This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft File: zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json) Hash identifier: hG+j23Pmg5pp6ZJxcj7oML5pBou8gGhallQzKJG1ZoA= Subject key identifier: 09:D5:65:E4:B0:41:73:26:77:33:84:53:58:9C:8D:0E:E5:BC:58:BA Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03 Certificate issuer: /CN=cefe18ac971c82a777f7db19ffab334a32537703 Certificate serial: 019AF46570B3933033E6186CB118B99A4330 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft Manifest number: 1215 Signing time: Sat 06 Dec 2025 16:01:19 +0000 Manifest this update: Sat 06 Dec 2025 16:01:19 +0000 Manifest next update: Sun 07 Dec 2025 16:01:19 +0000 Files and hashes: 1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: lJQWygZlTbsQa7bhMGFICSR3vqEAwBXSOXyOyes15C0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:70:b3:93:30:33:e6:18:6c:b1:18:b9:9a:43:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703 Validity Not Before: Dec 6 16:01:19 2025 GMT Not After : Dec 7 16:01:19 2025 GMT Subject: CN=09d565e4b041732677338453589c8d0ee5bc58ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ac:b7:d1:6a:a5:c3:ee:3f:f8:55:69:fe:f4: 15:d1:ac:64:8d:19:07:b3:93:55:31:15:6d:b6:97: 03:1e:7a:51:f2:b8:9a:3a:76:37:d6:11:a7:b8:89: a7:65:67:9d:b9:5e:a2:71:2d:ec:78:e6:89:ca:2b: 6c:52:48:8e:fe:8a:f1:d9:5b:a5:63:81:17:15:3f: 47:69:d8:be:8f:28:65:7b:9c:a8:60:ce:0d:76:a8: c1:6c:ef:4c:18:de:c1:93:81:99:ea:e3:27:cc:41: 8f:14:c1:60:7b:58:5d:63:0a:fb:e9:0e:57:d2:88: 00:bb:fc:0c:25:43:18:6e:f4:8b:0c:d2:bd:80:56: 3b:4f:f0:73:22:dd:b1:48:ac:66:cc:1d:53:00:7e: 8f:5d:38:1b:e3:e5:75:ff:52:7f:80:4b:f9:b0:61: a5:5b:f0:3e:03:d7:31:de:0f:56:c7:a6:98:40:95: 33:99:77:b3:15:f3:f5:66:41:d0:99:21:f3:a3:9e: 13:d4:51:8c:85:84:87:ff:29:3b:cb:53:12:99:70: 57:2c:34:ad:27:80:68:55:72:61:d8:fa:0b:1b:25: 73:3d:a1:8d:18:bb:09:c5:b8:20:74:b6:fc:fc:90: db:50:83:20:24:78:34:63:80:87:cd:90:18:a4:9d: 63:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D5:65:E4:B0:41:73:26:77:33:84:53:58:9C:8D:0E:E5:BC:58:BA X509v3 Authority Key Identifier: keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:47:01:8f:f0:0e:9e:f2:0d:21:53:92:24:68:ae:17:42:28: 39:29:75:99:ca:60:e9:7e:26:4a:b5:b6:4c:3d:62:c3:4b:6f: 18:f1:d6:15:17:00:42:d8:45:87:27:f4:81:ad:13:b1:59:06: 64:03:38:23:fe:88:45:4e:80:00:77:d1:d1:41:19:dc:bf:63: ef:0f:21:2c:a4:83:a3:ee:63:20:0f:1e:c7:ac:f4:02:58:f1: cb:8c:19:8c:c1:7d:14:5c:d8:03:06:4a:bb:eb:ba:64:72:53: 31:9b:a5:e5:39:fc:89:d2:59:9c:f9:83:21:ea:e9:b8:4f:24: 97:68:dd:35:5d:5f:96:4c:6f:05:c7:41:d9:de:dc:6f:43:d8: 1b:a1:d6:19:58:f9:09:89:f5:5e:af:6a:5e:0b:7e:69:d2:fb: 7b:8e:d5:f9:74:6d:c0:51:cc:ff:c5:73:cd:af:b8:62:05:04: 2a:be:61:0e:e7:f5:04:2c:cf:63:9c:33:36:6e:17:d1:92:f5: 60:ab:26:eb:a4:a0:66:47:d2:46:f3:53:80:17:22:5a:06:24: ff:fe:64:44:cd:98:e6:22:5b:98:56:d9:41:76:da:de:c6:12: af:9b:ce:6c:b8:c8:77:54:a6:61:08:d3:d8:55:82:ad:c6:73: fa:a4:41:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZXCzkzAz5hhssRi5mkMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZmUxOGFjOTcxYzgyYTc3N2Y3ZGIxOWZmYWIzMzRhMzI1 Mzc3MDMwHhcNMjUxMjA2MTYwMTE5WhcNMjUxMjA3MTYwMTE5WjAzMTEwLwYDVQQD EygwOWQ1NjVlNGIwNDE3MzI2NzczMzg0NTM1ODljOGQwZWU1YmM1OGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqy30Wqlw+4/+FVp/vQV0axkjRkH s5NVMRVttpcDHnpR8riaOnY31hGnuImnZWeduV6icS3seOaJyitsUkiO/orx2Vul Y4EXFT9Hadi+jyhle5yoYM4NdqjBbO9MGN7Bk4GZ6uMnzEGPFMFge1hdYwr76Q5X 0ogAu/wMJUMYbvSLDNK9gFY7T/BzIt2xSKxmzB1TAH6PXTgb4+V1/1J/gEv5sGGl W/A+A9cx3g9Wx6aYQJUzmXezFfP1ZkHQmSHzo54T1FGMhYSH/yk7y1MSmXBXLDSt J4BoVXJh2PoLGyVzPaGNGLsJxbggdLb8/JDbUIMgJHg0Y4CHzZAYpJ1jfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnVZeSwQXMmdzOEU1icjQ7lvFi6MB8GA1UdIwQY MBaAFM7+GKyXHIKnd/fbGf+rM0oyU3cDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenY0WXJKY2NncWQzOTlzWl82c3pTakpUZHdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83Yzc5YTktNjFiMC00ODRjLTg3ZTUt ODE2MTExMzQ0ZmJmLzEvenY0WXJKY2NncWQzOTlzWl82c3pTakpUZHdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83Yzc5YTktNjFiMC00ODRjLTg3ZTUtODE2MTExMzQ0ZmJm LzEvenY0WXJKY2NncWQzOTlzWl82c3pTakpUZHdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkcBj/AO nvINIVOSJGiuF0IoOSl1mcpg6X4mSrW2TD1iw0tvGPHWFRcAQthFhyf0ga0TsVkG ZAM4I/6IRU6AAHfR0UEZ3L9j7w8hLKSDo+5jIA8ex6z0Aljxy4wZjMF9FFzYAwZK u+u6ZHJTMZul5Tn8idJZnPmDIerpuE8kl2jdNV1flkxvBcdB2d7cb0PYG6HWGVj5 CYn1Xq9qXgt+adL7e47V+XRtwFHM/8Vzza+4YgUEKr5hDuf1BCzPY5wzNm4X0ZL1 YKsm66SgZkfSRvNTgBciWgYk//5kRM2Y5iJbmFbZQXba3sYSr5vObLjId1SmYQjT 2FWCrcZz+qRBew== -----END CERTIFICATE-----Generated at Sun Dec 7 00:58:22 2025 by rpki-client