This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft File: zc30j16nbFCnF-EFgEjLr2f7JJI.mft (raw, json) Hash identifier: sxeizRC3OGf980+aTgAVQ16v5MYwpjGqzt7VyhxN1fw= Subject key identifier: EC:52:F5:C5:A3:7A:25:10:F7:0E:68:61:69:BA:82:E1:B7:92:34:49 Authority key identifier: CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92 Certificate issuer: /CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492 Certificate serial: 019AF12D28146A2BB4D70D98DA661128D48F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft Manifest number: 0482 Signing time: Sat 06 Dec 2025 01:00:59 +0000 Manifest this update: Sat 06 Dec 2025 01:00:59 +0000 Manifest next update: Sun 07 Dec 2025 01:00:59 +0000 Files and hashes: 1: zc30j16nbFCnF-EFgEjLr2f7JJI.crl (hash: YjQdEQDAdpaowy+cnS3CIXp13gLDdhZNOoRkHw+19PE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:28:14:6a:2b:b4:d7:0d:98:da:66:11:28:d4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492 Validity Not Before: Dec 6 01:00:59 2025 GMT Not After : Dec 7 01:00:59 2025 GMT Subject: CN=ec52f5c5a37a2510f70e686169ba82e1b7923449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:c6:aa:58:db:f8:34:80:7d:7b:3b:33:b4: 43:b0:4c:10:a5:6f:96:ab:d1:33:95:0e:96:3f:16: 4f:a2:50:e7:cf:67:91:a6:55:9a:a6:af:3b:6c:2e: 8e:6b:a9:0d:ef:01:a5:4c:70:1c:b6:05:9d:c0:2b: fb:b8:e9:95:37:32:fa:cb:cb:29:bb:81:bf:3b:3a: b6:61:01:06:8b:c1:5f:3e:5d:2d:01:87:b2:3c:fa: 0d:9b:e3:ee:03:ab:87:a2:fa:04:d8:1b:ce:cc:8c: f5:67:de:4f:65:12:84:4c:c4:0c:b7:0f:bb:18:4c: b5:37:47:59:97:3a:85:82:11:7b:52:c6:cf:c3:9e: f0:15:51:1d:96:4c:a7:e8:b4:7c:ce:cd:c3:1f:66: 04:65:67:e8:62:b0:43:8d:43:e7:fb:53:67:11:9f: 51:ff:2b:7f:56:f8:73:ea:b8:c6:20:b9:cb:dc:22: b5:cd:26:1f:81:4c:5c:97:9f:c5:6c:0a:a9:54:e5: 9d:8b:89:0f:a1:0c:3f:c8:42:16:e1:45:c5:cc:65: d8:8a:5f:39:62:ed:82:0e:23:0a:96:8b:fb:ab:9c: cc:f8:89:5e:50:d3:56:7a:b3:4c:bd:a4:ec:a4:3d: 56:cd:c3:f5:f6:cd:09:60:23:9e:e6:25:c1:6e:3b: b5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:52:F5:C5:A3:7A:25:10:F7:0E:68:61:69:BA:82:E1:B7:92:34:49 X509v3 Authority Key Identifier: keyid:CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:08:32:10:d7:e7:1c:af:cf:df:0f:1e:8c:41:55:af:87:00: 40:45:41:8b:13:cc:38:84:c2:17:1d:48:bd:94:93:de:6c:d5: 33:73:d2:27:13:93:48:40:39:12:67:c4:0b:26:cc:a6:df:e3: 31:21:a8:dc:e4:e3:fe:bd:d7:0b:0c:89:e2:43:79:32:54:ab: 6a:2c:b6:86:a6:be:59:a2:37:4d:ca:36:97:70:b6:98:8e:fd: 0a:8b:12:5c:1e:8d:32:74:95:fb:04:cb:ba:7d:ec:27:b5:dc: b7:75:48:74:06:e1:c0:89:e8:f0:4d:3a:e6:f6:b4:92:4b:bf: fb:43:d4:84:e5:a5:f5:2f:d8:b8:51:fe:5c:94:f8:d3:8b:07: f6:78:21:1b:d5:e0:7a:72:4b:3d:c3:5a:49:f5:91:e7:e6:9f: 1d:f3:14:d3:54:21:86:bd:1a:fe:f4:40:da:83:fe:89:e7:a4: fd:d9:e8:89:15:df:41:49:36:69:24:13:ca:c7:89:dc:58:4a: 13:ef:61:c0:3e:6d:69:7c:6e:bd:ee:89:25:55:b2:be:7b:17: fa:18:88:b7:6c:52:b3:b0:ce:f8:0a:12:62:7f:78:95:c0:7f: 12:0e:5d:fb:ee:7c:08:d0:ea:d1:ea:b0:06:e8:ac:b5:a9:6f: b0:b5:d2:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSgUaiu01w2Y2mYRKNSPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkY2RmNDhmNWVhNzZjNTBhNzE3ZTEwNTgwNDhjYmFmNjdm YjI0OTIwHhcNMjUxMjA2MDEwMDU5WhcNMjUxMjA3MDEwMDU5WjAzMTEwLwYDVQQD EyhlYzUyZjVjNWEzN2EyNTEwZjcwZTY4NjE2OWJhODJlMWI3OTIzNDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2nGqljb+DSAfXs7M7RDsEwQpW+W q9EzlQ6WPxZPolDnz2eRplWapq87bC6Oa6kN7wGlTHActgWdwCv7uOmVNzL6y8sp u4G/Ozq2YQEGi8FfPl0tAYeyPPoNm+PuA6uHovoE2BvOzIz1Z95PZRKETMQMtw+7 GEy1N0dZlzqFghF7UsbPw57wFVEdlkyn6LR8zs3DH2YEZWfoYrBDjUPn+1NnEZ9R /yt/Vvhz6rjGILnL3CK1zSYfgUxcl5/FbAqpVOWdi4kPoQw/yEIW4UXFzGXYil85 Yu2CDiMKlov7q5zM+IleUNNWerNMvaTspD1WzcP19s0JYCOe5iXBbju1swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxS9cWjeiUQ9w5oYWm6guG3kjRJMB8GA1UdIwQY MBaAFM3N9I9ep2xQpxfhBYBIy69n+ySSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemMzMGoxNm5iRkNuRi1FRmdFakxyMmY3SkpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80YThhMGQtNjU1Mi00MzRhLWFiMWIt MjVhMWFiNWQxODkzLzEvemMzMGoxNm5iRkNuRi1FRmdFakxyMmY3SkpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80YThhMGQtNjU1Mi00MzRhLWFiMWItMjVhMWFiNWQxODkz LzEvemMzMGoxNm5iRkNuRi1FRmdFakxyMmY3SkpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEggyENfn HK/P3w8ejEFVr4cAQEVBixPMOITCFx1IvZST3mzVM3PSJxOTSEA5EmfECybMpt/j MSGo3OTj/r3XCwyJ4kN5MlSraiy2hqa+WaI3Tco2l3C2mI79CosSXB6NMnSV+wTL un3sJ7Xct3VIdAbhwIno8E065va0kku/+0PUhOWl9S/YuFH+XJT404sH9nghG9Xg enJLPcNaSfWR5+afHfMU01Qhhr0a/vRA2oP+ieek/dnoiRXfQUk2aSQTyseJ3FhK E+9hwD5taXxuve6JJVWyvnsX+hiIt2xSs7DO+AoSYn94lcB/Eg5d++58CNDq0eqw BuistalvsLXSeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:34 2025 by rpki-client