This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json) Hash identifier: 9SW6zopJMTdKgW19kiVW30+QCNtkD62YMOhoTAwCs38= Subject key identifier: B0:B0:27:D0:91:52:03:22:4A:45:36:52:91:DD:03:7E:46:FE:7A:4A Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51 Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851 Certificate serial: 019B3C7E5BDB6E7398CF38732C9921CE1EF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 16:01:12 +0000 Manifest this update: Sat 20 Dec 2025 16:01:12 +0000 Manifest next update: Sun 21 Dec 2025 16:01:12 +0000 Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: bXrXvqKnbDScus/vduxmGvYTkc3Z4ASxkflmcWMyTEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:5b:db:6e:73:98:cf:38:73:2c:99:21:ce:1e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851 Validity Not Before: Dec 20 16:01:12 2025 GMT Not After : Dec 21 16:01:12 2025 GMT Subject: CN=b0b027d0915203224a45365291dd037e46fe7a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:78:f5:1c:19:10:a1:b1:12:51:11:36:f5:24: e2:ec:b8:69:e3:46:0d:79:23:5e:1a:d2:9f:ff:17: a0:ab:aa:24:dd:28:09:c8:1a:85:97:9d:ff:cb:82: 02:ff:03:19:83:20:63:07:1f:a8:4c:10:9b:41:0f: 9c:ce:3d:28:17:dc:57:28:22:d0:ee:05:b7:9b:89: 2c:bf:d7:9c:c6:b7:25:9a:cb:c2:79:91:a0:b4:5c: 95:da:23:7e:e5:af:6d:46:86:82:18:29:c7:66:d0: 19:4a:ce:2c:dc:6b:bd:40:33:19:bf:f1:13:ed:d9: e0:4e:42:0c:de:a8:67:c0:30:7b:84:a3:e2:5d:d0: 0f:b3:3d:96:2d:2c:29:58:17:d9:72:4e:37:8a:92: a4:44:c0:3b:7d:7e:1e:a3:4a:eb:78:2a:93:5e:dc: b6:84:9f:5e:1d:bd:8a:39:49:fe:aa:0e:2d:f8:d3: 4d:76:ad:c0:ed:50:3b:1a:1d:15:16:4e:68:26:f2: 27:20:3b:4d:19:e6:50:c8:3c:9c:69:7b:75:d9:43: 95:e0:08:58:bd:f1:63:b2:8c:7d:1d:72:a0:13:f4: 68:a0:38:9c:db:9b:13:cd:66:9a:36:e8:bb:16:c7: 87:2f:71:4c:ed:0f:0e:a0:8f:d2:53:95:5d:b1:5e: 67:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B0:27:D0:91:52:03:22:4A:45:36:52:91:DD:03:7E:46:FE:7A:4A X509v3 Authority Key Identifier: keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:62:a0:31:a8:a3:a8:eb:a6:3d:9d:16:17:7e:d7:eb:08:ec: f1:fd:82:ba:8b:5a:3e:ae:c1:d6:3b:43:77:e0:5b:d7:54:78: a6:9c:d2:73:2c:80:0d:2d:68:7f:d9:66:b2:d4:06:7b:3a:9b: b3:b8:ee:52:50:02:0f:9e:7f:d4:32:38:51:cc:2f:02:62:b2: ee:d1:c8:c5:5e:85:43:9c:30:af:c9:8c:5d:ba:99:ea:05:89: b5:15:16:40:07:1e:7f:bd:f0:0c:fa:9d:84:fa:3b:6b:13:4c: 3c:7b:d1:35:a0:a0:17:3b:48:1b:c3:2a:a5:24:ce:ce:10:93: 6a:53:3a:d2:16:75:97:54:7f:54:7e:2a:4f:2f:5f:f5:50:b5: 49:5d:6c:9b:67:39:ac:57:ed:5f:30:3b:7b:87:0a:91:fa:3d: 94:ce:31:1e:d2:79:aa:13:c2:2c:8a:92:2b:f6:7a:d2:25:27: f2:8a:4f:4b:0a:46:2f:d9:ca:1d:3a:91:9e:d6:68:ba:8b:4e: 28:bc:ab:8c:b7:7c:e5:1f:e8:14:2f:fb:a7:2f:ae:7f:71:bc: d4:83:c2:81:89:f3:1c:70:22:dd:d0:ac:73:b5:a7:ae:8e:11: fc:8c:86:ce:fd:98:32:3a:bb:a1:c8:ac:12:4e:e9:8c:fb:dc: 6b:24:d4:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8flvbbnOYzzhzLJkhzh7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmRjYmU1ODBlOTQyZjIxMGEyNzg3MWI1NjUwYzhjMjkw NjM4NTEwHhcNMjUxMjIwMTYwMTEyWhcNMjUxMjIxMTYwMTEyWjAzMTEwLwYDVQQD EyhiMGIwMjdkMDkxNTIwMzIyNGE0NTM2NTI5MWRkMDM3ZTQ2ZmU3YTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHj1HBkQobESURE29STi7Lhp40YN eSNeGtKf/xegq6ok3SgJyBqFl53/y4IC/wMZgyBjBx+oTBCbQQ+czj0oF9xXKCLQ 7gW3m4ksv9ecxrclmsvCeZGgtFyV2iN+5a9tRoaCGCnHZtAZSs4s3Gu9QDMZv/ET 7dngTkIM3qhnwDB7hKPiXdAPsz2WLSwpWBfZck43ipKkRMA7fX4eo0rreCqTXty2 hJ9eHb2KOUn+qg4t+NNNdq3A7VA7Gh0VFk5oJvInIDtNGeZQyDycaXt12UOV4AhY vfFjsox9HXKgE/RooDic25sTzWaaNui7FseHL3FM7Q8OoI/SU5VdsV5n9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCwJ9CRUgMiSkU2UpHdA35G/npKMB8GA1UdIwQY MBaAFM8ty+WA6ULyEKJ4cbVlDIwpBjhRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kODcxM2UtZDQ5OS00NTFjLTg4Y2It NWQ0OTM2OGRkMmZmLzEvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9kODcxM2UtZDQ5OS00NTFjLTg4Y2ItNWQ0OTM2OGRkMmZm LzEvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmKgMaij qOumPZ0WF37X6wjs8f2CuotaPq7B1jtDd+Bb11R4ppzScyyADS1of9lmstQGezqb s7juUlACD55/1DI4UcwvAmKy7tHIxV6FQ5wwr8mMXbqZ6gWJtRUWQAcef73wDPqd hPo7axNMPHvRNaCgFztIG8MqpSTOzhCTalM60hZ1l1R/VH4qTy9f9VC1SV1sm2c5 rFftXzA7e4cKkfo9lM4xHtJ5qhPCLIqSK/Z60iUn8opPSwpGL9nKHTqRntZouotO KLyrjLd85R/oFC/7py+uf3G81IPCgYnzHHAi3dCsc7Wnro4R/IyGzv2YMjq7ocis Ek7pjPvcayTUIg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:50:06 2025 by rpki-client