This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json) Hash identifier: KPx3NUjl0Feudzqnjgo8Jarn+glDdF4M/0DnkhPTCU8= Subject key identifier: D7:A7:EA:8F:8B:EA:65:0D:D0:53:00:09:C2:A4:88:3C:46:8A:18:51 Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd Certificate serial: 019AF19A95688FCBC52845B1CEB9572D8222 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft Manifest number: 1421 Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: ugY9qqWwhyJ1d7Ub7mphCXwQQzzPbPKLjoxdyYyNwyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:95:68:8f:cb:c5:28:45:b1:ce:b9:57:2d:82:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=d7a7ea8f8bea650dd0530009c2a4883c468a1851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6f:5b:90:93:8e:d9:6a:02:b7:4f:a6:6b:2b: c4:70:11:3b:3d:f5:32:e4:e2:55:d4:39:be:a9:4b: f2:c6:38:b9:cf:b1:a2:d9:73:aa:0b:8f:73:e1:90: 0e:03:97:a3:08:60:c3:db:d7:42:75:15:8d:e9:e4: d9:96:61:19:29:00:f7:c4:77:ed:7e:3e:0d:e3:8c: 4a:57:60:ed:5e:37:e0:aa:60:e3:db:6e:bf:36:96: 10:70:4f:24:73:f4:28:b6:42:17:29:ca:b4:f5:c6: 46:09:f1:75:96:c2:5a:c5:8c:ce:b2:85:a9:f7:b4: 24:86:1c:6f:fa:8d:88:4f:58:bc:1f:65:98:0d:a7: e2:66:e0:36:e0:24:e8:69:ba:90:0b:b7:53:3c:36: 49:a6:d6:57:f7:02:3e:b2:c6:89:e6:bd:12:2b:c1: 72:1f:46:37:ee:fd:f0:8f:90:07:08:3e:6f:52:90: a1:9d:86:2b:a6:31:09:77:33:fc:72:88:96:fa:92: 80:bd:53:d5:85:25:ea:41:ef:ef:a4:40:20:47:35: 90:63:13:78:6d:8f:30:d8:b3:c4:d4:d1:c3:ec:aa: 77:73:be:fe:96:cd:47:85:be:ae:62:ba:b7:d6:b8: 38:fd:ec:a6:02:73:9a:ff:40:00:88:c8:b4:36:48: f7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A7:EA:8F:8B:EA:65:0D:D0:53:00:09:C2:A4:88:3C:46:8A:18:51 X509v3 Authority Key Identifier: keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:40:85:d2:52:e1:e9:c2:56:9d:93:a6:49:9a:88:7b:98:a7: 83:e1:ab:6a:bb:fa:90:c1:10:a8:16:e2:31:35:32:c9:d9:45: 26:5c:45:3c:c5:c0:0f:6b:f1:ff:2d:5e:81:8d:74:79:50:f0: 38:54:d9:74:50:85:da:ee:14:d3:e3:3d:d6:4c:4c:99:e2:93: 90:ba:f1:a4:b4:7d:75:50:d7:8c:2e:e2:61:02:80:88:88:5a: 08:3f:dc:0c:0f:b3:0a:20:7f:f6:a0:7f:34:08:4b:4e:c3:64: f2:0a:fe:ab:f8:d3:f6:35:48:3b:cd:54:75:6a:8e:a6:9a:06: dd:e9:09:66:f9:8d:0b:1d:7b:b6:c5:02:27:e4:a6:8c:81:a9: d7:dc:eb:95:dc:7f:55:a0:23:6d:11:b6:cb:39:d2:3e:0a:b8: d9:49:a9:0d:77:52:22:bc:bf:4b:06:c1:82:5c:86:ad:53:1a: bb:c1:49:c2:a5:e2:da:17:c5:11:67:15:8f:73:2c:69:98:37: 78:cc:55:54:ac:18:f8:2a:47:08:51:f9:14:26:3f:64:b1:d5: 8e:61:1a:e6:98:1c:08:ad:33:f7:76:35:e4:83:ce:bc:ee:a5: d1:be:dd:85:85:19:96:51:10:4d:4d:30:90:cd:6d:39:4b:ac: fb:e9:bb:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpVoj8vFKEWxzrlXLYIiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MTA0OTA5Njc1MjhjYTBiNmEwYTljYjczNjQzYzlhZDJj YzFiYmQwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD EyhkN2E3ZWE4ZjhiZWE2NTBkZDA1MzAwMDljMmE0ODgzYzQ2OGExODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G9bkJOO2WoCt0+mayvEcBE7PfUy 5OJV1Dm+qUvyxji5z7Gi2XOqC49z4ZAOA5ejCGDD29dCdRWN6eTZlmEZKQD3xHft fj4N44xKV2DtXjfgqmDj226/NpYQcE8kc/QotkIXKcq09cZGCfF1lsJaxYzOsoWp 97Qkhhxv+o2IT1i8H2WYDafiZuA24CToabqQC7dTPDZJptZX9wI+ssaJ5r0SK8Fy H0Y37v3wj5AHCD5vUpChnYYrpjEJdzP8coiW+pKAvVPVhSXqQe/vpEAgRzWQYxN4 bY8w2LPE1NHD7Kp3c77+ls1Hhb6uYrq31rg4/eymAnOa/0AAiMi0Nkj3+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNen6o+L6mUN0FMACcKkiDxGihhRMB8GA1UdIwQY MBaAFGcQSQlnUoygtqCpy3NkPJrSzBu9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnhCSkNXZFNqS0Myb0tuTGMyUThtdExNRzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NWQyNDUtODgyOC00MWUwLThlYTgt ZjBhZTAyM2FiNTkyLzEvWnhCSkNXZFNqS0Myb0tuTGMyUThtdExNRzcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NWQyNDUtODgyOC00MWUwLThlYTgtZjBhZTAyM2FiNTky LzEvWnhCSkNXZFNqS0Myb0tuTGMyUThtdExNRzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbECF0lLh 6cJWnZOmSZqIe5ing+Grarv6kMEQqBbiMTUyydlFJlxFPMXAD2vx/y1egY10eVDw OFTZdFCF2u4U0+M91kxMmeKTkLrxpLR9dVDXjC7iYQKAiIhaCD/cDA+zCiB/9qB/ NAhLTsNk8gr+q/jT9jVIO81UdWqOppoG3ekJZvmNCx17tsUCJ+SmjIGp19zrldx/ VaAjbRG2yznSPgq42UmpDXdSIry/SwbBglyGrVMau8FJwqXi2hfFEWcVj3MsaZg3 eMxVVKwY+CpHCFH5FCY/ZLHVjmEa5pgcCK0z93Y15IPOvO6l0b7dhYUZllEQTU0w kM1tOUus++m7LA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:45:41 2025 by rpki-client