This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft File: zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft (raw, json) Hash identifier: mDM6z6xjZk/9/6RRJlziCd6gI3AqGH/egkzwWFN6RqQ= Subject key identifier: D8:1B:0E:24:80:EB:88:07:B9:7E:5E:6F:16:7A:43:E3:12:61:8B:A9 Authority key identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14 Certificate issuer: /CN=cd35f6ff567bde93394fff282fad417da0b53614 Certificate serial: 019AF2773AA47300B49FCFBDF2202D60BF99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft Manifest number: 0E39 Signing time: Sat 06 Dec 2025 07:01:31 +0000 Manifest this update: Sat 06 Dec 2025 07:01:31 +0000 Manifest next update: Sun 07 Dec 2025 07:01:31 +0000 Files and hashes: 1: zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl (hash: 8RonaFZH7AruogjyqI+A3gNTVTsvgsv89oVGU+ukeGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:3a:a4:73:00:b4:9f:cf:bd:f2:20:2d:60:bf:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd35f6ff567bde93394fff282fad417da0b53614 Validity Not Before: Dec 6 07:01:31 2025 GMT Not After : Dec 7 07:01:31 2025 GMT Subject: CN=d81b0e2480eb8807b97e5e6f167a43e312618ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c3:ac:7f:85:05:78:54:de:6f:46:2a:f6:3d: 32:a3:c0:9e:66:81:cc:ea:da:50:42:ea:50:b3:78: 3f:07:a5:fc:69:88:94:33:9b:4b:01:da:f1:3a:de: 2b:21:f6:1d:85:6a:87:0c:a2:fe:b1:dc:f8:1a:18: 69:b6:57:8a:7d:a8:60:55:28:48:34:34:62:c0:6a: 8f:aa:3b:19:fb:6e:ab:ac:d0:59:66:25:75:fa:82: d2:eb:8a:73:30:64:88:93:4d:ac:c6:4d:74:38:c2: 5f:db:6d:58:dc:87:b3:a1:d5:09:68:dc:ca:ed:ea: 9d:d7:39:20:b1:33:94:57:2e:c7:3f:0b:b5:9f:67: 22:ea:ee:b4:9e:2c:5d:7f:e4:84:98:fc:81:aa:20: b6:94:8f:ea:38:03:d7:3b:28:d0:b7:7b:97:56:9b: d8:f1:eb:da:df:48:aa:6a:2b:15:e7:ee:45:f2:02: ce:27:f4:38:05:bf:65:b3:e3:ca:96:80:ca:5c:d7: 14:a1:92:09:76:d0:d5:5e:27:0e:96:89:f6:6f:ab: cc:e7:bc:65:2f:01:54:03:e8:84:f4:7b:b5:9f:ad: e1:a8:32:25:cc:da:83:12:25:22:b5:d1:55:e3:3a: 67:64:8d:33:79:9e:cd:1f:ab:eb:cc:88:0a:ab:4b: cd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1B:0E:24:80:EB:88:07:B9:7E:5E:6F:16:7A:43:E3:12:61:8B:A9 X509v3 Authority Key Identifier: keyid:CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4e:47:70:35:1c:fd:2b:7a:15:a9:63:55:39:21:91:6a:8c: 5d:e1:26:1a:b8:a8:51:75:2b:35:24:72:3c:39:96:9b:c5:30: 2c:50:c2:0c:79:b4:22:8f:fd:00:c4:c6:a5:2e:5d:df:c8:3e: df:c6:82:60:9a:23:2b:dd:de:40:42:09:bb:3b:2c:de:17:5d: 01:d5:45:3c:fd:41:dc:9c:04:3a:5c:85:fd:cd:c4:71:e7:0c: 23:fc:24:e1:04:6c:a6:03:f6:d6:c2:1e:6f:1e:4c:48:dc:14: 77:9b:40:84:3f:17:11:e1:ed:c9:c5:f6:3f:7f:e5:35:c2:b5: ca:ee:c9:bc:00:dc:5b:9e:0d:39:56:b4:60:2d:f6:f9:2a:c7: a2:2b:da:1b:5d:86:6e:f8:0e:31:2d:af:fc:f3:f6:6b:e7:36: d8:5d:a7:7c:c7:c9:f8:2a:41:d8:1c:34:fc:57:2b:64:07:d7: 0c:78:93:67:09:21:7f:3a:db:63:b6:c9:c1:ad:e6:3b:7a:aa: 65:7e:9a:6b:f4:eb:19:3f:5e:96:95:2a:77:33:2d:be:b3:54: 93:99:08:65:ea:41:76:d4:60:dc:c6:a2:93:d1:e7:0f:c5:d5: a7:d5:81:a3:35:2e:10:a3:88:0d:ce:da:44:30:5e:2a:6d:4c: 96:45:f9:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzqkcwC0n8+98iAtYL+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMzVmNmZmNTY3YmRlOTMzOTRmZmYyODJmYWQ0MTdkYTBi NTM2MTQwHhcNMjUxMjA2MDcwMTMxWhcNMjUxMjA3MDcwMTMxWjAzMTEwLwYDVQQD EyhkODFiMGUyNDgwZWI4ODA3Yjk3ZTVlNmYxNjdhNDNlMzEyNjE4YmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cOsf4UFeFTeb0Yq9j0yo8CeZoHM 6tpQQupQs3g/B6X8aYiUM5tLAdrxOt4rIfYdhWqHDKL+sdz4GhhptleKfahgVShI NDRiwGqPqjsZ+26rrNBZZiV1+oLS64pzMGSIk02sxk10OMJf221Y3IezodUJaNzK 7eqd1zkgsTOUVy7HPwu1n2ci6u60nixdf+SEmPyBqiC2lI/qOAPXOyjQt3uXVpvY 8eva30iqaisV5+5F8gLOJ/Q4Bb9ls+PKloDKXNcUoZIJdtDVXicOlon2b6vM57xl LwFUA+iE9Hu1n63hqDIlzNqDEiUitdFV4zpnZI0zeZ7NH6vrzIgKq0vNeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgbDiSA64gHuX5ebxZ6Q+MSYYupMB8GA1UdIwQY MBaAFM019v9We96TOU//KC+tQX2gtTYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelRYMl8xWjczcE01VF84b0w2MUJmYUMxTmhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wOWRkZGYtZjgzZi00NjUwLWEzNDct NDRhMzA3NTQ1ZDc0LzEvelRYMl8xWjczcE01VF84b0w2MUJmYUMxTmhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wOWRkZGYtZjgzZi00NjUwLWEzNDctNDRhMzA3NTQ1ZDc0 LzEvelRYMl8xWjczcE01VF84b0w2MUJmYUMxTmhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXU5HcDUc /St6FaljVTkhkWqMXeEmGrioUXUrNSRyPDmWm8UwLFDCDHm0Io/9AMTGpS5d38g+ 38aCYJojK93eQEIJuzss3hddAdVFPP1B3JwEOlyF/c3EcecMI/wk4QRspgP21sIe bx5MSNwUd5tAhD8XEeHtycX2P3/lNcK1yu7JvADcW54NOVa0YC32+SrHoivaG12G bvgOMS2v/PP2a+c22F2nfMfJ+CpB2Bw0/FcrZAfXDHiTZwkhfzrbY7bJwa3mO3qq ZX6aa/TrGT9elpUqdzMtvrNUk5kIZepBdtRg3Maik9HnD8XVp9WBozUuEKOIDc7a RDBeKm1MlkX5cA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:51 2025 by rpki-client