This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json) Hash identifier: 1YilvgCUes5zxB4OmrPrFRRe6ObSlmJmhb/mph6UTl8= Subject key identifier: AF:5E:DD:DE:6D:08:DA:9A:9D:30:DB:0A:5A:FC:CE:50:D7:9E:D6:E4 Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b Certificate serial: 019AF208C15CF7A86F4585373C728275ADFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 05:00:51 +0000 Manifest this update: Sat 06 Dec 2025 05:00:51 +0000 Manifest next update: Sun 07 Dec 2025 05:00:51 +0000 Files and hashes: 1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: sIwH3xQahwetQGx6+8p6CHV5JCXUWV7Zp8zgg2um7oU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c1:5c:f7:a8:6f:45:85:37:3c:72:82:75:ad:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b Validity Not Before: Dec 6 05:00:51 2025 GMT Not After : Dec 7 05:00:51 2025 GMT Subject: CN=af5eddde6d08da9a9d30db0a5afcce50d79ed6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b9:8e:c1:d3:92:59:f3:2c:98:1b:4a:8f:a8: 2d:25:59:41:25:e1:8b:20:d4:c8:ce:60:58:61:bb: e0:67:15:69:38:c6:cc:44:57:74:c9:e6:83:9d:fd: 82:91:fc:68:cb:37:5b:2d:d4:4f:84:8a:51:c8:b2: 12:e7:85:be:fa:f1:3f:e7:8f:da:5d:3c:94:e0:07: 80:23:3a:8d:70:1f:3e:de:ea:0f:b7:66:b9:e7:cc: a8:e6:9b:4d:1a:56:a5:87:11:77:f8:48:ed:bd:dd: 4a:5d:5b:0b:2a:69:41:24:4d:90:fe:99:ba:ff:91: 14:c1:8d:a3:e6:1a:ee:f7:b0:4e:92:00:bc:b3:ab: 48:3b:5f:38:4d:40:d9:5e:0f:19:a8:50:77:c1:1d: 45:d3:bb:9c:df:ae:88:ed:3f:ec:fe:e8:9e:6a:48: 63:49:c3:c3:a3:14:0d:61:83:95:15:4a:7d:02:8e: 88:85:cc:84:53:8d:75:12:6c:d7:ef:1c:7e:52:4b: 41:13:8e:dc:92:87:e4:b4:f4:88:f8:d3:e5:42:83: 9a:aa:c0:1d:24:d6:55:b0:3b:86:cc:90:bc:4f:0f: 48:b1:ca:dc:9d:75:bb:bf:20:0d:a7:01:0b:02:13: 29:39:3b:17:53:74:30:42:e3:64:b7:74:6c:f7:34: 56:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5E:DD:DE:6D:08:DA:9A:9D:30:DB:0A:5A:FC:CE:50:D7:9E:D6:E4 X509v3 Authority Key Identifier: keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:be:10:34:7c:8a:0a:0e:25:07:1c:e4:0f:ec:df:31:c8:5e: 08:53:db:53:7b:e3:4e:04:6a:8e:d1:1c:05:be:8f:22:c5:c4: 26:34:89:cb:53:65:c4:81:4a:e5:25:53:bb:59:40:f8:08:c3: d5:72:ab:18:1f:f6:63:49:7f:8f:a8:bf:52:0f:9c:39:a4:ac: 1f:c0:8c:8a:dc:28:f3:04:dd:8b:f9:47:50:64:d1:22:a1:99: ce:2f:eb:71:90:71:09:ce:16:32:01:e9:47:9d:9c:3c:6a:99: 0c:07:af:c9:33:58:b2:02:83:aa:61:43:fc:cf:0a:c3:47:81: 14:bc:87:99:36:ca:d9:6f:8a:b1:80:c6:29:07:54:f6:5f:51: 57:c5:26:84:e7:76:20:3c:9b:da:72:c7:67:fe:44:53:98:8b: f2:ea:09:31:2e:65:ea:48:90:d5:56:8f:4d:fe:dc:ec:52:f6: b6:56:ca:18:43:08:33:7d:fd:6f:13:78:02:c0:7d:31:27:7b: 51:79:72:b3:e6:21:ff:79:c6:f1:3a:b8:d2:8a:a1:74:2d:76: c7:5e:5e:16:0d:9f:7c:bc:9f:da:ba:ef:da:69:3b:e7:d2:b2: 87:85:f4:83:67:fa:97:b8:9f:3c:3a:75:87:6e:a5:94:50:3b: 85:d7:45:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMFc96hvRYU3PHKCda36MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYzg0MDgyYmU5NmU2MDlkOWRlOTgwOGZiYzM3ODY2ZmVi NGM1NGIwHhcNMjUxMjA2MDUwMDUxWhcNMjUxMjA3MDUwMDUxWjAzMTEwLwYDVQQD EyhhZjVlZGRkZTZkMDhkYTlhOWQzMGRiMGE1YWZjY2U1MGQ3OWVkNmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LmOwdOSWfMsmBtKj6gtJVlBJeGL INTIzmBYYbvgZxVpOMbMRFd0yeaDnf2CkfxoyzdbLdRPhIpRyLIS54W++vE/54/a XTyU4AeAIzqNcB8+3uoPt2a558yo5ptNGlalhxF3+Ejtvd1KXVsLKmlBJE2Q/pm6 /5EUwY2j5hru97BOkgC8s6tIO184TUDZXg8ZqFB3wR1F07uc366I7T/s/uieakhj ScPDoxQNYYOVFUp9Ao6IhcyEU411EmzX7xx+UktBE47ckofktPSI+NPlQoOaqsAd JNZVsDuGzJC8Tw9IscrcnXW7vyANpwELAhMpOTsXU3QwQuNkt3Rs9zRWwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9e3d5tCNqanTDbClr8zlDXntbkMB8GA1UdIwQY MBaAFM3IQIK+luYJ2d6YCPvDeGb+tMVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iN2JmOTQtMzc3Yi00NDAwLThiOWMt Y2JmMTY0ZThiZTAxLzEvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iN2JmOTQtMzc3Yi00NDAwLThiOWMtY2JmMTY0ZThiZTAx LzEvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAL4QNHyK Cg4lBxzkD+zfMcheCFPbU3vjTgRqjtEcBb6PIsXEJjSJy1NlxIFK5SVTu1lA+AjD 1XKrGB/2Y0l/j6i/Ug+cOaSsH8CMitwo8wTdi/lHUGTRIqGZzi/rcZBxCc4WMgHp R52cPGqZDAevyTNYsgKDqmFD/M8Kw0eBFLyHmTbK2W+KsYDGKQdU9l9RV8UmhOd2 IDyb2nLHZ/5EU5iL8uoJMS5l6kiQ1VaPTf7c7FL2tlbKGEMIM339bxN4AsB9MSd7 UXlys+Yh/3nG8Tq40oqhdC12x15eFg2ffLyf2rrv2mk759Kyh4X0g2f6l7ifPDp1 h26llFA7hddFPw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:11 2025 by rpki-client