This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft File: Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json) Hash identifier: SlTRn26wSf1cLktu8To3gGwmfWogTiV4/r4qnnhPytw= Subject key identifier: 53:35:5D:0F:09:48:89:37:97:35:C8:19:60:46:4F:11:5B:05:DC:0B Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1 Certificate issuer: /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1 Certificate serial: 019AF5E63CFAABDE2EC9A2C565F0E04234AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 23:01:38 +0000 Manifest this update: Sat 06 Dec 2025 23:01:38 +0000 Manifest next update: Sun 07 Dec 2025 23:01:38 +0000 Files and hashes: 1: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: dyrzmIQncV0ZknApGtpBXvpjGsXhtGjxo/vxa7Y4mSA=) 2: rD7zRvb7ZOSrFNptFJIKjnHIijY.roa (hash: 6Kl9dTmuCjd2YPwZJzigIWIBDUWb7+H1Wc7Equtq1N0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:3c:fa:ab:de:2e:c9:a2:c5:65:f0:e0:42:34:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1 Validity Not Before: Dec 6 23:01:38 2025 GMT Not After : Dec 7 23:01:38 2025 GMT Subject: CN=53355d0f094889379735c81960464f115b05dc0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:c0:01:d4:84:da:47:fe:c9:9b:0d:ff:2e: 00:a3:a2:27:7f:ed:f7:63:99:9a:8e:4c:d4:cc:14: 18:c3:6f:a1:09:8f:51:1a:eb:74:00:cb:8a:5b:d2: 3a:e3:09:f9:b9:8c:92:38:cd:d6:10:71:04:7f:e7: fa:44:1a:4a:ae:16:16:0c:56:81:3c:ac:86:7a:3b: 28:11:7e:8a:2b:ca:31:5d:4a:70:74:d5:3e:7b:67: 08:a6:ae:05:08:8a:76:63:7c:fa:82:1b:04:e6:a2: 6b:44:02:e8:c5:d2:6e:e7:ed:5c:8f:11:52:d5:92: 71:ec:85:ed:7a:79:23:6f:ed:cd:dc:cc:f5:b2:4f: 8a:4c:91:8e:05:3d:fc:24:36:e5:53:be:e1:02:e6: 01:b2:b9:4c:72:62:90:83:d1:37:14:0c:20:8b:17: 28:d7:18:b3:19:ac:1e:95:64:82:70:a2:7e:8d:89: 5f:e5:3f:07:c4:fa:f2:9e:d9:19:c1:7d:42:f0:cb: 8b:c4:dc:e0:43:86:af:12:e6:a6:e4:f5:6f:2f:1d: 04:31:02:ba:c4:82:0b:e9:3d:89:34:88:83:10:34: 68:d4:65:02:d1:fb:26:f5:a8:35:43:73:f0:99:ed: 07:d7:8b:69:26:6a:82:c4:e1:18:09:20:2f:0a:21: 12:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:35:5D:0F:09:48:89:37:97:35:C8:19:60:46:4F:11:5B:05:DC:0B X509v3 Authority Key Identifier: keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:30:d6:6f:68:eb:8e:7a:ce:07:9a:50:ff:1f:0e:1e:73:8f: b6:fb:f2:db:d7:ff:cd:1a:d9:36:7a:5d:52:a0:f0:98:91:31: 10:a2:ef:4c:64:0b:7d:13:d0:60:e0:c4:91:67:3a:fa:e8:a3: b7:c9:b8:c9:ac:eb:9a:94:4d:0b:77:2c:d6:c0:a0:53:80:e3: 19:65:69:aa:da:7e:b8:c6:9d:ff:9f:b6:df:9b:0e:a6:98:89: 2d:6b:fb:9c:a8:07:05:c5:7d:85:fe:c8:08:20:5b:9f:94:58: ef:c2:b3:67:da:43:b7:fb:b9:a1:7a:87:f9:4b:2a:75:cd:69: ce:88:40:9a:46:c6:cd:5c:96:2d:37:12:c6:69:d4:2f:2f:69: 94:5e:38:8d:63:20:99:49:7b:10:9a:4c:9b:eb:57:5a:17:c1: 60:e0:73:75:7b:5e:8d:c6:8f:85:da:a1:9c:cc:9b:10:b5:6b: 8f:2d:25:0f:e6:6a:d4:04:81:e7:e3:3f:b7:da:bb:72:55:5e: 6c:70:01:60:90:f5:a4:8b:33:e0:ac:93:fa:4c:ce:1b:4a:4a: f7:e7:3f:0c:93:d6:f1:e9:99:dd:99:ec:b9:bd:63:77:30:64: e5:8e:4a:b4:8a:36:c5:a5:27:47:37:76:ca:b9:2a:9c:94:b2: f5:0d:89:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15jz6q94uyaLFZfDgQjStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2N2FlNWVkN2NhOGJkNWY4ZWZmMzBiMGU0N2FiNGRmOTM4 MjhmZjEwHhcNMjUxMjA2MjMwMTM4WhcNMjUxMjA3MjMwMTM4WjAzMTEwLwYDVQQD Eyg1MzM1NWQwZjA5NDg4OTM3OTczNWM4MTk2MDQ2NGYxMTViMDVkYzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2PAAdSE2kf+yZsN/y4Ao6Inf+33 Y5majkzUzBQYw2+hCY9RGut0AMuKW9I64wn5uYySOM3WEHEEf+f6RBpKrhYWDFaB PKyGejsoEX6KK8oxXUpwdNU+e2cIpq4FCIp2Y3z6ghsE5qJrRALoxdJu5+1cjxFS 1ZJx7IXtenkjb+3N3Mz1sk+KTJGOBT38JDblU77hAuYBsrlMcmKQg9E3FAwgixco 1xizGawelWSCcKJ+jYlf5T8HxPryntkZwX1C8MuLxNzgQ4avEuam5PVvLx0EMQK6 xIIL6T2JNIiDEDRo1GUC0fsm9ag1Q3Pwme0H14tpJmqCxOEYCSAvCiESuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFM1XQ8JSIk3lzXIGWBGTxFbBdwLMB8GA1UdIwQY MBaAFGZ65e18qL1fjv8wsOR6tN+Tgo/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YWUwYmQtZDdlNC00NGQ1LTg3N2Ut NGE5Y2UyMTMxYjQyLzEvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80YWUwYmQtZDdlNC00NGQ1LTg3N2UtNGE5Y2UyMTMxYjQy LzEvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjDWb2jr jnrOB5pQ/x8OHnOPtvvy29f/zRrZNnpdUqDwmJExEKLvTGQLfRPQYODEkWc6+uij t8m4yazrmpRNC3cs1sCgU4DjGWVpqtp+uMad/5+235sOppiJLWv7nKgHBcV9hf7I CCBbn5RY78KzZ9pDt/u5oXqH+Usqdc1pzohAmkbGzVyWLTcSxmnULy9plF44jWMg mUl7EJpMm+tXWhfBYOBzdXtejcaPhdqhnMybELVrjy0lD+Zq1ASB5+M/t9q7clVe bHABYJD1pIsz4KyT+kzOG0pK9+c/DJPW8emZ3Znsub1jdzBk5Y5KtIo2xaUnRzd2 yrkqnJSy9Q2JUw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:19:19 2025 by rpki-client