This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft File: zWv2DrCPHiOrqLp5fBFyREzhW3E.mft (raw, json) Hash identifier: G1UgqpU57ktgy2lYJnLAJbdcmesFDwy6OXMBTaaOj94= Subject key identifier: 9A:3A:CF:E4:69:B6:4D:9A:6F:C4:90:19:43:51:85:81:81:FC:62:24 Authority key identifier: CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71 Certificate issuer: /CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71 Certificate serial: 019AF31D2FB224BA71503DEA34D4E864D9A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft Manifest number: 1210 Signing time: Sat 06 Dec 2025 10:02:47 +0000 Manifest this update: Sat 06 Dec 2025 10:02:47 +0000 Manifest next update: Sun 07 Dec 2025 10:02:47 +0000 Files and hashes: 1: zWv2DrCPHiOrqLp5fBFyREzhW3E.crl (hash: IT2vJU0bsm4jsuFChmQC4eSBbuOtV3Em33Yr3VxIw+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:2f:b2:24:ba:71:50:3d:ea:34:d4:e8:64:d9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71 Validity Not Before: Dec 6 10:02:47 2025 GMT Not After : Dec 7 10:02:47 2025 GMT Subject: CN=9a3acfe469b64d9a6fc490194351858181fc6224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0e:1f:b0:56:d5:bb:73:32:9e:b9:5d:c0:d3: c3:a4:6a:30:69:75:2e:f0:47:47:92:43:ff:4e:04: 79:6a:f4:71:5e:25:7b:63:3b:80:fc:34:3c:7f:9a: 3c:f4:de:47:1d:1d:04:b4:28:09:85:f7:56:12:f3: ee:b9:81:40:a5:e3:f9:50:0f:2e:37:14:61:c6:24: 2e:7e:42:3c:fb:f4:dc:a4:39:64:d2:e6:1e:7c:3a: 60:c8:f9:ba:c2:54:79:04:0b:06:0a:67:ae:aa:da: cc:1b:1e:37:25:df:33:c2:8b:8f:e0:cc:90:29:29: e4:e4:92:8d:f8:72:8f:4d:b0:3f:5b:e8:cc:b8:eb: 41:df:b9:5f:18:66:e5:85:87:72:04:55:19:d3:b0: 5e:5e:09:bd:99:61:c6:c1:4f:1c:0a:5a:d8:89:02: 1f:76:c6:75:5b:b8:e6:46:a8:1e:cd:f6:3e:4f:9c: b9:87:a9:ec:18:9e:42:f6:d4:7a:f2:b4:0b:c4:7c: 70:bb:3e:40:17:42:93:70:79:48:60:da:50:d9:58: e0:d9:c2:58:fe:b9:81:39:22:30:5c:9b:8e:01:7d: 2a:47:53:28:61:42:01:2b:1d:05:51:68:f7:e0:b4: 51:88:21:e6:b3:2f:e0:73:bc:ad:29:9c:93:67:34: 34:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3A:CF:E4:69:B6:4D:9A:6F:C4:90:19:43:51:85:81:81:FC:62:24 X509v3 Authority Key Identifier: keyid:CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:8c:1e:29:d9:18:fc:56:a1:88:70:e0:2d:05:66:5e:f7:43: f0:51:1a:4e:3f:59:4f:5d:f6:57:3d:43:eb:1b:d2:0e:23:83: cc:a8:a4:e1:72:a0:79:b8:8f:eb:62:57:c4:7d:b5:f6:09:08: 1d:c5:dd:82:3a:ba:73:0d:7e:a3:1d:4b:c4:72:a5:91:22:ae: 34:9c:f1:85:e1:26:99:f2:ea:93:0b:c2:69:cc:49:82:5e:8e: d5:b9:b2:cc:8e:f9:7d:b1:79:6d:f4:07:b8:20:11:b8:6b:74: cf:49:71:87:a3:2d:b3:6c:69:51:ad:1a:22:ea:34:a8:f3:ae: 9e:e5:35:a4:cb:39:ff:f0:c0:a7:9a:30:b9:ae:84:5d:20:d4: b4:0e:6f:66:9e:19:0f:7d:14:bd:a6:08:6e:03:a2:0f:6e:49: 0f:b7:a9:b7:8a:65:da:a3:a6:f0:2b:8a:f7:04:af:d2:0b:2c: 5b:2f:70:19:b9:bd:0c:90:73:02:9d:8f:e6:48:97:d7:10:c2: a4:b0:c1:34:67:c1:10:8f:14:ca:b6:95:23:1d:ec:49:6f:26: 8a:8d:cd:4f:fb:a9:79:0f:3d:4e:86:a2:ba:34:d7:a3:0e:a0: 24:b9:98:68:06:b9:51:a0:a6:1a:9d:be:a9:ac:00:36:ff:2e: c5:07:f7:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHS+yJLpxUD3qNNToZNmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNmJmNjBlYjA4ZjFlMjNhYmE4YmE3OTdjMTE3MjQ0NGNl MTViNzEwHhcNMjUxMjA2MTAwMjQ3WhcNMjUxMjA3MTAwMjQ3WjAzMTEwLwYDVQQD Eyg5YTNhY2ZlNDY5YjY0ZDlhNmZjNDkwMTk0MzUxODU4MTgxZmM2MjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g4fsFbVu3MynrldwNPDpGowaXUu 8EdHkkP/TgR5avRxXiV7YzuA/DQ8f5o89N5HHR0EtCgJhfdWEvPuuYFApeP5UA8u NxRhxiQufkI8+/TcpDlk0uYefDpgyPm6wlR5BAsGCmeuqtrMGx43Jd8zwouP4MyQ KSnk5JKN+HKPTbA/W+jMuOtB37lfGGblhYdyBFUZ07BeXgm9mWHGwU8cClrYiQIf dsZ1W7jmRqgezfY+T5y5h6nsGJ5C9tR68rQLxHxwuz5AF0KTcHlIYNpQ2Vjg2cJY /rmBOSIwXJuOAX0qR1MoYUIBKx0FUWj34LRRiCHmsy/gc7ytKZyTZzQ06wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo6z+Rptk2ab8SQGUNRhYGB/GIkMB8GA1UdIwQY MBaAFM1r9g6wjx4jq6i6eXwRckRM4VtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lODc1NjctNmRkOC00YTYwLTkyMWUt MmEwNzIyYWUxNjQ0LzEveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lODc1NjctNmRkOC00YTYwLTkyMWUtMmEwNzIyYWUxNjQ0 LzEveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYweKdkY /FahiHDgLQVmXvdD8FEaTj9ZT132Vz1D6xvSDiODzKik4XKgebiP62JXxH219gkI HcXdgjq6cw1+ox1LxHKlkSKuNJzxheEmmfLqkwvCacxJgl6O1bmyzI75fbF5bfQH uCARuGt0z0lxh6Mts2xpUa0aIuo0qPOunuU1pMs5//DAp5owua6EXSDUtA5vZp4Z D30UvaYIbgOiD25JD7ept4pl2qOm8CuK9wSv0gssWy9wGbm9DJBzAp2P5kiX1xDC pLDBNGfBEI8UyraVIx3sSW8mio3NT/upeQ89ToaiujTXow6gJLmYaAa5UaCmGp2+ qawANv8uxQf3/w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:20 2025 by rpki-client