This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft File: ZmW8l5kwxe64oYSlqQOei5nuMK8.mft (raw, json) Hash identifier: 6wcJKzYfHKXDWyeGFuTuB9jWixbrFoti6TU6wBGXO7k= Subject key identifier: 53:CF:08:14:57:62:53:8C:21:34:5F:F2:C7:3C:73:A7:03:2D:F8:66 Authority key identifier: 66:65:BC:97:99:30:C5:EE:B8:A1:84:A5:A9:03:9E:8B:99:EE:30:AF Certificate issuer: /CN=6665bc979930c5eeb8a184a5a9039e8b99ee30af Certificate serial: 019AF12EA73E0F79FEFDDEA18190100FE651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft Manifest number: 0215 Signing time: Sat 06 Dec 2025 01:02:37 +0000 Manifest this update: Sat 06 Dec 2025 01:02:37 +0000 Manifest next update: Sun 07 Dec 2025 01:02:37 +0000 Files and hashes: 1: ZmW8l5kwxe64oYSlqQOei5nuMK8.crl (hash: MLIzlg3VfDusHM2cdhhrqBk3GaDLohSvpE//UglD9wE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a7:3e:0f:79:fe:fd:de:a1:81:90:10:0f:e6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6665bc979930c5eeb8a184a5a9039e8b99ee30af Validity Not Before: Dec 6 01:02:37 2025 GMT Not After : Dec 7 01:02:37 2025 GMT Subject: CN=53cf08145762538c21345ff2c73c73a7032df866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4f:1f:8c:5a:74:01:f4:19:84:f5:b8:20:7a: eb:0d:01:9a:2a:34:88:65:3f:db:50:2f:67:2d:c1: 25:00:10:f7:c2:89:ea:84:d0:ef:ae:d9:27:54:2f: 05:75:bc:31:71:37:0a:ba:40:f6:66:d8:18:9b:e8: 24:7e:da:87:54:86:62:69:3e:19:b7:d1:ba:84:df: 09:2e:35:eb:39:aa:a3:cb:fe:2c:5a:58:a1:91:ff: a7:c7:de:50:3c:5c:09:52:0c:4b:63:32:59:9b:5b: bb:06:68:df:41:bf:a2:78:16:f4:fa:67:e5:6f:cb: b5:5b:e2:84:fa:59:26:e4:3f:92:ad:04:55:5b:4c: e6:4d:d2:4e:4f:9f:25:b0:93:bf:03:e7:ac:b8:a5: 8c:6e:0e:b2:b5:1f:40:f2:a1:1e:e8:26:d4:4a:5c: c6:14:49:92:be:fd:53:17:dc:1b:13:df:db:cf:40: d8:8c:8c:17:dc:27:32:f3:10:bd:35:bb:61:b4:f1: 83:30:83:3e:a4:b2:84:05:ed:03:10:8a:eb:b3:39: e3:77:46:20:41:32:cc:50:15:af:a7:16:1f:27:f7: 88:a7:3e:26:3d:1d:a7:6a:c8:a7:5f:58:2a:ed:46: 04:cb:0e:cf:5c:47:05:fa:c4:01:e9:be:0d:39:1b: c7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CF:08:14:57:62:53:8C:21:34:5F:F2:C7:3C:73:A7:03:2D:F8:66 X509v3 Authority Key Identifier: keyid:66:65:BC:97:99:30:C5:EE:B8:A1:84:A5:A9:03:9E:8B:99:EE:30:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:63:1b:5c:f0:5d:69:1a:93:9f:94:e3:b7:98:73:b7:1e:3e: 89:af:b2:7f:7c:93:33:f7:af:eb:0f:cb:08:ee:f2:fa:b3:05: 