This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft File: Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json) Hash identifier: RcFW92uycDa3Ba/2oWU0N00UvxqhVuLi1X9zW30IdUU= Subject key identifier: 6E:9D:4D:83:04:26:E4:12:AF:89:C6:90:D0:BA:6C:AB:7D:9A:E6:80 Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3 Certificate issuer: /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3 Certificate serial: 019AF50B0AA49C23EA7CF3E24FA1B67288FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft Manifest number: 0B6F Signing time: Sat 06 Dec 2025 19:02:12 +0000 Manifest this update: Sat 06 Dec 2025 19:02:12 +0000 Manifest next update: Sun 07 Dec 2025 19:02:12 +0000 Files and hashes: 1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: hqf7xsexKMv2yZG1VBJhvTVsm4doSHD2H6/Pg+1qYDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:0a:a4:9c:23:ea:7c:f3:e2:4f:a1:b6:72:88:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3 Validity Not Before: Dec 6 19:02:12 2025 GMT Not After : Dec 7 19:02:12 2025 GMT Subject: CN=6e9d4d830426e412af89c690d0ba6cab7d9ae680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:2b:ad:80:77:1e:bf:4f:ce:5c:90:a4:b5: ee:08:38:ba:86:3b:66:87:c8:89:b8:11:4a:11:6a: 50:d6:31:0d:4a:f0:bb:7a:52:e8:39:87:79:d0:8b: d7:32:92:fa:d6:0c:cf:45:e7:78:48:53:32:f4:a9: f1:97:59:69:65:e0:b8:a2:11:20:03:08:55:c9:2b: 30:14:96:fe:f2:90:61:e8:70:33:97:c2:fd:99:8a: e1:0c:de:bb:3b:57:c7:ae:65:42:eb:9c:a5:57:18: db:27:3a:ac:35:f2:0a:0d:e9:7e:84:0a:56:bc:8e: 00:d3:c3:8f:05:99:65:bc:d0:5a:78:e4:04:49:05: bf:30:20:e5:b6:ca:71:25:76:ef:dc:52:ce:a2:bc: 8f:e0:89:13:93:fd:16:38:13:35:d1:7e:94:21:f9: 12:e5:c9:5c:d7:79:2f:88:c6:5e:bb:fc:82:91:64: 44:b2:46:a6:8c:e1:a0:70:86:eb:34:6d:34:5f:72: aa:98:e9:8a:10:5b:d1:4d:05:5f:11:89:70:30:85: 08:29:3e:1f:d7:6a:53:f0:91:b5:97:32:86:e1:97: 74:a4:30:d5:38:d6:29:bf:bd:91:14:bc:84:12:0e: dc:46:02:46:8f:44:a0:c8:68:3c:cf:81:e7:7b:1b: 53:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9D:4D:83:04:26:E4:12:AF:89:C6:90:D0:BA:6C:AB:7D:9A:E6:80 X509v3 Authority Key Identifier: keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d5:ed:74:89:52:82:9e:39:f6:be:18:bd:ee:8f:dd:e1:50: 3b:1f:2d:7d:b1:4e:d8:56:90:d7:15:fd:c2:d0:13:1c:49:87: f2:5b:9e:6e:56:1a:bd:97:e1:45:33:5f:7b:30:fe:3a:ba:c7: 34:a2:01:98:f7:5a:6c:63:cf:9e:cc:49:9e:5a:32:ff:fe:2b: 23:63:25:58:96:92:27:1e:33:64:03:5e:32:41:a6:44:21:7d: a9:d0:be:ba:a1:f2:4b:3c:cf:52:8b:c4:4e:47:2b:70:c9:d5: 86:35:4a:1f:4a:fd:a8:83:a4:24:7c:ee:d3:5e:f1:f1:54:d5: ee:66:ed:db:5f:7e:ac:f5:4c:78:94:d0:19:db:ab:55:25:4b: bb:e5:2a:fd:0b:8a:6b:e8:40:08:17:14:a9:55:c3:f3:10:db: 27:3a:c0:cd:6f:0e:49:cc:7e:ee:86:ee:92:39:de:53:bc:28: e5:e3:99:92:84:60:33:66:1c:1b:bd:1a:37:9a:77:07:c6:08: 4d:dd:c4:e0:18:a7:8c:75:92:5b:e8:5c:95:d3:d7:52:7d:0f: d5:b0:93:8f:a9:ed:3b:bc:0a:92:0e:37:6b:fb:e6:c9:ef:f7: 6f:25:5b:8f:57:bd:21:8a:0c:5e:1a:40:f3:a4:87:35:0f:1b: 16:42:8f:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CwqknCPqfPPiT6G2coj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MWYyZGE2YzJkZjk0YTdkMDVhN2VlNDAxZmNmZTMxNjg2 NDBhYzMwHhcNMjUxMjA2MTkwMjEyWhcNMjUxMjA3MTkwMjEyWjAzMTEwLwYDVQQD Eyg2ZTlkNGQ4MzA0MjZlNDEyYWY4OWM2OTBkMGJhNmNhYjdkOWFlNjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQUrrYB3Hr9PzlyQpLXuCDi6hjtm h8iJuBFKEWpQ1jENSvC7elLoOYd50IvXMpL61gzPRed4SFMy9Knxl1lpZeC4ohEg AwhVySswFJb+8pBh6HAzl8L9mYrhDN67O1fHrmVC65ylVxjbJzqsNfIKDel+hApW vI4A08OPBZllvNBaeOQESQW/MCDltspxJXbv3FLOoryP4IkTk/0WOBM10X6UIfkS 5clc13kviMZeu/yCkWREskamjOGgcIbrNG00X3KqmOmKEFvRTQVfEYlwMIUIKT4f 12pT8JG1lzKG4Zd0pDDVONYpv72RFLyEEg7cRgJGj0SgyGg8z4HnextT6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6dTYMEJuQSr4nGkNC6bKt9muaAMB8GA1UdIwQY MBaAFGYfLabC35Sn0Fp+5AH8/jFoZArDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83OTJkZGUtMTZiNC00ZDcyLTkzMWIt MGE3MWZiOTJkNDJhLzEvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83OTJkZGUtMTZiNC00ZDcyLTkzMWItMGE3MWZiOTJkNDJh LzEvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9XtdIlS gp459r4Yve6P3eFQOx8tfbFO2FaQ1xX9wtATHEmH8lueblYavZfhRTNfezD+OrrH NKIBmPdabGPPnsxJnloy//4rI2MlWJaSJx4zZANeMkGmRCF9qdC+uqHySzzPUovE TkcrcMnVhjVKH0r9qIOkJHzu017x8VTV7mbt219+rPVMeJTQGdurVSVLu+Uq/QuK a+hACBcUqVXD8xDbJzrAzW8OScx+7obukjneU7wo5eOZkoRgM2YcG70aN5p3B8YI Td3E4BinjHWSW+hcldPXUn0P1bCTj6ntO7wKkg43a/vmye/3byVbj1e9IYoMXhpA 86SHNQ8bFkKP8g== -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:21 2025 by rpki-client