This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft File: z2wawDKfN1f-h9q2IGq8FXHES7A.mft (raw, json) Hash identifier: 65O24cs32gZedYU0MEn7kC5sScBCWXURX8/SFM3SStw= Subject key identifier: 6E:20:33:B3:01:42:C7:0A:FC:6C:F4:0F:A3:3B:07:05:F4:12:14:F0 Authority key identifier: CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0 Certificate issuer: /CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0 Certificate serial: 019B341FB08F6EB4B1A6295C8E17503F8980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 01:00:50 +0000 Manifest this update: Fri 19 Dec 2025 01:00:50 +0000 Manifest next update: Sat 20 Dec 2025 01:00:50 +0000 Files and hashes: 1: z2wawDKfN1f-h9q2IGq8FXHES7A.crl (hash: EXdgFhuBQCU8JFpnprGBJG8uWZPcJBrfjkU15oHrWLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:b0:8f:6e:b4:b1:a6:29:5c:8e:17:50:3f:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0 Validity Not Before: Dec 19 01:00:50 2025 GMT Not After : Dec 20 01:00:50 2025 GMT Subject: CN=6e2033b30142c70afc6cf40fa33b0705f41214f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:5f:02:d5:33:92:84:63:23:e9:ce:15:0f: e0:8d:65:c3:d0:cd:40:73:11:20:71:75:e8:da:85: 90:d4:2f:44:84:dd:8d:68:f6:5d:ff:e3:07:73:42: 1a:88:83:2f:93:83:70:8b:c4:ea:5f:bc:1d:46:05: 47:d8:95:ab:cc:a1:c7:77:af:88:43:e4:aa:de:2e: f2:6a:a2:ad:e6:a4:d3:63:53:f8:27:65:81:a1:2f: 9b:cc:61:d6:00:fc:68:af:9d:9d:fe:79:c8:9f:ea: 9c:15:4d:5c:3d:5e:80:0d:57:f7:d6:2d:88:d7:a5: 82:9e:26:84:c1:8f:4c:16:ce:06:46:69:e7:ed:38: 8e:e9:1f:54:ed:d4:87:74:65:41:6b:bb:7b:5e:13: 8d:1a:38:b4:3c:48:40:76:e1:de:03:1b:96:36:a6: e1:84:9c:c8:aa:6c:27:99:08:22:e6:39:f5:ea:d3: 73:09:96:58:fb:50:56:df:bf:e5:69:65:a9:3e:16: 92:16:61:dc:b8:4d:bb:81:89:cb:16:69:e9:83:0c: cf:19:c2:b0:53:d4:9f:88:b9:1f:67:4a:7f:c8:d0: da:b8:1a:71:5d:8b:10:da:f2:e0:49:a1:cc:b7:9a: 9e:e8:d1:3b:b1:7a:94:c8:1c:5e:d3:e6:cf:1d:06: a6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:20:33:B3:01:42:C7:0A:FC:6C:F4:0F:A3:3B:07:05:F4:12:14:F0 X509v3 Authority Key Identifier: keyid:CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:77:47:99:1b:43:da:49:5a:1d:8f:1b:0e:08:58:d7:bd:ab: 33:93:f8:06:af:61:1f:74:ed:2c:1e:30:1d:f5:90:61:a8:e1: 61:0d:81:0d:4b:7f:ed:fe:41:ec:1e:6f:e6:b6:d2:e3:9d:91: 0e:80:bb:ea:8a:fa:c5:55:d0:37:d6:53:2a:96:d6:35:37:3e: a0:3f:ab:60:19:5c:a3:ce:ac:fd:b1:5a:4e:fe:e1:de:14:37: 04:f3:a2:a0:00:e4:ac:76:1b:6f:3d:5e:97:fe:7f:4e:8f:96: 79:34:47:07:0c:59:72:79:c9:c9:12:06:ca:5b:82:86:31:a9: e3:e6:7d:81:27:ec:92:bc:0e:7c:c8:10:cd:e7:36:38:bc:a2: 2d:e1:96:15:15:fb:e7:01:3f:14:59:4a:6b:a6:20:2c:8e:ff: fc:4b:ef:71:7d:d8:79:a2:ec:e9:b8:80:a1:d1:d9:36:ae:00: 82:2c:0b:d6:57:5c:bb:09:9c:ce:71:c6:a4:a4:97:5f:e0:8d: fd:f6:d5:fe:fe:5f:88:08:12:0e:ee:69:3d:bd:0a:03:76:cb: 33:fc:e4:2e:b1:68:ad:95:5e:73:c5:61:bb:67:f3:31:60:cf: eb:65:84:0d:cd:b9:dd:b0:d6:0c:ad:09:ef:35:67:fa:1c:c5: ab:ef:48:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H7CPbrSxpilcjhdQP4mAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNmMxYWMwMzI5ZjM3NTdmZTg3ZGFiNjIwNmFiYzE1NzFj NDRiYjAwHhcNMjUxMjE5MDEwMDUwWhcNMjUxMjIwMDEwMDUwWjAzMTEwLwYDVQQD Eyg2ZTIwMzNiMzAxNDJjNzBhZmM2Y2Y0MGZhMzNiMDcwNWY0MTIxNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh9fAtUzkoRjI+nOFQ/gjWXD0M1A cxEgcXXo2oWQ1C9EhN2NaPZd/+MHc0IaiIMvk4Nwi8TqX7wdRgVH2JWrzKHHd6+I Q+Sq3i7yaqKt5qTTY1P4J2WBoS+bzGHWAPxor52d/nnIn+qcFU1cPV6ADVf31i2I 16WCniaEwY9MFs4GRmnn7TiO6R9U7dSHdGVBa7t7XhONGji0PEhAduHeAxuWNqbh hJzIqmwnmQgi5jn16tNzCZZY+1BW37/laWWpPhaSFmHcuE27gYnLFmnpgwzPGcKw U9SfiLkfZ0p/yNDauBpxXYsQ2vLgSaHMt5qe6NE7sXqUyBxe0+bPHQamSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4gM7MBQscK/Gz0D6M7BwX0EhTwMB8GA1UdIwQY MBaAFM9sGsAynzdX/ofatiBqvBVxxEuwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejJ3YXdES2ZOMWYtaDlxMklHcThGWEhFUzdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81Mzc0YTgtYzZkOS00OWE3LThjZGQt MWZjZTU1NWQ4ZmVmLzEvejJ3YXdES2ZOMWYtaDlxMklHcThGWEhFUzdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81Mzc0YTgtYzZkOS00OWE3LThjZGQtMWZjZTU1NWQ4ZmVm LzEvejJ3YXdES2ZOMWYtaDlxMklHcThGWEhFUzdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3dHmRtD 2klaHY8bDghY172rM5P4Bq9hH3TtLB4wHfWQYajhYQ2BDUt/7f5B7B5v5rbS452R DoC76or6xVXQN9ZTKpbWNTc+oD+rYBlco86s/bFaTv7h3hQ3BPOioADkrHYbbz1e l/5/To+WeTRHBwxZcnnJyRIGyluChjGp4+Z9gSfskrwOfMgQzec2OLyiLeGWFRX7 5wE/FFlKa6YgLI7//EvvcX3YeaLs6biAodHZNq4AgiwL1ldcuwmcznHGpKSXX+CN /fbV/v5fiAgSDu5pPb0KA3bLM/zkLrForZVec8Vhu2fzMWDP62WEDc253bDWDK0J 7zVn+hzFq+9IRw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:52:49 2025 by rpki-client