This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json) Hash identifier: fsHm3Zg1m4BBJyIQo+2N669B+H/yITnamCUVAXeZSR4= Subject key identifier: C5:FA:7C:2E:E6:6C:23:46:50:3F:AE:43:74:1C:59:9E:73:E4:D3:D4 Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a Certificate serial: 019AF209237E43CC97D7D694DB84DBD9D872 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft Manifest number: 0EA4 Signing time: Sat 06 Dec 2025 05:01:16 +0000 Manifest this update: Sat 06 Dec 2025 05:01:16 +0000 Manifest next update: Sun 07 Dec 2025 05:01:16 +0000 Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: D7/WqU0mS77vp7TpzZwDeEujNkxOhLxV6kW5fj3vqwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:23:7e:43:cc:97:d7:d6:94:db:84:db:d9:d8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a Validity Not Before: Dec 6 05:01:16 2025 GMT Not After : Dec 7 05:01:16 2025 GMT Subject: CN=c5fa7c2ee66c2346503fae43741c599e73e4d3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:70:8d:68:12:28:6d:44:e9:c1:1b:3f:9a: c7:ea:1d:d6:45:69:11:ad:cc:ae:93:8f:8d:e4:ec: fd:6a:76:54:d6:3e:da:08:0a:19:42:fe:90:c4:5c: 1c:1d:db:d1:e4:8c:cb:86:6e:1a:e1:ba:02:a3:2c: 8b:fe:80:82:78:40:1b:20:85:89:b9:3f:d6:48:41: 4e:c7:7b:66:77:38:ac:11:d5:6c:b1:08:05:dd:51: f1:53:9d:84:2f:4f:7f:a7:f2:23:3e:c8:fb:06:b6: 77:6f:57:2e:21:ed:5d:6b:b8:00:c0:0a:4b:95:8b: dc:92:bb:cf:a8:9a:f7:2c:7a:f0:54:fc:4e:5c:92: 25:68:65:f7:0c:92:8b:0b:2f:ae:b3:bf:f6:46:02: b0:53:b0:b1:fe:af:45:58:7a:b4:69:dd:f1:a7:af: d1:e6:f1:2b:2d:72:97:84:b3:7f:a5:d0:34:6b:60: e1:30:71:a9:42:72:d0:24:43:9f:6d:87:ef:6d:37: a4:11:10:20:56:34:cd:15:8f:81:d2:ce:ec:e2:9d: bd:27:64:be:55:c3:d8:7e:d8:6a:5b:ef:1e:58:1f: e7:64:f8:60:94:f9:cc:91:45:2e:1e:9a:59:10:c7: b7:4d:5e:d4:00:9e:a1:44:70:ee:7a:7f:c1:44:2d: 9b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FA:7C:2E:E6:6C:23:46:50:3F:AE:43:74:1C:59:9E:73:E4:D3:D4 X509v3 Authority Key Identifier: keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:68:1f:63:c9:75:78:14:d5:7a:2c:cc:97:5e:95:3b:6a:c9: d4:73:87:7d:a4:ae:65:ca:14:68:4f:dd:58:a5:2c:25:1c:d0: b5:cb:6a:02:e0:5a:ba:9d:01:ea:86:57:c5:9e:1d:dc:7c:86: 86:85:8c:48:c3:d3:ad:3d:01:44:31:f5:b1:73:08:f0:ac:7e: 45:1e:fe:a2:e8:ab:d1:0c:a4:f2:b3:14:9a:39:69:c3:19:92: 60:a6:98:d0:09:96:95:12:e2:97:9a:82:14:61:51:d9:10:b3: 52:93:06:ce:ef:b0:30:7b:5b:ce:1f:5e:66:44:d4:60:d9:98: c3:44:04:0d:02:5d:01:86:17:2c:0e:8c:a5:d1:d7:4d:de:16: 7c:d7:6e:c0:29:ff:50:b0:2e:be:99:e4:61:7a:e9:e7:7a:af: 84:56:ee:11:01:8e:09:3b:86:4b:ef:ec:79:19:63:3e:39:1f: 5f:6b:bd:15:53:85:00:4f:47:28:e0:68:f9:7e:bc:70:89:94: cb:c3:93:7e:84:b4:a9:52:a6:95:07:36:03:9e:67:c1:3b:69: fd:e1:e1:3c:2f:9e:ab:70:aa:b0:42:e6:8c:d5:e1:89:11:9a: d4:6b:f4:fb:a2:e9:d5:4c:b0:49:28:92:45:35:2b:f1:a6:b8: 71:3f:e2:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSN+Q8yX19aU24Tb2dhyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZjVkZGM0OWI3NWVhODRkZjQ1YWUxMTRjNDMyMWQ0NmQ1 YWNkNGEwHhcNMjUxMjA2MDUwMTE2WhcNMjUxMjA3MDUwMTE2WjAzMTEwLwYDVQQD EyhjNWZhN2MyZWU2NmMyMzQ2NTAzZmFlNDM3NDFjNTk5ZTczZTRkM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouBwjWgSKG1E6cEbP5rH6h3WRWkR rcyuk4+N5Oz9anZU1j7aCAoZQv6QxFwcHdvR5IzLhm4a4boCoyyL/oCCeEAbIIWJ uT/WSEFOx3tmdzisEdVssQgF3VHxU52EL09/p/IjPsj7BrZ3b1cuIe1da7gAwApL lYvckrvPqJr3LHrwVPxOXJIlaGX3DJKLCy+us7/2RgKwU7Cx/q9FWHq0ad3xp6/R 5vErLXKXhLN/pdA0a2DhMHGpQnLQJEOfbYfvbTekERAgVjTNFY+B0s7s4p29J2S+ VcPYfthqW+8eWB/nZPhglPnMkUUuHppZEMe3TV7UAJ6hRHDuen/BRC2bAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMX6fC7mbCNGUD+uQ3QcWZ5z5NPUMB8GA1UdIwQY MBaAFM/13cSbdeqE30WuEUxDIdRtWs1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYt MTc3OThiMmRhYWM0LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYtMTc3OThiMmRhYWM0 LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2gfY8l1 eBTVeizMl16VO2rJ1HOHfaSuZcoUaE/dWKUsJRzQtctqAuBaup0B6oZXxZ4d3HyG hoWMSMPTrT0BRDH1sXMI8Kx+RR7+ouir0Qyk8rMUmjlpwxmSYKaY0AmWlRLil5qC FGFR2RCzUpMGzu+wMHtbzh9eZkTUYNmYw0QEDQJdAYYXLA6MpdHXTd4WfNduwCn/ ULAuvpnkYXrp53qvhFbuEQGOCTuGS+/seRljPjkfX2u9FVOFAE9HKOBo+X68cImU y8OTfoS0qVKmlQc2A55nwTtp/eHhPC+eq3CqsELmjNXhiRGa1Gv0+6Lp1UywSSiS RTUr8aa4cT/iEw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:52 2025 by rpki-client