This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft File: ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft (raw, json) Hash identifier: ewB9kewEAEIBwT3EbLaZw7Mig9ieWgEEmbL4TYiDdrE= Subject key identifier: 1C:25:5A:8A:21:BD:71:76:21:3D:DA:B9:CF:DD:18:06:BB:05:30:3F Authority key identifier: 66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3 Certificate issuer: /CN=66263febc8522dda56cbb439b61a0562be1ae1e3 Certificate serial: 019AF31C807FB6E0056C642CC7A4B38D4578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft Manifest number: 14B9 Signing time: Sat 06 Dec 2025 10:02:02 +0000 Manifest this update: Sat 06 Dec 2025 10:02:02 +0000 Manifest next update: Sun 07 Dec 2025 10:02:02 +0000 Files and hashes: 1: ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl (hash: mrGmpILafb4A1MbGhYFl0PujUsK7UJPKhS35MY2hxP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:80:7f:b6:e0:05:6c:64:2c:c7:a4:b3:8d:45:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66263febc8522dda56cbb439b61a0562be1ae1e3 Validity Not Before: Dec 6 10:02:02 2025 GMT Not After : Dec 7 10:02:02 2025 GMT Subject: CN=1c255a8a21bd7176213ddab9cfdd1806bb05303f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:28:55:ce:a8:9d:1f:93:72:83:38:3f:b8: 0e:d8:72:b4:50:5c:3b:37:1b:f7:fe:e2:f0:52:df: 7d:c2:dc:d0:77:6f:e8:b2:55:8a:34:fb:3b:17:52: b6:af:51:24:fc:03:b6:ca:2f:1b:d2:68:cd:bd:e5: c4:02:42:1c:cd:b0:40:00:08:18:f0:cb:a2:8d:45: 68:a4:18:c2:d9:11:69:74:c1:f6:36:04:76:8d:28: 42:8c:7b:fe:25:35:28:3a:a9:f9:ea:7a:ae:01:6c: 98:e3:1c:ca:57:82:a7:73:2d:6f:ac:33:2b:84:91: 14:5c:51:64:79:62:d4:31:8c:81:99:d8:73:dc:fb: 3c:0e:74:56:3d:95:e6:2f:a2:27:02:2d:2f:1b:e9: 15:18:be:a5:cd:cc:98:ef:18:3b:b0:5c:a7:8b:a0: 3b:91:73:ad:28:6c:c2:42:f2:a0:d3:b9:dc:ea:ab: 96:aa:4f:0c:a5:c9:c5:79:01:f6:7d:c7:7b:bc:22: 9e:bf:a6:1f:1e:92:8d:97:86:37:9b:51:18:06:a6: fd:50:4a:9b:15:f7:45:33:01:5d:c2:07:3b:ab:1c: ee:9d:99:cb:12:0c:68:c4:38:9a:41:ef:bf:e1:36: 54:35:1e:2c:48:db:57:f8:f6:c7:44:21:53:d5:c2: c7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:25:5A:8A:21:BD:71:76:21:3D:DA:B9:CF:DD:18:06:BB:05:30:3F X509v3 Authority Key Identifier: keyid:66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9a:49:dc:e3:9f:80:72:1a:7c:1d:2d:bb:ba:c4:12:93:e4: ca:d1:94:4f:50:fc:a0:91:1d:74:d2:6d:79:c7:5a:ba:9c:36: 93:2c:7b:98:ed:18:b1:64:bf:73:07:60:4a:fb:89:a1:5f:5f: 76:ec:80:ae:32:b0:5e:ce:f7:7d:ef:98:70:37:80:0f:46:99: 07:78:99:38:dd:dd:a4:60:a9:9b:f2:40:0c:60:59:86:9e:4f: bd:66:12:60:7f:d3:fc:3e:5e:65:1f:5e:3f:ba:f7:7b:f6:e3: 1f:4e:a9:b6:2e:0f:4c:e5:1f:00:58:2a:6d:4d:1d:1e:bb:5b: bc:20:07:29:ca:f0:99:70:cc:ce:1f:43:25:08:e5:f6:be:7b: 3e:66:92:e6:c5:1c:bd:33:d0:12:98:00:d2:83:e0:f9:88:c1: d8:61:54:af:8e:62:77:82:5b:2d:35:f5:9e:5a:37:06:03:3c: d8:70:4c:ab:6a:4f:ba:45:11:88:c0:ff:d6:43:37:8e:6f:e2: 01:a3:18:fe:f9:a2:8b:26:be:3a:d6:e3:02:cf:ed:5b:de:88: 4d:3d:c8:bd:43:4b:ab:0f:de:1b:64:56:75:f6:ee:65:35:14: 57:d9:c4:42:22:6d:c9:c3:4a:ac:88:de:27:4e:84:6b:cb:e3: a0:1a:18:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIB/tuAFbGQsx6SzjUV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MjYzZmViYzg1MjJkZGE1NmNiYjQzOWI2MWEwNTYyYmUx YWUxZTMwHhcNMjUxMjA2MTAwMjAyWhcNMjUxMjA3MTAwMjAyWjAzMTEwLwYDVQQD EygxYzI1NWE4YTIxYmQ3MTc2MjEzZGRhYjljZmRkMTgwNmJiMDUzMDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDQoVc6onR+TcoM4P7gO2HK0UFw7 Nxv3/uLwUt99wtzQd2/oslWKNPs7F1K2r1Ek/AO2yi8b0mjNveXEAkIczbBAAAgY 8MuijUVopBjC2RFpdMH2NgR2jShCjHv+JTUoOqn56nquAWyY4xzKV4Kncy1vrDMr hJEUXFFkeWLUMYyBmdhz3Ps8DnRWPZXmL6InAi0vG+kVGL6lzcyY7xg7sFyni6A7 kXOtKGzCQvKg07nc6quWqk8MpcnFeQH2fcd7vCKev6YfHpKNl4Y3m1EYBqb9UEqb FfdFMwFdwgc7qxzunZnLEgxoxDiaQe+/4TZUNR4sSNtX+PbHRCFT1cLHIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwlWoohvXF2IT3auc/dGAa7BTA/MB8GA1UdIwQY MBaAFGYmP+vIUi3aVsu0ObYaBWK+GuHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmlZXzY4aFNMZHBXeTdRNXRob0ZZcjRhNGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85ZTI3MDAtNjJmMS00NjA2LThiZWQt ZTJmYjkzZGVmMGJhLzEvWmlZXzY4aFNMZHBXeTdRNXRob0ZZcjRhNGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85ZTI3MDAtNjJmMS00NjA2LThiZWQtZTJmYjkzZGVmMGJh LzEvWmlZXzY4aFNMZHBXeTdRNXRob0ZZcjRhNGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASppJ3OOf gHIafB0tu7rEEpPkytGUT1D8oJEddNJtecdaupw2kyx7mO0YsWS/cwdgSvuJoV9f duyArjKwXs73fe+YcDeAD0aZB3iZON3dpGCpm/JADGBZhp5PvWYSYH/T/D5eZR9e P7r3e/bjH06pti4PTOUfAFgqbU0dHrtbvCAHKcrwmXDMzh9DJQjl9r57PmaS5sUc vTPQEpgA0oPg+YjB2GFUr45id4JbLTX1nlo3BgM82HBMq2pPukURiMD/1kM3jm/i AaMY/vmiiya+OtbjAs/tW96ITT3IvUNLqw/eG2RWdfbuZTUUV9nEQiJtycNKrIje J06Ea8vjoBoYsg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:17 2025 by rpki-client