This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json) Hash identifier: DIkbON2ji1G00iIJz9AEBKajXulRWFSeNBV9u0tw2+E= Subject key identifier: 76:2A:D9:70:DC:D2:CC:B1:59:F0:89:92:3A:68:A7:10:92:4F:8F:3E Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0 Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0 Certificate serial: 019AF1D1A6E4C4493CAA8681EE3FDB636EEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft Manifest number: 1236 Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: LoW7j82rvfuz1vjetkc+bg1RS+xjD6h6vGZkavsbLyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a6:e4:c4:49:3c:aa:86:81:ee:3f:db:63:6e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0 Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=762ad970dcd2ccb159f089923a68a710924f8f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:65:a5:4b:2c:4f:3f:87:ae:1d:b5:7a:e5:10: 31:66:da:b0:eb:35:bf:07:dc:d5:00:a3:35:b2:95: ac:1d:42:67:d7:21:81:8a:bd:2b:f1:55:4b:ee:9a: 44:90:ae:41:81:55:d9:b2:45:b7:de:eb:55:53:57: 16:2e:a5:98:25:8c:c9:1f:59:75:3d:4c:ae:91:59: a5:59:69:46:95:15:40:fa:73:d1:ae:34:11:fa:3f: ca:21:53:51:ab:9d:14:fa:15:b8:5b:63:19:18:64: a7:c3:d0:f4:4a:f7:bc:c6:bd:ca:b0:89:e0:52:9a: ce:4c:e0:f3:1a:db:6d:74:45:b7:d5:42:ea:8b:fe: 29:02:b9:e1:eb:8b:b2:f6:94:13:09:cc:1a:f6:91: 26:cf:02:17:7c:55:57:bb:b8:bf:eb:f9:89:27:23: ad:f9:21:8f:a0:e3:0f:a6:a4:8f:58:5d:42:2f:85: d1:70:30:4d:0b:3d:8a:15:bb:93:f0:96:ad:d8:14: c9:f4:5d:ec:10:15:f6:15:cd:48:74:b9:19:ab:f9: ef:ce:95:ef:d8:69:69:6f:df:ef:6c:6f:b2:33:9a: 41:63:9d:9d:09:14:66:63:c4:c0:e4:9f:7e:80:5f: fa:51:f0:2d:e7:28:f6:ac:88:c9:d6:cb:2a:a2:2c: 94:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2A:D9:70:DC:D2:CC:B1:59:F0:89:92:3A:68:A7:10:92:4F:8F:3E X509v3 Authority Key Identifier: keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f5:29:f4:ef:d4:d7:f3:ee:a4:f1:92:ed:32:22:aa:f6:70: 42:52:cf:ab:82:88:66:58:bc:0c:79:0e:62:41:b2:9b:a8:85: ec:fe:05:a4:19:42:8b:f7:ef:6e:2f:3d:3e:cb:f0:4e:30:c3: 3c:23:2e:e3:ea:97:85:f0:6a:70:9e:af:02:7e:c6:7a:88:46: 2a:2b:77:4d:70:32:95:fe:6a:87:16:a6:b3:42:47:95:86:41: fe:a5:a8:b7:1e:e1:a6:d6:ab:54:d8:14:9b:33:7a:23:43:69: 28:f6:5b:f0:80:f2:a4:21:0d:64:6d:1c:d6:1d:36:02:f6:f3: 78:82:8f:81:11:0b:1e:5c:ac:00:65:4d:14:ae:67:43:71:80: 71:8a:ca:d2:36:7d:22:b6:f2:24:27:9f:36:f3:30:ce:da:b7: 05:c4:a9:2e:92:8c:f6:3b:a8:ac:af:a5:68:b5:57:ae:ec:a5: da:b6:34:82:f4:7e:7d:dd:ac:c5:9b:9c:a7:2f:0b:05:a2:25: 5b:71:a5:69:c5:1b:62:80:cc:6f:db:8c:1c:b8:7d:74:82:7c: 6b:d4:1d:fb:f6:c8:c2:ef:80:25:94:e3:7c:43:7a:47:bb:54: 12:8b:22:65:cc:ed:35:c2:5c:41:0e:a1:de:1f:52:f1:90:37: 76:1d:df:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0abkxEk8qoaB7j/bY27rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNmU5MmEzZWI4MGFjNjNlZTU3MDJjMGQ5N2I0ZTlmMGI4 MjMzZjAwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD Eyg3NjJhZDk3MGRjZDJjY2IxNTlmMDg5OTIzYTY4YTcxMDkyNGY4ZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmWlSyxPP4euHbV65RAxZtqw6zW/ B9zVAKM1spWsHUJn1yGBir0r8VVL7ppEkK5BgVXZskW33utVU1cWLqWYJYzJH1l1 PUyukVmlWWlGlRVA+nPRrjQR+j/KIVNRq50U+hW4W2MZGGSnw9D0Sve8xr3KsIng UprOTODzGtttdEW31ULqi/4pArnh64uy9pQTCcwa9pEmzwIXfFVXu7i/6/mJJyOt +SGPoOMPpqSPWF1CL4XRcDBNCz2KFbuT8Jat2BTJ9F3sEBX2Fc1IdLkZq/nvzpXv 2Glpb9/vbG+yM5pBY52dCRRmY8TA5J9+gF/6UfAt5yj2rIjJ1ssqoiyUZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYq2XDc0syxWfCJkjpopxCST48+MB8GA1UdIwQY MBaAFM1ukqPrgKxj7lcCwNl7Tp8LgjPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lN2RlZmItNWU0MS00YjI0LTg5MTUt NzViYzQ0NzkwMjlmLzEvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lN2RlZmItNWU0MS00YjI0LTg5MTUtNzViYzQ0NzkwMjlm LzEvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfUp9O/U 1/PupPGS7TIiqvZwQlLPq4KIZli8DHkOYkGym6iF7P4FpBlCi/fvbi89PsvwTjDD PCMu4+qXhfBqcJ6vAn7GeohGKit3TXAylf5qhxams0JHlYZB/qWotx7hptarVNgU mzN6I0NpKPZb8IDypCENZG0c1h02AvbzeIKPgRELHlysAGVNFK5nQ3GAcYrK0jZ9 IrbyJCefNvMwztq3BcSpLpKM9juorK+laLVXruyl2rY0gvR+fd2sxZucpy8LBaIl W3GlacUbYoDMb9uMHLh9dIJ8a9Qd+/bIwu+AJZTjfEN6R7tUEosiZcztNcJcQQ6h 3h9S8ZA3dh3fZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:05 2025 by rpki-client