This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft File: ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json) Hash identifier: /DyRy4qy6h8mt/kakYSaJiTbi1jMoJP9SSRW8hRLcbE= Subject key identifier: EF:ED:5C:79:20:C1:EC:36:E8:AF:02:74:FE:4B:DE:BC:E4:C0:42:7F Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40 Certificate issuer: /CN=ce22ec994542ca7acaadd58727e4606ab4490040 Certificate serial: 019B2C661F1A35D50E9622B6A064B3DFA648 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft Manifest number: 1063 Signing time: Wed 17 Dec 2025 13:00:48 +0000 Manifest this update: Wed 17 Dec 2025 13:00:48 +0000 Manifest next update: Thu 18 Dec 2025 13:00:48 +0000 Files and hashes: 1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: qsJoE49fFB2JXFV2J2qS9e4RT/G7PltDSDpOC+JxrAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:1f:1a:35:d5:0e:96:22:b6:a0:64:b3:df:a6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040 Validity Not Before: Dec 17 13:00:48 2025 GMT Not After : Dec 18 13:00:48 2025 GMT Subject: CN=efed5c7920c1ec36e8af0274fe4bdebce4c0427f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:1b:7b:6d:c8:b9:43:9b:82:62:fa:05:ff: 29:32:81:51:4b:73:d4:02:84:78:7c:aa:4f:0f:5d: 3d:be:f3:23:1b:59:09:c8:65:6f:a6:1a:ad:41:9e: 9c:61:53:63:d2:7f:4b:4f:fc:2b:33:3e:df:26:72: 25:8c:b0:0f:9b:54:00:30:3e:d1:0c:01:81:5d:38: 1e:d8:3a:d8:99:e5:86:07:9f:5b:6b:b3:c9:a6:c8: 46:ee:27:f8:cb:a0:f4:de:87:5d:ec:0e:04:98:41: 31:a5:3d:3a:c4:05:88:09:d9:d4:10:79:23:83:c9: 07:7d:04:74:4d:7a:b4:73:fa:15:de:f4:bf:69:e6: 5e:d1:d3:03:42:53:d4:ff:2d:43:f4:2b:b1:ed:53: 0b:56:d8:e6:7c:3d:bb:7c:49:e8:30:12:c8:3d:91: 5c:36:93:59:71:29:65:e7:d9:1e:a9:4b:13:51:50: 0b:ca:13:8a:8d:0e:cf:64:c6:0c:a0:08:0d:bd:30: 7e:1f:16:e8:c7:10:d2:c8:76:76:91:5e:28:a3:28: ae:01:a5:c3:ab:7f:5c:20:9e:09:3a:5f:d0:57:93: 74:81:fc:22:0d:7e:46:47:9b:6e:f1:c7:e1:aa:f4: b1:fb:ee:34:58:10:5a:c3:d0:46:e5:0e:1e:74:e0: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:ED:5C:79:20:C1:EC:36:E8:AF:02:74:FE:4B:DE:BC:E4:C0:42:7F X509v3 Authority Key Identifier: keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:2d:4c:1b:ba:7c:3c:17:b8:bb:f2:ed:4a:fc:2a:5a:54:7a: 1d:42:06:c4:c2:b5:7d:5f:1e:49:e3:a6:57:d7:49:9e:56:58: 59:c8:7f:2c:d2:05:28:da:ae:17:88:ed:0b:34:83:f3:01:b8: 3f:3d:80:fb:4c:17:86:2f:d0:1c:65:df:62:08:dc:55:69:00: dc:6f:ef:91:9e:44:15:c5:0f:7d:a9:e0:84:25:30:45:82:3c: 06:48:f1:08:91:bd:18:56:b4:85:c2:c2:35:53:26:09:1c:b6: cb:a8:f2:85:71:f4:51:08:32:61:44:f2:60:af:ce:07:22:b7: 4c:56:8b:cc:1d:c0:d1:52:6e:8d:b5:2f:a5:bb:6a:cc:5b:4b: 22:8a:0e:b3:6f:29:d8:17:f8:6c:5b:d4:89:ab:d3:ec:24:1c: b1:db:b7:0e:29:f4:13:b5:82:65:ce:fe:40:2c:66:55:da:dd: 58:0e:28:f7:b1:a8:78:00:47:5d:7d:29:a7:c1:b5:2b:cd:08: 4c:2e:47:4e:f2:02:80:90:e0:83:e4:1a:cc:50:b9:d6:24:d2: 17:96:ea:55:49:21:ec:72:60:9b:ce:8a:fc:da:38:17:74:0f: 0d:7f:b9:6a:92:5c:ca:88:91:8f:8d:7e:f7:b2:81:d5:bf:9c: 12:27:1d:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZh8aNdUOliK2oGSz36ZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMjJlYzk5NDU0MmNhN2FjYWFkZDU4NzI3ZTQ2MDZhYjQ0 OTAwNDAwHhcNMjUxMjE3MTMwMDQ4WhcNMjUxMjE4MTMwMDQ4WjAzMTEwLwYDVQQD EyhlZmVkNWM3OTIwYzFlYzM2ZThhZjAyNzRmZTRiZGViY2U0YzA0MjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS4be23IuUObgmL6Bf8pMoFRS3PU AoR4fKpPD109vvMjG1kJyGVvphqtQZ6cYVNj0n9LT/wrMz7fJnIljLAPm1QAMD7R DAGBXTge2DrYmeWGB59ba7PJpshG7if4y6D03odd7A4EmEExpT06xAWICdnUEHkj g8kHfQR0TXq0c/oV3vS/aeZe0dMDQlPU/y1D9Cux7VMLVtjmfD27fEnoMBLIPZFc NpNZcSll59keqUsTUVALyhOKjQ7PZMYMoAgNvTB+HxboxxDSyHZ2kV4ooyiuAaXD q39cIJ4JOl/QV5N0gfwiDX5GR5tu8cfhqvSx++40WBBaw9BG5Q4edOAIRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/tXHkgwew26K8CdP5L3rzkwEJ/MB8GA1UdIwQY MBaAFM4i7JlFQsp6yq3VhyfkYGq0SQBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82ZDk1ZjUtY2ViNS00YWUzLWE5NDMt Yjc0YTA1NmRjYmUzLzEvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy82ZDk1ZjUtY2ViNS00YWUzLWE5NDMtYjc0YTA1NmRjYmUz LzEvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeC1MG7p8 PBe4u/LtSvwqWlR6HUIGxMK1fV8eSeOmV9dJnlZYWch/LNIFKNquF4jtCzSD8wG4 Pz2A+0wXhi/QHGXfYgjcVWkA3G/vkZ5EFcUPfanghCUwRYI8BkjxCJG9GFa0hcLC NVMmCRy2y6jyhXH0UQgyYUTyYK/OByK3TFaLzB3A0VJujbUvpbtqzFtLIooOs28p 2Bf4bFvUiavT7CQcsdu3Din0E7WCZc7+QCxmVdrdWA4o97GoeABHXX0pp8G1K80I TC5HTvICgJDgg+QazFC51iTSF5bqVUkh7HJgm86K/No4F3QPDX+5apJcyoiRj41+ 97KB1b+cEicdVA== -----END CERTIFICATE-----Generated at Wed Dec 17 22:24:54 2025 by rpki-client