This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft File: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft (raw, json) Hash identifier: kIkWxVxoN3tD57dx9pUn7D8jWyHON71u8/nDiyxyIzY= Subject key identifier: 5B:AB:5B:FF:80:7B:13:EC:60:54:37:C3:FB:23:81:A1:C6:B5:A9:12 Authority key identifier: B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C Certificate issuer: /CN=b19d46a6a336353a90f174fa990fc2241201eb1c Certificate serial: 019AF23FCB96C949DB8577840A626D6C68BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft Manifest number: 06E8 Signing time: Sat 06 Dec 2025 06:00:58 +0000 Manifest this update: Sat 06 Dec 2025 06:00:58 +0000 Manifest next update: Sun 07 Dec 2025 06:00:58 +0000 Files and hashes: 1: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl (hash: AqLKNmwv8k46j6jD/E+WwRXOAQsKdN1f+rllbN/2RN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cb:96:c9:49:db:85:77:84:0a:62:6d:6c:68:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b19d46a6a336353a90f174fa990fc2241201eb1c Validity Not Before: Dec 6 06:00:58 2025 GMT Not After : Dec 7 06:00:58 2025 GMT Subject: CN=5bab5bff807b13ec605437c3fb2381a1c6b5a912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:82:58:d5:54:1a:ea:eb:27:cc:90:18:38: 2c:0c:64:94:f0:ea:d5:90:12:8d:12:22:bc:03:b7: 2d:38:df:08:66:51:aa:81:59:1e:2c:1c:a2:26:82: 4c:19:e1:32:6b:22:4a:d9:af:98:dd:e6:98:a0:0f: c9:0e:c2:8a:14:8f:ab:ee:20:67:66:86:7b:94:2c: c4:9c:3d:a7:1e:fd:65:9c:af:bc:83:6d:e1:04:5a: f1:dd:09:58:d5:b6:bc:3a:63:06:3d:7f:fa:7a:69: df:fe:86:a4:4b:0d:7e:89:d0:b8:46:1c:d7:6b:fa: f0:28:03:1b:63:35:91:72:df:d9:f9:bf:48:0d:d6: fd:0c:2d:31:a4:ea:9b:67:68:63:03:eb:7d:08:b9: 29:a3:51:a0:29:30:fc:b0:9c:3c:f2:e2:a7:10:cb: 13:5d:91:5a:04:51:3c:90:7c:05:91:85:59:dc:0a: 8a:d5:59:30:af:1a:0c:4c:a0:ac:b5:7a:49:a8:44: 5e:a8:42:fc:0d:e2:49:7d:44:00:29:0b:9d:05:09: 9a:79:f6:98:79:13:d9:69:89:4f:3d:08:1f:96:2e: 94:42:29:df:ec:3e:f2:f1:bc:15:e0:82:20:0f:12: 8f:0a:5a:6f:e8:74:0e:3f:d3:ed:49:52:b0:e0:b3: dc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AB:5B:FF:80:7B:13:EC:60:54:37:C3:FB:23:81:A1:C6:B5:A9:12 X509v3 Authority Key Identifier: keyid:B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:9f:e9:fa:c3:2b:e9:38:04:6b:3c:21:dd:22:ac:c2:ae:bb: 88:6c:d6:84:2e:86:d0:ee:15:60:e1:e4:67:da:4b:71:ae:85: c7:d6:3c:e1:70:c1:4d:70:ff:74:07:07:f2:d1:fc:bd:e5:c7: ad:47:53:0b:b2:7a:93:da:00:c4:44:62:2f:17:33:b0:1e:13: c8:76:bc:d3:38:fd:1e:17:3a:bb:b7:5e:80:62:df:c5:f8:0c: 4e:0e:fc:36:44:a9:78:0b:56:72:26:e0:82:44:81:5b:34:58: 12:fa:b0:1e:c7:64:f9:0f:bc:2c:d4:66:7b:4b:48:cd:7a:f8: 34:1a:66:46:c3:83:76:7f:c5:6e:a4:e1:72:6f:16:b6:4f:ce: d7:3e:29:85:98:ca:59:e3:2b:45:42:d0:59:d2:62:ec:be:17: 1b:49:fe:78:88:d0:fd:51:b4:a9:32:ad:2d:5a:26:a6:2d:77: 08:05:a8:58:55:59:8d:cd:dc:21:06:98:76:b5:76:59:8f:5e: 95:f1:62:af:bd:c2:d3:f7:e2:f0:b6:b4:a0:dc:53:e5:e2:bb: b5:06:7e:c2:f5:81:63:7a:ec:55:af:91:f9:ee:bd:0b:52:86: 8a:c8:22:68:14:2d:9b:7b:65:6a:23:21:68:73:06:fb:3a:a3: 0e:24:81:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8uWyUnbhXeECmJtbGi7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOWQ0NmE2YTMzNjM1M2E5MGYxNzRmYTk5MGZjMjI0MTIw MWViMWMwHhcNMjUxMjA2MDYwMDU4WhcNMjUxMjA3MDYwMDU4WjAzMTEwLwYDVQQD Eyg1YmFiNWJmZjgwN2IxM2VjNjA1NDM3YzNmYjIzODFhMWM2YjVhOTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw2CWNVUGurrJ8yQGDgsDGSU8OrV kBKNEiK8A7ctON8IZlGqgVkeLByiJoJMGeEyayJK2a+Y3eaYoA/JDsKKFI+r7iBn ZoZ7lCzEnD2nHv1lnK+8g23hBFrx3QlY1ba8OmMGPX/6emnf/oakSw1+idC4RhzX a/rwKAMbYzWRct/Z+b9IDdb9DC0xpOqbZ2hjA+t9CLkpo1GgKTD8sJw88uKnEMsT XZFaBFE8kHwFkYVZ3AqK1VkwrxoMTKCstXpJqEReqEL8DeJJfUQAKQudBQmaefaY eRPZaYlPPQgfli6UQinf7D7y8bwV4IIgDxKPClpv6HQOP9PtSVKw4LPcBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFurW/+AexPsYFQ3w/sjgaHGtakSMB8GA1UdIwQY MBaAFLGdRqajNjU6kPF0+pkPwiQSAescMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lMmY0ZTEtYTcwYS00Y2ExLTkyMWMt NTk0YzY5ZmIwNzExLzEvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lMmY0ZTEtYTcwYS00Y2ExLTkyMWMtNTk0YzY5ZmIwNzEx LzEvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJ/p+sMr 6TgEazwh3SKswq67iGzWhC6G0O4VYOHkZ9pLca6Fx9Y84XDBTXD/dAcH8tH8veXH rUdTC7J6k9oAxERiLxczsB4TyHa80zj9Hhc6u7degGLfxfgMTg78NkSpeAtWcibg gkSBWzRYEvqwHsdk+Q+8LNRme0tIzXr4NBpmRsODdn/FbqThcm8Wtk/O1z4phZjK WeMrRULQWdJi7L4XG0n+eIjQ/VG0qTKtLVompi13CAWoWFVZjc3cIQaYdrV2WY9e lfFir73C0/fi8La0oNxT5eK7tQZ+wvWBY3rsVa+R+e69C1KGisgiaBQtm3tlaiMh aHMG+zqjDiSBpg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:25 2025 by rpki-client