This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft File: ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json) Hash identifier: Brxkm9czaJ1S4nKeHHWPbby4BA+kEIKFkUIpPNY+R4Y= Subject key identifier: 79:C1:B0:8C:7D:39:11:1E:AB:E9:8A:F9:97:3E:97:79:9C:49:D3:B8 Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5 Certificate issuer: /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5 Certificate serial: 019AF1D195122664F36C23D40A7F998A16F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft Manifest number: 0DAE Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: aZbdhnkkzzMee+c6jIyFP4GAXbv+a29nfsNrFS3ypxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:95:12:26:64:f3:6c:23:d4:0a:7f:99:8a:16:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5 Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=79c1b08c7d39111eabe98af9973e97799c49d3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:aa:95:0b:d3:fd:bc:d6:c1:bd:93:ea:51:36: 22:64:04:ea:51:d0:ff:36:68:9d:ce:41:ad:c2:3d: 29:9a:10:31:81:65:f0:93:53:ee:65:47:ed:16:8d: f4:93:bc:a4:4d:de:f4:d1:22:ec:65:df:cb:83:e8: 93:e4:9c:8a:62:04:97:91:70:a0:30:9a:3d:01:38: 86:50:22:a8:3c:b5:5a:50:c4:60:b3:d6:86:36:ca: d9:ce:6a:15:2d:6c:5e:66:f0:68:81:0a:b6:3a:f1: 11:1b:06:11:3e:12:c1:a6:84:81:11:7f:95:ca:0f: 78:0d:42:da:ba:f2:ae:80:2c:cc:c2:e5:8b:4b:0a: 7a:a0:4e:1b:2c:83:4b:00:54:97:cc:de:1e:3a:61: cb:8e:98:ea:b7:e5:7b:77:2a:de:b1:87:33:11:a4: 19:10:92:f5:3e:c8:3a:81:ea:3d:74:ff:d8:fc:c1: ba:6c:c5:58:e3:aa:69:a3:a0:02:84:6e:88:38:af: cb:e2:25:65:51:90:f8:08:5f:c6:85:71:67:7a:a6: 61:7b:6e:c5:8f:39:51:df:2e:e6:fc:62:7d:6e:bc: 67:cc:09:81:52:21:37:a0:2c:30:70:29:25:07:a6: 00:af:a3:81:1f:52:a8:2e:f5:9f:4c:2f:79:4f:16: e0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C1:B0:8C:7D:39:11:1E:AB:E9:8A:F9:97:3E:97:79:9C:49:D3:B8 X509v3 Authority Key Identifier: keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e3:3a:db:11:92:e6:35:b6:8b:c5:b9:5e:20:2a:25:87:cd: 09:8e:bf:b1:3e:c1:95:fa:25:20:ca:80:54:02:97:46:36:8d: 19:99:5d:e7:8a:04:40:49:c9:32:db:08:58:70:f8:d9:f4:f2: b2:74:65:36:29:d3:02:5c:49:b8:a4:56:56:44:b6:93:d6:bc: 8c:80:d3:29:b1:35:27:ee:b1:ed:be:be:60:73:65:b7:ff:15: 89:b7:0e:f2:c2:d8:d4:21:84:41:f6:6b:ea:d8:17:9a:05:19: 6b:25:00:2f:fd:38:48:20:66:1d:14:f4:de:82:cc:dc:38:7e: 53:54:24:5c:46:fc:c8:69:6b:f2:f7:f9:fa:3d:cf:9f:49:0c: d6:ff:70:07:fb:a4:7f:37:2d:32:19:5f:ad:f4:c0:5f:6e:98: 74:d2:12:be:3c:da:82:8a:27:37:f5:7b:97:7b:c1:4a:00:6b: 29:79:e1:8e:7a:c4:67:8b:c0:b3:d4:33:71:db:50:a0:3d:4c: b9:d2:c5:28:bf:a4:14:3e:56:55:ad:42:36:ec:ef:39:c0:7e: cc:5e:40:22:54:03:6e:fe:97:fc:f0:db:af:f3:d0:ab:4f:36: 6d:a6:e1:05:70:19:65:2e:40:ac:10:b8:de:45:e6:a9:64:b8: bc:19:0f:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZUSJmTzbCPUCn+Zihb1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MGJiNmQxYjJkMjdjYWUyNzU4NjVjNmQ1Y2NjN2Y4YTc1 N2I3ZjUwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD Eyg3OWMxYjA4YzdkMzkxMTFlYWJlOThhZjk5NzNlOTc3OTljNDlkM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaqVC9P9vNbBvZPqUTYiZATqUdD/ NmidzkGtwj0pmhAxgWXwk1PuZUftFo30k7ykTd700SLsZd/Lg+iT5JyKYgSXkXCg MJo9ATiGUCKoPLVaUMRgs9aGNsrZzmoVLWxeZvBogQq2OvERGwYRPhLBpoSBEX+V yg94DULauvKugCzMwuWLSwp6oE4bLINLAFSXzN4eOmHLjpjqt+V7dyresYczEaQZ EJL1Psg6geo9dP/Y/MG6bMVY46ppo6AChG6IOK/L4iVlUZD4CF/GhXFneqZhe27F jzlR3y7m/GJ9brxnzAmBUiE3oCwwcCklB6YAr6OBH1KoLvWfTC95TxbgowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnBsIx9OREeq+mK+Zc+l3mcSdO4MB8GA1UdIwQY MBaAFGQLttGy0nyuJ1hlxtXMx/inV7f1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81ZTNjMGYtZjhmNi00ZDNlLWI1MzEt OWY2ZWFiYzBlODQzLzEvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81ZTNjMGYtZjhmNi00ZDNlLWI1MzEtOWY2ZWFiYzBlODQz LzEvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOM62xGS 5jW2i8W5XiAqJYfNCY6/sT7BlfolIMqAVAKXRjaNGZld54oEQEnJMtsIWHD42fTy snRlNinTAlxJuKRWVkS2k9a8jIDTKbE1J+6x7b6+YHNlt/8VibcO8sLY1CGEQfZr 6tgXmgUZayUAL/04SCBmHRT03oLM3Dh+U1QkXEb8yGlr8vf5+j3Pn0kM1v9wB/uk fzctMhlfrfTAX26YdNISvjzagoonN/V7l3vBSgBrKXnhjnrEZ4vAs9QzcdtQoD1M udLFKL+kFD5WVa1CNuzvOcB+zF5AIlQDbv6X/PDbr/PQq082babhBXAZZS5ArBC4 3kXmqWS4vBkPRg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:34 2025 by rpki-client