This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft File: zvRG_kRyumlPwimCmKT40VWZXhY.mft (raw, json) Hash identifier: uUHIKdlj6wOQTlGkHZC+t0PiVXQeh0jH5Gu5ZDcXC+Y= Subject key identifier: 8F:FC:1A:FC:BB:C8:B2:45:CA:B1:88:2B:00:0D:C2:22:6C:5D:33:0B Authority key identifier: CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16 Certificate issuer: /CN=cef446fe4472ba694fc2298298a4f8d155995e16 Certificate serial: 019AF0BF9FA8D4823C3C89612EAE63EBDFBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft Manifest number: 0153 Signing time: Fri 05 Dec 2025 23:01:21 +0000 Manifest this update: Fri 05 Dec 2025 23:01:21 +0000 Manifest next update: Sat 06 Dec 2025 23:01:21 +0000 Files and hashes: 1: zvRG_kRyumlPwimCmKT40VWZXhY.crl (hash: Q24OwyM5iPs0GApTYNVNu2ebMeKv1WunFvhOMlypFOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9f:a8:d4:82:3c:3c:89:61:2e:ae:63:eb:df:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cef446fe4472ba694fc2298298a4f8d155995e16 Validity Not Before: Dec 5 23:01:21 2025 GMT Not After : Dec 6 23:01:21 2025 GMT Subject: CN=8ffc1afcbbc8b245cab1882b000dc2226c5d330b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:1a:fc:63:61:05:76:d2:9d:50:f7:d6:d7: e2:6a:56:ae:6f:f7:a4:25:b8:69:ee:5e:5d:72:42: af:eb:db:18:b3:e8:c5:0d:ca:b6:d3:e7:49:53:3f: 9a:18:e0:c2:fc:38:52:78:b4:88:02:ff:8c:b7:67: f0:f0:d4:32:31:c8:f5:cb:60:ee:df:ae:ce:b1:fe: d6:d4:63:8d:62:ff:f3:7e:77:1b:e2:7a:ee:4c:0e: d4:ec:72:ca:00:64:14:90:b6:d0:74:3f:dd:8b:f4: 6c:2a:a8:73:75:72:b1:d8:62:15:4b:f9:cc:0c:d2: 01:4e:b3:b9:11:08:f0:b5:c3:f7:c8:06:03:1d:79: 9d:cd:9c:b8:b0:88:cd:02:92:90:e3:ec:0d:f0:3c: e1:42:ad:46:60:85:06:12:94:e3:4e:05:5a:19:9c: f0:ee:a1:a4:85:18:bc:6d:83:1e:67:1e:eb:1c:d5: 4b:54:b3:18:f7:cb:13:68:d0:30:d1:a9:fb:8c:f8: 49:e5:05:d7:57:af:a0:7a:10:87:4b:f2:ad:c6:4f: b9:58:e1:d4:00:4e:38:f5:8a:00:4e:96:1d:c9:82: 06:57:8b:64:d3:46:8d:e7:5e:15:4e:ca:53:d8:84: d6:0b:a8:c0:09:52:e0:06:57:66:f2:3f:9d:f2:ca: 76:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FC:1A:FC:BB:C8:B2:45:CA:B1:88:2B:00:0D:C2:22:6C:5D:33:0B X509v3 Authority Key Identifier: keyid:CE:F4:46:FE:44:72:BA:69:4F:C2:29:82:98:A4:F8:D1:55:99:5E:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvRG_kRyumlPwimCmKT40VWZXhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/50842a-ed02-4a9f-a789-901006bc1fd8/1/zvRG_kRyumlPwimCmKT40VWZXhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f7:79:d2:b6:73:e1:f5:ab:7f:82:50:ab:a2:bb:a4:a6:35: 