This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft File: z32kMRhYgiWjduwhScczbEYzZEA.mft (raw, json) Hash identifier: qLUIYhW0wd5fzdKwbLc8vCdmqJ4fcdfHTNMxveZduSI= Subject key identifier: 0E:AB:17:11:5F:52:B5:E8:6C:C7:D6:F7:5A:31:9F:FB:0F:5D:98:A2 Authority key identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40 Certificate issuer: /CN=cf7da43118588225a376ec2149c7336c46336440 Certificate serial: 019AF12ED01F92B8ED762BF8D278C6E1478C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft Manifest number: 0F7F Signing time: Sat 06 Dec 2025 01:02:48 +0000 Manifest this update: Sat 06 Dec 2025 01:02:48 +0000 Manifest next update: Sun 07 Dec 2025 01:02:48 +0000 Files and hashes: 1: z32kMRhYgiWjduwhScczbEYzZEA.crl (hash: 8JI5FYfRLbrNOJL50iFHINXcr6Vn9wLyfiPIMN9pHXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d0:1f:92:b8:ed:76:2b:f8:d2:78:c6:e1:47:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf7da43118588225a376ec2149c7336c46336440 Validity Not Before: Dec 6 01:02:48 2025 GMT Not After : Dec 7 01:02:48 2025 GMT Subject: CN=0eab17115f52b5e86cc7d6f75a319ffb0f5d98a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fc:78:09:de:0d:c9:ed:fc:a1:c6:c9:5f:51: 87:b5:52:58:00:c3:92:55:26:bd:68:86:b0:72:09: 6e:c6:32:8e:2c:8f:76:f0:70:ce:3c:21:0e:e0:b4: 0f:1f:c3:f5:ea:2d:a1:b6:3b:8b:24:2d:54:d2:fb: 7f:92:fa:50:40:f3:b2:8c:2e:34:3e:02:5c:9a:f4: 83:07:67:a2:c7:16:df:cb:d4:a6:bd:38:84:09:99: 72:cc:59:17:24:f5:c9:12:bf:aa:2e:71:63:b9:04: 77:36:70:76:9f:e9:0c:fb:7a:0b:a2:8a:a2:85:91: 37:e6:32:ec:2c:ad:d4:14:49:aa:35:50:d3:b0:ed: f3:3c:e5:3a:43:2f:3c:47:46:1a:22:85:38:d8:77: dc:20:c9:da:b9:a5:70:9c:17:2d:08:13:fd:ac:c3: bb:ca:b6:6d:c6:c0:99:83:47:0a:d4:a6:5b:80:fc: 64:11:d4:b6:e9:aa:b9:ee:5d:cf:22:38:cf:a7:37: 94:06:be:a8:20:f2:fc:97:f5:be:a7:43:b8:3f:ec: 3e:b0:b6:a1:07:fd:e0:5c:4f:49:0d:42:94:70:10: c1:99:6d:55:48:13:35:1e:c4:50:6d:e6:8f:e2:55: 83:7d:be:25:8a:f3:40:b2:16:7e:18:4c:50:af:74: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AB:17:11:5F:52:B5:E8:6C:C7:D6:F7:5A:31:9F:FB:0F:5D:98:A2 X509v3 Authority Key Identifier: keyid:CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2c:84:ff:98:28:ad:a4:fd:56:4d:ec:04:5a:d3:24:30:7b: d0:9b:56:78:b0:a2:96:0d:e9:7b:4a:15:9a:69:34:0e:47:b0: a0:da:9c:1a:77:89:f1:c0:16:8d:13:1e:51:82:76:49:55:cb: b4:ee:3e:54:66:bf:eb:05:54:2e:aa:a4:b0:b0:6c:86:51:3e: ac:35:a7:8a:a7:2f:c7:00:8b:bf:dd:95:b9:55:7c:61:fc:17: 3d:6e:b4:5d:4b:4c:86:a8:9c:8a:ff:65:25:7c:c0:fb:a1:ba: 94:f6:84:a7:51:0f:d8:df:df:8d:50:09:94:8c:33:a1:27:54: 09:cf:36:4d:7b:10:88:8c:3d:a4:ae:47:ca:d1:f2:dc:f5:9a: ad:85:5d:04:6a:9e:c1:f5:e6:94:b3:ac:e0:f5:b8:06:e4:c5: 65:1a:58:cd:de:66:78:3c:74:37:89:e7:ed:a1:6b:fc:ef:f4: 02:ec:f5:4d:02:5f:72:5a:dd:4f:b2:58:71:0c:94:bb:d1:f3: 50:c4:73:ed:48:f4:41:63:dc:73:1b:8f:e5:ec:31:db:0b:be: 7a:7c:34:3b:b5:99:e3:86:79:43:d7:23:9d:04:50:5c:09:b4: a6:0e:ab:ff:2d:a1:bb:3e:1a:62:a7:93:13:d2:1e:54:b0:eb: 5f:1b:df:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtAfkrjtdiv40njG4UeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmN2RhNDMxMTg1ODgyMjVhMzc2ZWMyMTQ5YzczMzZjNDYz MzY0NDAwHhcNMjUxMjA2MDEwMjQ4WhcNMjUxMjA3MDEwMjQ4WjAzMTEwLwYDVQQD EygwZWFiMTcxMTVmNTJiNWU4NmNjN2Q2Zjc1YTMxOWZmYjBmNWQ5OGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/x4Cd4Nye38ocbJX1GHtVJYAMOS VSa9aIawcgluxjKOLI928HDOPCEO4LQPH8P16i2htjuLJC1U0vt/kvpQQPOyjC40 PgJcmvSDB2eixxbfy9SmvTiECZlyzFkXJPXJEr+qLnFjuQR3NnB2n+kM+3oLooqi hZE35jLsLK3UFEmqNVDTsO3zPOU6Qy88R0YaIoU42HfcIMnauaVwnBctCBP9rMO7 yrZtxsCZg0cK1KZbgPxkEdS26aq57l3PIjjPpzeUBr6oIPL8l/W+p0O4P+w+sLah B/3gXE9JDUKUcBDBmW1VSBM1HsRQbeaP4lWDfb4livNAshZ+GExQr3QoNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6rFxFfUrXobMfW91oxn/sPXZiiMB8GA1UdIwQY MBaAFM99pDEYWIIlo3bsIUnHM2xGM2RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wZTRhNzUtY2I1OC00NGFhLTlkZDUt YzVmMTdlYWI0MWQ1LzEvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wZTRhNzUtY2I1OC00NGFhLTlkZDUtYzVmMTdlYWI0MWQ1 LzEvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCyE/5go raT9Vk3sBFrTJDB70JtWeLCilg3pe0oVmmk0DkewoNqcGneJ8cAWjRMeUYJ2SVXL tO4+VGa/6wVULqqksLBshlE+rDWniqcvxwCLv92VuVV8YfwXPW60XUtMhqiciv9l JXzA+6G6lPaEp1EP2N/fjVAJlIwzoSdUCc82TXsQiIw9pK5HytHy3PWarYVdBGqe wfXmlLOs4PW4BuTFZRpYzd5meDx0N4nn7aFr/O/0Auz1TQJfclrdT7JYcQyUu9Hz UMRz7Uj0QWPccxuP5ewx2wu+enw0O7WZ44Z5Q9cjnQRQXAm0pg6r/y2huz4aYqeT E9IeVLDrXxvfHw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:08 2025 by rpki-client