This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft File: zkyVbVLdh2NjwhME-cAl8H1fJjE.mft (raw, json) Hash identifier: hr3LFoggC9IplKeu8yGZP4qIZ9bCGCqUepbf1CWV3pM= Subject key identifier: 00:38:6E:1A:49:AD:24:F8:31:6F:C4:BE:4D:61:11:57:9F:9D:BB:5D Authority key identifier: CE:4C:95:6D:52:DD:87:63:63:C2:13:04:F9:C0:25:F0:7D:5F:26:31 Certificate issuer: /CN=ce4c956d52dd876363c21304f9c025f07d5f2631 Certificate serial: 019AF12D2AF9932F1AFB9214021E9698EC5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft Manifest number: 06DA Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: zkyVbVLdh2NjwhME-cAl8H1fJjE.crl (hash: I+uicxKrNTn2cutb89PjJ2hp9dvVzHTfGG+k3yBrl2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft rsync://rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2a:f9:93:2f:1a:fb:92:14:02:1e:96:98:ec:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4c956d52dd876363c21304f9c025f07d5f2631 Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=00386e1a49ad24f8316fc4be4d6111579f9dbb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ba:cf:85:db:45:79:90:24:55:d4:05:b8:81: 93:d1:b0:8d:94:6c:e9:78:8a:0b:e3:4d:86:07:64: 99:aa:75:ae:00:75:33:40:97:b5:12:e5:8a:08:f5: fa:55:db:81:9b:04:20:5d:09:27:80:43:d4:18:26: 27:cd:c0:37:ba:7a:11:ff:dc:1b:cc:46:7a:84:f2: ed:e4:2e:38:fc:9d:4f:ec:6e:95:35:49:be:d1:35: 28:c8:f8:51:80:9e:bd:bb:76:8b:68:7a:41:12:7e: 56:ab:53:c9:67:7b:ac:41:d6:03:9a:25:4c:be:42: e3:46:a4:2f:3e:92:ff:5a:43:59:e4:14:ea:cd:ef: 9b:94:50:ab:12:5f:b7:bc:76:11:12:81:bb:42:8d: 60:d8:62:24:5e:29:4b:5e:b7:56:35:35:9e:12:c1: 55:ea:2a:e9:35:22:5e:24:13:45:4a:b3:43:80:94: 44:53:3d:b8:6d:43:9a:59:8b:5f:cc:0b:a1:f0:87: 01:65:51:ed:8e:2c:27:fc:ab:d5:45:83:97:2b:2e: 6f:99:30:8e:07:ff:65:41:19:77:49:8b:bc:9d:e7: ff:6a:d3:21:0a:5f:5a:09:20:b3:4e:7f:71:41:90: 98:01:5c:5c:cd:ce:3f:6b:1c:04:ed:01:1a:20:b1: 90:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:38:6E:1A:49:AD:24:F8:31:6F:C4:BE:4D:61:11:57:9F:9D:BB:5D X509v3 Authority Key Identifier: keyid:CE:4C:95:6D:52:DD:87:63:63:C2:13:04:F9:C0:25:F0:7D:5F:26:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:9a:ef:37:00:1c:6d:dd:9b:48:61:b6:99:4a:2f:ba:41:22: 9d:9f:38:74:50:f4:b7:c0:8d:7a:43:98:00:27:ad:fc:12:90: 44:49:dc:16:f5:4b:15:83:94:e1:63:0c:26:28:f3:42:ae:08: 13:6e:0d:7a:d2:12:cc:32:61:d3:f1:bf:ea:21:7e:67:83:11: f1:53:51:9e:87:8d:d0:c7:fc:86:00:d4:62:95:d9:c8:07:9e: 3c:d9:84:86:59:98:6d:1d:be:58:9d:c6:cf:b9:e9:f7:96:35: f2:35:7f:23:12:8a:ca:0a:aa:a1:74:a5:87:70:7a:eb:22:4b: ad:33:fe:fb:97:98:bd:80:5f:ad:d9:ce:f9:e2:f4:5b:f7:03: be:36:37:3a:4a:0d:be:dd:d0:d0:bc:4c:15:9f:ee:97:b7:cb: e3:86:d1:8e:52:36:f2:e6:0d:2f:af:82:39:3f:4d:24:b0:c4: 47:33:85:84:4e:50:93:73:b7:ee:b1:c5:2c:c9:3f:8a:32:b1: bf:d8:b4:81:fd:01:ef:4c:a0:ec:17:10:69:cd:c9:b1:16:d9: 3d:87:5c:a1:48:d3:a3:c8:dc:8a:1c:79:d9:65:5b:2d:d0:01: fb:3a:43:a3:a7:da:8f:5d:4a:b4:47:65:71:d2:5a:9a:3b:04: fa:5d:07:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSr5ky8a+5IUAh6WmOxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNGM5NTZkNTJkZDg3NjM2M2MyMTMwNGY5YzAyNWYwN2Q1 ZjI2MzEwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD EygwMDM4NmUxYTQ5YWQyNGY4MzE2ZmM0YmU0ZDYxMTE1NzlmOWRiYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7rPhdtFeZAkVdQFuIGT0bCNlGzp eIoL402GB2SZqnWuAHUzQJe1EuWKCPX6VduBmwQgXQkngEPUGCYnzcA3unoR/9wb zEZ6hPLt5C44/J1P7G6VNUm+0TUoyPhRgJ69u3aLaHpBEn5Wq1PJZ3usQdYDmiVM vkLjRqQvPpL/WkNZ5BTqze+blFCrEl+3vHYREoG7Qo1g2GIkXilLXrdWNTWeEsFV 6irpNSJeJBNFSrNDgJREUz24bUOaWYtfzAuh8IcBZVHtjiwn/KvVRYOXKy5vmTCO B/9lQRl3SYu8nef/atMhCl9aCSCzTn9xQZCYAVxczc4/axwE7QEaILGQvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAA4bhpJrST4MW/Evk1hEVefnbtdMB8GA1UdIwQY MBaAFM5MlW1S3YdjY8ITBPnAJfB9XyYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemt5VmJWTGRoMk5qd2hNRS1jQWw4SDFmSmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wM2E1MmQtZjliNS00ZjcxLWI0Mjgt MmQ5MDAwMTU3MGUxLzEvemt5VmJWTGRoMk5qd2hNRS1jQWw4SDFmSmpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wM2E1MmQtZjliNS00ZjcxLWI0MjgtMmQ5MDAwMTU3MGUx LzEvemt5VmJWTGRoMk5qd2hNRS1jQWw4SDFmSmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5rvNwAc bd2bSGG2mUovukEinZ84dFD0t8CNekOYACet/BKQREncFvVLFYOU4WMMJijzQq4I E24NetISzDJh0/G/6iF+Z4MR8VNRnoeN0Mf8hgDUYpXZyAeePNmEhlmYbR2+WJ3G z7np95Y18jV/IxKKygqqoXSlh3B66yJLrTP++5eYvYBfrdnO+eL0W/cDvjY3OkoN vt3Q0LxMFZ/ul7fL44bRjlI28uYNL6+COT9NJLDERzOFhE5Qk3O37rHFLMk/ijKx v9i0gf0B70yg7BcQac3JsRbZPYdcoUjTo8jcihx52WVbLdAB+zpDo6faj11KtEdl cdJamjsE+l0HGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:02 2025 by rpki-client