This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json) Hash identifier: 4MpzKBVsmbWrlvcsqy4jRO9h/JCUauJ1W85ERaa1Occ= Subject key identifier: BC:85:D2:9A:A7:60:A1:10:30:A3:C8:DC:2F:FE:94:AE:57:4F:F3:D8 Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8 Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8 Certificate serial: 019AF208D791BF22120D45CC239A61A15623 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:00:57 +0000 Manifest this update: Sat 06 Dec 2025 05:00:57 +0000 Manifest next update: Sun 07 Dec 2025 05:00:57 +0000 Files and hashes: 1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: C96gO1PiEH0hPAym+qa/8vws3507GfO33d4/uHGN6hI=) 2: y6XKa07TTPMFsjvwx8e568cVXPU.roa (hash: C/iy2HFJBUXxZmfuDRQqFLZ88BpL9CevYMYDHGoS6P4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d7:91:bf:22:12:0d:45:cc:23:9a:61:a1:56:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8 Validity Not Before: Dec 6 05:00:57 2025 GMT Not After : Dec 7 05:00:57 2025 GMT Subject: CN=bc85d29aa760a11030a3c8dc2ffe94ae574ff3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:fb:7f:e1:1d:8e:87:d2:df:e1:ee:5b:d4: 8d:62:e1:f8:07:a9:bf:4b:46:92:25:1d:0e:2a:9c: 41:89:5d:1c:d4:8c:bc:b0:8a:e4:c2:9b:f2:70:89: 2e:10:be:72:b5:58:56:48:cc:3a:4b:28:89:0c:cb: 55:d0:e7:0f:25:50:88:7a:0a:97:aa:99:81:80:a8: 53:0d:f1:4b:20:29:d2:06:10:bf:85:0e:f7:be:e0: 6e:98:65:f1:88:a7:9c:72:84:97:23:e6:8a:bf:ce: 8a:0e:1b:80:27:84:bc:a2:85:30:ba:60:72:80:68: 48:9d:5a:09:ce:8b:ad:93:b8:02:5c:a3:1b:41:65: 08:08:74:8c:38:cd:8d:5d:5b:fd:a8:1d:7a:be:1c: 62:07:21:26:42:2c:0a:1b:4e:7b:2b:f3:4e:41:30: 97:e7:c6:c1:f2:9b:41:72:d1:c7:1f:62:ca:4d:27: d5:44:8e:4d:d2:09:4c:bf:01:14:dd:8e:da:e0:6b: be:91:04:b0:fc:53:84:9c:1a:a3:a9:88:1e:e8:c1: c4:7a:e3:5d:c9:90:91:b9:d6:5a:44:d5:b3:f1:e5: 3a:92:0f:bc:59:29:eb:04:84:fb:41:5a:e8:6d:c7: 6d:65:0e:f1:93:2b:75:a1:d9:87:43:66:74:fe:34: c0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:85:D2:9A:A7:60:A1:10:30:A3:C8:DC:2F:FE:94:AE:57:4F:F3:D8 X509v3 Authority Key Identifier: keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:41:3d:b0:54:b3:42:c3:0b:01:44:0e:2c:f5:a7:16:a0:be: ac:85:8a:65:69:d8:2f:36:06:94:69:a9:eb:67:6d:17:04:88: f5:00:d6:9e:f7:e0:4a:6c:99:46:9a:01:89:f9:78:79:b6:77: 1b:6a:cd:98:a4:34:66:38:ce:9c:a7:cf:ab:64:9a:bb:36:b5: c5:3f:e6:d8:50:d4:d5:cf:84:80:71:be:e3:0c:83:b4:2d:95: de:d9:28:74:54:4c:21:11:88:a4:ae:72:3e:63:3c:ea:67:3d: 22:3b:69:ff:de:a6:45:e4:b3:3d:7a:9f:8d:04:2f:0f:68:26: 3c:20:41:8c:45:a3:2a:94:61:b1:50:f4:81:63:b2:42:f7:03: 06:2b:c8:e5:19:17:e0:67:61:30:b4:b9:d7:8d:c5:18:68:a0: 79:67:2e:30:1e:3d:d8:f4:a0:68:a8:08:68:31:80:5d:f4:77: a0:d3:6d:28:80:35:01:bd:c3:c9:e7:dc:88:b7:56:4f:04:3f: 54:7e:c9:34:5a:35:41:c5:3a:e5:4a:d4:bd:06:e1:2b:3e:b3: d1:b4:37:74:42:8b:99:36:f9:5f:e5:2b:f8:62:9c:9f:bf:f0: da:6c:af:85:98:82:0e:cf:c9:5b:62:76:1f:e7:a2:54:b4:a7: 2c:f6:ce:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNeRvyISDUXMI5phoVYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTBjMjZmM2E0ZmFjNzAwYWM3YjBlMzQ5MGI4ZmExNzVm MDhhZDgwHhcNMjUxMjA2MDUwMDU3WhcNMjUxMjA3MDUwMDU3WjAzMTEwLwYDVQQD EyhiYzg1ZDI5YWE3NjBhMTEwMzBhM2M4ZGMyZmZlOTRhZTU3NGZmM2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHP7f+EdjofS3+HuW9SNYuH4B6m/ S0aSJR0OKpxBiV0c1Iy8sIrkwpvycIkuEL5ytVhWSMw6SyiJDMtV0OcPJVCIegqX qpmBgKhTDfFLICnSBhC/hQ73vuBumGXxiKeccoSXI+aKv86KDhuAJ4S8ooUwumBy gGhInVoJzoutk7gCXKMbQWUICHSMOM2NXVv9qB16vhxiByEmQiwKG057K/NOQTCX 58bB8ptBctHHH2LKTSfVRI5N0glMvwEU3Y7a4Gu+kQSw/FOEnBqjqYge6MHEeuNd yZCRudZaRNWz8eU6kg+8WSnrBIT7QVrobcdtZQ7xkyt1odmHQ2Z0/jTAuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyF0pqnYKEQMKPI3C/+lK5XT/PYMB8GA1UdIwQY MBaAFGUQwm86T6xwCsew40kLj6F18IrYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAt MmJhOWQ1MTZmOTQ0LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAtMmJhOWQ1MTZmOTQ0 LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUE9sFSz QsMLAUQOLPWnFqC+rIWKZWnYLzYGlGmp62dtFwSI9QDWnvfgSmyZRpoBifl4ebZ3 G2rNmKQ0ZjjOnKfPq2Sauza1xT/m2FDU1c+EgHG+4wyDtC2V3tkodFRMIRGIpK5y PmM86mc9Ijtp/96mReSzPXqfjQQvD2gmPCBBjEWjKpRhsVD0gWOyQvcDBivI5RkX 4GdhMLS5143FGGigeWcuMB492PSgaKgIaDGAXfR3oNNtKIA1Ab3DyefciLdWTwQ/ VH7JNFo1QcU65UrUvQbhKz6z0bQ3dEKLmTb5X+Ur+GKcn7/w2myvhZiCDs/JW2J2 H+eiVLSnLPbOwA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:46:46 2025 by rpki-client