMGQyYjdlNDdmZTRkODI4OTlhOTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg701S8Y4+x21Vsr1ErsjXtnrikxd m0ABN2GHDT0CGSnCrdcdrVQdW9u5mOSNtB4kfgYkX0+gKY6uy1zJO6Yl3/dXCBF/ oV3BxgZxQDbBWXmVv/37vrRXM6f1Hi95rUI9wH6D5OwrFeS3WrIGQ5UrgWSYhPlF TVn4mc70nc7z4D8gj3fkQpHrbFeYnudov4xgeqCynQfwHGhiVU63DiSNT0gBuNXT yWQvDPjhyUyIrl+0N5OInybgmo5rnwdgHvjDz+7Jw1xt3KVflqwE+E0440t+2RJz rKHHRfmNsaUSWuzaOJodgTutD9hxIBP5AVgjoOIKPxhFcVw1KruD1aGq5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7TLsVKSyJSsfDSt+R/5NgomakiMB8GA1UdIwQY MBaAFMyXfp1Sr7xHeZ05dfzuisUcoM9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTkt ZTIzMDQ2MmZjNTdiLzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTktZTIzMDQ2MmZjNTdi LzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanPII1Xc O4vpDtwAUFnVNfhjXjTk/yWUOYT5ECYaqTMnsTWj8Qv2Nzj0DAIuVEAV6onTukLz uzIYXRXITkt0jgTUCn469TVXf+beZsaaWHG+k+77QnbwhU8viJDWwik/zdsHat82 m565OgpVj+h9dEczOk1G5SAHa4hy687mGqLe4UYP/eVKtBLHAYjTPiK6amfKiIzW tOEEaHHdUsSGBwCNm/DVkZ4J10pSKrweAJkRuYk4o0XbXe7AIv42yjGUCfRM/rOk cO3pvMdYTj6mQahl/5i/TAGr1PaiQYFIc9LsA1NFDxUUEphxTOYwcgeX0xdh0Uav wzzQX6XzCm6dWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:58:01 2025 by rpki-client