This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft File: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft (raw, json) Hash identifier: 3/d53lrhk5OstBzAIdd7Zg6rd8FT9xbMyMo86cqi0aQ= Subject key identifier: EB:68:43:10:9E:CE:3F:9B:9D:CD:CE:58:BF:6A:76:0B:AD:FA:4D:57 Authority key identifier: 65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C Certificate issuer: /CN=65a07d492468228aa306a66b056a0228c552ec5c Certificate serial: 019AF12DBAB69861ECF0CE690C195B83CB2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft Manifest number: 0E76 Signing time: Sat 06 Dec 2025 01:01:37 +0000 Manifest this update: Sat 06 Dec 2025 01:01:37 +0000 Manifest next update: Sun 07 Dec 2025 01:01:37 +0000 Files and hashes: 1: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl (hash: iz4+bUvbDVB3bHeEd3i9XHe0419zcZQkrosiJaU0i98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ba:b6:98:61:ec:f0:ce:69:0c:19:5b:83:cb:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a07d492468228aa306a66b056a0228c552ec5c Validity Not Before: Dec 6 01:01:37 2025 GMT Not After : Dec 7 01:01:37 2025 GMT Subject: CN=eb6843109ece3f9b9dcdce58bf6a760badfa4d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:ed:e7:34:b5:0f:8d:46:c2:67:87:37:4c: 99:56:cd:e6:56:1a:db:30:46:dc:0f:9a:94:26:43: c8:a9:db:57:ab:85:e3:5e:0d:5e:2a:f8:01:67:80: 2d:e3:8d:55:f8:fa:c5:3c:81:25:e8:c7:f7:1d:2e: 49:fd:e2:ff:98:2c:52:08:29:95:8d:64:b1:f7:90: ab:fd:e0:a0:29:f5:ea:fb:d4:56:1d:89:74:b6:ad: 4a:40:ca:dd:0b:b2:17:da:65:25:93:9a:68:d4:9e: 62:09:f4:a1:7c:5d:b1:d2:25:65:a2:3c:28:29:35: 03:71:79:af:04:59:19:7d:81:4e:ca:2d:93:8f:90: c5:b8:01:5e:c5:c5:d1:0b:c0:65:b0:1b:1c:b7:cf: d1:ac:f6:c6:0d:4e:02:d2:da:9a:23:8f:3e:b7:03: d6:d1:e2:59:b8:ed:69:6f:ef:b7:6d:13:03:52:8e: 47:a4:06:ae:75:61:1e:c3:da:12:83:40:85:73:98: 2e:15:f7:4b:26:c9:2c:da:07:d3:17:69:68:b3:08: f1:e7:d5:75:11:f2:e5:3a:90:cb:3f:9e:25:ed:22: 73:0c:2a:ab:04:1f:53:4c:d8:4c:26:4e:49:98:37: 9e:8a:81:19:6c:12:7d:f5:73:c7:65:95:45:ac:00: 1f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:68:43:10:9E:CE:3F:9B:9D:CD:CE:58:BF:6A:76:0B:AD:FA:4D:57 X509v3 Authority Key Identifier: keyid:65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:48:a8:79:07:f2:36:b1:9c:03:35:69:ed:3b:b8:97:b4:8f: 1b:a8:25:e8:01:da:e2:05:d7:7d:fb:24:ae:94:47:c3:87:75: 3f:3c:84:be:46:94:00:00:b2:5e:cb:91:22:d6:2e:e8:75:6e: 4e:60:ae:42:3e:68:d9:eb:ef:40:e8:28:bf:c9:65:cc:58:7f: b3:0c:32:07:f9:19:f8:61:0b:d1:d2:95:9f:c2:b6:0d:2a:9c: fb:05:c7:fb:a9:58:de:67:15:3c:96:60:49:3c:85:e6:2e:33: f8:a3:68:2f:ff:51:e7:8e:d7:48:91:1c:b2:1a:af:6a:12:f4: ea:3c:fd:4b:33:b3:32:58:53:ee:1a:e7:19:05:35:a3:dc:11: 4a:d0:a1:44:19:0b:ff:ac:08:39:09:cd:04:2d:b7:28:88:39: e4:1a:9c:50:2c:14:1d:03:09:b1:9c:ab:66:1f:7c:15:75:d8: 72:e6:50:06:fe:51:3c:fd:ff:7e:31:fd:0f:c1:ff:0b:fe:25: 0c:63:ba:46:f4:53:5c:20:fb:e8:a0:cf:f3:c5:9a:52:a1:14: 2f:9f:19:f5:1f:5a:f1:c4:41:ac:b6:bb:0c:3f:c8:67:32:c3: c3:29:67:e1:0a:bf:0a:78:01:89:3c:ec:2d:b5:66:9b:47:98: aa:89:47:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbq2mGHs8M5pDBlbg8ssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YTA3ZDQ5MjQ2ODIyOGFhMzA2YTY2YjA1NmEwMjI4YzU1 MmVjNWMwHhcNMjUxMjA2MDEwMTM3WhcNMjUxMjA3MDEwMTM3WjAzMTEwLwYDVQQD EyhlYjY4NDMxMDllY2UzZjliOWRjZGNlNThiZjZhNzYwYmFkZmE0ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFjt5zS1D41GwmeHN0yZVs3mVhrb MEbcD5qUJkPIqdtXq4XjXg1eKvgBZ4At441V+PrFPIEl6Mf3HS5J/eL/mCxSCCmV jWSx95Cr/eCgKfXq+9RWHYl0tq1KQMrdC7IX2mUlk5po1J5iCfShfF2x0iVlojwo KTUDcXmvBFkZfYFOyi2Tj5DFuAFexcXRC8BlsBsct8/RrPbGDU4C0tqaI48+twPW 0eJZuO1pb++3bRMDUo5HpAaudWEew9oSg0CFc5guFfdLJsks2gfTF2loswjx59V1 EfLlOpDLP54l7SJzDCqrBB9TTNhMJk5JmDeeioEZbBJ99XPHZZVFrAAf2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtoQxCezj+bnc3OWL9qdgut+k1XMB8GA1UdIwQY MBaAFGWgfUkkaCKKowamawVqAijFUuxcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xODMyOTgtZmI5OS00ZThmLTgyNjQt ZWIwM2JiYTY1YTk2LzEvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8xODMyOTgtZmI5OS00ZThmLTgyNjQtZWIwM2JiYTY1YTk2 LzEvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEioeQfy NrGcAzVp7Tu4l7SPG6gl6AHa4gXXffskrpRHw4d1PzyEvkaUAACyXsuRItYu6HVu TmCuQj5o2evvQOgov8llzFh/swwyB/kZ+GEL0dKVn8K2DSqc+wXH+6lY3mcVPJZg STyF5i4z+KNoL/9R547XSJEcshqvahL06jz9SzOzMlhT7hrnGQU1o9wRStChRBkL /6wIOQnNBC23KIg55BqcUCwUHQMJsZyrZh98FXXYcuZQBv5RPP3/fjH9D8H/C/4l DGO6RvRTXCD76KDP88WaUqEUL58Z9R9a8cRBrLa7DD/IZzLDwyln4Qq/CngBiTzs LbVmm0eYqolH5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:56 2025 by rpki-client