This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft File: ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json) Hash identifier: ME/zoaMQHcfbkRtMkfYzQaY0K+lY4Y6LT0F85U0UBWo= Subject key identifier: 74:10:3D:D9:3D:B1:E2:41:9A:69:86:E0:20:68:18:38:17:95:58:E2 Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5 Certificate issuer: /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5 Certificate serial: 019B318CB64F9BDEC35A81C1A0C9CF66A08B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft Manifest number: 0DCF Signing time: Thu 18 Dec 2025 13:01:03 +0000 Manifest this update: Thu 18 Dec 2025 13:01:03 +0000 Manifest next update: Fri 19 Dec 2025 13:01:03 +0000 Files and hashes: 1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: pRce+/+i+tjIQl2lmR/pSL89k/wDpTYrvFvTxS2tIhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:b6:4f:9b:de:c3:5a:81:c1:a0:c9:cf:66:a0:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5 Validity Not Before: Dec 18 13:01:03 2025 GMT Not After : Dec 19 13:01:03 2025 GMT Subject: CN=74103dd93db1e2419a6986e020681838179558e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fc:46:ae:b4:93:7e:19:4d:9e:fd:05:4e:17: 8a:c1:94:f2:c9:31:fb:fe:47:23:e6:7c:24:6c:82: 6b:5e:0c:7e:1a:3b:15:f8:f1:4e:56:a4:80:94:b4: f2:34:85:c1:0f:9a:be:c7:10:54:93:0f:b6:f2:6a: 28:af:6e:28:1b:87:44:85:91:4e:31:59:b8:8d:2d: 06:3b:26:74:1b:41:d6:69:fc:c2:88:ec:aa:7e:fe: 6d:fe:56:b6:83:44:0d:12:ae:bf:f7:45:80:05:e9: 24:a4:1e:c8:a9:05:b6:44:45:ea:71:81:85:6b:87: 7e:59:db:f2:41:1a:81:05:f3:57:4a:00:ef:ba:9d: aa:8c:09:c8:fe:25:65:bf:dd:e7:03:8a:d8:ed:d2: 39:2e:1f:ed:36:53:2d:58:c0:fb:c2:ca:de:7b:02: 8f:cb:13:ee:cf:5d:18:bc:50:d0:7f:b8:a3:e0:48: bd:34:ec:cb:cb:82:0d:fd:18:fe:a0:87:94:21:b5: 01:ca:59:eb:a2:c6:ff:3c:01:c7:c7:8d:c4:a7:79: c1:17:cc:44:4c:41:55:10:3d:d5:77:c0:3b:ac:fb: b4:ff:14:43:16:8f:d5:57:49:dc:42:87:1f:4b:53: 91:bd:b6:66:a0:5e:bd:c5:7f:4f:e9:cd:48:68:45: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:10:3D:D9:3D:B1:E2:41:9A:69:86:E0:20:68:18:38:17:95:58:E2 X509v3 Authority Key Identifier: keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:81:28:11:3d:a4:c8:de:01:b0:ef:c8:75:29:d8:9e:0f:b7: 0e:4e:03:68:19:7a:ec:b9:16:11:7e:85:04:7e:a5:df:c0:5d: 52:5e:c0:18:24:71:74:3d:87:fb:59:93:02:ff:2e:b2:5e:80: 1b:cf:03:2a:04:b0:1f:75:47:c6:47:6c:fe:9f:22:29:3a:9c: ba:23:1e:3a:dd:c5:71:68:9e:cf:78:cf:c9:f2:74:ce:93:3f: 61:f8:40:7b:d6:59:1a:c3:b0:bd:8c:f3:ae:9e:df:40:5c:71: 0d:78:54:9b:43:b1:c2:f7:34:ac:ec:b3:6e:ea:3b:d2:d5:f7: 62:3b:2b:8d:68:5b:6e:89:22:41:5d:ba:49:01:b7:13:a4:49: c0:d4:02:09:96:52:99:fd:6e:f4:fa:c2:b8:6b:d8:4b:96:f0: e3:3e:7b:b2:ab:51:22:c4:bd:8b:15:86:78:03:63:4a:85:56: d3:31:2a:b8:d4:e9:2d:f7:08:33:1f:80:78:6f:6e:ce:ab:61: b4:b5:ef:0a:97:56:1f:19:d6:93:68:93:b3:da:64:57:55:54: aa:cb:5f:92:84:d7:73:3f:15:84:f9:30:3b:bc:65:e0:56:3b: 95:9d:a0:15:9d:c4:31:70:2f:f4:c8:4e:b3:17:da:10:7f:60: 5d:02:7d:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjLZPm97DWoHBoMnPZqCLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MGJiNmQxYjJkMjdjYWUyNzU4NjVjNmQ1Y2NjN2Y4YTc1 N2I3ZjUwHhcNMjUxMjE4MTMwMTAzWhcNMjUxMjE5MTMwMTAzWjAzMTEwLwYDVQQD Eyg3NDEwM2RkOTNkYjFlMjQxOWE2OTg2ZTAyMDY4MTgzODE3OTU1OGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/xGrrSTfhlNnv0FTheKwZTyyTH7 /kcj5nwkbIJrXgx+GjsV+PFOVqSAlLTyNIXBD5q+xxBUkw+28moor24oG4dEhZFO MVm4jS0GOyZ0G0HWafzCiOyqfv5t/la2g0QNEq6/90WABekkpB7IqQW2REXqcYGF a4d+WdvyQRqBBfNXSgDvup2qjAnI/iVlv93nA4rY7dI5Lh/tNlMtWMD7wsreewKP yxPuz10YvFDQf7ij4Ei9NOzLy4IN/Rj+oIeUIbUBylnrosb/PAHHx43Ep3nBF8xE TEFVED3Vd8A7rPu0/xRDFo/VV0ncQocfS1ORvbZmoF69xX9P6c1IaEXjDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQQPdk9seJBmmmG4CBoGDgXlVjiMB8GA1UdIwQY MBaAFGQLttGy0nyuJ1hlxtXMx/inV7f1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81ZTNjMGYtZjhmNi00ZDNlLWI1MzEt OWY2ZWFiYzBlODQzLzEvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81ZTNjMGYtZjhmNi00ZDNlLWI1MzEtOWY2ZWFiYzBlODQz LzEvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYEoET2k yN4BsO/IdSnYng+3Dk4DaBl67LkWEX6FBH6l38BdUl7AGCRxdD2H+1mTAv8usl6A G88DKgSwH3VHxkds/p8iKTqcuiMeOt3FcWiez3jPyfJ0zpM/YfhAe9ZZGsOwvYzz rp7fQFxxDXhUm0Oxwvc0rOyzbuo70tX3YjsrjWhbbokiQV26SQG3E6RJwNQCCZZS mf1u9PrCuGvYS5bw4z57sqtRIsS9ixWGeANjSoVW0zEquNTpLfcIMx+AeG9uzqth tLXvCpdWHxnWk2iTs9pkV1VUqstfkoTXcz8VhPkwO7xl4FY7lZ2gFZ3EMXAv9MhO sxfaEH9gXQJ9Mg== -----END CERTIFICATE-----Generated at Thu Dec 18 21:51:35 2025 by rpki-client