04:4c:2d:b4:f0:92:f1:31:bc:25:50:b1:af:0b:25:dc:3e:0a: 16:86:d5:c1:ea:80:65:54:50:59:d8:9b:a1:2b:e2:bc:a3:8e: 65:6f:25:17:9f:36:a5:28:6b:9e:f7:03:3a:05:97:35:00:48: 3d:ee:59:d7:bd:58:de:9d:33:87:fb:f0:68:ef:38:25:20:b1: 4a:b8:c0:de:22:6f:92:50:73:8e:4c:ef:e8:85:33:24:24:71: 88:99:6b:73:79:80:e4:36:30:ea:91:29:bd:2e:63:50:ce:61: 8e:6e:7a:57:aa:a6:49:4e:3e:42:67:7c:1b:6d:4d:df:7e:55: 48:0a:33:a6:9b:d3:41:0d:b3:83:85:e4:df:7e:fa:3b:e6:82: c1:06:93:c5:68:b7:f4:b1:31:c2:ea:c8:5b:a4:68:98:73:93: 12:0c:12:19:cf:0c:62:50:17:0d:2a:78:46:f5:0d:08:30:8a: 2b:c0:f2:a7:33:74:75:e2:63:f8:54:3d:a4:be:22:50:0c:bb: ba:e6:d6:d5:c3:14:e3:0b:b5:f5:74:e4:e4:49:6d:97:2a:a9: 19:78:d3:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqc+D3n+/d6hgZAQD+ZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjViYzk3OTkzMGM1ZWViOGExODRhNWE5MDM5ZThiOTll ZTMwYWYwHhcNMjUxMjA2MDEwMjM3WhcNMjUxMjA3MDEwMjM3WjAzMTEwLwYDVQQD Eyg1M2NmMDgxNDU3NjI1MzhjMjEzNDVmZjJjNzNjNzNhNzAzMmRmODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs08fjFp0AfQZhPW4IHrrDQGaKjSI ZT/bUC9nLcElABD3wonqhNDvrtknVC8FdbwxcTcKukD2ZtgYm+gkftqHVIZiaT4Z t9G6hN8JLjXrOaqjy/4sWlihkf+nx95QPFwJUgxLYzJZm1u7BmjfQb+ieBb0+mfl b8u1W+KE+lkm5D+SrQRVW0zmTdJOT58lsJO/A+esuKWMbg6ytR9A8qEe6CbUSlzG FEmSvv1TF9wbE9/bz0DYjIwX3Ccy8xC9NbthtPGDMIM+pLKEBe0DEIrrsznjd0Yg QTLMUBWvpxYfJ/eIpz4mPR2nasinX1gq7UYEyw7PXEcF+sQB6b4NORvHOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPPCBRXYlOMITRf8sc8c6cDLfhmMB8GA1UdIwQY MBaAFGZlvJeZMMXuuKGEpakDnouZ7jCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1XOGw1a3d4ZTY0b1lTbHFRT2VpNW51TUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zMzY3YTEtZjAwZC00MjViLWExYzEt YzJjYjc0NzlmYmVlLzEvWm1XOGw1a3d4ZTY0b1lTbHFRT2VpNW51TUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zMzY3YTEtZjAwZC00MjViLWExYzEtYzJjYjc0NzlmYmVl LzEvWm1XOGw1a3d4ZTY0b1lTbHFRT2VpNW51TUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGMbXPBd aRqTn5Tjt5hztx4+ia+yf3yTM/ev6w/LCO7y+rMFBEwttPCS8TG8JVCxrwsl3D4K FobVweqAZVRQWdiboSvivKOOZW8lF582pShrnvcDOgWXNQBIPe5Z171Y3p0zh/vw aO84JSCxSrjA3iJvklBzjkzv6IUzJCRxiJlrc3mA5DYw6pEpvS5jUM5hjm56V6qm SU4+Qmd8G21N335VSAozppvTQQ2zg4Xk3376O+aCwQaTxWi39LExwurIW6RomHOT EgwSGc8MYlAXDSp4RvUNCDCKK8DypzN0deJj+FQ9pL4iUAy7uubW1cMU4wu19XTk 5EltlyqpGXjTSA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:36 2025 by rpki-client