This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json) Hash identifier: 6AsCoUtk17EiAl2qnL5nYIoLcU5UXEmgwU/+nGhnvTY= Subject key identifier: 74:08:3B:5B:FF:72:5E:5E:87:9A:99:D2:72:16:2D:8F:A3:2C:45:36 Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07 Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607 Certificate serial: 019AF276E710F072E4FF6B391C7A4AB15CAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft Manifest number: 0DD1 Signing time: Sat 06 Dec 2025 07:01:09 +0000 Manifest this update: Sat 06 Dec 2025 07:01:09 +0000 Manifest next update: Sun 07 Dec 2025 07:01:09 +0000 Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: uzPP9h9JtSjF/+T+5a0sRsejC+MME2oRWuKiU9PTIZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e7:10:f0:72:e4:ff:6b:39:1c:7a:4a:b1:5c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607 Validity Not Before: Dec 6 07:01:09 2025 GMT Not After : Dec 7 07:01:09 2025 GMT Subject: CN=74083b5bff725e5e879a99d272162d8fa32c4536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e3:10:d3:a9:a3:9a:55:99:b1:5a:be:57:2c: f7:6d:19:cc:04:0c:da:8b:6f:ed:72:df:49:22:51: 0c:22:29:e5:8b:39:0d:40:ec:31:53:95:04:31:a6: 40:cb:2a:e7:00:c9:38:cf:c3:8b:8c:25:d6:24:fe: ad:5d:95:49:f9:97:ad:94:0b:53:9a:e2:25:d7:f0: 8c:a0:59:24:96:de:fa:e9:8b:0e:0e:29:f7:9f:cf: e1:f4:c0:ae:a8:18:58:5e:01:32:3c:f7:48:c1:6e: ac:c4:b6:2d:c8:b7:c1:92:63:b7:6e:23:7c:f2:1c: d4:b1:62:3b:b6:61:87:ed:77:f5:22:9d:47:a4:0b: 2b:1b:14:d9:da:fe:b6:6b:d9:cc:87:d1:4b:a5:55: 3a:db:99:09:25:c8:f2:27:3d:1e:5a:75:cb:af:c5: 5e:a2:6b:98:3d:14:87:bd:4a:56:67:47:27:4e:36: 54:19:17:14:c4:f9:3f:a8:81:53:59:09:41:bc:ad: af:f2:85:5e:8d:8d:5c:02:20:cd:42:29:5b:64:57: e5:67:90:d2:f2:ba:74:62:23:54:41:b4:87:aa:6f: 39:94:e2:d3:13:73:61:57:be:08:a5:90:6c:4f:83: 0f:72:94:8b:ec:53:f0:e8:42:9d:5a:c7:16:f4:92: c4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:08:3B:5B:FF:72:5E:5E:87:9A:99:D2:72:16:2D:8F:A3:2C:45:36 X509v3 Authority Key Identifier: keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:78:64:10:d6:23:a6:f0:1c:10:73:f1:69:92:34:cc:ad:d9: 06:1f:90:1b:34:73:72:8e:0b:5e:bf:27:9b:d0:30:38:5c:8e: 15:bb:e4:06:a8:97:e7:91:6f:74:15:9a:ad:4c:14:a1:0c:2b: 30:30:ed:68:2e:af:c2:ce:8f:87:a6:c4:d4:b1:74:13:a1:df: cc:ea:44:08:7b:b2:70:f0:99:55:b8:86:8d:44:51:1b:43:a8: a8:e1:ab:d3:2a:53:29:f1:74:b2:16:f2:cd:c6:c9:1f:cb:90: c8:c6:fb:fd:b6:a6:f8:97:27:41:00:5e:75:3b:c7:0c:23:e4: 96:1f:ba:fd:7b:dd:7a:22:bb:db:76:da:f3:02:f5:7b:f9:73: f9:9e:98:26:2f:38:9c:10:dc:6f:bd:2d:c3:8d:12:c3:a8:a1: 20:b3:55:b0:61:d5:b1:a8:eb:09:6a:b7:6b:50:58:30:e4:99: da:49:31:5d:23:a2:29:28:64:69:42:b7:e3:de:e7:fb:e5:cb: 6d:18:14:ac:11:6e:c1:43:b2:20:86:4f:17:af:2b:e8:c6:ae: ec:56:91:60:eb:b8:34:ca:c6:70:59:3e:ed:38:a7:c8:8a:12: 17:bb:6d:2c:9c:f4:c6:c4:71:bc:9d:6b:75:18:dc:a9:cf:18: fe:66:78:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryducQ8HLk/2s5HHpKsVyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MjE0NzBkNTkyMjI5OGVkMDQ2ODVlMWRmMGVmZGZkZDJh NjY2MDcwHhcNMjUxMjA2MDcwMTA5WhcNMjUxMjA3MDcwMTA5WjAzMTEwLwYDVQQD Eyg3NDA4M2I1YmZmNzI1ZTVlODc5YTk5ZDI3MjE2MmQ4ZmEzMmM0NTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOMQ06mjmlWZsVq+Vyz3bRnMBAza i2/tct9JIlEMIinlizkNQOwxU5UEMaZAyyrnAMk4z8OLjCXWJP6tXZVJ+ZetlAtT muIl1/CMoFkklt766YsODin3n8/h9MCuqBhYXgEyPPdIwW6sxLYtyLfBkmO3biN8 8hzUsWI7tmGH7Xf1Ip1HpAsrGxTZ2v62a9nMh9FLpVU625kJJcjyJz0eWnXLr8Ve omuYPRSHvUpWZ0cnTjZUGRcUxPk/qIFTWQlBvK2v8oVejY1cAiDNQilbZFflZ5DS 8rp0YiNUQbSHqm85lOLTE3NhV74IpZBsT4MPcpSL7FPw6EKdWscW9JLEKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQIO1v/cl5eh5qZ0nIWLY+jLEU2MB8GA1UdIwQY MBaAFGQhRw1ZIimO0EaF4d8O/f3SpmYHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkNGSERWa2lLWTdRUm9YaDN3NzlfZEttWmdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zYTUwY2QtM2U2YS00ZmQ0LTkzOTct NThkNTdjZDM2MGE5LzEvWkNGSERWa2lLWTdRUm9YaDN3NzlfZEttWmdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zYTUwY2QtM2U2YS00ZmQ0LTkzOTctNThkNTdjZDM2MGE5 LzEvWkNGSERWa2lLWTdRUm9YaDN3NzlfZEttWmdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHhkENYj pvAcEHPxaZI0zK3ZBh+QGzRzco4LXr8nm9AwOFyOFbvkBqiX55FvdBWarUwUoQwr MDDtaC6vws6Ph6bE1LF0E6HfzOpECHuycPCZVbiGjURRG0OoqOGr0ypTKfF0shby zcbJH8uQyMb7/bam+JcnQQBedTvHDCPklh+6/XvdeiK723ba8wL1e/lz+Z6YJi84 nBDcb70tw40Sw6ihILNVsGHVsajrCWq3a1BYMOSZ2kkxXSOiKShkaUK3497n++XL bRgUrBFuwUOyIIZPF68r6Mau7FaRYOu4NMrGcFk+7TinyIoSF7ttLJz0xsRxvJ1r dRjcqc8Y/mZ45A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:03 2025 by rpki-client