This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft File: z2wawDKfN1f-h9q2IGq8FXHES7A.mft (raw, json) Hash identifier: XE+cFBSJ67oYltZGcHD9sMuLFPZGYjpa9rg0/LZPd9E= Subject key identifier: D8:55:39:96:23:18:9D:E3:D2:CE:D6:17:ED:3D:64:7F:8B:8C:0B:C9 Authority key identifier: CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0 Certificate issuer: /CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0 Certificate serial: 019AF2768AB26FE76FDD1D2CF6CC32044ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: z2wawDKfN1f-h9q2IGq8FXHES7A.crl (hash: O/mC0F3j7LcQEEycGiVTzHZkuWRWkN6YZ9wKNlvfsqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8a:b2:6f:e7:6f:dd:1d:2c:f6:cc:32:04:4e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0 Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=d855399623189de3d2ced617ed3d647f8b8c0bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:66:e4:4d:44:d0:32:e4:a4:7c:33:76:a9:a0: f0:5f:a0:fa:45:7c:1a:27:5b:10:dc:29:72:de:06: f1:d2:bd:64:bb:92:5b:34:9b:c1:34:b3:7f:4d:26: e3:44:e2:f3:e5:02:e1:cd:73:96:f9:f3:0d:31:f9: af:da:c9:7f:b2:71:d0:5b:aa:3c:55:ad:06:d7:21: c6:f8:b8:01:59:8b:fd:4c:c0:03:6d:be:55:e1:02: 71:ef:06:fc:f1:64:ba:b8:ef:80:66:69:83:95:37: 85:b7:4a:5e:3a:e3:65:75:38:ad:f0:50:ab:3e:eb: 2d:0f:f5:0a:ca:6c:18:9a:01:54:d2:9d:ed:22:f8: 33:fc:3f:76:e9:e3:b5:27:23:65:54:f6:8b:3a:9f: f1:83:f5:c2:14:16:f7:e2:32:6d:d1:9d:2c:80:74: 8f:65:cd:38:35:3f:6c:35:24:e8:50:44:62:56:e6: 81:2f:19:35:5f:3f:04:8a:68:e9:e7:bd:3b:14:49: c3:49:0a:da:49:66:1a:39:cd:9b:3c:30:61:6a:d2: e1:ea:d1:87:bf:8d:35:a1:86:dd:87:60:c0:ca:50: fc:64:e1:eb:8d:7d:38:2a:cc:e5:36:09:21:67:aa: 80:4a:90:bd:81:b7:16:2b:f4:a2:09:38:00:4d:50: 34:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:55:39:96:23:18:9D:E3:D2:CE:D6:17:ED:3D:64:7F:8B:8C:0B:C9 X509v3 Authority Key Identifier: keyid:CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:0c:d4:ec:f9:2e:7b:a4:95:16:67:a3:0d:5e:6b:81:33:c0: 69:c4:23:70:76:6c:d5:ec:d8:0c:42:33:3b:f6:60:35:c2:b6: 02:71:5d:86:e2:04:9e:3d:ce:16:dc:ae:b7:0e:85:80:99:c5: d4:70:75:aa:b3:88:f3:d1:4b:f3:d7:72:dc:50:dd:e5:5d:fe: e8:71:d0:5f:92:e2:cd:3c:ff:69:c2:30:5e:5b:8f:b9:45:80: da:62:dc:ec:86:6b:d4:82:5c:07:50:5a:02:be:e6:9b:d4:2a: 99:d4:fc:de:bf:fd:1f:63:d0:90:d5:18:57:de:e1:39:10:d8: 7b:8c:3d:ff:44:ee:e9:a8:e6:41:c1:1f:ac:0c:bb:4c:0e:e3: 1a:5f:9f:91:d4:aa:06:9d:43:88:47:75:a4:cf:25:6d:01:db: db:8c:0c:9a:d3:42:fe:7c:88:f1:8c:0f:72:31:8c:ca:6b:b7: f9:b3:e8:67:4d:79:7a:22:db:b9:2b:b6:7b:62:88:01:14:c4: 9c:2b:72:4c:26:45:b6:c1:2c:9f:6b:e0:62:94:b3:cb:96:37: e2:16:58:e3:50:b4:59:8a:66:f2:3d:af:c0:5b:95:16:7b:f3: aa:55:f2:ed:27:9f:dd:8b:51:99:37:cd:a7:33:a5:dd:01:7b: 95:ad:75:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoqyb+dv3R0s9swyBE7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNmMxYWMwMzI5ZjM3NTdmZTg3ZGFiNjIwNmFiYzE1NzFj NDRiYjAwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD EyhkODU1Mzk5NjIzMTg5ZGUzZDJjZWQ2MTdlZDNkNjQ3ZjhiOGMwYmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGbkTUTQMuSkfDN2qaDwX6D6RXwa J1sQ3Cly3gbx0r1ku5JbNJvBNLN/TSbjROLz5QLhzXOW+fMNMfmv2sl/snHQW6o8 Va0G1yHG+LgBWYv9TMADbb5V4QJx7wb88WS6uO+AZmmDlTeFt0peOuNldTit8FCr PustD/UKymwYmgFU0p3tIvgz/D926eO1JyNlVPaLOp/xg/XCFBb34jJt0Z0sgHSP Zc04NT9sNSToUERiVuaBLxk1Xz8Eimjp5707FEnDSQraSWYaOc2bPDBhatLh6tGH v401oYbdh2DAylD8ZOHrjX04KszlNgkhZ6qASpC9gbcWK/SiCTgATVA0XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhVOZYjGJ3j0s7WF+09ZH+LjAvJMB8GA1UdIwQY MBaAFM9sGsAynzdX/ofatiBqvBVxxEuwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejJ3YXdES2ZOMWYtaDlxMklHcThGWEhFUzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81Mzc0YTgtYzZkOS00OWE3LThjZGQt MWZjZTU1NWQ4ZmVmLzEvejJ3YXdES2ZOMWYtaDlxMklHcThGWEhFUzdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81Mzc0YTgtYzZkOS00OWE3LThjZGQtMWZjZTU1NWQ4ZmVm LzEvejJ3YXdES2ZOMWYtaDlxMklHcThGWEhFUzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQzU7Pku e6SVFmejDV5rgTPAacQjcHZs1ezYDEIzO/ZgNcK2AnFdhuIEnj3OFtyutw6FgJnF 1HB1qrOI89FL89dy3FDd5V3+6HHQX5LizTz/acIwXluPuUWA2mLc7IZr1IJcB1Ba Ar7mm9QqmdT83r/9H2PQkNUYV97hORDYe4w9/0Tu6ajmQcEfrAy7TA7jGl+fkdSq Bp1DiEd1pM8lbQHb24wMmtNC/nyI8YwPcjGMymu3+bPoZ015eiLbuSu2e2KIARTE nCtyTCZFtsEsn2vgYpSzy5Y34hZY41C0WYpm8j2vwFuVFnvzqlXy7Sef3YtRmTfN pzOl3QF7la11PQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:31 2025 by rpki-client