This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json) Hash identifier: oRynl8/sF9S0c6tb4T4FgbcyPsqgkwZQaep78v/awCc= Subject key identifier: AB:5D:92:96:6F:0D:13:17:FF:64:73:47:5C:EF:05:B8:59:87:97:4C Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b Certificate serial: 019B2BF8A4177B09E6F97E026BB480F34AF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft Manifest number: 1787 Signing time: Wed 17 Dec 2025 11:01:13 +0000 Manifest this update: Wed 17 Dec 2025 11:01:13 +0000 Manifest next update: Thu 18 Dec 2025 11:01:13 +0000 Files and hashes: 1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: TrkWQ9Di9xMU6+VZNBJq5jXbZWVDKxyTt6BA0YxhEPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:a4:17:7b:09:e6:f9:7e:02:6b:b4:80:f3:4a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b Validity Not Before: Dec 17 11:01:13 2025 GMT Not After : Dec 18 11:01:13 2025 GMT Subject: CN=ab5d92966f0d1317ff6473475cef05b85987974c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:8d:ba:b1:cc:11:0c:d8:b9:19:8a:38:b8: 9b:47:79:b9:cc:e8:c2:10:38:35:07:1a:5a:60:36: 60:d5:0f:5a:f9:82:c1:51:0f:37:ac:a1:c5:6f:99: 06:91:6f:62:e2:69:2a:7a:3e:14:20:94:1d:f5:ec: 3a:4a:3c:57:52:4d:54:90:cb:29:6a:ea:ec:85:56: 3f:62:fd:55:90:0d:7b:ec:47:66:8e:b1:ab:1c:77: 40:b8:43:c9:95:19:80:d4:08:e7:71:fc:be:ff:eb: cd:a5:c1:0f:5e:54:a6:df:16:97:91:98:20:73:40: f3:d9:04:35:e2:4c:0a:95:a5:4d:6b:64:31:f2:c8: c5:a0:29:ad:dc:b1:14:2a:fe:2e:92:66:7b:e9:19: 63:b3:9e:25:6d:4d:7b:38:eb:6a:69:06:9d:93:4d: e9:61:98:a1:f8:5a:b3:2c:ce:a0:c8:84:58:dc:7d: 33:20:d1:9d:c6:af:1b:7a:dc:f7:2c:23:ab:02:8d: fe:22:a2:a5:fc:a6:41:db:12:40:d6:dc:a2:ef:0a: bf:f7:ac:ee:64:a1:3d:d8:0a:ad:a5:7e:9a:37:35: 06:04:d5:ab:ec:1d:67:1f:17:aa:9d:b2:4d:8b:a8: 70:22:de:b5:b7:43:9b:bf:b5:8b:bb:94:cc:11:4a: 59:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5D:92:96:6F:0D:13:17:FF:64:73:47:5C:EF:05:B8:59:87:97:4C X509v3 Authority Key Identifier: keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:63:a4:f3:eb:ec:7b:c9:d3:98:58:9f:eb:9a:d6:3f:33:ed: 9f:51:78:8e:90:98:df:e1:64:ac:cb:5e:b6:7e:ab:e8:b8:2c: b1:51:17:cf:60:a5:dd:64:e1:d9:78:66:8c:fc:1a:7c:02:a5: 47:55:84:98:2c:f4:f6:bb:e2:26:a6:1f:3f:a1:43:ed:70:a4: 36:aa:03:92:4d:53:be:c8:65:15:75:db:f2:43:77:92:9a:38: b6:d5:40:3b:73:7d:d3:55:3c:d5:a4:b1:23:2e:3d:9e:6e:08: 57:b6:05:2f:4a:8e:ae:ae:0b:a0:d4:15:b6:87:f4:fb:a2:0a: 21:b0:c6:e3:da:4f:b5:e6:9a:0d:d8:7e:de:01:ab:7c:a5:f1: 38:dd:bd:c8:40:8d:14:08:cb:89:8f:2f:a4:06:6e:8e:7d:a8: c6:d0:03:c5:5e:8c:45:ca:9d:ea:3a:6c:e5:26:0a:a4:d0:bb: c1:b5:19:77:48:4e:5f:85:6b:b0:57:92:89:4f:66:3f:8f:a1: 50:ad:ec:58:63:47:87:29:7a:5b:4e:77:2f:f3:89:77:5d:8e: 30:5c:04:81:ed:43:38:c5:90:ba:5d:83:60:5f:e5:e4:0e:4d: 3d:5e:48:97:d9:94:30:67:ae:be:05:1c:40:71:85:0a:a1:de: d6:ef:38:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+KQXewnm+X4Ca7SA80r1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYzg0MDgyYmU5NmU2MDlkOWRlOTgwOGZiYzM3ODY2ZmVi NGM1NGIwHhcNMjUxMjE3MTEwMTEzWhcNMjUxMjE4MTEwMTEzWjAzMTEwLwYDVQQD EyhhYjVkOTI5NjZmMGQxMzE3ZmY2NDczNDc1Y2VmMDViODU5ODc5NzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymyNurHMEQzYuRmKOLibR3m5zOjC EDg1BxpaYDZg1Q9a+YLBUQ83rKHFb5kGkW9i4mkqej4UIJQd9ew6SjxXUk1UkMsp aurshVY/Yv1VkA177EdmjrGrHHdAuEPJlRmA1Ajncfy+/+vNpcEPXlSm3xaXkZgg c0Dz2QQ14kwKlaVNa2Qx8sjFoCmt3LEUKv4ukmZ76Rljs54lbU17OOtqaQadk03p YZih+FqzLM6gyIRY3H0zINGdxq8betz3LCOrAo3+IqKl/KZB2xJA1tyi7wq/96zu ZKE92AqtpX6aNzUGBNWr7B1nHxeqnbJNi6hwIt61t0Obv7WLu5TMEUpZMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtdkpZvDRMX/2RzR1zvBbhZh5dMMB8GA1UdIwQY MBaAFM3IQIK+luYJ2d6YCPvDeGb+tMVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iN2JmOTQtMzc3Yi00NDAwLThiOWMt Y2JmMTY0ZThiZTAxLzEvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iN2JmOTQtMzc3Yi00NDAwLThiOWMtY2JmMTY0ZThiZTAx LzEvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimOk8+vs e8nTmFif65rWPzPtn1F4jpCY3+FkrMtetn6r6LgssVEXz2Cl3WTh2XhmjPwafAKl R1WEmCz09rviJqYfP6FD7XCkNqoDkk1TvshlFXXb8kN3kpo4ttVAO3N901U81aSx Iy49nm4IV7YFL0qOrq4LoNQVtof0+6IKIbDG49pPteaaDdh+3gGrfKXxON29yECN FAjLiY8vpAZujn2oxtADxV6MRcqd6jps5SYKpNC7wbUZd0hOX4VrsFeSiU9mP4+h UK3sWGNHhyl6W053L/OJd12OMFwEge1DOMWQul2DYF/l5A5NPV5Il9mUMGeuvgUc QHGFCqHe1u84HA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:12:04 2025 by rpki-client