This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft File: zfyNbNSfmv4mTVQumpYU89SsHJ0.mft (raw, json) Hash identifier: gKU3QGcWaDAWDbLB7TR6xo5wfSIVTZs4CLYrQ5NmmBE= Subject key identifier: FE:19:E0:68:7C:C3:B5:52:8C:A8:CC:58:D7:0A:0A:18:BE:E0:D7:9B Authority key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D Certificate issuer: /CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d Certificate serial: 019AF50A1CD272B9E16047DC05DDECAD16B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 19:01:11 +0000 Manifest this update: Sat 06 Dec 2025 19:01:11 +0000 Manifest next update: Sun 07 Dec 2025 19:01:11 +0000 Files and hashes: 1: zfyNbNSfmv4mTVQumpYU89SsHJ0.crl (hash: +jgb7Awk1UxI6eW3EZ6NVWFAategW1wJo3guX5gMKUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:1c:d2:72:b9:e1:60:47:dc:05:dd:ec:ad:16:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d Validity Not Before: Dec 6 19:01:11 2025 GMT Not After : Dec 7 19:01:11 2025 GMT Subject: CN=fe19e0687cc3b5528ca8cc58d70a0a18bee0d79b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d4:ff:b6:c7:59:cb:8c:00:ca:5c:82:22:c9: f4:e0:c4:d4:4d:37:ae:5b:67:e4:cd:ce:ba:f1:e6: 66:07:13:3a:78:85:49:c9:b9:2d:88:4c:e0:d5:05: f0:6c:2d:32:1e:37:13:b2:76:9f:87:23:6f:49:72: 81:29:41:76:aa:10:98:48:aa:44:c6:32:62:ef:a1: a7:c4:93:7f:ca:70:5f:d6:5b:a1:34:61:69:01:0c: e6:22:fd:36:db:d4:71:81:0e:e4:08:e4:11:fa:71: fb:b3:c8:bd:33:0b:16:f3:1f:8b:e0:9a:fc:5d:53: ef:4c:b1:0a:f6:9d:db:fc:50:2e:cd:11:7c:ed:4a: 05:db:62:63:0a:ce:49:93:69:3f:9b:30:ba:6a:8e: 6d:48:3c:61:dd:6b:96:bf:cb:65:b9:57:34:27:fd: b8:95:d9:4e:f9:6e:18:5a:cf:1d:48:8a:db:4f:8d: 2e:f4:7c:39:57:ac:59:a1:02:eb:c3:15:e8:39:f2: 2f:d3:c8:ca:53:41:5e:67:0a:15:02:38:ec:1c:e0: 97:17:b1:8e:fb:98:8f:0c:e8:71:45:31:0a:97:09: 95:18:de:0d:e7:39:dd:1c:3f:63:d5:ef:91:ed:a9: b9:b0:21:6b:fb:98:b0:67:b5:64:7b:5f:a4:4d:c8: 2e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:19:E0:68:7C:C3:B5:52:8C:A8:CC:58:D7:0A:0A:18:BE:E0:D7:9B X509v3 Authority Key Identifier: keyid:CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ae:72:14:c8:5b:b7:b4:c8:76:25:fc:a2:bb:77:92:7c:50: 82:4b:e3:d1:23:f2:24:e4:c2:a4:4e:ef:0c:e2:3a:b2:d4:72: ba:84:40:8e:d6:ff:a5:76:1e:a6:fa:e8:94:6d:96:cd:fb:e3: e1:0c:3b:d0:1c:65:90:35:8b:40:70:4a:3c:9c:91:c8:1f:c1: 7a:70:34:5c:e6:60:16:73:53:50:39:a5:37:bf:a8:51:c2:42: d1:53:9b:fe:28:4d:95:42:a7:59:2e:ef:fe:41:99:cb:8d:03: f1:ef:14:20:c6:76:90:e9:45:2c:de:6c:0d:df:4a:02:9f:17: 02:0d:55:c2:d5:30:23:e7:f2:e1:c0:1a:db:95:ed:e5:b5:0d: 1e:49:cf:8a:7b:8d:0c:b7:0f:20:01:3c:52:ba:28:1a:8e:44: 29:3a:b9:18:ef:7a:b7:f8:65:8e:c4:9a:aa:c3:c4:bf:97:f6: 85:87:fd:aa:fc:e6:1b:25:2d:88:64:cd:06:91:bf:f5:ac:4d: 21:19:76:e2:50:92:15:9e:cb:58:4c:36:ab:b2:f8:f9:47:56: 74:42:4d:2a:8d:ba:08:05:99:29:f6:b4:57:d3:85:07:9c:eb: ec:fa:7d:f7:64:eb:05:8f:9c:d8:64:52:89:7d:99:ed:59:20: 73:e8:30:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ChzScrnhYEfcBd3srRa1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZmM4ZDZjZDQ5ZjlhZmUyNjRkNTQyZTlhOTYxNGYzZDRh YzFjOWQwHhcNMjUxMjA2MTkwMTExWhcNMjUxMjA3MTkwMTExWjAzMTEwLwYDVQQD EyhmZTE5ZTA2ODdjYzNiNTUyOGNhOGNjNThkNzBhMGExOGJlZTBkNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NT/tsdZy4wAylyCIsn04MTUTTeu W2fkzc668eZmBxM6eIVJybktiEzg1QXwbC0yHjcTsnafhyNvSXKBKUF2qhCYSKpE xjJi76GnxJN/ynBf1luhNGFpAQzmIv0229RxgQ7kCOQR+nH7s8i9MwsW8x+L4Jr8 XVPvTLEK9p3b/FAuzRF87UoF22JjCs5Jk2k/mzC6ao5tSDxh3WuWv8tluVc0J/24 ldlO+W4YWs8dSIrbT40u9Hw5V6xZoQLrwxXoOfIv08jKU0FeZwoVAjjsHOCXF7GO +5iPDOhxRTEKlwmVGN4N5zndHD9j1e+R7am5sCFr+5iwZ7Vke1+kTcguAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4Z4Gh8w7VSjKjMWNcKChi+4NebMB8GA1UdIwQY MBaAFM38jWzUn5r+Jk1ULpqWFPPUrBydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZ5TmJOU2ZtdjRtVFZRdW1wWVU4OVNzSEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hYWI5MTUtZDVmZC00NTAzLWIzYjUt ZjI2MDk5ZTExNDgzLzEvemZ5TmJOU2ZtdjRtVFZRdW1wWVU4OVNzSEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9hYWI5MTUtZDVmZC00NTAzLWIzYjUtZjI2MDk5ZTExNDgz LzEvemZ5TmJOU2ZtdjRtVFZRdW1wWVU4OVNzSEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoK5yFMhb t7TIdiX8ort3knxQgkvj0SPyJOTCpE7vDOI6stRyuoRAjtb/pXYepvrolG2Wzfvj 4Qw70BxlkDWLQHBKPJyRyB/BenA0XOZgFnNTUDmlN7+oUcJC0VOb/ihNlUKnWS7v /kGZy40D8e8UIMZ2kOlFLN5sDd9KAp8XAg1VwtUwI+fy4cAa25Xt5bUNHknPinuN DLcPIAE8UrooGo5EKTq5GO96t/hljsSaqsPEv5f2hYf9qvzmGyUtiGTNBpG/9axN IRl24lCSFZ7LWEw2q7L4+UdWdEJNKo26CAWZKfa0V9OFB5zr7Pp992TrBY+c2GRS iX2Z7Vkgc+gwYA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:32 2025 by rpki-client