This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json) Hash identifier: ev53X/MUFyG1ZU1g6HFMCdPZzsharz3eUCJ+ucTezy4= Subject key identifier: 76:03:CB:CC:37:AB:F6:D7:24:6B:E4:CF:03:00:EF:BB:1A:44:13:3E Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51 Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851 Certificate serial: 019AF12DD43F504794CABF49099C103C222D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:01:43 +0000 Manifest this update: Sat 06 Dec 2025 01:01:43 +0000 Manifest next update: Sun 07 Dec 2025 01:01:43 +0000 Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: GcAEK4SHNeWAjUPT5BmWyxnVbqVb/YlvADx/N7yjLX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d4:3f:50:47:94:ca:bf:49:09:9c:10:3c:22:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851 Validity Not Before: Dec 6 01:01:43 2025 GMT Not After : Dec 7 01:01:43 2025 GMT Subject: CN=7603cbcc37abf6d7246be4cf0300efbb1a44133e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:21:cb:dc:f1:fd:f6:7a:00:46:9d:05:70:8b: 9e:1f:37:d6:5a:92:7d:9c:d7:3b:13:fa:12:fb:df: 3d:52:38:79:ec:86:85:2f:9e:18:66:ca:7e:3f:de: 00:12:98:5a:90:d9:33:09:bf:62:12:9a:53:90:47: 7d:0e:4f:c0:f6:52:a4:fe:47:db:12:b1:9d:ad:72: 29:e6:4f:c2:f7:eb:b7:67:08:cc:6e:32:b9:49:72: 2e:7a:2d:fc:f7:95:90:a1:7b:6f:19:3b:67:8a:a1: c2:b1:05:df:c8:0e:0f:25:78:6e:2c:8f:79:3e:09: f1:70:c8:3e:2d:af:15:1d:73:9e:aa:36:66:f7:97: 85:2d:0c:a8:6a:84:16:39:9c:99:7d:95:7b:58:21: c5:14:1d:51:bd:04:75:d0:43:85:f7:c7:18:2d:a3: 6e:db:53:1a:68:bd:19:0c:c3:3f:f8:76:95:88:89: 7a:9a:5b:44:1f:3f:3a:d7:ab:05:9e:a7:0a:2c:69: 42:ae:2c:e3:94:9d:95:c0:6e:c1:5d:ea:d5:5d:be: e9:75:6a:55:49:0b:02:22:5f:bb:0c:01:8c:a1:61: 1f:00:e0:04:cc:6b:cd:68:07:1d:46:ac:8f:19:60: ca:3a:78:27:18:26:3f:58:59:02:33:fa:65:00:00: a3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:03:CB:CC:37:AB:F6:D7:24:6B:E4:CF:03:00:EF:BB:1A:44:13:3E X509v3 Authority Key Identifier: keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a1:63:d6:c5:ea:01:72:78:92:63:05:6e:78:00:51:0a:fa: da:3d:af:bf:f6:86:9e:11:bb:0a:74:a9:78:59:2f:4c:ed:8a: b2:32:22:7e:44:08:73:0b:1f:df:e2:27:ce:b7:8d:17:7c:91: 2b:ee:f9:42:c8:81:47:0b:af:3c:34:61:97:15:fa:a8:06:d9: 51:4f:e1:14:17:43:c4:bd:d8:d9:06:ef:29:5a:67:4f:c5:64: c5:d8:94:c1:ac:99:3f:13:2e:59:f7:ca:8f:13:33:78:a3:29: 2d:26:49:1a:58:09:17:3a:5c:d8:b8:4b:f7:3a:28:1a:45:97: c0:5d:ed:eb:fc:f7:ce:9f:a0:0a:fe:8e:84:ad:5f:e4:8b:b7: 80:0a:c0:d9:68:00:01:81:9b:8b:59:9b:d6:c7:61:0f:f8:06: 3b:39:01:38:ec:55:3d:cc:d2:fc:cb:d3:c1:5f:a5:cb:e5:ee: 6e:e7:30:13:fc:76:04:8b:61:bc:60:68:b5:51:73:e3:85:7a: da:99:2d:77:63:4f:55:cb:ad:00:ef:36:ce:f8:91:4b:3c:00: 14:fc:39:bc:3e:d8:8a:4a:12:11:82:56:6c:19:1c:6c:cb:39: 22:a3:54:b7:3d:3e:8f:88:07:83:94:1e:1e:51:65:f1:44:ef: bc:a8:55:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdQ/UEeUyr9JCZwQPCItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmRjYmU1ODBlOTQyZjIxMGEyNzg3MWI1NjUwYzhjMjkw NjM4NTEwHhcNMjUxMjA2MDEwMTQzWhcNMjUxMjA3MDEwMTQzWjAzMTEwLwYDVQQD Eyg3NjAzY2JjYzM3YWJmNmQ3MjQ2YmU0Y2YwMzAwZWZiYjFhNDQxMzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iHL3PH99noARp0FcIueHzfWWpJ9 nNc7E/oS+989Ujh57IaFL54YZsp+P94AEphakNkzCb9iEppTkEd9Dk/A9lKk/kfb ErGdrXIp5k/C9+u3ZwjMbjK5SXIuei3895WQoXtvGTtniqHCsQXfyA4PJXhuLI95 PgnxcMg+La8VHXOeqjZm95eFLQyoaoQWOZyZfZV7WCHFFB1RvQR10EOF98cYLaNu 21MaaL0ZDMM/+HaViIl6mltEHz8616sFnqcKLGlCrizjlJ2VwG7BXerVXb7pdWpV SQsCIl+7DAGMoWEfAOAEzGvNaAcdRqyPGWDKOngnGCY/WFkCM/plAACjCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYDy8w3q/bXJGvkzwMA77saRBM+MB8GA1UdIwQY MBaAFM8ty+WA6ULyEKJ4cbVlDIwpBjhRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kODcxM2UtZDQ5OS00NTFjLTg4Y2It NWQ0OTM2OGRkMmZmLzEvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9kODcxM2UtZDQ5OS00NTFjLTg4Y2ItNWQ0OTM2OGRkMmZm LzEvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqFj1sXq AXJ4kmMFbngAUQr62j2vv/aGnhG7CnSpeFkvTO2KsjIifkQIcwsf3+InzreNF3yR K+75QsiBRwuvPDRhlxX6qAbZUU/hFBdDxL3Y2QbvKVpnT8VkxdiUwayZPxMuWffK jxMzeKMpLSZJGlgJFzpc2LhL9zooGkWXwF3t6/z3zp+gCv6OhK1f5Iu3gArA2WgA AYGbi1mb1sdhD/gGOzkBOOxVPczS/MvTwV+ly+XubucwE/x2BIthvGBotVFz44V6 2pktd2NPVcutAO82zviRSzwAFPw5vD7YikoSEYJWbBkcbMs5IqNUtz0+j4gHg5Qe HlFl8UTvvKhVTA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:12 2025 by rpki-client