This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft File: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft (raw, json) Hash identifier: KaBgHDla4fgkrfx9zVu86GafcCwnMo32x2rC9ViJPls= Subject key identifier: 81:B1:01:E5:78:85:9A:FD:92:96:11:2D:90:6D:89:FD:6C:CA:B2:85 Authority key identifier: 67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27 Certificate issuer: /CN=6777987b4f1c17d21465a34a90bd02b52ea6e027 Certificate serial: 019B3A90EF234C6D24666B9EB5C85162138F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft Manifest number: 0E90 Signing time: Sat 20 Dec 2025 07:02:15 +0000 Manifest this update: Sat 20 Dec 2025 07:02:15 +0000 Manifest next update: Sun 21 Dec 2025 07:02:15 +0000 Files and hashes: 1: Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl (hash: HJudx6kbpCGeMjgFe6L5CgqT6/4OOfE0c8hwZT/xApc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:ef:23:4c:6d:24:66:6b:9e:b5:c8:51:62:13:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6777987b4f1c17d21465a34a90bd02b52ea6e027 Validity Not Before: Dec 20 07:02:15 2025 GMT Not After : Dec 21 07:02:15 2025 GMT Subject: CN=81b101e578859afd9296112d906d89fd6ccab285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:00:31:1a:d6:d7:0d:b8:37:1b:67:89:27: 85:50:35:9d:e1:d9:9d:30:b3:98:62:22:fa:4c:c2: 88:36:4a:99:06:c7:6c:3d:6d:cc:f4:3d:c6:52:dd: 27:5b:05:32:bb:83:bc:85:f6:4d:09:e5:6d:57:69: b6:fb:81:a7:6d:cf:25:4f:9a:e9:7a:3d:6c:d5:a1: 16:27:ec:c4:a7:b7:66:15:9c:cd:d2:b0:7c:b5:2a: 65:a0:0f:60:1f:09:06:11:6c:ae:cb:8e:2e:42:7c: 3f:a7:15:3f:89:6a:bc:51:4a:82:c0:14:c5:b3:67: fa:5c:ca:fb:9d:7c:ec:36:f5:c3:86:b5:4a:e8:47: 96:61:32:82:94:d1:41:0a:e8:1c:5c:6c:35:9e:77: 06:e0:24:7f:e0:25:90:bd:cb:82:7a:38:17:71:82: e1:fc:6e:f5:d5:c4:06:07:9c:0d:74:ac:55:07:53: 55:3c:a1:93:8b:c5:20:cc:74:38:b7:28:a1:1b:8c: a1:44:ae:6a:88:90:4b:0d:83:95:c0:bd:32:a7:bc: d3:e0:c8:a7:91:c7:69:fa:16:d7:09:2b:20:30:bc: 9b:37:51:e4:b6:bc:2f:42:50:d4:0b:c4:58:2a:26: 06:4e:a6:b4:57:90:ed:ee:53:6b:c6:5e:5f:ff:ae: f5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B1:01:E5:78:85:9A:FD:92:96:11:2D:90:6D:89:FD:6C:CA:B2:85 X509v3 Authority Key Identifier: keyid:67:77:98:7B:4F:1C:17:D2:14:65:A3:4A:90:BD:02:B5:2E:A6:E0:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0bbe7c-78dc-485d-b225-15e73811e956/1/Z3eYe08cF9IUZaNKkL0CtS6m4Cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:99:56:49:9a:99:66:93:7c:d7:50:88:27:7e:17:45:9c:9f: