This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft File: ZWo7XAkm87RZeYDaUImcKOpqa9k.mft (raw, json) Hash identifier: hK21Sxe0p1KTRAv7lkrI/RkLGdkxIUXKwbBZEL1zZbM= Subject key identifier: 85:63:BD:DA:3A:DB:B0:66:C8:DA:14:B1:76:23:7B:0C:89:7C:5F:CF Authority key identifier: 65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9 Certificate issuer: /CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9 Certificate serial: 019AF3892EB95A37349208B91BA4E9DC859A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft Manifest number: 0B25 Signing time: Sat 06 Dec 2025 12:00:45 +0000 Manifest this update: Sat 06 Dec 2025 12:00:45 +0000 Manifest next update: Sun 07 Dec 2025 12:00:45 +0000 Files and hashes: 1: ZWo7XAkm87RZeYDaUImcKOpqa9k.crl (hash: Psixsx/xWEABwdlTloaZk/WzRsBxkcWWvASC9LYWUcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:2e:b9:5a:37:34:92:08:b9:1b:a4:e9:dc:85:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9 Validity Not Before: Dec 6 12:00:45 2025 GMT Not After : Dec 7 12:00:45 2025 GMT Subject: CN=8563bdda3adbb066c8da14b176237b0c897c5fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:4b:da:30:ea:97:02:35:e5:70:7a:4c:12: 4c:11:ac:7a:ca:da:2f:69:18:da:eb:13:23:03:7f: 75:e2:ef:30:0b:0c:db:a9:5f:97:f5:2a:57:01:ea: 6c:00:ab:c9:25:f0:b7:1c:d0:8a:bf:31:ef:fb:d5: 1e:89:ad:53:52:fc:31:ce:fc:c6:78:5f:fa:cb:ba: 60:a9:f0:41:6d:7e:4f:14:59:74:22:7d:bb:d8:c4: 59:ae:65:33:e2:65:53:9a:75:24:13:68:d2:26:0b: df:97:ad:9a:39:bc:3f:0e:d9:81:54:cb:9c:c2:3a: fe:8d:3a:43:06:dd:20:40:ac:8f:64:2e:dc:39:0e: 1d:08:21:86:1b:89:9d:7b:65:ca:58:98:18:85:2f: 57:fd:fd:be:8b:63:f2:6d:4e:f4:19:f5:cd:32:7a: 10:55:09:85:ad:4b:b5:d0:0b:2e:0a:d4:15:a7:46: 25:4f:3b:b9:53:60:76:fc:37:79:5d:ef:44:3d:5b: 00:01:d8:ad:98:24:b8:13:9f:10:c1:f3:9a:0a:2c: d3:a0:c2:d9:80:d4:84:bd:40:e6:3a:d0:b2:70:48: 22:5e:52:e0:19:84:16:1c:eb:68:ce:80:0b:d1:a9: 90:64:74:29:b8:ba:26:6c:e2:f5:4f:f3:67:75:0e: 2d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:63:BD:DA:3A:DB:B0:66:C8:DA:14:B1:76:23:7B:0C:89:7C:5F:CF X509v3 Authority Key Identifier: keyid:65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:8a:ed:7d:15:98:e7:3e:11:64:28:57:92:4b:08:fa:db:84: 02:9e:e9:2f:9f:99:a3:7b:ae:0b:ea:7e:ed:77:da:ab:f4:cd: 9c:56:35:8a:72:9f:fa:e8:2e:7c:49:5c:40:5a:64:25:84:7e: e7:d0:d4:af:d5:42:1a:bf:a7:43:3a:69:9e:44:21:7f:df:96: 66:c3:f9:79:df:b2:e1:d2:05:0e:50:2f:47:e4:09:0a:be:d1: bd:27:d4:bc:4b:c5:52:f2:3e:01:1e:84:71:15:17:73:ae:1e: 87:ae:da:eb:e6:fe:f3:17:98:17:09:79:72:6c:43:07:b6:c6: 1a:bf:6f:13:40:e0:ac:bd:b3:b7:61:29:d2:ef:91:37:c7:e4: 5b:08:29:79:ce:27:99:4b:ed:cd:a9:bb:a3:ef:33:36:a7:84: 89:ab:2e:dc:8f:6f:88:88:a4:bb:1c:77:f8:bc:6b:1c:60:a4: b6:79:94:b8:a6:82:df:1f:5e:e0:e6:b2:37:13:2d:3a:86:e4: ab:31:be:67:0a:53:71:6f:1d:80:0a:d4:d3:25:98:f1:4b:61: ed:80:74:5d:c9:44:44:59:8d:36:c6:d8:24:61:08:1b:36:e3: ba:aa:e2:80:09:99:52:f8:8c:fd:bf:52:28:51:d5:49:ea:01: 6b:50:3c:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziS65Wjc0kgi5G6Tp3IWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NmEzYjVjMDkyNmYzYjQ1OTc5ODBkYTUwODk5YzI4ZWE2 YTZiZDkwHhcNMjUxMjA2MTIwMDQ1WhcNMjUxMjA3MTIwMDQ1WjAzMTEwLwYDVQQD Eyg4NTYzYmRkYTNhZGJiMDY2YzhkYTE0YjE3NjIzN2IwYzg5N2M1ZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIFL2jDqlwI15XB6TBJMEax6ytov aRja6xMjA3914u8wCwzbqV+X9SpXAepsAKvJJfC3HNCKvzHv+9Ueia1TUvwxzvzG eF/6y7pgqfBBbX5PFFl0In272MRZrmUz4mVTmnUkE2jSJgvfl62aObw/DtmBVMuc wjr+jTpDBt0gQKyPZC7cOQ4dCCGGG4mde2XKWJgYhS9X/f2+i2PybU70GfXNMnoQ VQmFrUu10AsuCtQVp0YlTzu5U2B2/Dd5Xe9EPVsAAditmCS4E58QwfOaCizToMLZ gNSEvUDmOtCycEgiXlLgGYQWHOtozoAL0amQZHQpuLombOL1T/NndQ4tjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVjvdo627BmyNoUsXYjewyJfF/PMB8GA1UdIwQY MBaAFGVqO1wJJvO0WXmA2lCJnCjqamvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8zNmMxYTktNGEyMi00NTUwLWIzYzgt NGNkOGI0MzhmODE1LzEvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8zNmMxYTktNGEyMi00NTUwLWIzYzgtNGNkOGI0MzhmODE1 LzEvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIrtfRWY 5z4RZChXkksI+tuEAp7pL5+Zo3uuC+p+7Xfaq/TNnFY1inKf+ugufElcQFpkJYR+ 59DUr9VCGr+nQzppnkQhf9+WZsP5ed+y4dIFDlAvR+QJCr7RvSfUvEvFUvI+AR6E cRUXc64eh67a6+b+8xeYFwl5cmxDB7bGGr9vE0DgrL2zt2Ep0u+RN8fkWwgpec4n mUvtzam7o+8zNqeEiasu3I9viIikuxx3+LxrHGCktnmUuKaC3x9e4OayNxMtOobk qzG+ZwpTcW8dgArU0yWY8Uth7YB0XclERFmNNsbYJGEIGzbjuqrigAmZUviM/b9S KFHVSeoBa1A8pQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:00:02 2025 by rpki-client