This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json) Hash identifier: wL88PLlSLbauCRJb5vlPI8veia57RxWXZMBk5/KOaiw= Subject key identifier: BC:B8:C7:6E:7E:A1:C9:86:62:41:59:AE:EC:9F:FE:D0:76:F0:6E:FD Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa Certificate serial: 019B32D7A202E33C1400F4E7B55945493EB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft Manifest number: 0D7E Signing time: Thu 18 Dec 2025 19:02:30 +0000 Manifest this update: Thu 18 Dec 2025 19:02:30 +0000 Manifest next update: Fri 19 Dec 2025 19:02:30 +0000 Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: uV6dhm1ZeG8jZtk+Ll5uwjQC8HNmjuyp2Ys/EZsxt4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:a2:02:e3:3c:14:00:f4:e7:b5:59:45:49:3e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa Validity Not Before: Dec 18 19:02:30 2025 GMT Not After : Dec 19 19:02:30 2025 GMT Subject: CN=bcb8c76e7ea1c986624159aeec9ffed076f06efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3c:4f:5f:26:e9:13:15:fc:27:e9:5b:00:d0: fc:c2:27:ae:07:02:0d:65:e5:90:e0:c5:14:e7:34: e6:04:3e:06:24:aa:00:41:1d:d6:6f:b1:a1:80:0d: f9:40:99:5c:67:f1:11:90:bc:12:c4:89:79:4c:fc: 62:45:d1:69:f8:d6:8b:46:4b:6f:d5:62:a4:65:32: 4a:db:2d:84:94:a3:58:e8:20:aa:38:66:cf:fe:7d: 6b:60:fc:30:87:fb:8a:2e:c0:b7:f5:47:45:a3:a5: 1a:70:bf:a6:05:b7:ee:ac:3c:29:53:3c:a1:08:6b: 1b:ce:44:f3:5f:c8:4e:4a:ba:0a:c2:dd:fc:55:ed: 0b:2f:de:c1:ec:ea:52:55:5d:b9:d6:57:0f:3b:f8: e0:8d:ae:11:d1:f5:c1:58:7e:1f:72:13:ab:4a:33: 08:95:95:6c:57:d8:9e:c7:b1:ab:ce:41:95:4d:b1: 22:da:26:55:6a:40:d6:0f:e1:52:86:a5:0c:05:c6: 24:37:cf:69:53:96:56:27:73:ff:d5:f4:c3:f6:b1: 0d:11:25:93:03:5c:72:38:f2:6d:2e:69:c7:54:e6: 2e:0f:b2:83:5d:25:ce:3d:df:92:90:80:49:83:8c: c5:0c:45:2b:0b:f8:cf:38:4d:bc:bb:e4:e5:62:9e: 84:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B8:C7:6E:7E:A1:C9:86:62:41:59:AE:EC:9F:FE:D0:76:F0:6E:FD X509v3 Authority Key Identifier: keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4b:76:fe:94:3c:26:a4:ac:a3:7c:1e:4d:b1:ab:40:df:9a: 5f:af:a8:02:c5:6a:fc:a2:13:a2:d6:47:82:f1:a3:ae:1a:3a: a1:72:01:fd:4b:c5:93:2c:84:db:a0:b0:7f:60:2d:ad:8a:45: c8:bb:2a:9a:10:46:03:e4:aa:09:6a:ab:a7:53:79:74:35:04: 4b:30:bb:bb:a5:a0:aa:89:04:b8:80:97:dd:95:6a:70:82:62: b4:f0:31:cc:26:5f:f6:d2:f4:70:49:cd:80:bf:56:6e:61:c8: c1:e7:08:9c:16:ca:4e:dd:5b:89:a4:15:9b:7f:3f:0b:44:77: 16:8c:92:1c:8f:1d:6f:df:11:63:f0:8d:d5:a6:91:5b:43:40: 3e:26:ab:c2:c9:0e:9b:8d:ed:70:f2:59:f4:3e:2a:8e:01:69: d6:0d:05:2b:4b:de:39:80:98:f3:46:6e:6a:2b:61:d9:42:90: 93:ac:bc:a7:b8:28:ab:0c:68:44:cc:b1:a2:4b:55:f0:a4:74: fd:fa:e6:1d:68:37:62:5b:ee:09:8d:49:f6:17:0d:1d:b6:f9: 47:46:f3:5d:92:08:39:ed:b6:b2:99:82:d0:f1:4a:d9:24:92: c4:84:06:99:ec:9b:73:09:2b:a4:b2:d6:ad:19:8e:20:91:77: ea:70:26:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy16IC4zwUAPTntVlFST62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTRkYjM3MzA4NWUyOGMwZDliNzRiZTdiOGU4OTc0MGI5 NWY5ZmEwHhcNMjUxMjE4MTkwMjMwWhcNMjUxMjE5MTkwMjMwWjAzMTEwLwYDVQQD EyhiY2I4Yzc2ZTdlYTFjOTg2NjI0MTU5YWVlYzlmZmVkMDc2ZjA2ZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DxPXybpExX8J+lbAND8wieuBwIN ZeWQ4MUU5zTmBD4GJKoAQR3Wb7GhgA35QJlcZ/ERkLwSxIl5TPxiRdFp+NaLRktv 1WKkZTJK2y2ElKNY6CCqOGbP/n1rYPwwh/uKLsC39UdFo6UacL+mBbfurDwpUzyh CGsbzkTzX8hOSroKwt38Ve0LL97B7OpSVV251lcPO/jgja4R0fXBWH4fchOrSjMI lZVsV9iex7GrzkGVTbEi2iZVakDWD+FShqUMBcYkN89pU5ZWJ3P/1fTD9rENESWT A1xyOPJtLmnHVOYuD7KDXSXOPd+SkIBJg4zFDEUrC/jPOE28u+TlYp6ETwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLy4x25+ocmGYkFZruyf/tB28G79MB8GA1UdIwQY MBaAFM8U2zcwheKMDZt0vnuOiXQLlfn6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMWNhZWYtY2E2Zi00ODgxLWJjNTgt MGExMzFmNjVjOTY4LzEvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lMWNhZWYtY2E2Zi00ODgxLWJjNTgtMGExMzFmNjVjOTY4 LzEvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0t2/pQ8 JqSso3weTbGrQN+aX6+oAsVq/KITotZHgvGjrho6oXIB/UvFkyyE26Cwf2AtrYpF yLsqmhBGA+SqCWqrp1N5dDUESzC7u6WgqokEuICX3ZVqcIJitPAxzCZf9tL0cEnN gL9WbmHIwecInBbKTt1biaQVm38/C0R3FoySHI8db98RY/CN1aaRW0NAPiarwskO m43tcPJZ9D4qjgFp1g0FK0veOYCY80Zuaith2UKQk6y8p7goqwxoRMyxoktV8KR0 /frmHWg3YlvuCY1J9hcNHbb5R0bzXZIIOe22spmC0PFK2SSSxIQGmeybcwkrpLLW rRmOIJF36nAmOQ== -----END CERTIFICATE-----Generated at Thu Dec 18 21:48:27 2025 by rpki-client