This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft File: zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json) Hash identifier: d+dXlFJnc0iB/0K+Mzf79MV+h8N36YJg5BsPGG89vVs= Subject key identifier: 85:BD:CF:84:8A:57:D9:59:41:8D:FE:E9:B4:FF:32:A8:BD:5F:91:68 Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36 Certificate issuer: /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36 Certificate serial: 019AF12D5EF382B50DDC1A0866F7473A6715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft Manifest number: 13F2 Signing time: Sat 06 Dec 2025 01:01:13 +0000 Manifest this update: Sat 06 Dec 2025 01:01:13 +0000 Manifest next update: Sun 07 Dec 2025 01:01:13 +0000 Files and hashes: 1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: E9lQnebhDvUsTnLxI+DZAy/X3RpybaKroa16YsnIxeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5e:f3:82:b5:0d:dc:1a:08:66:f7:47:3a:67:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36 Validity Not Before: Dec 6 01:01:13 2025 GMT Not After : Dec 7 01:01:13 2025 GMT Subject: CN=85bdcf848a57d959418dfee9b4ff32a8bd5f9168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1a:ec:72:bd:29:92:7a:f6:75:e2:66:a6:b4: b8:ba:7d:75:85:93:c5:1c:48:7a:f7:c7:2b:5a:08: 0d:5c:d5:d9:14:c1:44:da:ed:f8:ce:1a:13:e4:74: 4c:59:b2:2f:ac:23:2c:7b:fb:6d:b0:40:fc:df:82: fe:ee:ed:a8:e1:99:ba:cf:6e:0f:70:8d:9d:dc:35: a7:5f:1c:38:25:a4:52:6e:0d:fa:00:4b:b4:4d:cf: 89:46:1a:4a:2a:d4:87:f6:3d:d6:56:01:e0:bc:87: f5:64:49:dd:5e:b9:be:b4:69:55:d0:9b:94:4c:63: 4a:8a:a1:64:ae:af:e4:80:e7:f8:3d:67:b8:05:81: 6f:2b:09:0e:f2:cf:55:69:3f:61:ab:07:64:46:2e: a7:67:4b:a9:a5:be:ef:92:94:b7:7d:ae:02:d2:ff: 16:e0:39:87:0f:31:dd:f4:21:5f:24:e8:9b:1e:f8: 98:3a:69:17:0d:f3:ce:fd:b0:13:c7:b2:f4:5e:99: c6:8a:57:ba:91:26:00:6f:b3:72:ee:75:b3:70:f0: 79:ef:9d:0e:e7:77:b1:3d:e5:e8:83:f1:82:c2:3e: b3:46:38:2d:a0:52:82:4a:10:16:64:35:dc:c6:85: 2a:dd:7b:28:17:67:a1:11:7e:0d:49:c0:d0:1f:e4: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BD:CF:84:8A:57:D9:59:41:8D:FE:E9:B4:FF:32:A8:BD:5F:91:68 X509v3 Authority Key Identifier: keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:36:2b:26:95:4d:64:2f:3f:2b:c0:8c:e5:cf:60:04:84:1a: 98:fb:19:b4:bd:74:57:27:c4:42:82:76:df:e8:23:5e:b3:2d: 90:9b:d0:5b:24:d3:40:be:13:67:f2:7a:f3:90:1f:c1:56:4d: 09:bb:68:28:9e:6f:27:50:fe:d7:6e:52:7f:88:7e:9b:d8:dc: 79:f3:5b:ac:4d:de:92:41:9f:6b:ec:69:d3:c2:17:1b:64:1e: f0:36:0c:47:22:b9:35:99:ea:b3:d5:7e:c7:af:6b:54:ce:aa: 7b:38:7c:29:db:bc:fc:33:f2:01:b8:30:92:e8:b2:2d:c5:50: 5c:72:b3:f2:2a:29:d2:d1:37:1e:b2:7d:cc:6e:38:fe:da:f6: e5:3f:94:ad:c5:e2:9e:89:b0:d2:bc:79:65:0c:b2:b1:b4:eb: da:43:98:c9:c3:f4:b4:4b:4c:02:72:c3:80:7a:0a:a5:cc:87: b3:92:2c:d2:5e:02:c8:ee:ea:06:5a:1c:02:65:c0:2c:fc:cb: 08:1e:84:26:fc:9c:74:96:33:72:8a:b1:f2:12:e8:eb:35:53: 07:9d:ee:be:d6:86:27:da:db:43:23:4c:66:7b:66:85:c6:0a: 60:ea:fa:58:23:7c:7a:2d:57:18:83:8d:bc:bc:bd:c4:ea:21: 13:23:5f:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLV7zgrUN3BoIZvdHOmcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDFjM2FmMmNkNTk4NjU3NWQxYmNmNjVlYzllODc3NjY2 ZWRlMzYwHhcNMjUxMjA2MDEwMTEzWhcNMjUxMjA3MDEwMTEzWjAzMTEwLwYDVQQD Eyg4NWJkY2Y4NDhhNTdkOTU5NDE4ZGZlZTliNGZmMzJhOGJkNWY5MTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRrscr0pknr2deJmprS4un11hZPF HEh698crWggNXNXZFMFE2u34zhoT5HRMWbIvrCMse/ttsED834L+7u2o4Zm6z24P cI2d3DWnXxw4JaRSbg36AEu0Tc+JRhpKKtSH9j3WVgHgvIf1ZEndXrm+tGlV0JuU TGNKiqFkrq/kgOf4PWe4BYFvKwkO8s9VaT9hqwdkRi6nZ0uppb7vkpS3fa4C0v8W 4DmHDzHd9CFfJOibHviYOmkXDfPO/bATx7L0XpnGile6kSYAb7Ny7nWzcPB5750O 53exPeXog/GCwj6zRjgtoFKCShAWZDXcxoUq3XsoF2ehEX4NScDQH+QOkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIW9z4SKV9lZQY3+6bT/Mqi9X5FoMB8GA1UdIwQY MBaAFMxBw68s1ZhlddG89l7J6Hdmbt42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YTZlNTEtNGE4Zi00MGQzLWIwZmEt NGM2NTIyNDUzYzlhLzEvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YTZlNTEtNGE4Zi00MGQzLWIwZmEtNGM2NTIyNDUzYzlh LzEvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTYrJpVN ZC8/K8CM5c9gBIQamPsZtL10VyfEQoJ23+gjXrMtkJvQWyTTQL4TZ/J685AfwVZN CbtoKJ5vJ1D+125Sf4h+m9jcefNbrE3ekkGfa+xp08IXG2Qe8DYMRyK5NZnqs9V+ x69rVM6qezh8Kdu8/DPyAbgwkuiyLcVQXHKz8iop0tE3HrJ9zG44/tr25T+UrcXi nomw0rx5ZQyysbTr2kOYycP0tEtMAnLDgHoKpcyHs5Is0l4CyO7qBlocAmXALPzL CB6EJvycdJYzcoqx8hLo6zVTB53uvtaGJ9rbQyNMZntmhcYKYOr6WCN8ei1XGION vLy9xOohEyNf3A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:15:00 2025 by rpki-client