This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft File: ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft (raw, json) Hash identifier: 6ZAZhNEgRj7kfeePk2K1leVmqeYJGybeM9BNK7KOy80= Subject key identifier: 97:47:4B:2C:57:EC:F2:F7:88:68:1F:81:96:18:82:77:4B:74:1B:37 Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63 Certificate issuer: /CN=67147694fd17eb2d16fed7f735d7a11ddd451963 Certificate serial: 019B59AC69BBC68C84D91A33764EE5A6D64A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft Manifest number: 12DA Signing time: Fri 26 Dec 2025 08:00:29 +0000 Manifest this update: Fri 26 Dec 2025 08:00:29 +0000 Manifest next update: Sat 27 Dec 2025 08:00:29 +0000 Files and hashes: 1: W5Hmap82286bMvYRGfhj5P6hiJY.roa (hash: /qhhKBqlDLllBtHRejTtA1t4Bm+9enZEcvJRIbXk7e8=) 2: ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl (hash: VGfo1Eq5ES6VH62mburQrwQgjq78hJq9BDLd/va4S7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:69:bb:c6:8c:84:d9:1a:33:76:4e:e5:a6:d6:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963 Validity Not Before: Dec 26 08:00:29 2025 GMT Not After : Dec 27 08:00:29 2025 GMT Subject: CN=97474b2c57ecf2f788681f81961882774b741b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:44:1e:0c:34:cd:5d:45:ba:da:4c:cb:12: 32:97:bd:5e:a8:a7:0a:de:cc:49:b3:3b:a2:ff:c7: a9:b1:bf:31:88:d8:ba:69:e7:80:1f:af:65:04:6a: 0b:43:bd:b5:b1:24:97:b5:94:77:99:e4:43:44:35: ad:5e:44:38:09:b4:37:25:2e:a0:72:44:9f:ff:cd: 2c:69:33:15:85:cf:6f:bc:fe:1e:f4:d6:38:0a:66: 31:15:a4:37:02:fd:53:29:d4:38:70:68:c8:a5:87: ca:c7:25:89:da:2c:18:d6:41:ac:e0:49:d2:c6:de: fc:55:ed:ca:97:c6:70:39:06:73:91:e6:bb:c3:b7: 88:a9:26:64:5e:01:4f:50:95:1d:ac:3f:b0:45:bd: b3:2d:1f:ff:08:f1:ff:4c:43:8c:83:85:83:af:43: 17:77:8a:03:e4:4c:b6:40:32:4d:a3:48:87:47:c1: 81:3d:f4:3e:d9:d9:6b:4b:d9:47:e1:96:aa:20:68: ba:08:db:ea:14:e8:9c:79:e4:08:32:69:27:5c:59: f7:b1:90:db:5d:c6:e9:6e:e2:1e:1c:9d:6f:00:fb: 4d:d6:93:48:10:b0:7c:b0:0d:57:85:58:1c:f2:74: 43:56:cd:ef:4b:5b:54:f5:d4:cf:c2:cb:5e:32:3c: 50:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:47:4B:2C:57:EC:F2:F7:88:68:1F:81:96:18:82:77:4B:74:1B:37 X509v3 Authority Key Identifier: keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:5e:af:0e:31:09:6c:f6:34:2e:db:47:49:7a:ca:ce:50:11: 8d:8a:0a:07:b0:9d:b6:66:0d:34:e8:d4:1e:83:ce:7b:f3:ea: 05:35:a4:0d:73:0e:63:2a:09:0f:38:5f:4c:77:d6:d0:10:48: 18:1f:61:06:c9:c9:36:04:62:69:1a:b9:f7:4d:24:98:d7:4e: 74:61:9d:e1:84:f3:42:69:c5:40:9d:4a:d8:d3:e4:cf:8f:5b: a8:42:12:16:d7:ea:04:d9:4c:97:4c:da:e6:c9:be:93:50:0c: f0:01:59:b8:06:ee:03:a4:d7:50:55:30:42:23:63:c9:35:37: 28:f3:13:e7:4a:54:3d:22:39:c6:0d:dc:72:4a:0b:34:85:e1: 9a:17:48:43:c1:47:3f:0b:de:7d:08:3b:19:df:c1:af:78:17: 62:df:46:5e:2b:10:cc:49:91:03:cb:69:25:57:ea:b3:e4:76: d3:75:39:f8:30:51:1f:c5:d3:aa:11:a0:81:fe:d6:c1:51:08: fe:b6:3f:3c:7c:6e:99:32:8f:a7:e3:03:24:62:09:eb:d8:86: 86:58:91:e1:5e:a8:21:8a:23:55:ff:b6:90:3b:f2:e7:7a:9f: 2d:06:fd:3c:16:59:a3:07:13:8a:19:30:c9:0e:e0:ed:4d:9d: 93:27:a3:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrGm7xoyE2Rozdk7lptZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MTQ3Njk0ZmQxN2ViMmQxNmZlZDdmNzM1ZDdhMTFkZGQ0 NTE5NjMwHhcNMjUxMjI2MDgwMDI5WhcNMjUxMjI3MDgwMDI5WjAzMTEwLwYDVQQD Eyg5NzQ3NGIyYzU3ZWNmMmY3ODg2ODFmODE5NjE4ODI3NzRiNzQxYjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUhEHgw0zV1FutpMyxIyl71eqKcK 3sxJszui/8epsb8xiNi6aeeAH69lBGoLQ721sSSXtZR3meRDRDWtXkQ4CbQ3JS6g ckSf/80saTMVhc9vvP4e9NY4CmYxFaQ3Av1TKdQ4cGjIpYfKxyWJ2iwY1kGs4EnS xt78Ve3Kl8ZwOQZzkea7w7eIqSZkXgFPUJUdrD+wRb2zLR//CPH/TEOMg4WDr0MX d4oD5Ey2QDJNo0iHR8GBPfQ+2dlrS9lH4ZaqIGi6CNvqFOiceeQIMmknXFn3sZDb XcbpbuIeHJ1vAPtN1pNIELB8sA1XhVgc8nRDVs3vS1tU9dTPwsteMjxQLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdHSyxX7PL3iGgfgZYYgndLdBs3MB8GA1UdIwQY MBaAFGcUdpT9F+stFv7X9zXXoR3dRRljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnhSMmxQMFg2eTBXX3RmM05kZWhIZDFGR1dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kZTE5MGItNzMzNS00ODE2LWE3MTEt ZGNjYWQwMjExMzI3LzEvWnhSMmxQMFg2eTBXX3RmM05kZWhIZDFGR1dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kZTE5MGItNzMzNS00ODE2LWE3MTEtZGNjYWQwMjExMzI3 LzEvWnhSMmxQMFg2eTBXX3RmM05kZWhIZDFGR1dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeV6vDjEJ bPY0LttHSXrKzlARjYoKB7CdtmYNNOjUHoPOe/PqBTWkDXMOYyoJDzhfTHfW0BBI GB9hBsnJNgRiaRq5900kmNdOdGGd4YTzQmnFQJ1K2NPkz49bqEISFtfqBNlMl0za 5sm+k1AM8AFZuAbuA6TXUFUwQiNjyTU3KPMT50pUPSI5xg3cckoLNIXhmhdIQ8FH PwvefQg7Gd/Br3gXYt9GXisQzEmRA8tpJVfqs+R203U5+DBRH8XTqhGggf7WwVEI /rY/PHxumTKPp+MDJGIJ69iGhliR4V6oIYojVf+2kDvy53qfLQb9PBZZowcTihkw yQ7g7U2dkyejmQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:58 2025 by rpki-client