This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft File: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft (raw, json) Hash identifier: nYKnzSuqhwZMxHBv4RUayeu992Z6zKT6LKKFKOrjId8= Subject key identifier: 60:A3:89:C2:EA:ED:05:C3:F1:2E:43:F0:5E:BB:04:B3:FD:45:81:A5 Authority key identifier: B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C Certificate issuer: /CN=b19d46a6a336353a90f174fa990fc2241201eb1c Certificate serial: 019B2E1D82AE22AC3A5E670AAE73291132B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft Manifest number: 0707 Signing time: Wed 17 Dec 2025 21:00:44 +0000 Manifest this update: Wed 17 Dec 2025 21:00:44 +0000 Manifest next update: Thu 18 Dec 2025 21:00:44 +0000 Files and hashes: 1: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl (hash: 9/sRYCwEHwALUsz3H5qIVoqQ0YjN/Jc6v4QjuZvnpDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:82:ae:22:ac:3a:5e:67:0a:ae:73:29:11:32:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b19d46a6a336353a90f174fa990fc2241201eb1c Validity Not Before: Dec 17 21:00:44 2025 GMT Not After : Dec 18 21:00:44 2025 GMT Subject: CN=60a389c2eaed05c3f12e43f05ebb04b3fd4581a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:a4:06:e6:ab:8d:26:ed:47:a6:69:b5:3d: e0:fe:a4:94:62:b5:fb:4d:29:b6:45:0d:47:33:f4: d0:fc:7c:f3:ed:79:6b:be:9f:0d:f6:a8:53:7a:51: 2c:9c:f1:b9:0d:e6:c7:2b:01:dd:10:39:0a:43:c4: d1:c1:5e:35:cd:69:a4:13:f6:90:18:c0:62:67:8f: a1:8d:d0:a5:17:97:9f:ed:a4:c5:a8:df:8a:45:ad: 29:ff:ae:be:16:f4:b2:7e:b4:3d:50:26:5f:79:ed: 9b:b5:d4:fc:ee:9e:dc:39:bc:f4:d3:a6:78:46:42: 82:37:bd:2d:94:3f:ed:43:87:43:31:79:a7:3b:70: 1e:01:8d:5b:8a:99:74:15:b4:14:11:07:6c:b9:70: 54:cf:ba:99:13:4b:aa:9b:49:d9:24:fc:37:fb:53: c8:13:8d:24:fc:4a:e7:7e:52:60:c6:8c:cb:02:18: c5:0e:ac:39:ff:16:d6:29:d1:82:ed:99:cf:df:38: f7:fa:15:6a:0a:ac:36:61:85:f5:85:ce:10:d9:38: 30:57:39:cd:75:9e:45:c9:1d:78:48:ba:5e:4d:0b: 77:34:d4:44:ff:ef:e8:0f:cb:cf:42:ec:b3:16:ac: c5:c2:56:b0:40:69:d8:71:0d:0c:47:db:6c:b9:2d: 1b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A3:89:C2:EA:ED:05:C3:F1:2E:43:F0:5E:BB:04:B3:FD:45:81:A5 X509v3 Authority Key Identifier: keyid:B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6e:dc:f2:39:fa:0d:c9:cf:cf:9b:7d:7a:48:98:1a:bd:0b: 47:94:dd:d1:97:0b:77:45:91:02:3a:0a:16:85:e5:4f:a0:a9: 2b:1a:38:67:4d:a8:7e:20:07:fc:f1:bc:91:9e:11:8a:9f:cb: 06:8c:1d:5f:cc:32:c1:ff:04:45:6a:b2:15:86:cb:70:09:7a: fc:f2:aa:7c:55:b3:01:f5:02:bb:54:d3:cf:b0:37:30:8a:cb: 79:9c:4c:80:cc:22:c6:20:7b:16:04:e3:b6:87:8b:7a:d1:98: 5a:3f:a0:68:73:28:61:df:7f:17:08:b6:3f:f4:2b:47:99:b3: a3:b8:12:e0:0c:21:75:e7:5c:9f:d4:82:04:4f:cb:cd:76:00: 45:7e:f8:ad:19:80:8a:60:25:f3:fa:43:9b:87:ab:0a:03:7f: 9e:02:f2:59:22:33:bc:eb:cf:0d:9e:f0:00:52:d5:e2:b4:d7: 6f:63:af:62:24:a8:03:a4:28:50:96:bd:f6:4d:f9:53:1d:e0: b2:33:6a:1c:32:cc:ee:eb:45:0b:4b:ce:49:eb:94:4b:c5:64: ce:03:c1:0c:1f:de:7f:21:e8:2a:ed:be:f0:9e:6d:2c:e0:a0: 7b:d4:76:06:c5:1a:10:c5:c6:76:23:44:c4:1b:19:d0:20:a5: 62:45:63:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHYKuIqw6XmcKrnMpETK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOWQ0NmE2YTMzNjM1M2E5MGYxNzRmYTk5MGZjMjI0MTIw MWViMWMwHhcNMjUxMjE3MjEwMDQ0WhcNMjUxMjE4MjEwMDQ0WjAzMTEwLwYDVQQD Eyg2MGEzODljMmVhZWQwNWMzZjEyZTQzZjA1ZWJiMDRiM2ZkNDU4MWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK2kBuarjSbtR6ZptT3g/qSUYrX7 TSm2RQ1HM/TQ/Hzz7Xlrvp8N9qhTelEsnPG5DebHKwHdEDkKQ8TRwV41zWmkE/aQ GMBiZ4+hjdClF5ef7aTFqN+KRa0p/66+FvSyfrQ9UCZfee2btdT87p7cObz006Z4 RkKCN70tlD/tQ4dDMXmnO3AeAY1bipl0FbQUEQdsuXBUz7qZE0uqm0nZJPw3+1PI E40k/ErnflJgxozLAhjFDqw5/xbWKdGC7ZnP3zj3+hVqCqw2YYX1hc4Q2TgwVznN dZ5FyR14SLpeTQt3NNRE/+/oD8vPQuyzFqzFwlawQGnYcQ0MR9tsuS0bXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCjicLq7QXD8S5D8F67BLP9RYGlMB8GA1UdIwQY MBaAFLGdRqajNjU6kPF0+pkPwiQSAescMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lMmY0ZTEtYTcwYS00Y2ExLTkyMWMt NTk0YzY5ZmIwNzExLzEvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lMmY0ZTEtYTcwYS00Y2ExLTkyMWMtNTk0YzY5ZmIwNzEx LzEvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnm7c8jn6 DcnPz5t9ekiYGr0LR5Td0ZcLd0WRAjoKFoXlT6CpKxo4Z02ofiAH/PG8kZ4Rip/L BowdX8wywf8ERWqyFYbLcAl6/PKqfFWzAfUCu1TTz7A3MIrLeZxMgMwixiB7FgTj toeLetGYWj+gaHMoYd9/Fwi2P/QrR5mzo7gS4Awhdedcn9SCBE/LzXYARX74rRmA imAl8/pDm4erCgN/ngLyWSIzvOvPDZ7wAFLV4rTXb2OvYiSoA6QoUJa99k35Ux3g sjNqHDLM7utFC0vOSeuUS8VkzgPBDB/efyHoKu2+8J5tLOCge9R2BsUaEMXGdiNE xBsZ0CClYkVjVw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:45:36 2025 by rpki-client