This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft File: ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft (raw, json) Hash identifier: r8N2Nu6/i9FkpWdCzth8YUJaRg/SCfMLYOdSaJRWqvc= Subject key identifier: 1E:6C:1F:7A:72:15:59:41:9C:8F:EB:C7:0F:DA:B2:3E:0A:97:29:B9 Authority key identifier: 66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3 Certificate issuer: /CN=66263febc8522dda56cbb439b61a0562be1ae1e3 Certificate serial: 019B405BF3077F303495D7A50B0D28262B82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft Manifest number: 14E1 Signing time: Sun 21 Dec 2025 10:02:06 +0000 Manifest this update: Sun 21 Dec 2025 10:02:06 +0000 Manifest next update: Mon 22 Dec 2025 10:02:06 +0000 Files and hashes: 1: ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl (hash: d8x0zLPYy3MUD5qWtLquzSzWkg8QHYju2tqkIyjt/b4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:f3:07:7f:30:34:95:d7:a5:0b:0d:28:26:2b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66263febc8522dda56cbb439b61a0562be1ae1e3 Validity Not Before: Dec 21 10:02:06 2025 GMT Not After : Dec 22 10:02:06 2025 GMT Subject: CN=1e6c1f7a721559419c8febc70fdab23e0a9729b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:32:e4:a6:b4:1d:89:8d:5f:d5:65:cf:0f:a0: 08:08:f9:75:b6:4c:03:45:86:9e:63:2f:32:18:bf: 8f:07:fc:02:ee:1d:21:71:55:b8:db:df:40:63:48: 68:6f:e2:db:10:1b:44:b1:bf:36:68:98:35:40:ae: 8c:c3:72:4b:a8:7c:9d:2f:d3:73:84:14:10:25:c4: 55:be:ad:6a:19:0d:06:40:74:38:2a:ed:d6:75:16: 6b:45:e5:40:6e:90:c8:6b:dd:b0:20:67:05:b9:06: bc:16:03:c6:df:4d:fc:91:f8:8b:6b:9c:78:cb:85: 65:53:a8:7e:c8:78:67:30:9e:67:f9:7f:fe:58:f2: cb:d4:c5:ed:4e:3e:01:e4:4e:ae:cf:ae:cc:e3:7b: 0a:4e:74:a3:44:2f:08:87:6d:69:2e:27:58:e5:9b: d0:96:b7:87:09:ba:f2:d9:29:c9:95:d5:a2:e3:2b: be:2f:b2:79:12:45:0d:13:ad:d1:fc:2b:0b:be:68: 97:8a:33:19:36:7a:db:8c:34:71:11:3c:72:a3:29: e5:a0:9d:03:40:c8:da:f3:7d:fe:f0:e9:ec:36:62: 5d:ab:96:b2:8a:a0:46:8f:11:2f:9a:ce:c5:85:fb: 0a:b8:ce:30:e5:07:32:96:65:e2:83:9c:15:95:1b: cc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6C:1F:7A:72:15:59:41:9C:8F:EB:C7:0F:DA:B2:3E:0A:97:29:B9 X509v3 Authority Key Identifier: keyid:66:26:3F:EB:C8:52:2D:DA:56:CB:B4:39:B6:1A:05:62:BE:1A:E1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiY_68hSLdpWy7Q5thoFYr4a4eM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9e2700-62f1-4606-8bed-e2fb93def0ba/1/ZiY_68hSLdpWy7Q5thoFYr4a4eM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0d:a0:b4:24:b3:fa:bb:64:0e:81:ad:ce:a3:ab:25:c7:79: 