This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft File: zQwDKJL2la9ME_sKyoBD0Xsbl78.mft (raw, json) Hash identifier: 5cJR531DEmgVArhMlbIiX1V7qOgiW5hNhWbWQaQXnh8= Subject key identifier: 15:DC:44:BC:E9:59:1C:B4:0D:9D:B1:1B:46:09:C7:9F:5D:7C:66:D0 Authority key identifier: CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF Certificate issuer: /CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf Certificate serial: 019AF2096F49115AF14D9A5FE3E574C919FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft Manifest number: 0B03 Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: zQwDKJL2la9ME_sKyoBD0Xsbl78.crl (hash: EyMIx3m4+121dy15vyjvywr/oq8BIGDjLGIFqisJTmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.crl rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6f:49:11:5a:f1:4d:9a:5f:e3:e5:74:c9:19:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=15dc44bce9591cb40d9db11b4609c79f5d7c66d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c4:53:a8:7b:63:c6:45:6b:03:ae:52:47:eb: bb:6d:a6:9a:e6:88:1d:d6:41:8d:3f:14:31:ac:fc: 0c:05:d0:90:15:a1:0d:e0:be:b5:69:48:5d:77:7b: df:b2:13:d3:d6:d7:3f:00:81:97:1d:71:1d:d8:01: 8f:66:cd:c2:ae:22:70:a2:a9:a4:e5:cf:20:38:ec: 93:92:25:e5:f7:fe:c1:dd:dd:1d:90:10:e5:a7:e0: fa:cb:5a:0d:c4:b9:fa:86:87:55:09:b0:c2:be:5c: 8d:5b:08:59:07:cd:1b:64:92:ec:b6:2b:15:82:a5: 4e:65:86:0a:5c:0a:48:c0:df:30:39:f7:c7:2a:c5: bf:57:1e:ba:e1:5d:c9:6b:72:0a:36:64:99:a5:1c: 10:58:3f:a5:f0:0a:01:46:fe:7f:22:2e:cf:d1:4a: 76:04:a9:45:b9:2a:67:d7:b7:46:5c:cc:4a:e9:8d: b4:8a:a7:9e:81:18:bd:9a:e4:52:05:f9:8b:75:ce: 69:82:a2:3a:d7:1d:78:b2:ac:eb:1d:05:29:bf:9b: a9:3e:2d:96:1f:db:9b:9a:8b:12:e7:f6:a1:39:ed: 47:dd:7f:77:27:c2:73:fd:94:2a:42:f6:af:09:15: e8:28:4e:07:da:e0:df:4f:a2:52:58:bb:0d:d1:34: 0b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DC:44:BC:E9:59:1C:B4:0D:9D:B1:1B:46:09:C7:9F:5D:7C:66:D0 X509v3 Authority Key Identifier: keyid:CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1d:56:6e:b4:3f:ce:57:4b:51:2b:3b:e8:00:f7:66:78:25: d6:c6:be:f2:ff:97:47:b6:81:7e:bf:96:67:f4:e3:cb:29:3e: c5:d7:86:fb:d1:ab:02:6f:6a:75:0b:31:88:40:b8:be:2b:9b: 59:bd:f4:c0:c5:75:ad:98:0e:1c:9f:c4:73:86:6f:35:67:91: 9a:80:27:00:67:bd:6c:6f:56:ec:70:c6:73:ba:0a:4a:58:54: 9e:e8:3e:b1:95:dc:29:e8:7e:d7:72:a5:f7:39:f3:4f:fa:52: 24:2e:60:eb:0e:97:b4:fd:fd:85:c5:ef:f1:f9:30:ae:bb:a7: 0a:dd:b5:27:28:2b:7d:18:2d:02:71:7c:e2:fe:9f:4d:94:d0: 67:b4:48:02:17:e6:2f:c5:fa:ae:7a:b8:23:ea:86:9f:49:df: 2b:27:30:aa:bd:59:39:28:72:ad:30:b2:e6:2c:56:8c:57:e8: ae:b5:5c:c8:e5:72:8a:9e:e0:d7:0e:42:41:ad:55:56:56:fd: 40:17:bf:ba:17:01:f6:c7:44:00:f2:94:54:9e:f1:27:b6:13: 17:9d:86:07:37:8c:09:b1:04:c8:ae:05:68:b2:dc:8b:69:96: 66:08:1f:05:db:08:59:67:97:2b:31:38:4d:17:0f:25:18:40: 74:03:c0:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCW9JEVrxTZpf4+V0yRn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMGMwMzI4OTJmNjk1YWY0YzEzZmIwYWNhODA0M2QxN2Ix Yjk3YmYwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD EygxNWRjNDRiY2U5NTkxY2I0MGQ5ZGIxMWI0NjA5Yzc5ZjVkN2M2NmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMRTqHtjxkVrA65SR+u7baaa5ogd 1kGNPxQxrPwMBdCQFaEN4L61aUhdd3vfshPT1tc/AIGXHXEd2AGPZs3CriJwoqmk 5c8gOOyTkiXl9/7B3d0dkBDlp+D6y1oNxLn6hodVCbDCvlyNWwhZB80bZJLstisV gqVOZYYKXApIwN8wOffHKsW/Vx664V3Ja3IKNmSZpRwQWD+l8AoBRv5/Ii7P0Up2 BKlFuSpn17dGXMxK6Y20iqeegRi9muRSBfmLdc5pgqI61x14sqzrHQUpv5upPi2W H9ubmosS5/ahOe1H3X93J8Jz/ZQqQvavCRXoKE4H2uDfT6JSWLsN0TQLiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXcRLzpWRy0DZ2xG0YJx59dfGbQMB8GA1UdIwQY MBaAFM0MAyiS9pWvTBP7CsqAQ9F7G5e/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelF3REtKTDJsYTlNRV9zS3lvQkQwWHNibDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zODRhMzItM2UxYy00ZDg2LWJkYjgt MzUyNzZiNzk3NWFlLzEvelF3REtKTDJsYTlNRV9zS3lvQkQwWHNibDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zODRhMzItM2UxYy00ZDg2LWJkYjgtMzUyNzZiNzk3NWFl LzEvelF3REtKTDJsYTlNRV9zS3lvQkQwWHNibDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHR1WbrQ/ zldLUSs76AD3Zngl1sa+8v+XR7aBfr+WZ/Tjyyk+xdeG+9GrAm9qdQsxiEC4viub Wb30wMV1rZgOHJ/Ec4ZvNWeRmoAnAGe9bG9W7HDGc7oKSlhUnug+sZXcKeh+13Kl 9znzT/pSJC5g6w6XtP39hcXv8fkwrrunCt21JygrfRgtAnF84v6fTZTQZ7RIAhfm L8X6rnq4I+qGn0nfKycwqr1ZOShyrTCy5ixWjFforrVcyOVyip7g1w5CQa1VVlb9 QBe/uhcB9sdEAPKUVJ7xJ7YTF52GBzeMCbEEyK4FaLLci2mWZggfBdsIWWeXKzE4 TRcPJRhAdAPAMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:24:28 2025 by rpki-client