4b:54:bc:2e:4c:88:45:12:d6:86:47:d4:fc:7b:47:6f:b8:7e: 91:94:a4:c1:42:15:67:85:f2:a8:1c:fe:aa:d7:1c:9c:b6:b7: b7:f9:78:47:15:1d:3a:45:08:d1:98:7b:bb:2b:06:18:bc:5f: 9d:ba:2e:9c:c3:69:a3:22:36:c3:e3:22:80:f4:e2:49:75:4d: a6:50:db:bc:53:6e:70:85:ab:b9:58:30:b9:04:bd:91:6a:4d: d5:7f:d2:01:f0:2b:2e:c6:cb:0f:3c:4a:cb:90:9b:bb:b7:ae: 2d:62:b2:d0:fd:60:d4:35:4b:a8:d9:09:e0:b2:79:d8:60:c0: 45:86:85:94:55:6f:30:91:22:be:c9:47:84:8f:6a:ee:28:9f: a6:2d:b9:7a:eb:7d:5a:b1:3b:45:17:e7:d7:18:ea:1f:84:98: 82:79:08:9f:b0:52:69:b6:37:97:5b:d1:e4:35:b1:56:8e:79: 15:0d:59:fd:48:76:d2:c7:bf:b5:00:74:9f:59:be:63:4e:f1: 62:32:fa:86:7b:99:e3:c8:e9:05:4b:9b:26:38:44:22:3e:be: 03:29:74:cb:88:5c:77:44:98:2c:5a:01:88:c2:58:d2:45:8f: dd:64:4e:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5+o1II8PIlhLq5j69+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZjQ0NmZlNDQ3MmJhNjk0ZmMyMjk4Mjk4YTRmOGQxNTU5 OTVlMTYwHhcNMjUxMjA1MjMwMTIxWhcNMjUxMjA2MjMwMTIxWjAzMTEwLwYDVQQD Eyg4ZmZjMWFmY2JiYzhiMjQ1Y2FiMTg4MmIwMDBkYzIyMjZjNWQzMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmka/GNhBXbSnVD31tfialaub/ek Jbhp7l5dckKv69sYs+jFDcq20+dJUz+aGODC/DhSeLSIAv+Mt2fw8NQyMcj1y2Du 367Osf7W1GONYv/zfncb4nruTA7U7HLKAGQUkLbQdD/di/RsKqhzdXKx2GIVS/nM DNIBTrO5EQjwtcP3yAYDHXmdzZy4sIjNApKQ4+wN8DzhQq1GYIUGEpTjTgVaGZzw 7qGkhRi8bYMeZx7rHNVLVLMY98sTaNAw0an7jPhJ5QXXV6+gehCHS/Ktxk+5WOHU AE449YoATpYdyYIGV4tk00aN514VTspT2ITWC6jACVLgBldm8j+d8sp2SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/8Gvy7yLJFyrGIKwANwiJsXTMLMB8GA1UdIwQY MBaAFM70Rv5EcrppT8Ipgpik+NFVmV4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81MDg0MmEtZWQwMi00YTlmLWE3ODkt OTAxMDA2YmMxZmQ4LzEvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81MDg0MmEtZWQwMi00YTlmLWE3ODktOTAxMDA2YmMxZmQ4 LzEvenZSR19rUnl1bWxQd2ltQ21LVDQwVldaWGhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvd50rZz 4fWrf4JQq6K7pKY1S1S8LkyIRRLWhkfU/HtHb7h+kZSkwUIVZ4XyqBz+qtccnLa3 t/l4RxUdOkUI0Zh7uysGGLxfnbounMNpoyI2w+MigPTiSXVNplDbvFNucIWruVgw uQS9kWpN1X/SAfArLsbLDzxKy5Cbu7euLWKy0P1g1DVLqNkJ4LJ52GDARYaFlFVv MJEivslHhI9q7iifpi25eut9WrE7RRfn1xjqH4SYgnkIn7BSabY3l1vR5DWxVo55 FQ1Z/Uh20se/tQB0n1m+Y07xYjL6hnuZ48jpBUubJjhEIj6+Ayl0y4hcd0SYLFoB iMJY0kWP3WRO7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:06 2025 by rpki-client