This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft File: ZQXsmbwMbKl7--a9UkTeywKGbis.mft (raw, json) Hash identifier: 9inwy8PLAk4TPUKjg8Z+Wr0C+cSPZI/YPsGcBBPjppE= Subject key identifier: 5C:28:89:BF:EB:E0:70:C5:81:6B:68:8D:73:5F:C6:DF:66:AE:62:C6 Authority key identifier: 65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B Certificate issuer: /CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b Certificate serial: 019AF12CE8EC641922ED832E61721A81915B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft Manifest number: 0C55 Signing time: Sat 06 Dec 2025 01:00:43 +0000 Manifest this update: Sat 06 Dec 2025 01:00:43 +0000 Manifest next update: Sun 07 Dec 2025 01:00:43 +0000 Files and hashes: 1: ZQXsmbwMbKl7--a9UkTeywKGbis.crl (hash: UA6UVwPKE1R+R2Lv0CVQA+1gadVRUUdS/AcuTnaVJUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e8:ec:64:19:22:ed:83:2e:61:72:1a:81:91:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b Validity Not Before: Dec 6 01:00:43 2025 GMT Not After : Dec 7 01:00:43 2025 GMT Subject: CN=5c2889bfebe070c5816b688d735fc6df66ae62c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:41:82:c7:28:1c:dd:2a:dd:ac:80:6e:a1:42: ec:f2:ef:8a:ac:26:5f:56:dc:82:ea:91:e6:c5:5d: 43:7e:fc:7a:e4:cd:7e:4a:e9:97:a5:e9:4f:f3:b9: 94:b3:56:e6:43:77:4a:12:45:f7:af:6d:de:4a:df: df:78:2b:b1:b8:87:18:95:38:06:47:cf:21:f3:b8: 71:0a:f1:89:da:e3:8e:a1:ef:e2:b0:2e:30:c9:09: ae:78:7e:1d:d3:b1:52:bf:c7:18:7d:28:0f:27:fc: ad:71:93:11:d0:b0:e9:b1:32:f3:1c:84:b9:a0:a2: c1:fd:9a:9e:c2:4d:82:99:88:95:60:00:a2:7b:04: d7:53:16:f7:62:ed:5c:57:81:9f:48:0c:47:af:1a: e1:33:8b:db:78:f6:4d:5a:29:a3:34:89:41:fa:b4: a5:8b:39:6f:c8:d5:bf:13:f2:e4:7c:56:fe:12:ae: f2:41:f9:09:4c:c7:be:72:75:2c:fd:b5:a4:40:2d: c3:b3:cd:2a:db:75:58:6f:13:07:cc:8d:78:c0:b7: 24:29:90:e9:ae:cc:bd:40:7d:aa:97:cf:a0:a5:83: d8:db:0b:6a:83:81:7d:ba:b2:e6:e6:8b:5a:e8:9b: 39:12:58:9e:1b:58:13:cd:ce:c2:99:96:98:62:af: 60:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:28:89:BF:EB:E0:70:C5:81:6B:68:8D:73:5F:C6:DF:66:AE:62:C6 X509v3 Authority Key Identifier: keyid:65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f2:dd:4d:94:5e:45:31:6b:49:0e:af:78:94:04:96:6c:ed: 3d:34:4f:5b:8e:65:71:eb:b1:79:f5:89:e0:4a:17:db:bf:6e: 78:19:9a:62:2d:5b:e4:2c:92:f5:06:d3:50:7b:0e:c0:7a:09: 01:81:23:7b:8b:93:1d:2a:8a:f1:56:15:cb:be:92:af:e2:b6: 90:b6:a3:de:f3:65:ac:6c:85:d0:b1:fd:37:7d:4d:d1:9d:b9: 65:68:41:27:21:3b:0f:e3:38:6b:3a:31:4a:11:aa:f4:5c:52: 27:c9:5d:d8:c2:86:76:fa:88:15:b6:19:0d:07:ca:6c:68:d1: bf:3d:7e:71:0b:39:da:9b:7b:fb:fc:42:43:f6:71:59:c8:36: 81:9c:86:47:7c:da:c2:d7:de:32:41:61:23:71:89:eb:c0:61: 35:22:56:2b:3e:57:61:31:02:e0:08:40:d3:5a:86:37:b0:9a: 57:29:44:6c:dd:7f:3f:cc:45:0d:e5:5d:8a:7c:ea:60:91:8b: 20:b5:37:4a:2f:38:84:5b:cc:ae:88:f8:96:83:c4:7a:1a:16: 8d:5d:a2:9a:3d:9e:e3:42:43:52:96:0b:8b:e7:3c:76:06:cf: 8a:b1:4b:e9:cb:cb:db:9d:90:72:c6:f2:96:15:3b:85:dd:2f: 90:b4:b8:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOjsZBki7YMuYXIagZFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MDVlYzk5YmMwYzZjYTk3YmZiZTZiZDUyNDRkZWNiMDI4 NjZlMmIwHhcNMjUxMjA2MDEwMDQzWhcNMjUxMjA3MDEwMDQzWjAzMTEwLwYDVQQD Eyg1YzI4ODliZmViZTA3MGM1ODE2YjY4OGQ3MzVmYzZkZjY2YWU2MmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUGCxygc3SrdrIBuoULs8u+KrCZf VtyC6pHmxV1Dfvx65M1+SumXpelP87mUs1bmQ3dKEkX3r23eSt/feCuxuIcYlTgG R88h87hxCvGJ2uOOoe/isC4wyQmueH4d07FSv8cYfSgPJ/ytcZMR0LDpsTLzHIS5 oKLB/Zqewk2CmYiVYACiewTXUxb3Yu1cV4GfSAxHrxrhM4vbePZNWimjNIlB+rSl izlvyNW/E/LkfFb+Eq7yQfkJTMe+cnUs/bWkQC3Ds80q23VYbxMHzI14wLckKZDp rsy9QH2ql8+gpYPY2wtqg4F9urLm5ota6Js5ElieG1gTzc7CmZaYYq9ghwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwoib/r4HDFgWtojXNfxt9mrmLGMB8GA1UdIwQY MBaAFGUF7Jm8DGype/vmvVJE3ssChm4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlFYc21id01iS2w3LS1hOVVrVGV5d0tHYmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ODMxNGMtZDJjZi00OGI4LWI5NWEt ZmRhNWRkNTkwZjE2LzEvWlFYc21id01iS2w3LS1hOVVrVGV5d0tHYmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ODMxNGMtZDJjZi00OGI4LWI5NWEtZmRhNWRkNTkwZjE2 LzEvWlFYc21id01iS2w3LS1hOVVrVGV5d0tHYmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvLdTZRe RTFrSQ6veJQElmztPTRPW45lceuxefWJ4EoX279ueBmaYi1b5CyS9QbTUHsOwHoJ AYEje4uTHSqK8VYVy76Sr+K2kLaj3vNlrGyF0LH9N31N0Z25ZWhBJyE7D+M4azox ShGq9FxSJ8ld2MKGdvqIFbYZDQfKbGjRvz1+cQs52pt7+/xCQ/ZxWcg2gZyGR3za wtfeMkFhI3GJ68BhNSJWKz5XYTEC4AhA01qGN7CaVylEbN1/P8xFDeVdinzqYJGL ILU3Si84hFvMroj4loPEehoWjV2imj2e40JDUpYLi+c8dgbPirFL6cvL252Qcsby lhU7hd0vkLS4pg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:08 2025 by rpki-client