This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft File: z379uI0GEsUL1dfhZa94NPDdPwQ.mft (raw, json) Hash identifier: /kaEDl5AAqhhwgUxnRxz6mfR1gxwyF70+YiyKzPUKDg= Subject key identifier: 3C:8A:32:35:D0:87:48:B0:32:5D:01:4C:1B:39:C9:93:2B:55:3D:80 Authority key identifier: CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04 Certificate issuer: /CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04 Certificate serial: 019AF31C8FB8810D2388DF4DA79A095DDDAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 10:02:06 +0000 Manifest this update: Sat 06 Dec 2025 10:02:06 +0000 Manifest next update: Sun 07 Dec 2025 10:02:06 +0000 Files and hashes: 1: z379uI0GEsUL1dfhZa94NPDdPwQ.crl (hash: ijSxpmUUE/TqN25p0E7gB3Xv72hgaRQ1dQJhv66lY54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:8f:b8:81:0d:23:88:df:4d:a7:9a:09:5d:dd:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04 Validity Not Before: Dec 6 10:02:06 2025 GMT Not After : Dec 7 10:02:06 2025 GMT Subject: CN=3c8a3235d08748b0325d014c1b39c9932b553d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:1e:72:7c:55:4c:47:d2:20:a8:57:ba:3b: 8f:d7:1d:a4:f0:49:5d:e6:33:66:0c:66:fa:c7:9d: 66:50:0e:27:1f:dc:2c:a5:a5:95:f5:10:1c:0d:75: 60:84:8a:25:18:96:83:b5:2c:ef:27:2d:5f:a1:bd: fe:d2:0c:ba:55:d2:49:71:f7:a4:04:9b:49:91:ac: 55:69:8a:7b:88:a4:cd:a5:cf:d3:1f:0c:31:fd:7a: cd:19:07:4c:bf:3f:0f:32:0f:05:ac:3b:29:1d:ba: 21:30:99:be:0e:e3:e8:53:3d:95:4a:4f:ed:f1:49: 4c:ab:3e:1b:b9:60:94:d4:35:67:cc:4a:a8:2f:0b: f5:0a:5a:8d:5e:07:31:58:11:f0:3d:95:6d:5c:ec: c5:60:88:3a:35:4b:2f:56:ad:cb:7d:9f:21:a8:30: 19:7a:7a:af:4e:a2:8f:bb:51:38:86:b9:95:01:11: 7f:f4:7c:87:eb:73:0b:74:9e:3d:b8:ab:90:a9:d9: f4:98:c2:75:00:0f:de:db:d5:78:69:bf:af:4b:5b: 75:49:08:d3:0b:bd:5d:c7:17:cc:b8:af:84:94:2d: 34:f6:8e:cc:fe:0e:2e:e0:c7:2c:76:00:d8:93:c7: 40:01:45:02:e5:5a:8d:8a:62:a6:aa:74:45:59:85: b7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8A:32:35:D0:87:48:B0:32:5D:01:4C:1B:39:C9:93:2B:55:3D:80 X509v3 Authority Key Identifier: keyid:CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:79:37:5e:96:76:43:12:5b:46:10:10:ed:ad:f1:fd:3a:a3: 89:0d:eb:d5:a9:2b:43:00:a3:b7:83:80:8c:0a:72:0b:1b:63: 18:2c:f4:26:2d:13:4c:d6:a9:61:5c:da:7e:fc:fc:bd:ed:5f: b7:91:40:ac:e0:fd:c4:59:e3:dc:44:08:ef:d3:23:af:cb:87: 14:0a:d5:d9:bf:a7:75:b1:a5:37:7b:86:9b:59:03:a2:e6:ae: fb:15:ee:1c:b4:a9:ca:53:2d:6b:15:ee:73:5b:61:21:f1:50: e5:c2:c5:0a:83:d3:2e:c0:b4:9d:71:22:a3:c1:01:c2:86:c0: 19:6c:0a:c0:1b:51:bc:77:97:50:7c:43:3e:ea:ee:a2:6b:f0: 32:36:ce:ad:be:72:fd:97:48:bc:a7:5c:ca:bc:5a:ab:a2:e8: 9c:83:24:30:5a:1c:32:86:97:e5:23:ed:02:ac:41:1f:55:3e: 6b:9a:2c:75:6c:26:ac:cc:05:d7:a9:3b:57:6a:92:cc:97:41: 5a:0d:88:08:72:76:19:20:f7:48:3e:2a:03:06:5a:bb:a0:45: c0:42:8e:a3:9c:c9:a4:d2:84:b1:2d:b1:d1:fc:4c:db:84:6d: b5:9d:0c:3a:a7:90:4f:0d:80:67:a0:9e:5f:4b:2a:c1:09:51: 0d:9b:ad:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHI+4gQ0jiN9Np5oJXd2rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmN2VmZGI4OGQwNjEyYzUwYmQ1ZDdlMTY1YWY3ODM0ZjBk ZDNmMDQwHhcNMjUxMjA2MTAwMjA2WhcNMjUxMjA3MTAwMjA2WjAzMTEwLwYDVQQD EygzYzhhMzIzNWQwODc0OGIwMzI1ZDAxNGMxYjM5Yzk5MzJiNTUzZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKMecnxVTEfSIKhXujuP1x2k8Eld 5jNmDGb6x51mUA4nH9wspaWV9RAcDXVghIolGJaDtSzvJy1fob3+0gy6VdJJcfek BJtJkaxVaYp7iKTNpc/THwwx/XrNGQdMvz8PMg8FrDspHbohMJm+DuPoUz2VSk/t 8UlMqz4buWCU1DVnzEqoLwv1ClqNXgcxWBHwPZVtXOzFYIg6NUsvVq3LfZ8hqDAZ enqvTqKPu1E4hrmVARF/9HyH63MLdJ49uKuQqdn0mMJ1AA/e29V4ab+vS1t1SQjT C71dxxfMuK+ElC009o7M/g4u4McsdgDYk8dAAUUC5VqNimKmqnRFWYW3QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyKMjXQh0iwMl0BTBs5yZMrVT2AMB8GA1UdIwQY MBaAFM9+/biNBhLFC9XX4WWveDTw3T8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejM3OXVJMEdFc1VMMWRmaFphOTROUERkUHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mZTIyNGYtMjVmYS00MjBjLTg5YWYt N2JjZWEzZDM4NDUwLzEvejM3OXVJMEdFc1VMMWRmaFphOTROUERkUHdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9mZTIyNGYtMjVmYS00MjBjLTg5YWYtN2JjZWEzZDM4NDUw LzEvejM3OXVJMEdFc1VMMWRmaFphOTROUERkUHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3k3XpZ2 QxJbRhAQ7a3x/TqjiQ3r1akrQwCjt4OAjApyCxtjGCz0Ji0TTNapYVzafvz8ve1f t5FArOD9xFnj3EQI79Mjr8uHFArV2b+ndbGlN3uGm1kDouau+xXuHLSpylMtaxXu c1thIfFQ5cLFCoPTLsC0nXEio8EBwobAGWwKwBtRvHeXUHxDPuruomvwMjbOrb5y /ZdIvKdcyrxaq6LonIMkMFocMoaX5SPtAqxBH1U+a5osdWwmrMwF16k7V2qSzJdB Wg2ICHJ2GSD3SD4qAwZau6BFwEKOo5zJpNKEsS2x0fxM24RttZ0MOqeQTw2AZ6Ce X0sqwQlRDZutCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:39 2025 by rpki-client