This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft File: zltHouqq5MEDTJEAPnz-PTjR5VU.mft (raw, json) Hash identifier: l8FXrMIs+OvCDfDKr7Ep+97+VnP02CBARxdepueLyNw= Subject key identifier: 62:02:9F:1E:7D:C3:87:64:9C:D8:BB:21:5D:D2:CB:5D:9B:69:BD:3D Authority key identifier: CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55 Certificate issuer: /CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555 Certificate serial: 019AF3C061E6FB800D1D6638F16E4FE9517E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft Manifest number: 08A1 Signing time: Sat 06 Dec 2025 13:01:02 +0000 Manifest this update: Sat 06 Dec 2025 13:01:02 +0000 Manifest next update: Sun 07 Dec 2025 13:01:02 +0000 Files and hashes: 1: zltHouqq5MEDTJEAPnz-PTjR5VU.crl (hash: iiM9VPa9+I3Qtam+s1fcfowFkDi75UqMqpwPkkV3Q9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:61:e6:fb:80:0d:1d:66:38:f1:6e:4f:e9:51:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555 Validity Not Before: Dec 6 13:01:02 2025 GMT Not After : Dec 7 13:01:02 2025 GMT Subject: CN=62029f1e7dc387649cd8bb215dd2cb5d9b69bd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:87:6f:89:ae:61:cf:6e:ff:f2:64:d5:4d: d4:35:90:40:f8:e0:8c:c5:ed:9f:1e:53:70:eb:0e: a6:21:52:33:64:d7:1b:30:c1:9d:c4:f3:f5:12:36: 4f:b9:ce:bd:e9:eb:58:93:5a:ac:1e:b2:d5:f3:9b: 4f:4a:5a:10:9c:79:23:67:ea:45:94:6f:26:f3:c1: 26:8d:05:80:39:b6:1e:c1:24:8f:ce:3c:10:75:fd: b7:2e:f1:ee:1f:dd:81:52:87:5c:8e:fd:d2:84:da: 84:52:12:11:6e:81:24:27:e0:bb:0f:bc:72:81:0e: 56:53:bc:47:71:b5:96:8e:17:c4:27:71:03:c9:8c: d4:4f:63:58:f1:0f:71:ca:d4:b8:bb:62:83:81:9d: 86:97:ea:ff:a1:b3:d3:65:84:4a:9e:40:40:ad:b3: bd:fa:7d:ca:f1:4a:a2:47:93:df:63:73:e9:30:30: f9:4f:16:c3:c9:b7:12:71:be:a5:c3:dd:25:b0:d0: 3f:18:9d:6b:0f:e9:68:3a:64:f8:8b:bd:f2:6f:63: 03:4b:87:44:0e:4f:f5:39:1e:e5:b1:9c:a3:63:7d: 06:0a:a5:f1:e9:c2:8d:88:70:ea:77:2a:27:6d:18: b3:0c:c1:f2:bf:2c:b0:63:35:3f:3c:5b:54:fa:d6: 15:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:02:9F:1E:7D:C3:87:64:9C:D8:BB:21:5D:D2:CB:5D:9B:69:BD:3D X509v3 Authority Key Identifier: keyid:CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:0f:df:f5:a6:35:80:2c:a4:77:01:18:f3:ee:19:f5:9a:4e: ec:2d:0e:6e:3b:00:28:4a:89:41:75:f9:ee:e9:67:17:77:cb: e0:22:99:b0:fd:f1:9d:58:3c:6f:f9:c8:a1:f8:4e:77:04:1f: f1:97:62:46:11:98:9b:ee:b1:ee:4c:9b:1e:f1:15:95:7d:9f: b6:28:05:f9:d7:cb:22:08:c1:5d:7a:50:bb:b4:32:5a:12:06: 24:1e:f2:b3:2b:64:b9:84:42:de:12:ba:26:c3:b8:d1:f4:6f: 7e:b2:08:6b:3b:e4:c5:05:61:33:9f:3b:d4:28:bb:b6:20:1e: f9:af:0d:e5:6b:73:f7:0f:90:d3:fe:5c:a3:35:d7:ed:7f:87: c4:d9:77:c9:bc:60:bf:e0:55:7c:a3:a4:70:bb:c9:ee:95:b7: 24:0f:4f:a2:c2:1b:06:bd:58:bc:5f:ad:53:f4:01:33:37:31: 7b:bb:dd:13:c5:48:20:f7:a0:ff:d9:d6:da:4e:5c:2e:b4:29: a6:3c:1c:e3:58:88:72:8c:c1:17:97:9d:52:56:67:55:16:d9: 45:af:e5:7f:c6:8c:d4:66:0d:42:67:bf:8d:dc:84:3f:f9:74: 63:ba:fc:86:66:e7:49:68:6d:ca:0c:7f:a0:54:05:1c:59:0e: e4:1d:15:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwGHm+4ANHWY48W5P6VF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNWI0N2EyZWFhYWU0YzEwMzRjOTEwMDNlN2NmZTNkMzhk MWU1NTUwHhcNMjUxMjA2MTMwMTAyWhcNMjUxMjA3MTMwMTAyWjAzMTEwLwYDVQQD Eyg2MjAyOWYxZTdkYzM4NzY0OWNkOGJiMjE1ZGQyY2I1ZDliNjliZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHmHb4muYc9u//Jk1U3UNZBA+OCM xe2fHlNw6w6mIVIzZNcbMMGdxPP1EjZPuc696etYk1qsHrLV85tPSloQnHkjZ+pF lG8m88EmjQWAObYewSSPzjwQdf23LvHuH92BUodcjv3ShNqEUhIRboEkJ+C7D7xy gQ5WU7xHcbWWjhfEJ3EDyYzUT2NY8Q9xytS4u2KDgZ2Gl+r/obPTZYRKnkBArbO9 +n3K8UqiR5PfY3PpMDD5TxbDybcScb6lw90lsNA/GJ1rD+loOmT4i73yb2MDS4dE Dk/1OR7lsZyjY30GCqXx6cKNiHDqdyonbRizDMHyvyywYzU/PFtU+tYVxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGICnx59w4dknNi7IV3Sy12bab09MB8GA1UdIwQY MBaAFM5bR6LqquTBA0yRAD58/j040eVVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemx0SG91cXE1TUVEVEpFQVBuei1QVGpSNVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zMWYyNWYtZWVkNS00N2FkLTkyZDQt ZTI3MzYwNzk2ZTE4LzEvemx0SG91cXE1TUVEVEpFQVBuei1QVGpSNVZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8zMWYyNWYtZWVkNS00N2FkLTkyZDQtZTI3MzYwNzk2ZTE4 LzEvemx0SG91cXE1TUVEVEpFQVBuei1QVGpSNVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQ/f9aY1 gCykdwEY8+4Z9ZpO7C0ObjsAKEqJQXX57ulnF3fL4CKZsP3xnVg8b/nIofhOdwQf 8ZdiRhGYm+6x7kybHvEVlX2ftigF+dfLIgjBXXpQu7QyWhIGJB7ysytkuYRC3hK6 JsO40fRvfrIIazvkxQVhM5871Ci7tiAe+a8N5Wtz9w+Q0/5cozXX7X+HxNl3ybxg v+BVfKOkcLvJ7pW3JA9PosIbBr1YvF+tU/QBMzcxe7vdE8VIIPeg/9nW2k5cLrQp pjwc41iIcozBF5edUlZnVRbZRa/lf8aM1GYNQme/jdyEP/l0Y7r8hmbnSWhtygx/ oFQFHFkO5B0Vtg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:24 2025 by rpki-client