This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft File: Zz5yIBSrbED084ns_Kyu_7tjBM8.mft (raw, json) Hash identifier: cdoTRCNONtepY3vLho9eXGj9SFFrbv7G2daONJeLWV4= Subject key identifier: DD:32:8C:32:99:60:AF:31:CD:34:A0:31:09:B2:6E:47:7E:7C:38:31 Authority key identifier: 67:3E:72:20:14:AB:6C:40:F4:F3:89:EC:FC:AC:AE:FF:BB:63:04:CF Certificate issuer: /CN=673e722014ab6c40f4f389ecfcacaeffbb6304cf Certificate serial: 019AF12DB783B216B248492CC8705E8939C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft Manifest number: 0893 Signing time: Sat 06 Dec 2025 01:01:36 +0000 Manifest this update: Sat 06 Dec 2025 01:01:36 +0000 Manifest next update: Sun 07 Dec 2025 01:01:36 +0000 Files and hashes: 1: Zz5yIBSrbED084ns_Kyu_7tjBM8.crl (hash: W39hW+osTKN1GviZpyxpd5SKproDtJgC7sAFtRo07F0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b7:83:b2:16:b2:48:49:2c:c8:70:5e:89:39:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673e722014ab6c40f4f389ecfcacaeffbb6304cf Validity Not Before: Dec 6 01:01:36 2025 GMT Not After : Dec 7 01:01:36 2025 GMT Subject: CN=dd328c329960af31cd34a03109b26e477e7c3831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:e5:39:59:92:81:c6:00:8d:d5:1c:52:ba: 54:8d:99:20:37:3e:36:8a:b8:60:e9:50:fa:c0:a2: c9:85:76:11:98:0a:fe:e2:ac:6c:0d:08:4e:63:8d: 53:e5:b2:0d:04:72:7d:93:81:32:3d:ae:a8:b2:33: ea:82:6d:fe:3d:fe:eb:99:09:21:2d:ba:15:fb:fd: 84:0d:30:80:2c:d2:8a:d1:dd:87:2d:4a:64:ec:68: 4c:85:ee:f9:f9:39:87:26:0c:27:17:ea:06:9f:2c: 2a:f9:16:e6:6e:d9:78:d7:61:7c:b2:ea:c2:d0:8b: 48:b2:fa:c4:59:4a:0d:00:4c:28:72:6d:77:53:70: b1:87:eb:df:2c:c9:8a:5e:02:90:42:5a:46:62:6f: b7:aa:c0:d6:d7:d7:22:57:0d:50:a1:67:99:9d:91: fb:91:bf:19:51:56:c5:63:bc:8a:47:4e:ff:f9:a1: 93:76:e2:3f:5d:f7:b8:dd:86:74:ed:7d:5f:24:66: 93:2d:9c:ed:c6:19:07:10:a8:c6:0d:4d:49:f8:ee: 80:d8:b2:cc:4a:3d:78:8b:f2:2d:4b:18:49:28:85: a4:f3:56:15:21:41:b4:6d:62:3c:4d:49:31:54:df: c6:e6:ad:b8:11:e9:2c:a2:58:97:1a:6c:0f:d3:23: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:32:8C:32:99:60:AF:31:CD:34:A0:31:09:B2:6E:47:7E:7C:38:31 X509v3 Authority Key Identifier: keyid:67:3E:72:20:14:AB:6C:40:F4:F3:89:EC:FC:AC:AE:FF:BB:63:04:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz5yIBSrbED084ns_Kyu_7tjBM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9188a4-7c7b-4e19-84ce-5b4905a28d83/1/Zz5yIBSrbED084ns_Kyu_7tjBM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:5b:52:67:c5:fb:97:36:14:28:10:ca:d8:3d:c9:53:5f:00: 