bb:ef:e7:ea:80:13:20:d2:5f:37:f4:03:45:8a:f4:fc:79:a0: 12:a8:0b:8a:53:81:58:1f:55:90:0f:46:e0:65:30:66:f7:da: 74:1f:24:d3:38:b5:c3:ab:1f:f1:1b:76:c7:23:fc:4c:d3:8a: f8:6b:f6:92:dc:c9:ba:cd:d2:09:a3:44:41:38:83:7b:f0:f1: bd:20:a3:01:96:2d:17:ad:f0:37:d8:6f:fd:d3:72:01:40:74: f4:86:c8:5e:c1:6d:d4:ea:73:8c:55:49:f3:54:80:02:67:c0: 9a:4a:1e:4d:1c:72:7b:31:dc:ad:e3:6e:93:0a:d5:5b:52:66: 7e:fe:38:d3:6d:4f:2b:30:b2:bc:7d:78:7d:a5:2c:21:93:b2: cd:b1:1b:58:6d:87:a7:de:ee:62:46:44:b4:fb:03:d7:65:ec: b1:dd:b0:c2:bd:59:13:ff:86:07:f5:1a:18:b6:b2:57:d9:cc: 09:7f:fb:20:70:97:db:cb:9e:9f:eb:92:39:dd:5d:04:9f:4f: 49:87:ee:3a:2b:19:e5:77:d3:fe:2b:41:45:3a:fc:d3:b7:2c: eb:81:68:34:a1:9f:8f:0d:98:1c:41:21:b2:22:5e:b4:b9:e8: 29:d1:f1:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kO8jTG0kZmuetchRYhOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Nzc5ODdiNGYxYzE3ZDIxNDY1YTM0YTkwYmQwMmI1MmVh NmUwMjcwHhcNMjUxMjIwMDcwMjE1WhcNMjUxMjIxMDcwMjE1WjAzMTEwLwYDVQQD Eyg4MWIxMDFlNTc4ODU5YWZkOTI5NjExMmQ5MDZkODlmZDZjY2FiMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMgAMRrW1w24NxtniSeFUDWd4dmd MLOYYiL6TMKINkqZBsdsPW3M9D3GUt0nWwUyu4O8hfZNCeVtV2m2+4Gnbc8lT5rp ej1s1aEWJ+zEp7dmFZzN0rB8tSploA9gHwkGEWyuy44uQnw/pxU/iWq8UUqCwBTF s2f6XMr7nXzsNvXDhrVK6EeWYTKClNFBCugcXGw1nncG4CR/4CWQvcuCejgXcYLh /G711cQGB5wNdKxVB1NVPKGTi8UgzHQ4tyihG4yhRK5qiJBLDYOVwL0yp7zT4Min kcdp+hbXCSsgMLybN1HktrwvQlDUC8RYKiYGTqa0V5Dt7lNrxl5f/671NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGxAeV4hZr9kpYRLZBtif1syrKFMB8GA1UdIwQY MBaAFGd3mHtPHBfSFGWjSpC9ArUupuAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjNlWWUwOGNGOUlVWmFOS2tMMEN0UzZtNENjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wYmJlN2MtNzhkYy00ODVkLWIyMjUt MTVlNzM4MTFlOTU2LzEvWjNlWWUwOGNGOUlVWmFOS2tMMEN0UzZtNENjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8wYmJlN2MtNzhkYy00ODVkLWIyMjUtMTVlNzM4MTFlOTU2 LzEvWjNlWWUwOGNGOUlVWmFOS2tMMEN0UzZtNENjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1JlWSZqZ ZpN811CIJ34XRZyfu+/n6oATINJfN/QDRYr0/HmgEqgLilOBWB9VkA9G4GUwZvfa dB8k0zi1w6sf8Rt2xyP8TNOK+Gv2ktzJus3SCaNEQTiDe/DxvSCjAZYtF63wN9hv /dNyAUB09IbIXsFt1OpzjFVJ81SAAmfAmkoeTRxyezHcreNukwrVW1Jmfv44021P KzCyvH14faUsIZOyzbEbWG2Hp97uYkZEtPsD12Xssd2wwr1ZE/+GB/UaGLayV9nM CX/7IHCX28uen+uSOd1dBJ9PSYfuOisZ5XfT/itBRTr807cs64FoNKGfjw2YHEEh siJetLnoKdHxJA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:26:40 2025 by rpki-client