This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft File: ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json) Hash identifier: glz66lCPZ2TzqVdbIfTZxSP6Z10dzK8cvGm+p/X7jW8= Subject key identifier: 75:1D:9D:47:B6:51:AF:F6:3B:5B:55:3C:E6:21:96:4C:A2:6B:A5:C4 Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE Certificate issuer: /CN=65933b794e55802c1045a875f033aa0ca74a0fbe Certificate serial: 019AF3F7D38CF6575B0FB9FA63DEFE030FC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft Manifest number: 14C9 Signing time: Sat 06 Dec 2025 14:01:36 +0000 Manifest this update: Sat 06 Dec 2025 14:01:36 +0000 Manifest next update: Sun 07 Dec 2025 14:01:36 +0000 Files and hashes: 1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: Fuh+8h0ytablEOgutdOwpYGaK2NFDtrhgGlK89qSlgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:d3:8c:f6:57:5b:0f:b9:fa:63:de:fe:03:0f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe Validity Not Before: Dec 6 14:01:36 2025 GMT Not After : Dec 7 14:01:36 2025 GMT Subject: CN=751d9d47b651aff63b5b553ce621964ca26ba5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:67:ee:57:6d:ac:43:46:d2:4c:b5:79:c1:df: 7d:2b:12:f5:ed:1c:92:ac:c4:da:87:86:23:05:c7: c6:0a:65:a3:3a:05:8f:53:fa:7a:c9:b4:dc:74:09: 8a:5b:7b:6c:b9:97:5b:2b:35:a7:7e:ea:8c:9f:b3: 75:2d:cd:d5:d5:cc:b0:a9:a3:fc:c1:bd:42:10:2b: 54:9f:8d:32:f6:94:07:d9:3e:ef:5d:78:45:d1:da: 9f:7f:20:ab:b0:9d:0f:65:5e:a3:2d:db:0c:bf:1c: ac:b9:a3:4d:fb:25:a0:28:79:f2:47:79:67:37:75: e8:25:9d:83:46:49:0a:94:df:1e:ec:19:b4:8d:d0: ad:3a:ae:0a:e6:42:92:90:2f:9a:59:4d:5c:ac:ae: ea:d7:c3:25:02:e9:f1:1b:18:3c:63:b8:95:6e:00: d1:34:89:2a:dd:2c:03:5e:10:ed:d0:b8:61:ca:5c: c9:c5:25:68:0c:76:6f:1a:ec:c3:57:7a:13:13:17: 93:bb:7a:8d:f7:b5:c0:75:02:f6:5e:1d:1c:1c:be: 37:19:48:fe:4b:b3:8b:ea:b0:23:d2:e9:a0:2e:64: ff:77:19:8a:b3:c3:7b:b7:5a:70:ef:6f:4c:13:d9: 46:07:1a:4a:ac:12:73:a2:59:25:34:32:48:25:05: e1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1D:9D:47:B6:51:AF:F6:3B:5B:55:3C:E6:21:96:4C:A2:6B:A5:C4 X509v3 Authority Key Identifier: keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:dc:21:c5:4a:60:7c:b9:c7:29:43:8b:6b:b7:71:e7:75:e3: 4d:21:d8:b1:08:f3:76:68:e7:7e:41:ae:2c:74:1d:1d:60:0b: 88:d7:9d:09:5f:30:61:a2:2e:11:51:a8:de:72:1c:fc:0d:41: 40:9a:91:61:69:88:25:de:be:d0:58:0f:9e:23:31:67:b3:21: f4:76:9c:db:3b:d2:f3:b8:5e:59:b1:c6:54:61:e3:67:6d:5c: 26:98:af:dc:a3:9a:c3:50:fb:85:90:33:8d:86:5d:8f:1f:d1: 17:1c:48:8b:c7:f5:d7:e0:60:7a:d3:30:1b:31:70:06:ca:55: 5c:d8:5e:61:7d:b4:1b:23:3c:fc:9a:76:ce:06:df:81:1a:c9: 43:7d:1f:2e:39:e0:15:18:ef:1d:14:e4:ac:72:da:f4:7a:30: 86:7f:3d:01:87:ee:8c:cd:e2:9c:5e:f0:97:5a:af:96:e6:a9: e8:84:7d:c5:3e:25:18:96:d3:4f:75:e9:32:a0:04:db:1b:0e: 8c:c1:78:07:c8:0f:3a:89:49:4e:f5:10:3b:b6:54:21:7d:ad: 3b:d3:9e:a8:3b:b1:78:b3:ca:c4:30:ad:77:57:0c:57:21:a1: 55:ed:d7:fe:bf:51:63:56:35:27:70:62:72:d3:de:d5:66:ba: 67:cf:15:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99OM9ldbD7n6Y97+Aw/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OTMzYjc5NGU1NTgwMmMxMDQ1YTg3NWYwMzNhYTBjYTc0 YTBmYmUwHhcNMjUxMjA2MTQwMTM2WhcNMjUxMjA3MTQwMTM2WjAzMTEwLwYDVQQD Eyg3NTFkOWQ0N2I2NTFhZmY2M2I1YjU1M2NlNjIxOTY0Y2EyNmJhNWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGfuV22sQ0bSTLV5wd99KxL17RyS rMTah4YjBcfGCmWjOgWPU/p6ybTcdAmKW3tsuZdbKzWnfuqMn7N1Lc3V1cywqaP8 wb1CECtUn40y9pQH2T7vXXhF0dqffyCrsJ0PZV6jLdsMvxysuaNN+yWgKHnyR3ln N3XoJZ2DRkkKlN8e7Bm0jdCtOq4K5kKSkC+aWU1crK7q18MlAunxGxg8Y7iVbgDR NIkq3SwDXhDt0LhhylzJxSVoDHZvGuzDV3oTExeTu3qN97XAdQL2Xh0cHL43GUj+ S7OL6rAj0umgLmT/dxmKs8N7t1pw729ME9lGBxpKrBJzolklNDJIJQXhcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUdnUe2Ua/2O1tVPOYhlkyia6XEMB8GA1UdIwQY MBaAFGWTO3lOVYAsEEWodfAzqgynSg++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMzUxMzUtZDU1ZS00Y2I3LWI0YTct ZmE3NjQ1NzZiZDhlLzEvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zMzUxMzUtZDU1ZS00Y2I3LWI0YTctZmE3NjQ1NzZiZDhl LzEvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9whxUpg fLnHKUOLa7dx53XjTSHYsQjzdmjnfkGuLHQdHWALiNedCV8wYaIuEVGo3nIc/A1B QJqRYWmIJd6+0FgPniMxZ7Mh9Hac2zvS87heWbHGVGHjZ21cJpiv3KOaw1D7hZAz jYZdjx/RFxxIi8f11+BgetMwGzFwBspVXNheYX20GyM8/Jp2zgbfgRrJQ30fLjng FRjvHRTkrHLa9Howhn89AYfujM3inF7wl1qvluap6IR9xT4lGJbTT3XpMqAE2xsO jMF4B8gPOolJTvUQO7ZUIX2tO9OeqDuxeLPKxDCtd1cMVyGhVe3X/r9RY1Y1J3Bi ctPe1Wa6Z88VHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:14:41 2025 by rpki-client