This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft File: z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json) Hash identifier: rp8dtNqb/H+uqBckgKk1wj3txFGY3rAiougP6Ar9o3s= Subject key identifier: 12:F1:42:BB:77:7F:86:83:1F:68:5D:79:71:7A:E2:AA:59:15:34:E5 Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED Certificate issuer: /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed Certificate serial: 019AF31C60A7B1BE84A2561702E580DBB836 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft Manifest number: 1313 Signing time: Sat 06 Dec 2025 10:01:54 +0000 Manifest this update: Sat 06 Dec 2025 10:01:54 +0000 Manifest next update: Sun 07 Dec 2025 10:01:54 +0000 Files and hashes: 1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: Ntn6Ioq7DRdfsS8tM5k4H2/AiGW0lAMjcC1RYhZc6VA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:60:a7:b1:be:84:a2:56:17:02:e5:80:db:b8:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed Validity Not Before: Dec 6 10:01:54 2025 GMT Not After : Dec 7 10:01:54 2025 GMT Subject: CN=12f142bb777f86831f685d79717ae2aa591534e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:07:59:31:42:13:e2:03:ed:cd:42:59:d6:d1: 3a:42:ce:b8:ea:b6:58:6c:87:cd:f0:4a:d2:90:a4: 1d:a2:47:1f:35:98:d9:70:61:da:d8:24:8a:8a:f9: fa:6f:01:1c:a8:81:82:8f:ec:26:eb:b3:cd:69:f9: 75:fe:9d:a1:f2:e8:ce:c1:a0:53:ab:37:f9:df:e0: 59:e3:3a:54:7f:fb:7d:86:c9:ca:1b:75:fe:8d:f6: df:60:5c:c6:a3:14:64:f6:8d:29:5d:d6:ad:77:9b: 78:d3:2d:57:1e:86:b8:a6:41:30:bf:92:65:cb:37: 9c:51:7e:dc:d8:a3:50:b5:13:bf:0c:01:9b:91:51: 6e:39:c6:ef:13:b3:df:e8:90:4b:f1:ed:b2:d9:c8: a4:2a:b9:fb:8c:b4:77:7a:b8:33:ce:3c:df:98:59: df:4a:0c:24:9f:a1:0b:15:8e:5b:d4:39:cf:5f:78: 30:b2:81:07:2b:54:bf:4b:66:0f:b2:c5:5c:41:0c: 22:c3:9e:5a:4e:c8:6a:bd:eb:87:cd:fd:27:95:70: 8c:c6:8a:c3:ce:7b:59:1c:3a:bd:b8:0d:e0:40:65: eb:86:3b:0a:64:43:93:87:6c:7c:74:1b:93:cd:9c: b3:d9:d8:58:33:20:ae:31:ad:1d:e8:d1:62:8f:a0: e5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F1:42:BB:77:7F:86:83:1F:68:5D:79:71:7A:E2:AA:59:15:34:E5 X509v3 Authority Key Identifier: keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:fc:67:f2:87:da:7c:5b:41:aa:16:37:13:72:a4:75:14:d6: 2d:f0:e9:80:50:47:57:4a:ab:3a:fc:99:cf:b2:c9:e1:2e:c5: 23:5e:40:ac:ae:01:79:fe:54:7b:06:ee:0f:62:65:e4:4f:08: 48:12:9a:0d:c5:b5:65:1e:ac:d7:6c:04:2b:db:d2:2e:80:69: bf:ec:ba:b5:2e:19:7e:62:85:ca:6c:ca:58:fa:74:c9:70:5d: 73:5b:db:08:8c:b3:a3:0a:5d:bf:46:4e:a3:b8:8f:7d:57:97: 85:b4:37:1f:1a:4e:02:65:c5:a0:ce:9a:74:b3:ec:b6:d2:c5: 35:1e:57:5c:13:aa:99:ef:7e:3a:d1:6a:b7:d9:3d:c8:d2:df: 7b:6c:19:85:6f:1a:75:3d:af:f9:81:84:05:f6:99:96:ab:3c: da:c1:77:a4:57:66:bb:3a:16:96:e3:13:d5:b5:a9:e5:8b:53: 49:ed:6f:e6:7f:52:62:a0:ca:8a:5d:ff:84:f9:cd:b8:61:d5: b6:f0:fa:dd:8a:3f:b1:6e:6c:70:2b:a7:f8:d1:f0:75:3f:27: b0:25:0b:da:d2:11:24:53:02:4b:11:5e:54:e1:ec:07:b0:73: 53:b6:1f:ca:49:b6:ec:33:ff:6f:0c:af:1b:3e:6c:cb:3c:45: 2e:e3:9d:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGCnsb6EolYXAuWA27g2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZTAzNjczYjg4ZjA4YWY2MmZlNjUyYTE4ZjZmYTljODM0 YjU4ZWQwHhcNMjUxMjA2MTAwMTU0WhcNMjUxMjA3MTAwMTU0WjAzMTEwLwYDVQQD EygxMmYxNDJiYjc3N2Y4NjgzMWY2ODVkNzk3MTdhZTJhYTU5MTUzNGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAdZMUIT4gPtzUJZ1tE6Qs646rZY bIfN8ErSkKQdokcfNZjZcGHa2CSKivn6bwEcqIGCj+wm67PNafl1/p2h8ujOwaBT qzf53+BZ4zpUf/t9hsnKG3X+jfbfYFzGoxRk9o0pXdatd5t40y1XHoa4pkEwv5Jl yzecUX7c2KNQtRO/DAGbkVFuOcbvE7Pf6JBL8e2y2cikKrn7jLR3ergzzjzfmFnf Sgwkn6ELFY5b1DnPX3gwsoEHK1S/S2YPssVcQQwiw55aTshqveuHzf0nlXCMxorD zntZHDq9uA3gQGXrhjsKZEOTh2x8dBuTzZyz2dhYMyCuMa0d6NFij6DllQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLxQrt3f4aDH2hdeXF64qpZFTTlMB8GA1UdIwQY MBaAFM/gNnO4jwivYv5lKhj2+pyDS1jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1BMmM3aVBDSzlpX21VcUdQYjZuSU5MV08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mYmVlNjUtOGE4OC00ZDEzLTllYjct N2ExMmVlZGY4ZTVjLzEvei1BMmM3aVBDSzlpX21VcUdQYjZuSU5MV08wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mYmVlNjUtOGE4OC00ZDEzLTllYjctN2ExMmVlZGY4ZTVj LzEvei1BMmM3aVBDSzlpX21VcUdQYjZuSU5MV08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu/xn8ofa fFtBqhY3E3KkdRTWLfDpgFBHV0qrOvyZz7LJ4S7FI15ArK4Bef5UewbuD2Jl5E8I SBKaDcW1ZR6s12wEK9vSLoBpv+y6tS4ZfmKFymzKWPp0yXBdc1vbCIyzowpdv0ZO o7iPfVeXhbQ3HxpOAmXFoM6adLPsttLFNR5XXBOqme9+OtFqt9k9yNLfe2wZhW8a dT2v+YGEBfaZlqs82sF3pFdmuzoWluMT1bWp5YtTSe1v5n9SYqDKil3/hPnNuGHV tvD63Yo/sW5scCun+NHwdT8nsCUL2tIRJFMCSxFeVOHsB7BzU7Yfykm27DP/bwyv Gz5syzxFLuOdbg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:59 2025 by rpki-client