This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft File: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json) Hash identifier: JEh5aDVR2JbQLLi6/uRSEDlz2dqncfOY1DxcQqX3x5M= Subject key identifier: F4:84:BD:C4:7F:D5:E4:FE:D1:5B:F9:B3:8B:5E:86:56:6E:3B:56:D6 Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6 Certificate issuer: /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6 Certificate serial: 019AF3894A76CE39DD413BB4EAD9424DB8F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft Manifest number: 0740 Signing time: Sat 06 Dec 2025 12:00:51 +0000 Manifest this update: Sat 06 Dec 2025 12:00:51 +0000 Manifest next update: Sun 07 Dec 2025 12:00:51 +0000 Files and hashes: 1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: qORWup8D01FER56eNWR9sTx3o5lz88lsN+zDJo2cmGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:4a:76:ce:39:dd:41:3b:b4:ea:d9:42:4d:b8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6 Validity Not Before: Dec 6 12:00:51 2025 GMT Not After : Dec 7 12:00:51 2025 GMT Subject: CN=f484bdc47fd5e4fed15bf9b38b5e86566e3b56d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:bb:57:c3:94:28:da:8f:49:66:38:06:83: 2a:ed:2f:15:a2:a6:69:20:22:db:63:8d:38:98:58: 97:14:c9:a4:e1:75:6a:ce:29:5a:fa:68:14:c5:dd: a5:e6:22:eb:70:f4:21:33:18:d4:25:7b:f1:05:07: fe:73:95:41:39:a8:10:24:e0:cf:87:2a:ab:a8:82: 8d:19:5f:ab:ef:1f:b1:ff:9a:2e:cf:14:55:2d:66: 0e:b0:40:27:28:b7:e1:09:af:4c:26:e2:9c:9a:02: d2:ba:6b:09:66:4f:0a:31:88:b8:a3:84:e5:90:2c: 74:a7:40:41:05:4b:d3:e5:78:a4:ae:a9:1a:d7:0a: 38:bb:3b:8b:11:ef:d4:28:4c:c0:cb:a8:90:7f:08: 52:0e:61:59:ac:0f:4a:14:ba:93:23:1e:30:10:39: ac:1c:76:3f:4a:32:b7:57:22:2f:bb:df:d3:80:29: d3:b2:01:ab:da:13:9b:f3:9b:c4:56:4f:32:72:7d: 12:e8:c9:32:5c:0e:46:d7:e1:36:a8:b8:d7:db:8b: 40:99:77:8b:c1:77:af:ca:b0:ef:de:4b:4c:9a:69: 6b:d5:62:ad:0a:e5:56:b3:a4:74:a7:cc:3e:09:65: 31:35:e6:ef:01:d1:1b:18:ba:6e:ff:90:ad:85:b3: 83:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:84:BD:C4:7F:D5:E4:FE:D1:5B:F9:B3:8B:5E:86:56:6E:3B:56:D6 X509v3 Authority Key Identifier: keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1f:b7:e2:cb:db:be:03:4b:28:aa:24:ac:0a:a9:74:86:e6: 13:e4:be:33:0b:ce:b9:40:d2:5b:33:39:6a:26:47:5f:16:04: d4:81:47:9e:fe:56:54:99:42:e5:ac:ec:bf:e2:fe:c2:a1:ca: 07:86:cc:3b:6b:31:b5:21:d5:7d:1a:cf:05:10:68:09:c1:43: ac:46:b6:2c:bd:51:22:7d:63:59:78:62:31:e3:59:82:31:d8: 32:8b:1a:aa:d9:2e:01:ed:de:f8:c5:b8:c4:24:96:43:94:e4: fa:d1:ee:eb:af:35:80:d0:ca:6c:39:53:f9:90:1e:5a:f7:73: 81:e4:a6:69:db:1e:1d:1c:89:25:3e:63:87:00:0c:6c:04:56: 2c:37:84:31:38:6f:90:96:cb:00:0d:e0:51:e1:52:36:63:d5: 7c:a3:42:5a:57:c9:1b:e2:fc:56:4d:b1:2f:1b:47:75:f8:0e: c6:27:66:df:99:57:d4:d6:dd:9f:c6:35:00:43:03:6f:59:e0: 5b:ba:e8:40:37:f1:93:12:c5:65:f5:c5:40:0a:6c:95:ac:00: 29:83:f3:b9:6a:f9:89:49:1a:6a:bb:c3:ba:c0:e3:2b:4c:20: af:25:b8:c6:a0:ab:66:ec:0c:05:8d:a7:6e:cd:91:86:df:5d: 8a:4f:c1:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUp2zjndQTu06tlCTbj0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MzZiOWIzZDQ3MWY5M2Y4ZWE5ZmVkMGM0NTE0YzJjMzc0 ZDIzZjYwHhcNMjUxMjA2MTIwMDUxWhcNMjUxMjA3MTIwMDUxWjAzMTEwLwYDVQQD EyhmNDg0YmRjNDdmZDVlNGZlZDE1YmY5YjM4YjVlODY1NjZlM2I1NmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllu7V8OUKNqPSWY4BoMq7S8VoqZp ICLbY404mFiXFMmk4XVqzila+mgUxd2l5iLrcPQhMxjUJXvxBQf+c5VBOagQJODP hyqrqIKNGV+r7x+x/5ouzxRVLWYOsEAnKLfhCa9MJuKcmgLSumsJZk8KMYi4o4Tl kCx0p0BBBUvT5Xikrqka1wo4uzuLEe/UKEzAy6iQfwhSDmFZrA9KFLqTIx4wEDms HHY/SjK3VyIvu9/TgCnTsgGr2hOb85vEVk8ycn0S6MkyXA5G1+E2qLjX24tAmXeL wXevyrDv3ktMmmlr1WKtCuVWs6R0p8w+CWUxNebvAdEbGLpu/5CthbODswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSEvcR/1eT+0Vv5s4tehlZuO1bWMB8GA1UdIwQY MBaAFGU2ubPUcfk/jqn+0MRRTCw3TSP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlRhNXM5UngtVC1PcWY3UXhGRk1MRGROSV9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lNzhhNzYtN2M0MC00MDg0LWExM2It MTU5OTJiMmM1NGNhLzEvWlRhNXM5UngtVC1PcWY3UXhGRk1MRGROSV9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lNzhhNzYtN2M0MC00MDg0LWExM2ItMTU5OTJiMmM1NGNh LzEvWlRhNXM5UngtVC1PcWY3UXhGRk1MRGROSV9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADR+34svb vgNLKKokrAqpdIbmE+S+MwvOuUDSWzM5aiZHXxYE1IFHnv5WVJlC5azsv+L+wqHK B4bMO2sxtSHVfRrPBRBoCcFDrEa2LL1RIn1jWXhiMeNZgjHYMosaqtkuAe3e+MW4 xCSWQ5Tk+tHu6681gNDKbDlT+ZAeWvdzgeSmadseHRyJJT5jhwAMbARWLDeEMThv kJbLAA3gUeFSNmPVfKNCWlfJG+L8Vk2xLxtHdfgOxidm35lX1Nbdn8Y1AEMDb1ng W7roQDfxkxLFZfXFQApslawAKYPzuWr5iUkaarvDusDjK0wgryW4xqCrZuwMBY2n bs2Rht9dik/BAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:46:12 2025 by rpki-client