This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft File: ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json) Hash identifier: rM7PHm45Sl6eiGMovBtVf/4thumpUUsg4PM+IRPF7Rw= Subject key identifier: A2:03:C7:21:50:38:C3:4C:D9:52:9E:D1:A6:1B:CC:34:14:4F:38:D7 Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40 Certificate issuer: /CN=ce22ec994542ca7acaadd58727e4606ab4490040 Certificate serial: 019AF088825FFB8390A6F19F315DA3F58930 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft Manifest number: 1044 Signing time: Fri 05 Dec 2025 22:01:09 +0000 Manifest this update: Fri 05 Dec 2025 22:01:09 +0000 Manifest next update: Sat 06 Dec 2025 22:01:09 +0000 Files and hashes: 1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: k7Xsv+ZV1paygwh0tzpRNaMpzaXMK/HVRbNwB2DSLYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:82:5f:fb:83:90:a6:f1:9f:31:5d:a3:f5:89:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040 Validity Not Before: Dec 5 22:01:09 2025 GMT Not After : Dec 6 22:01:09 2025 GMT Subject: CN=a203c7215038c34cd9529ed1a61bcc34144f38d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:d8:72:ad:37:4d:cf:6e:01:5f:b5:7d:86: 55:22:7c:c1:78:7b:4a:16:3c:36:58:83:d7:4c:09: 92:f4:6f:33:81:f1:c2:a7:c4:70:cc:7e:02:61:2d: d1:07:27:fa:fb:67:ba:a9:1f:53:d5:7c:6e:a0:fc: 54:cf:97:b5:b0:b8:53:8d:dc:2c:d4:d7:32:df:7f: bc:20:76:46:f0:67:fb:ec:8d:96:16:0f:82:85:86: 3a:41:14:ad:2d:3f:0a:0e:4e:3a:cb:6a:83:b4:bb: 3c:3b:b6:a3:67:76:1b:c6:3b:bb:c0:59:ea:59:67: c9:e8:9b:79:e4:bb:66:ab:81:68:38:7d:84:84:55: f7:86:a5:28:5f:38:4f:d2:2e:2e:61:76:dc:08:89: d1:8f:48:cc:5c:d9:fd:ba:1f:0d:1a:b6:3a:2b:64: 86:b6:27:67:46:b7:4d:69:0e:d9:e8:5c:9c:0d:19: 1f:45:1e:45:a0:44:4d:7f:1a:2a:0f:4f:79:17:ed: ce:9f:f5:c7:7f:00:a0:f4:d7:e7:83:a4:ba:72:74: ee:f3:df:57:88:b5:ec:97:bb:0e:ec:11:13:56:60: d8:59:d9:c1:51:08:70:0c:27:f6:4a:de:ba:2f:29: cc:03:e5:4d:d2:d8:64:8a:7d:24:d9:0f:63:b1:eb: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:03:C7:21:50:38:C3:4C:D9:52:9E:D1:A6:1B:CC:34:14:4F:38:D7 X509v3 Authority Key Identifier: keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:58:a6:46:12:d8:b2:e8:3d:85:14:25:41:89:a1:99:50:05: a3:66:56:46:a7:d5:00:82:e0:02:1c:49:15:2b:4a:d3:ce:35: 00:47:23:82:48:15:6b:48:3e:ec:f2:38:b5:d6:e5:03:e2:61: c5:61:1e:78:4e:b8:ea:55:10:15:72:3c:26:97:73:03:fa:2a: c1:38:5d:1a:e5:92:d3:84:60:fe:f4:06:6e:00:5c:e1:f3:67: 6e:22:e4:e1:66:9e:d6:7d:97:31:5e:38:07:9a:90:9b:c5:4e: 4d:e0:c7:63:9f:8d:cf:57:00:d3:b2:81:93:89:80:b4:8c:fe: 92:04:f6:01:b5:27:4c:4b:8d:b0:45:1c:a9:fc:4e:3a:a7:d1: d4:41:7a:2f:86:6b:63:5b:4f:92:a4:94:39:78:9a:91:3a:b5: ba:e6:da:e0:25:97:2d:16:06:cd:fb:b9:66:89:74:d5:27:56: 00:f0:80:c0:46:50:c7:03:25:34:fd:dc:4b:0b:3c:df:ec:23: 53:ac:b1:91:11:b9:70:2e:dd:f4:c6:63:f5:2b:1d:6b:1b:6d: 96:47:1e:df:7f:20:29:ea:96:2a:5f:9f:e3:36:74:2a:53:7b: 5d:79:4a:a7:da:90:a7:3c:5d:3b:33:d4:11:2b:bd:e2:56:4c: 1c:5c:31:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiIJf+4OQpvGfMV2j9YkwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMjJlYzk5NDU0MmNhN2FjYWFkZDU4NzI3ZTQ2MDZhYjQ0 OTAwNDAwHhcNMjUxMjA1MjIwMTA5WhcNMjUxMjA2MjIwMTA5WjAzMTEwLwYDVQQD EyhhMjAzYzcyMTUwMzhjMzRjZDk1MjllZDFhNjFiY2MzNDE0NGYzOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ/Ycq03Tc9uAV+1fYZVInzBeHtK Fjw2WIPXTAmS9G8zgfHCp8RwzH4CYS3RByf6+2e6qR9T1XxuoPxUz5e1sLhTjdws 1Ncy33+8IHZG8Gf77I2WFg+ChYY6QRStLT8KDk46y2qDtLs8O7ajZ3Ybxju7wFnq WWfJ6Jt55Ltmq4FoOH2EhFX3hqUoXzhP0i4uYXbcCInRj0jMXNn9uh8NGrY6K2SG tidnRrdNaQ7Z6FycDRkfRR5FoERNfxoqD095F+3On/XHfwCg9Nfng6S6cnTu899X iLXsl7sO7BETVmDYWdnBUQhwDCf2St66LynMA+VN0thkin0k2Q9jseupvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIDxyFQOMNM2VKe0aYbzDQUTzjXMB8GA1UdIwQY MBaAFM4i7JlFQsp6yq3VhyfkYGq0SQBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82ZDk1ZjUtY2ViNS00YWUzLWE5NDMt Yjc0YTA1NmRjYmUzLzEvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy82ZDk1ZjUtY2ViNS00YWUzLWE5NDMtYjc0YTA1NmRjYmUz LzEvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFimRhLY sug9hRQlQYmhmVAFo2ZWRqfVAILgAhxJFStK0841AEcjgkgVa0g+7PI4tdblA+Jh xWEeeE646lUQFXI8JpdzA/oqwThdGuWS04Rg/vQGbgBc4fNnbiLk4Wae1n2XMV44 B5qQm8VOTeDHY5+Nz1cA07KBk4mAtIz+kgT2AbUnTEuNsEUcqfxOOqfR1EF6L4Zr Y1tPkqSUOXiakTq1uuba4CWXLRYGzfu5Zol01SdWAPCAwEZQxwMlNP3cSws83+wj U6yxkRG5cC7d9MZj9Ssdaxttlkce338gKeqWKl+f4zZ0KlN7XXlKp9qQpzxdOzPU ESu94lZMHFwxTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:08 2025 by rpki-client