This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft File: zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft (raw, json) Hash identifier: wjWNxKc4pHA4AqtyWJe2/8t/DZlb6RcQWO6GVYFvRS8= Subject key identifier: 38:B7:5A:02:0E:80:8C:37:C0:EE:D8:4F:AB:9E:63:16:DE:4D:88:1A Authority key identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98 Certificate issuer: /CN=ceedaa36045146ebc584e71b5c1afa68a7399998 Certificate serial: 019AF23F5DA23BBF21DEDCDEA13F0FCA6756 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft Manifest number: 06C3 Signing time: Sat 06 Dec 2025 06:00:30 +0000 Manifest this update: Sat 06 Dec 2025 06:00:30 +0000 Manifest next update: Sun 07 Dec 2025 06:00:30 +0000 Files and hashes: 1: zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl (hash: HvtH7ddFjqP8CfDm5S7dgH0dvJ1ZlWC+EnzrYprz8s4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:5d:a2:3b:bf:21:de:dc:de:a1:3f:0f:ca:67:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceedaa36045146ebc584e71b5c1afa68a7399998 Validity Not Before: Dec 6 06:00:30 2025 GMT Not After : Dec 7 06:00:30 2025 GMT Subject: CN=38b75a020e808c37c0eed84fab9e6316de4d881a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:bb:1e:fa:73:72:e7:89:bd:bc:df:93:70: 22:31:04:df:10:4b:85:c0:f6:84:9b:9e:67:47:49: 37:02:16:6d:4d:94:b3:8d:7b:b0:2f:21:a4:6d:ad: af:60:74:dd:84:70:98:3c:f8:e4:d8:c0:57:83:55: c1:08:ca:05:92:ed:01:7e:6b:41:02:27:1a:65:b4: 29:45:0a:f2:be:6b:7f:79:e6:40:3a:38:96:37:b8: 63:98:5a:cd:e8:8b:af:95:2a:63:88:41:bd:94:b9: e3:4a:c8:f7:c7:02:b7:ca:b7:d0:9f:2c:1a:fd:fc: 2c:a0:a0:e8:9f:fc:1d:5a:42:56:55:d4:97:e2:ec: 9f:67:cb:fe:a0:b2:f7:f2:90:de:d3:af:a1:b2:2f: 83:93:b6:1d:b7:bc:50:be:aa:dd:f2:98:64:b2:f4: 6e:5a:e1:3f:bb:15:23:66:81:17:cc:ba:91:59:dd: bf:e3:89:58:10:30:67:85:36:dc:ce:ea:3e:41:20: 4d:ce:71:61:54:c4:d1:0a:55:48:8f:b1:ed:2a:d0: c1:64:9f:8e:bc:4d:e0:42:e8:df:97:a7:d5:4e:b8: 98:3c:40:15:3a:0e:7b:e5:24:a9:91:1b:7b:44:01: 0a:38:b8:94:d2:98:00:73:14:b0:81:51:49:b6:07: 02:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B7:5A:02:0E:80:8C:37:C0:EE:D8:4F:AB:9E:63:16:DE:4D:88:1A X509v3 Authority Key Identifier: keyid:CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:dd:08:f3:c2:c2:a1:96:51:35:ba:9b:eb:fd:a9:4a:ca:01: a7:9e:93:d9:a0:06:2f:4b:45:23:40:71:bb:cf:7d:52:ae:a2: a8:c9:e8:cd:aa:52:9e:c7:34:32:3a:0f:db:75:3c:1f:bf:21: 54:43:24:2d:17:f0:7b:15:d0:39:8d:f0:42:16:5a:b7:09:36: 39:4f:0f:48:6b:3c:87:eb:c5:b9:ce:10:bf:d5:9d:bb:8c:9e: c7:f2:c7:9f:01:12:86:8b:ca:24:84:9e:11:6f:a1:98:f0:0f: 68:41:fd:f0:67:03:2c:eb:e3:7f:11:ec:a2:33:96:45:44:79: e0:57:98:6e:fe:2c:42:a6:ed:13:3e:42:29:04:77:3d:00:ec: a5:89:f2:2b:ce:f3:73:c1:9b:cd:7b:9c:ad:98:8c:12:6d:7f: c2:ed:42:d7:59:fe:e2:be:b3:49:15:51:c8:13:5c:09:fd:2c: c0:21:83:7d:be:c4:4f:43:4d:36:10:53:63:86:63:28:f4:4a: 6b:8b:81:27:64:36:b5:aa:47:ac:ca:d4:f6:fb:26:63:c0:cf: 26:13:38:0a:46:92:8e:1d:22:5d:c3:23:73:2c:6f:e8:21:5b: f4:c7:bc:d1:02:5d:42:55:81:10:a7:fa:dc:16:19:b5:ab:05: f4:5a:95:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP12iO78h3tzeoT8PymdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZWRhYTM2MDQ1MTQ2ZWJjNTg0ZTcxYjVjMWFmYTY4YTcz OTk5OTgwHhcNMjUxMjA2MDYwMDMwWhcNMjUxMjA3MDYwMDMwWjAzMTEwLwYDVQQD EygzOGI3NWEwMjBlODA4YzM3YzBlZWQ4NGZhYjllNjMxNmRlNGQ4ODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWW7HvpzcueJvbzfk3AiMQTfEEuF wPaEm55nR0k3AhZtTZSzjXuwLyGkba2vYHTdhHCYPPjk2MBXg1XBCMoFku0BfmtB AicaZbQpRQryvmt/eeZAOjiWN7hjmFrN6IuvlSpjiEG9lLnjSsj3xwK3yrfQnywa /fwsoKDon/wdWkJWVdSX4uyfZ8v+oLL38pDe06+hsi+Dk7Ydt7xQvqrd8phksvRu WuE/uxUjZoEXzLqRWd2/44lYEDBnhTbczuo+QSBNznFhVMTRClVIj7HtKtDBZJ+O vE3gQujfl6fVTriYPEAVOg575SSpkRt7RAEKOLiU0pgAcxSwgVFJtgcCHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDi3WgIOgIw3wO7YT6ueYxbeTYgaMB8GA1UdIwQY MBaAFM7tqjYEUUbrxYTnG1wa+minOZmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zZTdkZWQtM2QwZS00Y2VjLTk2M2Mt NDQzMWU0ZmNiMzgyLzEvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8zZTdkZWQtM2QwZS00Y2VjLTk2M2MtNDQzMWU0ZmNiMzgy LzEvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP90I88LC oZZRNbqb6/2pSsoBp56T2aAGL0tFI0Bxu899Uq6iqMnozapSnsc0MjoP23U8H78h VEMkLRfwexXQOY3wQhZatwk2OU8PSGs8h+vFuc4Qv9Wdu4yex/LHnwEShovKJISe EW+hmPAPaEH98GcDLOvjfxHsojOWRUR54FeYbv4sQqbtEz5CKQR3PQDspYnyK87z c8GbzXucrZiMEm1/wu1C11n+4r6zSRVRyBNcCf0swCGDfb7ET0NNNhBTY4ZjKPRK a4uBJ2Q2tapHrMrU9vsmY8DPJhM4CkaSjh0iXcMjcyxv6CFb9Me80QJdQlWBEKf6 3BYZtasF9FqVXg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:31:19 2025 by rpki-client