This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft File: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft (raw, json) Hash identifier: tUe5+o3EwnsSbHqol50dEIooUpxhCcfxCfbvNUc0U3A= Subject key identifier: 1B:1A:64:CA:61:7C:99:C1:49:E6:34:EA:BD:97:20:5B:12:A0:90:02 Authority key identifier: CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B Certificate issuer: /CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b Certificate serial: 019AF19B9E7E082D448005EA6073C0DF0C5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft Manifest number: 0EF3 Signing time: Sat 06 Dec 2025 03:01:38 +0000 Manifest this update: Sat 06 Dec 2025 03:01:38 +0000 Manifest next update: Sun 07 Dec 2025 03:01:38 +0000 Files and hashes: 1: zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl (hash: 2tPJQUI5jTzOYRTcw3fjUbTdB8OLpyb1CGQw2stU77U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9e:7e:08:2d:44:80:05:ea:60:73:c0:df:0c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccac372f7a9b8171dcbfc1160caa22c8fdc68b7b Validity Not Before: Dec 6 03:01:38 2025 GMT Not After : Dec 7 03:01:38 2025 GMT Subject: CN=1b1a64ca617c99c149e634eabd97205b12a09002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:54:99:b6:1a:f8:cf:a8:ac:ce:ae:ae:43: 56:26:41:33:42:62:d5:1a:f5:cc:fe:38:30:f5:ad: d7:09:6b:8b:34:ba:bf:63:c3:91:84:f7:9a:d0:2f: 05:00:7d:9d:de:ff:0a:28:63:ec:f1:b4:df:59:3e: ae:3d:0a:03:1d:a5:bd:2f:7a:e9:f3:31:f8:44:ca: 76:9a:7f:00:88:93:ab:95:df:31:56:82:2a:b7:48: 4f:f6:b7:a1:f3:f5:99:f6:a7:b7:94:1d:8b:36:84: e7:b7:c4:52:4c:b8:03:17:f5:ef:f0:2f:a2:59:68: b7:a2:f2:fe:1c:1f:d8:0f:5f:26:58:da:58:bb:98: ad:81:2e:6b:80:87:5e:77:3c:17:a0:90:fa:3b:6f: ff:4b:38:ca:7d:e6:17:c7:83:c6:df:13:7b:e5:8b: b2:66:94:8e:99:04:e8:f9:62:49:7c:44:b1:e6:9a: af:f6:ed:54:55:40:10:5d:a1:c3:b2:de:a4:e4:cc: 87:a1:4c:65:76:bb:89:b5:ec:75:59:8a:59:28:c5: a4:53:9b:8c:eb:4b:e7:56:0d:95:19:2b:a5:db:5f: 1a:88:56:af:58:26:8e:ee:ab:c4:aa:e0:7c:f0:50: 43:39:d1:39:ab:19:3d:f9:6b:ec:73:83:68:8c:8b: 38:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1A:64:CA:61:7C:99:C1:49:E6:34:EA:BD:97:20:5B:12:A0:90:02 X509v3 Authority Key Identifier: keyid:CC:AC:37:2F:7A:9B:81:71:DC:BF:C1:16:0C:AA:22:C8:FD:C6:8B:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9fd384-a8c0-427f-962d-c4502da869bb/1/zKw3L3qbgXHcv8EWDKoiyP3Gi3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:37:37:83:4a:96:43:1f:10:0f:6f:e5:48:b1:44:83:32:b8: 67:4d:2f:55:e4:d3:56:0c:21:f5:87:47:f1:fd:e9:57:58:68: 9c:a3:48:69:b8:7d:09:b0:f0:11:72:ce:79:ca:53:10:fe:f2: 9e:61:65:2b:c2:f5:95:0d:1b:c3:b9:3e:a7:b1:89:b7:70:82: 15:60:0f:c0:cc:21:c5:35:aa:ba:18:58:5e:54:f1:5d:d6:cb: 1e:11:5d:7b:1a:36:cc:0f:1a:d3:29:41:63:11:ad:d0:b0:d7: 95:51:44:34:8f:cf:f0:f9:41:7e:47:92:5d:db:bf:db:d7:2d: fb:9d:31:11:9f:c0:ee:b6:33:67:1b:fd:b4:19:1b:85:73:d3: fe:b0:8a:97:e9:56:12:cf:9e:9a:a9:cf:15:33:db:38:f5:8e: 38:56:3c:68:e9:55:9f:bd:95:bd:b9:d1:09:3e:a1:97:60:e0: f1:81:19:dc:03:56:c9:53:86:8b:67:34:67:a3:0b:37:d7:47: cf:bd:9e:d2:50:6f:be:75:42:27:4d:99:40:89:ad:79:5d:34: da:15:95:98:eb:dc:46:ef:77:16:4c:c9:17:f5:f5:f5:ce:74: 2f:42:c0:a3:d6:cb:8b:93:46:dd:13:e6:26:24:4a:f9:5b:f5: 92:be:84:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm55+CC1EgAXqYHPA3wxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYWMzNzJmN2E5YjgxNzFkY2JmYzExNjBjYWEyMmM4ZmRj NjhiN2IwHhcNMjUxMjA2MDMwMTM4WhcNMjUxMjA3MDMwMTM4WjAzMTEwLwYDVQQD EygxYjFhNjRjYTYxN2M5OWMxNDllNjM0ZWFiZDk3MjA1YjEyYTA5MDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjlUmbYa+M+orM6urkNWJkEzQmLV GvXM/jgw9a3XCWuLNLq/Y8ORhPea0C8FAH2d3v8KKGPs8bTfWT6uPQoDHaW9L3rp 8zH4RMp2mn8AiJOrld8xVoIqt0hP9reh8/WZ9qe3lB2LNoTnt8RSTLgDF/Xv8C+i WWi3ovL+HB/YD18mWNpYu5itgS5rgIdedzwXoJD6O2//SzjKfeYXx4PG3xN75Yuy ZpSOmQTo+WJJfESx5pqv9u1UVUAQXaHDst6k5MyHoUxldruJtex1WYpZKMWkU5uM 60vnVg2VGSul218aiFavWCaO7qvEquB88FBDOdE5qxk9+Wvsc4NojIs49wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsaZMphfJnBSeY06r2XIFsSoJACMB8GA1UdIwQY MBaAFMysNy96m4Fx3L/BFgyqIsj9xot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85ZmQzODQtYThjMC00MjdmLTk2MmQt YzQ1MDJkYTg2OWJiLzEvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi85ZmQzODQtYThjMC00MjdmLTk2MmQtYzQ1MDJkYTg2OWJi LzEvekt3M0wzcWJnWEhjdjhFV0RLb2l5UDNHaTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjc3g0qW Qx8QD2/lSLFEgzK4Z00vVeTTVgwh9YdH8f3pV1honKNIabh9CbDwEXLOecpTEP7y nmFlK8L1lQ0bw7k+p7GJt3CCFWAPwMwhxTWquhhYXlTxXdbLHhFdexo2zA8a0ylB YxGt0LDXlVFENI/P8PlBfkeSXdu/29ct+50xEZ/A7rYzZxv9tBkbhXPT/rCKl+lW Es+emqnPFTPbOPWOOFY8aOlVn72VvbnRCT6hl2Dg8YEZ3ANWyVOGi2c0Z6MLN9dH z72e0lBvvnVCJ02ZQImteV002hWVmOvcRu93FkzJF/X19c50L0LAo9bLi5NG3RPm JiRK+Vv1kr6EKA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:39 2025 by rpki-client