This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft File: zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json) Hash identifier: ++so5pA3cguvfbvyUHEK035196Va5aCw/AAu+CxqCpk= Subject key identifier: 92:73:26:0A:55:40:BC:9C:49:E9:4E:0E:B2:67:08:3F:63:E6:92:0C Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd Certificate serial: 019B183AECC72A7F5C5F5A173C715C7F0A63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft Manifest number: 0F06 Signing time: Sat 13 Dec 2025 15:01:13 +0000 Manifest this update: Sat 13 Dec 2025 15:01:13 +0000 Manifest next update: Sun 14 Dec 2025 15:01:13 +0000 Files and hashes: 1: TvLjh2HZ_d_rU4Q7CUAOZ93ZHYk.roa (hash: UVHQPQPEMrt8FraIptsGKJQLRzbjMltNPf+IrL/aqn4=) 2: _51jX_RgZUWiVEK-S_q11tdiAsw.roa (hash: ojYxEEbJ9SvKIYoya6or2Wh9tzHv7tWRka6iaB4zigM=) 3: bvBCOOZR_53uuydhAIJbHOE_y50.roa (hash: O8HiOtyZpJTxAkEZvvlqiB0vlYICj10yBc68YG6rua0=) 4: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: kMz5KcIx+ABU9lDm0E9T5VWn3CauO6+4xTuid6dTKkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:3a:ec:c7:2a:7f:5c:5f:5a:17:3c:71:5c:7f:0a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd Validity Not Before: Dec 13 15:01:13 2025 GMT Not After : Dec 14 15:01:13 2025 GMT Subject: CN=9273260a5540bc9c49e94e0eb267083f63e6920c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:cf:ba:ed:8a:fa:87:e9:af:f5:94:b7:d6: ef:81:7a:f2:83:83:dd:ea:79:d5:4f:2d:ab:a9:bb: 1e:06:15:29:ce:34:d7:0c:f4:b3:8f:92:09:d7:07: 70:2a:b6:39:09:a8:73:8b:c3:61:9d:a0:70:d8:f3: e6:ae:5b:3f:72:57:d6:32:69:82:c0:86:50:e0:c9: a6:cc:32:22:01:1e:c1:38:a2:94:78:08:c6:81:0e: 95:ca:9a:9f:18:c0:80:b1:d4:a3:20:8b:a1:36:a9: 96:1f:97:41:4b:24:5a:62:e0:6c:53:ab:b2:f7:09: 96:b2:64:65:5c:ed:57:97:eb:6a:17:b2:82:2e:56: 90:58:20:8c:28:ee:e8:90:fe:ce:20:d2:9e:6e:2a: 64:a5:34:24:91:53:33:ce:10:cf:29:11:41:d9:9d: 10:6a:2a:4b:ec:63:28:c4:e4:cf:15:65:17:d6:d7: ce:bf:39:5d:28:d5:41:b6:c1:cf:bc:22:c1:cf:1c: 52:8d:cd:f3:ee:5c:0c:52:0a:f5:df:78:6c:f3:ec: e1:73:dc:5e:a3:a3:1e:e3:3b:6b:e7:1e:eb:f9:73: 54:04:9b:cf:94:d1:d5:99:97:8e:6f:27:4d:ef:74: 0e:8a:bd:f0:91:0a:25:f6:58:5a:9d:17:97:84:30: 66:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:73:26:0A:55:40:BC:9C:49:E9:4E:0E:B2:67:08:3F:63:E6:92:0C X509v3 Authority Key Identifier: keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ba:46:a6:9f:b6:b5:94:ce:f1:15:3a:dd:a1:ed:b2:ff:4b: 9f:2c:ba:14:d7:79:9e:4f:17:e2:63:f9:53:b9:11:8a:f1:b9: d8:fb:39:c3:8d:b4:08:43:d3:6c:4d:1a:58:b6:e2:04:7b:68: f9:cb:f2:b1:42:79:35:65:9a:30:2e:71:81:d1:73:20:22:3d: 3a:8e:6f:ca:23:61:65:d7:23:7f:ec:96:f9:60:f2:ee:68:98: 6f:d9:cf:91:6a:fc:2a:79:d0:89:d4:14:92:ce:23:f2:39:47: cb:5c:bb:dd:44:57:10:16:fd:55:56:a0:7a:19:ea:43:66:4c: 61:b8:54:cd:57:91:43:98:40:15:a5:df:86:48:0d:2b:5f:86: 7e:50:76:d1:ba:5f:01:79:02:1e:77:ab:b9:17:2e:28:1b:a9: 85:86:0d:49:86:72:e7:d3:03:dc:38:07:30:07:a4:af:a6:1c: 19:02:0f:ee:44:1e:27:18:d8:77:9c:ea:4d:17:5e:a4:e5:1f: d4:97:1d:14:32:0f:3c:f3:df:fc:54:c0:e2:8c:7f:1f:bb:da: 8a:16:3d:34:ec:07:fb:1a:37:3b:f6:61:c1:31:a1:77:92:cc: c2:84:4d:6f:5c:a9:24:8d:47:c9:66:1f:25:0c:c9:2f:65:ce: 94:ae:4c:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYOuzHKn9cX1oXPHFcfwpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZGI2ZjEwMDMwZTI3NmY4MzE2Mjc2ZjQwYjNkNGE0MTg0 ZDk0ZGQwHhcNMjUxMjEzMTUwMTEzWhcNMjUxMjE0MTUwMTEzWjAzMTEwLwYDVQQD Eyg5MjczMjYwYTU1NDBiYzljNDllOTRlMGViMjY3MDgzZjYzZTY5MjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUPPuu2K+ofpr/WUt9bvgXryg4Pd 6nnVTy2rqbseBhUpzjTXDPSzj5IJ1wdwKrY5Cahzi8NhnaBw2PPmrls/clfWMmmC wIZQ4MmmzDIiAR7BOKKUeAjGgQ6VypqfGMCAsdSjIIuhNqmWH5dBSyRaYuBsU6uy 9wmWsmRlXO1Xl+tqF7KCLlaQWCCMKO7okP7OINKebipkpTQkkVMzzhDPKRFB2Z0Q aipL7GMoxOTPFWUX1tfOvzldKNVBtsHPvCLBzxxSjc3z7lwMUgr133hs8+zhc9xe o6Me4ztr5x7r+XNUBJvPlNHVmZeObydN73QOir3wkQol9lhanReXhDBmhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJzJgpVQLycSelODrJnCD9j5pIMMB8GA1UdIwQY MBaAFM3bbxADDidvgxYnb0Cz1KQYTZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2Ut ODBiMmQyNWJmOWM4LzEvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2UtODBiMmQyNWJmOWM4 LzEvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLpGpp+2 tZTO8RU63aHtsv9Lnyy6FNd5nk8X4mP5U7kRivG52Ps5w420CEPTbE0aWLbiBHto +cvysUJ5NWWaMC5xgdFzICI9Oo5vyiNhZdcjf+yW+WDy7miYb9nPkWr8KnnQidQU ks4j8jlHy1y73URXEBb9VVagehnqQ2ZMYbhUzVeRQ5hAFaXfhkgNK1+GflB20bpf AXkCHneruRcuKBuphYYNSYZy59MD3DgHMAekr6YcGQIP7kQeJxjYd5zqTRdepOUf 1JcdFDIPPPPf/FTA4ox/H7vaihY9NOwH+xo3O/ZhwTGhd5LMwoRNb1ypJI1HyWYf JQzJL2XOlK5M/A== -----END CERTIFICATE-----Generated at Sun Dec 14 00:06:46 2025 by rpki-client