This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json) Hash identifier: ReSvOcU1FFAxWUyiO2uWKL1L3WDGy3GpQD9+19OI8O4= Subject key identifier: AC:3C:29:4E:11:C7:55:A0:BA:46:44:76:48:13:8D:92:10:05:18:0B Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5 Certificate issuer: /CN=6414775fdaeec7b0d5c927083988d555727c21b5 Certificate serial: 019AF12E09E41F4C48DA7A0CBD8F36C46B04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft Manifest number: 090E Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: k3ZoKot35XsDVXRRkpMpg4wj7WSk4wFkFBtWQufA7Rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:09:e4:1f:4c:48:da:7a:0c:bd:8f:36:c4:6b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5 Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=ac3c294e11c755a0ba46447648138d921005180b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:76:43:26:db:db:c3:9f:69:1b:56:07:12:0c: 8e:c5:e4:97:de:83:7d:b8:ba:26:8f:cd:64:27:da: 6e:bd:3f:bb:b7:6e:4e:09:8f:73:61:0e:81:df:a3: bf:5e:3a:f1:0d:f6:70:ab:a5:b3:c2:ac:59:51:10: 9e:0f:81:d2:70:01:ce:ea:15:d7:20:c2:a3:6e:cf: 00:14:17:8e:90:73:c5:73:0a:01:cc:dc:db:f9:96: bb:d6:12:74:2a:9e:42:23:e0:1a:ee:b7:60:a1:91: 74:f3:38:bf:c7:77:7e:ab:8f:ad:94:e4:de:5b:16: eb:e2:b1:ad:1d:ad:f4:44:90:be:d6:97:d7:ff:d2: ea:05:e8:bf:78:ce:99:8e:07:5e:1b:28:cd:e6:fe: ae:6d:6e:04:b1:36:02:d6:a9:e5:fe:9c:91:59:88: 93:6a:c6:14:14:6e:72:06:d0:5b:a2:21:0c:6b:60: a8:33:83:9e:41:ee:b7:6b:40:8f:d5:ea:f7:b6:4c: 3c:6a:12:60:eb:52:86:07:e2:a5:e6:bb:52:e3:d1: bd:eb:10:9c:c6:2b:8d:82:fa:f8:3c:d7:40:ea:39: 2b:37:a3:e9:c2:48:7c:e1:3b:c3:da:f8:ea:2c:37: a8:6c:fa:44:db:60:13:e1:78:de:a6:07:f6:76:69: 36:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3C:29:4E:11:C7:55:A0:BA:46:44:76:48:13:8D:92:10:05:18:0B X509v3 Authority Key Identifier: keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:b1:5b:72:bc:2f:65:b3:0c:2d:2a:55:68:4a:5c:dc:4c:dd: 53:80:a7:34:7e:7a:fd:a1:5f:75:95:b2:22:36:f6:62:df:67: 89:c9:3f:43:07:6d:08:77:d3:da:de:0b:05:e5:2a:d9:7b:1f: 72:f9:d3:7b:b1:26:ed:41:6b:3f:86:2f:28:79:94:ba:c1:4b: 1c:52:f8:56:fc:a1:af:71:50:76:93:be:40:58:a9:f4:08:00: 55:36:13:72:bd:8f:39:83:70:e1:27:be:c1:8c:b9:e9:ef:09: b7:62:d6:fc:f2:df:7b:70:91:1c:28:2e:ed:c6:e6:34:c6:34: 2e:9f:94:11:e9:29:6d:71:cd:d3:30:ce:63:ee:aa:be:95:18: b5:7e:c2:e6:b8:f3:84:f7:5b:ad:c2:83:d1:d9:0f:73:7b:6e: 84:71:9d:b3:7a:20:c0:67:e4:64:7a:49:f7:b5:58:cb:5c:d1: a8:a9:e5:22:99:de:b6:40:be:45:17:a2:f3:16:09:19:51:cb: a3:4d:b6:e4:5f:90:1c:ff:be:6b:9d:60:38:48:56:3d:c8:a6: 3c:36:e4:b3:a5:75:c7:cc:2d:ee:fd:a7:7b:c1:db:3c:ac:40: c3:0d:42:5d:81:74:fd:cb:91:43:c5:b4:48:c1:67:fa:ae:25: 06:c5:64:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgnkH0xI2noMvY82xGsEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTQ3NzVmZGFlZWM3YjBkNWM5MjcwODM5ODhkNTU1NzI3 YzIxYjUwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD EyhhYzNjMjk0ZTExYzc1NWEwYmE0NjQ0NzY0ODEzOGQ5MjEwMDUxODBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nZDJtvbw59pG1YHEgyOxeSX3oN9 uLomj81kJ9puvT+7t25OCY9zYQ6B36O/XjrxDfZwq6WzwqxZURCeD4HScAHO6hXX IMKjbs8AFBeOkHPFcwoBzNzb+Za71hJ0Kp5CI+Aa7rdgoZF08zi/x3d+q4+tlOTe Wxbr4rGtHa30RJC+1pfX/9LqBei/eM6ZjgdeGyjN5v6ubW4EsTYC1qnl/pyRWYiT asYUFG5yBtBboiEMa2CoM4OeQe63a0CP1er3tkw8ahJg61KGB+Kl5rtS49G96xCc xiuNgvr4PNdA6jkrN6Ppwkh84TvD2vjqLDeobPpE22AT4Xjepgf2dmk2uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKw8KU4Rx1WgukZEdkgTjZIQBRgLMB8GA1UdIwQY MBaAFGQUd1/a7sew1cknCDmI1VVyfCG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hZjlmNDUtMzQ1Ni00OGEyLWFkNzUt NDc1NzI3YTAzZGQzLzEvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9hZjlmNDUtMzQ1Ni00OGEyLWFkNzUtNDc1NzI3YTAzZGQz LzEvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt7Fbcrwv ZbMMLSpVaEpc3EzdU4CnNH56/aFfdZWyIjb2Yt9nick/QwdtCHfT2t4LBeUq2Xsf cvnTe7Em7UFrP4YvKHmUusFLHFL4Vvyhr3FQdpO+QFip9AgAVTYTcr2POYNw4Se+ wYy56e8Jt2LW/PLfe3CRHCgu7cbmNMY0Lp+UEekpbXHN0zDOY+6qvpUYtX7C5rjz hPdbrcKD0dkPc3tuhHGds3ogwGfkZHpJ97VYy1zRqKnlIpnetkC+RRei8xYJGVHL o0225F+QHP++a51gOEhWPcimPDbks6V1x8wt7v2ne8HbPKxAww1CXYF0/cuRQ8W0 SMFn+q4lBsVkpw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:31 2025 by rpki-client