This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json) Hash identifier: pWLO++w5d5AdqRvGuG5HvGzVs/y7ssHSnUTU20XSk7Y= Subject key identifier: 99:36:46:CE:F7:43:B1:91:D6:81:CC:7F:4D:63:A1:D7:0E:65:94:1C Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d Certificate serial: 019B08FE6F5D461B78640BE981A36E30A3DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft Manifest number: 176D Signing time: Wed 10 Dec 2025 16:00:50 +0000 Manifest this update: Wed 10 Dec 2025 16:00:50 +0000 Manifest next update: Thu 11 Dec 2025 16:00:50 +0000 Files and hashes: 1: puw08h74TtFA6oc3LqSJELivWac.roa (hash: 6izoAc/QEsoM8sPaZbI92YMt+TMYy+EV7r4bwPmo4dA=) 2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: ec2T0W2W9vI4qLP4xi5UD9llFYpMjk7kDS1Pt331CYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fe:6f:5d:46:1b:78:64:0b:e9:81:a3:6e:30:a3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d Validity Not Before: Dec 10 16:00:50 2025 GMT Not After : Dec 11 16:00:50 2025 GMT Subject: CN=993646cef743b191d681cc7f4d63a1d70e65941c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:66:3a:b6:2d:d0:a0:6d:7f:b5:4a:37:dc:ad: 9c:8c:fc:b4:da:a0:3a:c2:d9:60:03:64:4d:c6:a2: 3d:48:bb:3a:05:d5:84:99:2d:22:b3:e7:da:1a:f7: 96:30:84:0a:0e:76:f6:02:e3:d1:4b:86:64:46:64: 79:64:7f:0c:94:34:79:ac:5b:6e:19:d6:4e:de:7a: 1c:36:c5:02:52:18:1a:71:4f:e0:8a:aa:21:db:c6: 84:79:f4:e1:70:e9:a4:c4:46:05:41:e6:7e:c1:5c: 10:c0:c5:fd:f9:a8:cd:ef:fb:c6:fa:e4:22:1e:6c: a9:a8:38:c5:70:6f:82:f1:68:36:8f:c7:b6:e2:48: 3b:7c:fb:a7:9e:99:45:0b:60:65:49:95:b0:aa:cf: 45:38:8b:9c:67:ee:f6:6a:ae:9f:3a:6e:fc:39:cb: 1d:ea:e7:11:dc:66:f6:dd:0f:a9:3f:a9:92:01:7b: 28:3e:6e:b9:f2:ef:85:63:87:fe:b8:82:b0:12:5d: 26:d7:f9:7d:e9:8f:26:21:74:77:ee:5e:d6:db:10: 09:7c:07:03:84:99:f3:28:cf:62:bb:4f:c0:19:f5: 07:59:31:30:0c:18:70:a9:07:df:68:d1:ee:5c:d2: c5:ca:4c:01:1e:1e:31:b2:24:e6:4c:97:ec:17:0e: a8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:36:46:CE:F7:43:B1:91:D6:81:CC:7F:4D:63:A1:D7:0E:65:94:1C X509v3 Authority Key Identifier: keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:7d:19:3a:74:83:23:86:05:3e:d6:6a:b7:a9:db:b2:75:19: fc:48:2e:94:20:18:1b:fd:5b:47:b6:36:12:e3:10:cc:75:58: 50:2e:93:cb:55:98:17:63:5a:90:b8:20:94:43:9f:6c:2a:ac: a2:3a:02:a6:4d:bd:a1:6b:bc:26:30:40:53:0e:f9:47:a2:8e: d5:7d:8e:0e:d9:13:31:a2:88:2d:ac:55:74:5c:f1:29:93:af: 57:4d:7b:38:db:9a:65:74:37:dd:ac:6e:d3:6a:e3:da:b0:4b: fd:03:49:aa:72:41:35:be:86:8e:ff:aa:26:1f:af:fc:a3:ca: 86:45:95:56:77:a1:0a:99:37:fd:d2:a0:c1:ab:2a:30:e5:fb: f3:01:ad:2e:01:e1:fc:b2:09:c9:19:66:4e:d6:bc:90:0f:e9: f7:f0:fb:af:03:1d:7e:8d:f9:36:76:93:d0:5e:c7:92:fd:a1: 46:94:59:d6:3f:92:6e:cf:8a:bb:e6:cf:1a:7c:a6:c8:6b:41: 11:37:9f:cd:6c:78:5f:42:33:28:81:d9:f7:b2:3f:16:37:4e: c3:51:b0:bb:a0:f4:09:77:65:c2:91:ae:f2:c8:ba:60:88:9a: 25:af:ec:8f:5b:61:91:b2:3c:56:f1:c4:fb:d3:a3:f9:3d:2a: 29:47:2e:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsI/m9dRht4ZAvpgaNuMKPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMmIxMGQ4OWI1NTM3OTEzNTAzMTI3ZWI4NzIyNmFmYjg5 ZDFiMmQwHhcNMjUxMjEwMTYwMDUwWhcNMjUxMjExMTYwMDUwWjAzMTEwLwYDVQQD Eyg5OTM2NDZjZWY3NDNiMTkxZDY4MWNjN2Y0ZDYzYTFkNzBlNjU5NDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGY6ti3QoG1/tUo33K2cjPy02qA6 wtlgA2RNxqI9SLs6BdWEmS0is+faGveWMIQKDnb2AuPRS4ZkRmR5ZH8MlDR5rFtu GdZO3nocNsUCUhgacU/giqoh28aEefThcOmkxEYFQeZ+wVwQwMX9+ajN7/vG+uQi HmypqDjFcG+C8Wg2j8e24kg7fPunnplFC2BlSZWwqs9FOIucZ+72aq6fOm78Ocsd 6ucR3Gb23Q+pP6mSAXsoPm658u+FY4f+uIKwEl0m1/l96Y8mIXR37l7W2xAJfAcD hJnzKM9iu0/AGfUHWTEwDBhwqQffaNHuXNLFykwBHh4xsiTmTJfsFw6oVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJk2Rs73Q7GR1oHMf01jodcOZZQcMB8GA1UdIwQY MBaAFM4rENibVTeRNQMSfrhyJq+4nRstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kM2IyNjMtYjBmMS00YTZiLTkxMmUt MzczZGRhNDNmNzkyLzEvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9kM2IyNjMtYjBmMS00YTZiLTkxMmUtMzczZGRhNDNmNzky LzEvemlzUTJKdFZONUUxQXhKLXVISW1yN2lkR3kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFn0ZOnSD I4YFPtZqt6nbsnUZ/EgulCAYG/1bR7Y2EuMQzHVYUC6Ty1WYF2NakLgglEOfbCqs ojoCpk29oWu8JjBAUw75R6KO1X2ODtkTMaKILaxVdFzxKZOvV017ONuaZXQ33axu 02rj2rBL/QNJqnJBNb6Gjv+qJh+v/KPKhkWVVnehCpk3/dKgwasqMOX78wGtLgHh /LIJyRlmTta8kA/p9/D7rwMdfo35NnaT0F7Hkv2hRpRZ1j+Sbs+Ku+bPGnymyGtB ETefzWx4X0IzKIHZ97I/FjdOw1Gwu6D0CXdlwpGu8si6YIiaJa/sj1thkbI8VvHE +9Oj+T0qKUcu0A== -----END CERTIFICATE-----Generated at Wed Dec 10 18:39:20 2025 by rpki-client