This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft File: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft (raw, json) Hash identifier: SOnPI9NbwYBHqnAuQhjWTCXScPFns9a4/Fjm/oZXdbs= Subject key identifier: 9B:71:D9:42:76:47:61:C1:1A:EF:12:F1:F5:52:D9:FC:2D:8A:20:C1 Authority key identifier: 65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B Certificate issuer: /CN=654364d0c6c93df28027488afcbfcf329726392b Certificate serial: 019AF12DF5749C040B2AA36CD94193B761F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft Manifest number: 0AF4 Signing time: Sat 06 Dec 2025 01:01:52 +0000 Manifest this update: Sat 06 Dec 2025 01:01:52 +0000 Manifest next update: Sun 07 Dec 2025 01:01:52 +0000 Files and hashes: 1: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl (hash: Yy0M9mRunUe+rbgAvVXD1cQMTB5RTcnGtxlWHUx56A8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f5:74:9c:04:0b:2a:a3:6c:d9:41:93:b7:61:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654364d0c6c93df28027488afcbfcf329726392b Validity Not Before: Dec 6 01:01:52 2025 GMT Not After : Dec 7 01:01:52 2025 GMT Subject: CN=9b71d942764761c11aef12f1f552d9fc2d8a20c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c7:bd:00:d5:a8:10:fe:42:33:f1:cf:7e:13: 60:03:cd:5e:28:ed:94:46:70:20:c1:41:57:d0:25: bb:ee:48:ae:a6:7e:e6:9f:67:a7:96:36:ac:11:11: b7:60:59:37:4a:3b:8d:9e:39:dc:45:53:61:cf:d4: 15:1d:5d:c7:c5:0c:f2:7e:4d:99:8c:9d:8d:cc:04: 73:17:e2:33:e7:ab:0b:aa:c5:b8:9f:f2:ee:a2:25: 53:33:8c:8b:d6:69:b2:4e:6b:62:b0:53:a1:e8:b9: 44:66:36:cf:81:2b:e2:0c:65:69:00:53:b4:a7:16: 77:e3:30:ae:2f:ad:fe:e4:ea:40:5a:48:15:ed:e1: 44:b6:13:ff:08:35:7d:35:98:bf:20:8f:15:be:cd: 84:64:67:48:da:69:98:79:54:a6:d3:d8:a7:99:c6: 1e:76:38:17:a6:ca:9e:22:27:41:36:48:7a:88:d3: a4:52:fe:ab:e1:5c:36:16:54:6d:75:05:fd:0a:f8: 09:13:81:e9:dc:70:75:28:92:a5:7c:88:77:d7:91: 0c:d2:a5:0e:c0:e0:c4:06:00:91:9e:5b:02:90:e3: 9d:62:f4:6c:ce:cc:ce:d4:cb:24:8d:53:f2:77:d5: 53:6d:50:5b:c4:02:27:40:60:66:81:2c:6c:a5:41: bb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:71:D9:42:76:47:61:C1:1A:EF:12:F1:F5:52:D9:FC:2D:8A:20:C1 X509v3 Authority Key Identifier: keyid:65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c7:9e:65:17:b7:6a:8d:be:fe:45:0c:c3:2e:36:45:3f:e5: 90:f7:70:de:84:0d:db:09:65:d6:45:74:9f:ce:25:5e:cb:ee: 8b:2c:d0:98:aa:62:7b:13:32:4b:61:72:c5:5c:b4:17:38:06: ab:0f:d0:ad:12:03:0c:d7:41:89:49:5f:a6:9b:33:c4:8c:29: 92:58:f4:fb:36:1d:fd:4d:4b:30:38:8e:1e:c1:bf:54:c3:5a: c1:d5:a3:46:f2:fd:f5:6d:95:68:d9:6c:2d:9e:e5:0b:34:92: f5:58:61:a1:ed:34:93:d9:10:00:43:da:7d:31:0a:90:af:85: 32:87:e7:c2:78:78:dd:17:83:58:60:5f:fa:5c:6a:6c:2d:de: 3b:aa:1a:d8:48:2d:0f:71:c9:a3:93:22:dc:7d:13:c6:d7:90: db:9a:6c:f0:59:3d:f8:82:da:c6:fa:12:ed:ea:cb:e9:5c:46: 79:a1:b0:c9:59:3f:94:a2:08:1d:7c:6f:7a:2f:53:00:bb:ee: 23:bb:70:f4:90:56:48:72:ad:ee:7d:31:f5:3e:42:0a:ca:1a: 30:2c:0d:cf:d3:08:01:8c:70:ab:5d:34:6a:8c:0f:83:d5:df: a1:32:b5:bd:c2:ad:59:c9:8d:d3:d0:bb:04:98:7a:19:15:46: c5:e2:69:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfV0nAQLKqNs2UGTt2H0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NDM2NGQwYzZjOTNkZjI4MDI3NDg4YWZjYmZjZjMyOTcy NjM5MmIwHhcNMjUxMjA2MDEwMTUyWhcNMjUxMjA3MDEwMTUyWjAzMTEwLwYDVQQD Eyg5YjcxZDk0Mjc2NDc2MWMxMWFlZjEyZjFmNTUyZDlmYzJkOGEyMGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Me9ANWoEP5CM/HPfhNgA81eKO2U RnAgwUFX0CW77kiupn7mn2enljasERG3YFk3SjuNnjncRVNhz9QVHV3HxQzyfk2Z jJ2NzARzF+Iz56sLqsW4n/LuoiVTM4yL1mmyTmtisFOh6LlEZjbPgSviDGVpAFO0 pxZ34zCuL63+5OpAWkgV7eFEthP/CDV9NZi/II8Vvs2EZGdI2mmYeVSm09inmcYe djgXpsqeIidBNkh6iNOkUv6r4Vw2FlRtdQX9CvgJE4Hp3HB1KJKlfIh315EM0qUO wODEBgCRnlsCkOOdYvRszszO1MskjVPyd9VTbVBbxAInQGBmgSxspUG7dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtx2UJ2R2HBGu8S8fVS2fwtiiDBMB8GA1UdIwQY MBaAFGVDZNDGyT3ygCdIivy/zzKXJjkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZjlhYjEtZWFiMS00NmNjLTg4ZTct YjZlOGVhOTEyNDgwLzEvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8zZjlhYjEtZWFiMS00NmNjLTg4ZTctYjZlOGVhOTEyNDgw LzEvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8eeZRe3 ao2+/kUMwy42RT/lkPdw3oQN2wll1kV0n84lXsvuiyzQmKpiexMyS2FyxVy0FzgG qw/QrRIDDNdBiUlfppszxIwpklj0+zYd/U1LMDiOHsG/VMNawdWjRvL99W2VaNls LZ7lCzSS9Vhhoe00k9kQAEPafTEKkK+FMofnwnh43ReDWGBf+lxqbC3eO6oa2Egt D3HJo5Mi3H0TxteQ25ps8Fk9+ILaxvoS7erL6VxGeaGwyVk/lKIIHXxvei9TALvu I7tw9JBWSHKt7n0x9T5CCsoaMCwNz9MIAYxwq100aowPg9XfoTK1vcKtWcmN09C7 BJh6GRVGxeJpmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:13 2025 by rpki-client