16:cf:d0:6d:55:fa:2f:69:eb:b2:37:a2:70:03:19:58:95:77: 97:b6:8e:a0:7e:5a:db:ac:09:a6:a3:48:14:ec:69:be:25:3b: bf:2a:b7:de:8d:7d:52:bb:11:90:09:15:0c:d2:72:91:a5:17: 2f:bf:ba:65:be:22:b9:00:0d:52:68:3b:0d:e6:c0:b1:f4:ae: bd:cf:6f:bc:24:a7:68:37:21:a2:22:a5:27:e6:d4:2d:e5:06: 47:b8:a0:ec:9d:83:09:86:fd:3f:c8:24:4f:2d:55:6b:c2:79: 43:86:2c:85:15:42:63:24:42:27:4f:6d:b0:b0:5b:44:9f:9b: ea:69:b1:59:45:04:52:f3:0d:73:91:b9:18:d1:4c:3b:2c:76: 16:e2:fd:87:50:f9:fc:c6:9e:fc:5f:8e:76:b1:c3:15:a6:48: 5a:9c:87:96:23:c7:25:3c:4d:ab:3a:95:ff:84:78:22:c0:4f: d4:45:ac:3a:a0:db:2f:0d:24:d3:15:26:10:2d:75:44:ff:a4: 83:a8:7e:a5:ca:be:16:eb:4e:fb:1e:1e:4b:27:9d:b1:c7:c6: 0b:29:0b:cf:c3:57:ac:5e:b5:ec:f9:fc:cb:82:00:3e:0b:68: 12:73:24:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbeDshaySEksyHBeiTnIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3M2U3MjIwMTRhYjZjNDBmNGYzODllY2ZjYWNhZWZmYmI2 MzA0Y2YwHhcNMjUxMjA2MDEwMTM2WhcNMjUxMjA3MDEwMTM2WjAzMTEwLwYDVQQD EyhkZDMyOGMzMjk5NjBhZjMxY2QzNGEwMzEwOWIyNmU0NzdlN2MzODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquzlOVmSgcYAjdUcUrpUjZkgNz42 irhg6VD6wKLJhXYRmAr+4qxsDQhOY41T5bINBHJ9k4EyPa6osjPqgm3+Pf7rmQkh LboV+/2EDTCALNKK0d2HLUpk7GhMhe75+TmHJgwnF+oGnywq+Rbmbtl412F8surC 0ItIsvrEWUoNAEwocm13U3Cxh+vfLMmKXgKQQlpGYm+3qsDW19ciVw1QoWeZnZH7 kb8ZUVbFY7yKR07/+aGTduI/Xfe43YZ07X1fJGaTLZztxhkHEKjGDU1J+O6A2LLM Sj14i/ItSxhJKIWk81YVIUG0bWI8TUkxVN/G5q24EeksoliXGmwP0yOf3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0yjDKZYK8xzTSgMQmybkd+fDgxMB8GA1UdIwQY MBaAFGc+ciAUq2xA9POJ7Pysrv+7YwTPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWno1eUlCU3JiRUQwODRuc19LeXVfN3RqQk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85MTg4YTQtN2M3Yi00ZTE5LTg0Y2Ut NWI0OTA1YTI4ZDgzLzEvWno1eUlCU3JiRUQwODRuc19LeXVfN3RqQk04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS85MTg4YTQtN2M3Yi00ZTE5LTg0Y2UtNWI0OTA1YTI4ZDgz LzEvWno1eUlCU3JiRUQwODRuc19LeXVfN3RqQk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFtSZ8X7 lzYUKBDK2D3JU18AFs/QbVX6L2nrsjeicAMZWJV3l7aOoH5a26wJpqNIFOxpviU7 vyq33o19UrsRkAkVDNJykaUXL7+6Zb4iuQANUmg7DebAsfSuvc9vvCSnaDchoiKl J+bULeUGR7ig7J2DCYb9P8gkTy1Va8J5Q4YshRVCYyRCJ09tsLBbRJ+b6mmxWUUE UvMNc5G5GNFMOyx2FuL9h1D5/Mae/F+OdrHDFaZIWpyHliPHJTxNqzqV/4R4IsBP 1EWsOqDbLw0k0xUmEC11RP+kg6h+pcq+FutO+x4eSyedscfGCykLz8NXrF617Pn8 y4IAPgtoEnMklQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:34 2025 by rpki-client