This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft File: _rzZRV4eVaXh1gG9SoV0ta_VQHU.mft (raw, json) Hash identifier: CRSYMGvZvVXD4CQzEHFL7ZIdAWmbGK1/VdwYKoQkg4s= Subject key identifier: 98:36:DA:69:D1:F5:BA:CD:20:3D:F8:96:4B:FB:AE:F1:98:08:6E:F4 Authority key identifier: FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75 Certificate issuer: /CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075 Certificate serial: 019AF276B8BC85D190DEA27955B41B6BBB14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft Manifest number: 067E Signing time: Sat 06 Dec 2025 07:00:57 +0000 Manifest this update: Sat 06 Dec 2025 07:00:57 +0000 Manifest next update: Sun 07 Dec 2025 07:00:57 +0000 Files and hashes: 1: _rzZRV4eVaXh1gG9SoV0ta_VQHU.crl (hash: oe9ZwTqaxPDHikgyBVienhivOR+Yjlpm9YWSkWMei0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b8:bc:85:d1:90:de:a2:79:55:b4:1b:6b:bb:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075 Validity Not Before: Dec 6 07:00:57 2025 GMT Not After : Dec 7 07:00:57 2025 GMT Subject: CN=9836da69d1f5bacd203df8964bfbaef198086ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:8a:55:27:14:ab:ab:b9:3d:9b:54:32:7a: 06:05:2d:10:20:41:26:38:42:d6:0d:a9:8a:51:70: 07:a7:16:44:53:1b:ad:42:0c:d8:14:2c:a1:8a:00: 79:2d:24:14:ae:ae:a5:71:c1:db:bb:6e:0d:29:59: b3:8a:ad:02:ee:85:6e:18:5d:be:09:68:d9:b3:54: 70:f5:f7:90:ad:4d:94:98:99:8e:39:47:c5:4b:e7: da:67:00:ae:f3:30:e0:a6:15:fd:4d:49:a0:3b:ad: e6:cb:0d:33:d4:ba:6b:d2:79:cc:38:51:94:b5:6b: b4:04:2b:51:37:8a:0c:20:b2:c8:68:b6:1b:93:02: 22:57:79:aa:03:0c:6c:15:55:6f:da:ae:f6:71:89: 5c:da:57:67:fd:12:41:ea:ee:22:36:c9:dc:28:f5: 9f:f4:92:57:16:a5:e4:a4:c2:60:26:68:52:43:95: 53:39:b3:4d:7a:e8:c9:85:a9:91:5d:75:96:49:9f: 79:93:2b:b0:c3:49:ea:81:39:54:4d:ef:31:b5:48: 88:38:d4:30:20:25:b0:cb:00:c1:db:42:25:78:9c: 24:51:e5:ba:0d:13:11:72:16:14:78:ab:4a:71:0b: 3f:01:d0:ff:76:a5:94:ab:20:d1:88:19:68:54:80: b0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:36:DA:69:D1:F5:BA:CD:20:3D:F8:96:4B:FB:AE:F1:98:08:6E:F4 X509v3 Authority Key Identifier: keyid:FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b5:f9:5f:0f:bf:29:00:5a:b6:7b:a7:24:ed:c3:47:aa:e2: 59:b6:45:a2:82:97:55:7d:f4:60:01:ac:7e:94:08:dc:38:c8: 61:c9:7d:d6:d6:a5:8f:3a:48:6c:ef:53:06:22:e8:71:ea:07: 42:5c:5a:a5:3b:57:c9:b9:2d:01:54:93:85:67:43:81:20:f8: 91:b3:e9:2b:b7:35:ce:13:bc:78:d9:90:ed:f8:e5:54:9a:b5: 43:f5:64:91:77:cd:76:0f:83:a9:9f:e2:e6:a2:ac:87:5a:84: 7d:53:53:a2:d0:a4:e7:4d:3a:37:0f:67:e4:5d:ef:e7:d5:88: 24:59:e5:85:77:0b:e0:34:51:cd:11:40:f5:f5:b0:aa:12:4a: bf:87:70:ce:a4:cc:8b:7a:d3:e1:7f:47:d1:f8:d0:b9:56:bf: 37:33:fd:a8:f2:7f:3d:e7:f2:89:eb:fe:9f:27:21:c6:f3:a2: a5:91:8e:7b:31:3a:9c:e6:b5:a4:ea:c4:5f:fb:6f:91:3e:bb: 7e:15:9c:d7:4c:c9:f7:e0:0f:06:9d:93:6b:42:cf:f6:11:1e: ac:ee:42:c9:35:e8:98:4f:39:8b:fa:8e:56:7e:54:0e:81:c5: e9:bb:32:e9:5a:be:4b:8e:fb:20:af:da:9b:58:bb:0a:0f:dc: 31:d3:0d:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydri8hdGQ3qJ5VbQba7sUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmNkOTQ1NWUxZTU1YTVlMWQ2MDFiZDRhODU3NGI1YWZk NTQwNzUwHhcNMjUxMjA2MDcwMDU3WhcNMjUxMjA3MDcwMDU3WjAzMTEwLwYDVQQD Eyg5ODM2ZGE2OWQxZjViYWNkMjAzZGY4OTY0YmZiYWVmMTk4MDg2ZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9eKVScUq6u5PZtUMnoGBS0QIEEm OELWDamKUXAHpxZEUxutQgzYFCyhigB5LSQUrq6lccHbu24NKVmziq0C7oVuGF2+ CWjZs1Rw9feQrU2UmJmOOUfFS+faZwCu8zDgphX9TUmgO63myw0z1Lpr0nnMOFGU tWu0BCtRN4oMILLIaLYbkwIiV3mqAwxsFVVv2q72cYlc2ldn/RJB6u4iNsncKPWf 9JJXFqXkpMJgJmhSQ5VTObNNeujJhamRXXWWSZ95kyuww0nqgTlUTe8xtUiIONQw ICWwywDB20IleJwkUeW6DRMRchYUeKtKcQs/AdD/dqWUqyDRiBloVICw/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJg22mnR9brNID34lkv7rvGYCG70MB8GA1UdIwQY MBaAFP682UVeHlWl4dYBvUqFdLWv1UB1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ZGY3MDEtMjBkMi00YzRmLWFjOTQt MTYxMjdjOGE3ZWFjLzEvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85ZGY3MDEtMjBkMi00YzRmLWFjOTQtMTYxMjdjOGE3ZWFj LzEvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLX5Xw+/ KQBatnunJO3DR6riWbZFooKXVX30YAGsfpQI3DjIYcl91taljzpIbO9TBiLoceoH QlxapTtXybktAVSThWdDgSD4kbPpK7c1zhO8eNmQ7fjlVJq1Q/VkkXfNdg+DqZ/i 5qKsh1qEfVNTotCk5006Nw9n5F3v59WIJFnlhXcL4DRRzRFA9fWwqhJKv4dwzqTM i3rT4X9H0fjQuVa/NzP9qPJ/Pefyiev+nychxvOipZGOezE6nOa1pOrEX/tvkT67 fhWc10zJ9+APBp2Ta0LP9hEerO5CyTXomE85i/qOVn5UDoHF6bsy6Vq+S477IK/a m1i7Cg/cMdMN1w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:13:41 2025 by rpki-client