This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft File: ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft (raw, json) Hash identifier: BbVrTtMRkEcCZzWZepZbKv7LitCHbnFKC/U7oQgcGyU= Subject key identifier: 5B:09:23:11:DC:25:77:D1:B3:48:5F:BD:3A:E9:65:62:C7:47:67:33 Authority key identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73 Certificate issuer: /CN=65186e4ef8caedf66ed34d93aba80b2cfc068673 Certificate serial: 019B353282B7852437D8B07F57012963BDFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft Manifest number: 10F9 Signing time: Fri 19 Dec 2025 06:01:01 +0000 Manifest this update: Fri 19 Dec 2025 06:01:01 +0000 Manifest next update: Sat 20 Dec 2025 06:01:01 +0000 Files and hashes: 1: ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl (hash: +QrQtOkKBgj/czuwfekc/8FzR4xNuu51OuYjBoDiHH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:82:b7:85:24:37:d8:b0:7f:57:01:29:63:bd:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65186e4ef8caedf66ed34d93aba80b2cfc068673 Validity Not Before: Dec 19 06:01:01 2025 GMT Not After : Dec 20 06:01:01 2025 GMT Subject: CN=5b092311dc2577d1b3485fbd3ae96562c7476733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:27:63:87:3e:77:d5:6a:93:63:e4:66:27: 1b:94:0c:21:88:83:c7:e0:ce:8a:ac:b3:bf:eb:06: d7:7b:21:0d:8c:2e:da:df:2b:4c:6f:f7:5c:01:93: b9:b0:2c:8f:fc:7c:5a:5d:33:92:45:e8:d5:03:08: 57:ef:6e:f7:c9:c9:d8:0a:95:8a:f2:19:81:9e:74: 4a:6f:19:1a:1e:ca:a0:b7:93:81:d7:93:48:0d:dd: 5d:2f:a8:af:1a:6d:70:20:e8:dc:46:36:46:0e:7f: e3:7c:36:3d:c7:76:8e:6e:43:80:49:96:2c:43:61: 46:37:1d:dd:3f:16:00:c0:49:94:3d:22:4a:e5:5a: f7:2d:f6:27:0d:96:d5:52:ad:25:db:51:ea:c2:e3: 66:35:0a:f2:8e:21:63:78:bf:ea:b0:2e:8c:65:7c: 1e:9f:19:8c:91:8e:81:9b:b7:28:98:ea:b9:23:5c: e6:53:ae:69:7f:b3:fe:08:8f:e9:96:32:c0:67:7a: 44:df:58:77:7d:54:89:4d:e1:96:17:ca:02:4f:ba: 77:33:1b:9a:0a:95:10:ac:f2:3a:d7:a4:dc:23:11: 0f:3c:c2:cd:3c:27:34:40:8e:72:5b:6e:3c:61:df: 56:11:38:cd:97:65:7a:85:2b:27:c1:33:6c:69:8c: fa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:09:23:11:DC:25:77:D1:B3:48:5F:BD:3A:E9:65:62:C7:47:67:33 X509v3 Authority Key Identifier: keyid:65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:d1:9b:b2:77:65:c1:cc:8c:ad:d7:49:44:d9:48:0f:ca:9c: bf:22:a3:d7:67:61:db:24:25:a9:40:e5:8b:a1:c1:f7:84:5c: e7:c8:e8:84:e0:73:0a:62:82:c2:8d:65:c0:33:7a:16:e3:c4: b5:63:7f:74:5f:69:e7:e3:e6:9c:ce:c9:3b:5d:b9:cf:12:1d: d8:e2:3d:c5:8f:a3:06:e8:9c:29:68:45:5a:a9:63:ad:f8:0b: bb:3b:ce:9d:70:3b:51:29:d3:83:08:2b:98:89:42:50:b2:cb: 7d:08:ba:9d:a1:17:f1:1e:cc:76:10:32:6c:de:22:0b:a7:09: 32:fa:85:3e:86:dd:7e:c7:9d:62:c1:1b:dc:17:41:ec:cd:77: 3e:d1:9d:c8:5d:1d:57:49:51:73:4b:f6:9d:27:9c:c0:ab:fa: 50:95:76:fd:ac:98:03:4c:6a:15:f2:d2:f7:b8:05:c7:1c:db: 96:17:b0:b9:9e:bd:ef:c0:1e:a1:5e:1e:89:f7:ab:7a:d0:68: 1a:b9:3e:13:db:5b:a1:92:e4:2d:f4:eb:00:89:1b:e0:66:74: 18:54:41:ab:b6:d1:34:b5:d8:a7:b5:ae:fa:e9:18:c5:ae:f4: d5:35:b6:1f:81:b1:63:1b:f9:b8:b0:76:0a:f2:13:6c:07:a5: 59:3c:1f:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MoK3hSQ32LB/VwEpY73+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTg2ZTRlZjhjYWVkZjY2ZWQzNGQ5M2FiYTgwYjJjZmMw Njg2NzMwHhcNMjUxMjE5MDYwMTAxWhcNMjUxMjIwMDYwMTAxWjAzMTEwLwYDVQQD Eyg1YjA5MjMxMWRjMjU3N2QxYjM0ODVmYmQzYWU5NjU2MmM3NDc2NzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM4nY4c+d9Vqk2PkZicblAwhiIPH 4M6KrLO/6wbXeyENjC7a3ytMb/dcAZO5sCyP/HxaXTOSRejVAwhX7273ycnYCpWK 8hmBnnRKbxkaHsqgt5OB15NIDd1dL6ivGm1wIOjcRjZGDn/jfDY9x3aObkOASZYs Q2FGNx3dPxYAwEmUPSJK5Vr3LfYnDZbVUq0l21HqwuNmNQryjiFjeL/qsC6MZXwe nxmMkY6Bm7comOq5I1zmU65pf7P+CI/pljLAZ3pE31h3fVSJTeGWF8oCT7p3Mxua CpUQrPI616TcIxEPPMLNPCc0QI5yW248Yd9WETjNl2V6hSsnwTNsaYz6mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsJIxHcJXfRs0hfvTrpZWLHR2czMB8GA1UdIwQY MBaAFGUYbk74yu32btNNk6uoCyz8BoZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJodVR2aks3Zlp1MDAyVHE2Z0xMUHdHaG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85MjRjZjEtZmZkYy00NWU2LWE2ZjMt ZWNkYzM2ZDdhZDFlLzEvWlJodVR2aks3Zlp1MDAyVHE2Z0xMUHdHaG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS85MjRjZjEtZmZkYy00NWU2LWE2ZjMtZWNkYzM2ZDdhZDFl LzEvWlJodVR2aks3Zlp1MDAyVHE2Z0xMUHdHaG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyNGbsndl wcyMrddJRNlID8qcvyKj12dh2yQlqUDli6HB94Rc58johOBzCmKCwo1lwDN6FuPE tWN/dF9p5+PmnM7JO125zxId2OI9xY+jBuicKWhFWqljrfgLuzvOnXA7USnTgwgr mIlCULLLfQi6naEX8R7MdhAybN4iC6cJMvqFPobdfsedYsEb3BdB7M13PtGdyF0d V0lRc0v2nSecwKv6UJV2/ayYA0xqFfLS97gFxxzblhewuZ6978AeoV4eiferetBo Grk+E9tboZLkLfTrAIkb4GZ0GFRBq7bRNLXYp7Wu+ukYxa701TW2H4GxYxv5uLB2 CvITbAelWTwfrg== -----END CERTIFICATE-----Generated at Fri Dec 19 13:28:58 2025 by rpki-client