This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft File: Zur1u0vnZQbp7F5pTYtYUKmOciM.mft (raw, json) Hash identifier: DH060Nz+S448TNjXyprdtQBhIWumBa//drR38PoL5zw= Subject key identifier: 91:CE:9F:B1:F2:88:31:C8:7F:18:CC:38:1D:00:14:2F:94:75:AA:F8 Authority key identifier: 66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23 Certificate issuer: /CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223 Certificate serial: 019AF276E4E7E7D322D5B9D1D94AD32C3506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft Manifest number: 0DCE Signing time: Sat 06 Dec 2025 07:01:09 +0000 Manifest this update: Sat 06 Dec 2025 07:01:09 +0000 Manifest next update: Sun 07 Dec 2025 07:01:09 +0000 Files and hashes: 1: Zur1u0vnZQbp7F5pTYtYUKmOciM.crl (hash: /POXWVZCiaBrQ2jgxEo1pcjhkbfga+EqViI34QzeCUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e4:e7:e7:d3:22:d5:b9:d1:d9:4a:d3:2c:35:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223 Validity Not Before: Dec 6 07:01:09 2025 GMT Not After : Dec 7 07:01:09 2025 GMT Subject: CN=91ce9fb1f28831c87f18cc381d00142f9475aaf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0f:93:8a:13:bf:6b:5c:5b:4b:ae:32:c2:28: 83:f6:d9:a1:03:ac:0b:cb:87:57:92:87:45:7c:a7: 71:5f:f5:76:d1:59:48:ff:78:76:21:a3:41:91:67: c0:bf:18:51:25:8f:9e:47:de:3b:f8:96:b0:79:d5: 9d:2c:06:8d:bd:37:70:fe:d7:68:2e:7d:8a:ba:0a: 2e:81:98:e3:9e:46:85:95:78:8d:4b:72:89:16:40: ea:b2:9f:b2:1a:1f:e8:96:35:80:4d:83:ed:16:b1: 5e:8e:ea:00:0a:41:33:4a:ff:5d:e1:ff:9f:57:df: cd:be:56:e3:98:d7:08:3d:41:d5:3d:df:32:d4:bb: 4e:3d:a2:6a:81:9d:95:5e:c0:c5:25:1a:36:ca:77: 47:83:c0:3b:4b:46:31:ab:4b:d5:3a:73:71:1e:85: c2:3b:d8:4e:1c:c8:19:dc:47:a0:ec:83:ef:81:4c: cd:d4:e5:88:7d:70:5b:4f:7c:1d:81:52:f5:38:f2: 75:fc:63:1a:2a:1c:03:69:c3:a4:94:d1:ff:4e:a5: 86:cb:58:8c:d6:35:53:4e:6a:12:3b:98:8c:0a:b5: 20:8d:77:7a:fd:e8:10:f7:7a:43:22:32:f8:95:80: 07:d6:24:8d:98:f7:98:fb:04:21:b5:9d:a1:15:c3: a1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CE:9F:B1:F2:88:31:C8:7F:18:CC:38:1D:00:14:2F:94:75:AA:F8 X509v3 Authority Key Identifier: keyid:66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e6:a6:d5:b0:61:2d:3f:15:5a:c7:50:6d:8a:d8:a5:37:02: 52:e6:f1:b0:f3:9a:2e:1a:d9:4e:a6:ad:47:4c:76:ef:5e:78: 73:1c:83:11:ae:31:c4:eb:26:e5:d5:b7:a1:2b:ff:73:b7:cc: 02:e4:a3:f0:85:5f:23:5c:00:7b:24:6a:d3:fc:93:4b:cb:8e: ae:9e:76:d9:39:16:96:6f:9a:e0:63:4f:34:0d:e2:26:a7:72: 65:0f:d6:c2:82:aa:d2:e8:6e:28:f8:8c:17:df:ea:c3:03:65: 26:76:44:dc:db:07:5b:90:ef:64:e0:39:61:3f:c5:77:5d:29: 2e:9e:5b:aa:d2:d6:11:ef:2c:62:51:af:fe:22:2c:56:0c:d5: 25:56:25:57:a5:e1:91:c1:10:1e:55:f8:3a:f9:b5:fd:25:7c: a5:c7:73:ab:c5:0f:1e:98:78:fe:38:47:c9:ab:bc:d7:c4:65: c3:c0:b5:8c:f5:94:e8:17:f5:6e:f1:11:bc:05:68:76:85:dc: 12:2a:5e:16:19:bb:c7:2b:a0:fc:ce:0e:a0:4f:7d:fd:af:94: 36:a0:0a:bf:35:e0:cf:25:38:db:ca:bd:c2:a7:fc:cc:e9:9a: 13:65:d9:0b:44:27:fa:41:b9:21:63:12:08:5a:ca:fd:e5:da: 08:18:8b:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduTn59Mi1bnR2UrTLDUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWFmNWJiNGJlNzY1MDZlOWVjNWU2OTRkOGI1ODUwYTk4 ZTcyMjMwHhcNMjUxMjA2MDcwMTA5WhcNMjUxMjA3MDcwMTA5WjAzMTEwLwYDVQQD Eyg5MWNlOWZiMWYyODgzMWM4N2YxOGNjMzgxZDAwMTQyZjk0NzVhYWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA+TihO/a1xbS64ywiiD9tmhA6wL y4dXkodFfKdxX/V20VlI/3h2IaNBkWfAvxhRJY+eR947+JawedWdLAaNvTdw/tdo Ln2KugougZjjnkaFlXiNS3KJFkDqsp+yGh/oljWATYPtFrFejuoACkEzSv9d4f+f V9/NvlbjmNcIPUHVPd8y1LtOPaJqgZ2VXsDFJRo2yndHg8A7S0Yxq0vVOnNxHoXC O9hOHMgZ3Eeg7IPvgUzN1OWIfXBbT3wdgVL1OPJ1/GMaKhwDacOklNH/TqWGy1iM 1jVTTmoSO5iMCrUgjXd6/egQ93pDIjL4lYAH1iSNmPeY+wQhtZ2hFcOhiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHOn7HyiDHIfxjMOB0AFC+Udar4MB8GA1UdIwQY MBaAFGbq9btL52UG6exeaU2LWFCpjnIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iYjYxMGQtNmQ0Zi00NmFlLWIwZDgt OWExZjgyZTBkYmY1LzEvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iYjYxMGQtNmQ0Zi00NmFlLWIwZDgtOWExZjgyZTBkYmY1 LzEvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuam1bBh LT8VWsdQbYrYpTcCUubxsPOaLhrZTqatR0x27154cxyDEa4xxOsm5dW3oSv/c7fM AuSj8IVfI1wAeyRq0/yTS8uOrp522TkWlm+a4GNPNA3iJqdyZQ/WwoKq0uhuKPiM F9/qwwNlJnZE3NsHW5DvZOA5YT/Fd10pLp5bqtLWEe8sYlGv/iIsVgzVJVYlV6Xh kcEQHlX4Ovm1/SV8pcdzq8UPHph4/jhHyau818Rlw8C1jPWU6Bf1bvERvAVodoXc EipeFhm7xyug/M4OoE99/a+UNqAKvzXgzyU428q9wqf8zOmaE2XZC0Qn+kG5IWMS CFrK/eXaCBiLZg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:56 2025 by rpki-client