0e:33:07:5a:09:d6:8a:dc:0b:20:89:5f:09:21:d6:cd:f0:e6: c7:32:ff:ad:59:28:78:7f:aa:0d:10:4f:6d:30:c2:11:ae:44: 43:b4:6a:da:90:ac:4a:e2:f7:9a:d5:e8:8b:61:a7:04:d8:ac: c7:3f:00:6e:45:47:fd:01:4d:5a:02:ab:05:a1:8b:88:a4:15: 43:f7:f7:c5:41:c4:b5:94:1c:1a:c8:40:ff:15:30:78:f8:70: fb:43:1c:e3:2d:90:20:c1:eb:63:b2:f1:0d:cf:83:b3:07:a2: 77:41:62:e0:5d:85:23:55:df:d7:a6:f3:71:6c:fa:80:f6:42: 96:2d:3a:cb:21:c9:b9:1d:79:c2:15:78:36:28:91:ec:e6:3b: 1e:aa:c7:5b:97:4e:a8:4c:60:89:bd:12:43:ea:b2:50:d0:2e: 08:69:72:c9:15:01:92:9d:45:b7:15:7d:c2:9d:39:2f:3b:5d: 73:6a:d0:9f:75:70:ed:a4:f3:bb:ee:26:69:11:ce:af:93:09: 05:13:f6:25:de:8f:e3:54:d7:f8:d7:8f:cb:09:13:b4:71:7d: 0b:9f:0c:d1:be:b5:b2:3f:23:64:f2:19:ee:71:6d:3b:1e:3c: 07:3b:8d:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW/MHfzA0ldelCw0oJiuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MjYzZmViYzg1MjJkZGE1NmNiYjQzOWI2MWEwNTYyYmUx YWUxZTMwHhcNMjUxMjIxMTAwMjA2WhcNMjUxMjIyMTAwMjA2WjAzMTEwLwYDVQQD EygxZTZjMWY3YTcyMTU1OTQxOWM4ZmViYzcwZmRhYjIzZTBhOTcyOWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTLkprQdiY1f1WXPD6AICPl1tkwD RYaeYy8yGL+PB/wC7h0hcVW4299AY0hob+LbEBtEsb82aJg1QK6Mw3JLqHydL9Nz hBQQJcRVvq1qGQ0GQHQ4Ku3WdRZrReVAbpDIa92wIGcFuQa8FgPG3038kfiLa5x4 y4VlU6h+yHhnMJ5n+X/+WPLL1MXtTj4B5E6uz67M43sKTnSjRC8Ih21pLidY5ZvQ lreHCbry2SnJldWi4yu+L7J5EkUNE63R/CsLvmiXijMZNnrbjDRxETxyoynloJ0D QMja833+8OnsNmJdq5ayiqBGjxEvms7FhfsKuM4w5QcylmXig5wVlRvMGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5sH3pyFVlBnI/rxw/asj4Klym5MB8GA1UdIwQY MBaAFGYmP+vIUi3aVsu0ObYaBWK+GuHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmlZXzY4aFNMZHBXeTdRNXRob0ZZcjRhNGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85ZTI3MDAtNjJmMS00NjA2LThiZWQt ZTJmYjkzZGVmMGJhLzEvWmlZXzY4aFNMZHBXeTdRNXRob0ZZcjRhNGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85ZTI3MDAtNjJmMS00NjA2LThiZWQtZTJmYjkzZGVmMGJh LzEvWmlZXzY4aFNMZHBXeTdRNXRob0ZZcjRhNGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQ2gtCSz +rtkDoGtzqOrJcd5DjMHWgnWitwLIIlfCSHWzfDmxzL/rVkoeH+qDRBPbTDCEa5E Q7Rq2pCsSuL3mtXoi2GnBNisxz8AbkVH/QFNWgKrBaGLiKQVQ/f3xUHEtZQcGshA /xUwePhw+0Mc4y2QIMHrY7LxDc+Dsweid0Fi4F2FI1Xf16bzcWz6gPZCli06yyHJ uR15whV4NiiR7OY7HqrHW5dOqExgib0SQ+qyUNAuCGlyyRUBkp1FtxV9wp05Lztd c2rQn3Vw7aTzu+4maRHOr5MJBRP2Jd6P41TX+NePywkTtHF9C58M0b61sj8jZPIZ 7nFtOx48BzuNCg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:21:27 2025 by rpki-client