This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft File: Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft (raw, json) Hash identifier: MxqYC3qIuqWXbn70nU7O/Wxg/YOvJvoxqOwrZxuvk2c= Subject key identifier: 5A:A0:A0:A4:1D:61:96:36:A9:9A:81:AB:AD:4F:2E:9C:2D:C6:12:CF Authority key identifier: 66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5 Certificate issuer: /CN=6688f0f1b5d341670069202717d63c0540464ff5 Certificate serial: 019AF31D5D17D471C470C1BCFA1A5E82E668 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:02:59 +0000 Manifest this update: Sat 06 Dec 2025 10:02:59 +0000 Manifest next update: Sun 07 Dec 2025 10:02:59 +0000 Files and hashes: 1: Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl (hash: nJgNTCRUZE9xQC+Uh++6Ah6T6cfgV5IV/Z8GcBCjsIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:5d:17:d4:71:c4:70:c1:bc:fa:1a:5e:82:e6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6688f0f1b5d341670069202717d63c0540464ff5 Validity Not Before: Dec 6 10:02:59 2025 GMT Not After : Dec 7 10:02:59 2025 GMT Subject: CN=5aa0a0a41d619636a99a81abad4f2e9c2dc612cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:83:12:1d:e1:b7:88:e9:2f:ef:a4:92:40:27: ae:1f:a7:b2:6d:fe:d4:07:bc:7f:17:02:37:36:8b: 7c:01:e0:41:9c:ae:b4:47:d0:6a:b0:7c:df:69:33: 63:62:06:d0:35:f2:b7:28:a0:ed:dd:8b:68:a6:6e: 65:53:01:30:c2:44:5d:50:0e:87:43:24:d2:8a:e8: 1b:63:cd:d3:80:fa:c1:10:4a:e8:bb:f1:0e:b8:a8: 82:29:21:0c:cd:ef:03:a8:4e:c7:de:9e:d3:89:58: db:84:71:a7:b9:57:f6:50:85:a6:f9:9b:69:2c:a7: ad:83:64:2b:97:d6:51:34:36:d7:0d:0f:4d:8d:04: 78:97:51:e6:72:20:29:d6:d3:be:aa:99:f1:68:fe: 34:c3:97:4d:14:69:2c:a5:a4:ed:9e:9f:0a:3d:b6: dc:93:0a:b2:66:69:f5:d6:aa:ec:8e:9c:0f:f3:04: 21:0d:4f:47:9a:d2:a8:da:a8:e0:27:60:a0:7d:61: 29:85:16:a2:cd:99:26:bc:eb:c5:34:4b:81:f8:fd: 08:dd:58:60:98:d6:1f:e0:41:12:67:ea:24:39:13: 9a:94:8b:8e:54:59:2f:65:40:c9:c8:5a:7e:8c:5d: c9:6f:3f:72:89:2a:5b:8a:18:a2:e0:ef:14:73:b9: ef:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A0:A0:A4:1D:61:96:36:A9:9A:81:AB:AD:4F:2E:9C:2D:C6:12:CF X509v3 Authority Key Identifier: keyid:66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:63:58:78:29:33:4d:b7:ec:ea:f7:19:4a:f5:e0:dd:cc:ba: 0d:3d:6a:67:e8:9f:7e:c0:e4:64:32:e9:e2:81:3c:11:14:55: 77:38:2e:0c:78:d7:a4:a7:fb:3f:bf:35:6e:ba:0e:07:65:19: ae:dc:b3:87:b2:22:99:46:db:53:26:e4:b2:87:68:df:cb:a5: e8:c3:c5:94:25:b0:dc:49:35:47:1c:8e:92:9b:bd:67:3a:90: 07:97:be:33:be:0a:52:c9:2b:f2:3c:8f:37:d7:3c:c3:39:4a: 99:0f:03:36:c5:7a:b1:5c:43:f6:cb:e6:f5:6d:f4:6d:5d:c6: f2:ef:09:88:20:d3:71:4c:21:8b:ae:20:8f:25:45:ea:3a:fd: c9:18:63:36:ce:58:35:e6:a6:4c:8a:df:41:a5:ff:c3:13:e7: 2f:e4:ae:b0:dd:33:2b:77:c3:3b:42:0b:0c:a3:66:15:32:98: e1:ee:81:88:a1:36:b0:be:8f:a4:90:ab:ef:41:50:d0:8c:cd: ba:b0:8b:af:74:b4:17:66:a5:12:f5:7c:f2:bb:6d:8a:2e:6d: d8:7a:09:16:81:b1:06:5f:39:0c:10:98:7c:ea:70:92:cb:13: 38:14:59:3f:19:13:02:66:3a:db:e3:e8:64:3a:6f:12:2e:24: fe:e1:72:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHV0X1HHEcMG8+hpeguZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ODhmMGYxYjVkMzQxNjcwMDY5MjAyNzE3ZDYzYzA1NDA0 NjRmZjUwHhcNMjUxMjA2MTAwMjU5WhcNMjUxMjA3MTAwMjU5WjAzMTEwLwYDVQQD Eyg1YWEwYTBhNDFkNjE5NjM2YTk5YTgxYWJhZDRmMmU5YzJkYzYxMmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoMSHeG3iOkv76SSQCeuH6eybf7U B7x/FwI3Not8AeBBnK60R9BqsHzfaTNjYgbQNfK3KKDt3Ytopm5lUwEwwkRdUA6H QyTSiugbY83TgPrBEErou/EOuKiCKSEMze8DqE7H3p7TiVjbhHGnuVf2UIWm+Ztp LKetg2Qrl9ZRNDbXDQ9NjQR4l1HmciAp1tO+qpnxaP40w5dNFGkspaTtnp8KPbbc kwqyZmn11qrsjpwP8wQhDU9HmtKo2qjgJ2CgfWEphRaizZkmvOvFNEuB+P0I3Vhg mNYf4EESZ+okOROalIuOVFkvZUDJyFp+jF3Jbz9yiSpbihii4O8Uc7nvwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqgoKQdYZY2qZqBq61PLpwtxhLPMB8GA1UdIwQY MBaAFGaI8PG100FnAGkgJxfWPAVARk/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm9qdzhiWFRRV2NBYVNBbkY5WThCVUJHVF9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My85YzFiMTQtZTNhOS00ZDkyLWJlN2Et YjEzZDJmZWQxZGM2LzEvWm9qdzhiWFRRV2NBYVNBbkY5WThCVUJHVF9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My85YzFiMTQtZTNhOS00ZDkyLWJlN2EtYjEzZDJmZWQxZGM2 LzEvWm9qdzhiWFRRV2NBYVNBbkY5WThCVUJHVF9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmNYeCkz Tbfs6vcZSvXg3cy6DT1qZ+iffsDkZDLp4oE8ERRVdzguDHjXpKf7P781broOB2UZ rtyzh7IimUbbUybksodo38ul6MPFlCWw3Ek1RxyOkpu9ZzqQB5e+M74KUskr8jyP N9c8wzlKmQ8DNsV6sVxD9svm9W30bV3G8u8JiCDTcUwhi64gjyVF6jr9yRhjNs5Y NeamTIrfQaX/wxPnL+SusN0zK3fDO0ILDKNmFTKY4e6BiKE2sL6PpJCr70FQ0IzN urCLr3S0F2alEvV88rttii5t2HoJFoGxBl85DBCYfOpwkssTOBRZPxkTAmY62+Po ZDpvEi4k/uFyLg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:41 2025 by rpki-client