This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft File: ZvEr0F_5yRriI48ykBy6rhwzcP4.mft (raw, json) Hash identifier: lNM5ATkm4F5qHJC9wYqZucDMGlm/+dnize1v16SdaCQ= Subject key identifier: B1:1A:A9:9D:19:DA:42:EB:65:CB:D1:5E:5E:0C:EA:B8:2E:9D:EC:4E Authority key identifier: 66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE Certificate issuer: /CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe Certificate serial: 019B390F3ECA313439661672D74DA009424D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft Manifest number: 087A Signing time: Sat 20 Dec 2025 00:00:58 +0000 Manifest this update: Sat 20 Dec 2025 00:00:58 +0000 Manifest next update: Sun 21 Dec 2025 00:00:58 +0000 Files and hashes: 1: ZvEr0F_5yRriI48ykBy6rhwzcP4.crl (hash: 6vR/8JkDgJsBu8T28PQtkC7jHQpar4+fM+ZRxJ8kyk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:3e:ca:31:34:39:66:16:72:d7:4d:a0:09:42:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe Validity Not Before: Dec 20 00:00:58 2025 GMT Not After : Dec 21 00:00:58 2025 GMT Subject: CN=b11aa99d19da42eb65cbd15e5e0ceab82e9dec4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:26:27:a3:f7:de:e0:a0:8d:23:b5:d8:8a:0c: af:7c:a3:57:41:33:75:9e:1f:56:b4:5c:50:c3:3b: 54:92:2e:06:7a:85:33:ae:b7:ac:74:4f:e7:3b:0d: a3:cc:18:19:5d:b1:c8:c6:9f:34:7d:41:a3:72:5a: 6c:99:d2:38:60:3d:3d:0c:26:18:19:f5:9c:89:6d: cf:f4:c0:76:fd:73:a9:63:37:35:c0:58:1f:93:9f: 83:c0:fc:fe:d5:86:d0:af:79:d3:43:04:06:3e:6e: 5e:a6:7e:05:84:e3:33:bd:60:44:cc:05:1a:e4:21: 28:5d:b5:c3:a6:cd:ad:e0:cf:68:6a:66:7a:42:9e: da:61:6f:8c:7b:8f:88:4c:fb:35:9d:fc:19:89:a0: c2:db:e9:f2:71:a9:00:ad:be:e8:05:c2:1b:d9:49: 09:68:fb:fd:19:07:91:16:2c:48:3c:9a:76:93:be: 6e:c6:c5:4e:df:6c:df:b9:50:3f:95:df:d2:36:d6: c6:63:c4:16:72:23:64:0d:8b:b8:a5:11:ba:58:1a: d7:ab:4c:38:24:e1:9b:63:9b:9a:b0:79:6c:fc:71: 84:ba:7b:c8:37:ba:b9:0e:6b:6d:c3:9d:0f:99:47: 1f:81:19:d2:1d:d1:ec:f0:50:f8:c6:9d:f7:cb:e6: 39:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1A:A9:9D:19:DA:42:EB:65:CB:D1:5E:5E:0C:EA:B8:2E:9D:EC:4E X509v3 Authority Key Identifier: keyid:66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:11:42:aa:8f:a9:aa:56:d6:ce:63:47:e1:65:f4:18:83:a8: 5a:ef:8b:60:6a:0b:b5:00:a9:c9:a7:aa:02:27:c5:6d:49:15: d5:7b:07:39:c2:f8:4d:ea:dd:18:75:92:f4:24:95:3f:d5:f0: 37:24:68:fa:82:53:24:46:f6:a5:a4:f8:2c:a1:d4:9d:1d:20: 6c:49:4f:d6:85:2e:27:86:27:a2:a8:bd:a7:2e:04:b8:69:ae: 2a:4c:88:b9:e7:69:b6:13:55:ab:75:94:79:1b:4b:d7:31:46: 16:8f:71:d1:30:d0:ca:b1:87:05:c1:bc:70:bf:78:44:7d:22: de:54:23:1f:5b:58:09:61:9b:06:ef:b7:c8:98:c8:af:5c:11: e1:c3:a7:d4:b8:6a:22:69:e3:7d:87:60:1c:fb:44:9c:dd:74: 21:45:55:88:0d:d2:4f:ac:e0:e8:78:8d:d7:4e:5e:fd:c1:b2: 54:ee:06:b7:66:85:28:04:df:3f:c3:b7:b4:3d:13:73:fa:36: f8:a3:37:08:9d:8b:20:aa:14:d9:96:e2:d3:06:c7:9c:51:12: cf:9d:36:07:4b:11:9a:97:9a:0b:7c:96:d9:15:e1:6a:bc:87: f1:0e:57:e8:4f:cd:d3:55:67:d6:c3:7f:26:08:1e:e9:5e:75: fb:2a:31:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dz7KMTQ5ZhZy102gCUJNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjEyYmQwNWZmOWM5MWFlMjIzOGYzMjkwMWNiYWFlMWMz MzcwZmUwHhcNMjUxMjIwMDAwMDU4WhcNMjUxMjIxMDAwMDU4WjAzMTEwLwYDVQQD EyhiMTFhYTk5ZDE5ZGE0MmViNjVjYmQxNWU1ZTBjZWFiODJlOWRlYzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SYno/fe4KCNI7XYigyvfKNXQTN1 nh9WtFxQwztUki4GeoUzrresdE/nOw2jzBgZXbHIxp80fUGjclpsmdI4YD09DCYY GfWciW3P9MB2/XOpYzc1wFgfk5+DwPz+1YbQr3nTQwQGPm5epn4FhOMzvWBEzAUa 5CEoXbXDps2t4M9oamZ6Qp7aYW+Me4+ITPs1nfwZiaDC2+nycakArb7oBcIb2UkJ aPv9GQeRFixIPJp2k75uxsVO32zfuVA/ld/SNtbGY8QWciNkDYu4pRG6WBrXq0w4 JOGbY5uasHls/HGEunvIN7q5Dmttw50PmUcfgRnSHdHs8FD4xp33y+Y5YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEaqZ0Z2kLrZcvRXl4M6rgunexOMB8GA1UdIwQY MBaAFGbxK9Bf+cka4iOPMpAcuq4cM3D+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZFcjBGXzV5UnJpSTQ4eWtCeTZyaHd6Y1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82MDUyOGMtYTNmYy00YzgwLTk1ZTEt ZjMzMmViMjljNjYwLzEvWnZFcjBGXzV5UnJpSTQ4eWtCeTZyaHd6Y1A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82MDUyOGMtYTNmYy00YzgwLTk1ZTEtZjMzMmViMjljNjYw LzEvWnZFcjBGXzV5UnJpSTQ4eWtCeTZyaHd6Y1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBFCqo+p qlbWzmNH4WX0GIOoWu+LYGoLtQCpyaeqAifFbUkV1XsHOcL4TerdGHWS9CSVP9Xw NyRo+oJTJEb2paT4LKHUnR0gbElP1oUuJ4Ynoqi9py4EuGmuKkyIuedpthNVq3WU eRtL1zFGFo9x0TDQyrGHBcG8cL94RH0i3lQjH1tYCWGbBu+3yJjIr1wR4cOn1Lhq ImnjfYdgHPtEnN10IUVViA3ST6zg6HiN105e/cGyVO4Gt2aFKATfP8O3tD0Tc/o2 +KM3CJ2LIKoU2Zbi0wbHnFESz502B0sRmpeaC3yW2RXharyH8Q5X6E/N01Vn1sN/ Jgge6V51+yoxjA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:55:45 2025 by rpki-client