This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft File: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json) Hash identifier: tf9HeY0q7Z98tezd3Yv9mCtDZFruBM28a0KrKU4rsy8= Subject key identifier: 25:F6:82:B8:73:40:3E:77:12:AC:55:71:8B:47:30:B3:8C:D3:E0:20 Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C Certificate issuer: /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c Certificate serial: 019AF50AD59C0C20BA7E55BA570C4B66318C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 19:01:59 +0000 Manifest this update: Sat 06 Dec 2025 19:01:59 +0000 Manifest next update: Sun 07 Dec 2025 19:01:59 +0000 Files and hashes: 1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: D/4OXcmQhr7FO1g3n0jUjGOmBfhjUBxWKXWeKHII5Jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:d5:9c:0c:20:ba:7e:55:ba:57:0c:4b:66:31:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c Validity Not Before: Dec 6 19:01:59 2025 GMT Not After : Dec 7 19:01:59 2025 GMT Subject: CN=25f682b873403e7712ac55718b4730b38cd3e020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:da:4a:2d:1b:63:d9:07:d1:e0:4e:29:6e: ff:a5:bd:93:96:25:d5:b9:06:87:6b:15:e4:d1:b0: 01:a6:cd:16:7b:5a:0c:73:9c:e2:4d:70:6b:63:76: 38:12:a7:a5:a6:11:0f:20:c0:f9:e2:12:ab:0b:4b: 00:a7:ea:44:be:b8:86:f7:68:34:05:b5:cc:8c:46: 99:79:ad:5d:4b:9b:98:d2:db:dc:f6:f3:59:8a:11: ad:cc:bf:4b:f2:29:4b:76:ae:7f:18:2c:14:b2:81: f4:70:e7:84:46:3d:16:ab:83:d8:58:55:bd:ee:29: 25:ab:a7:db:ac:3d:9e:54:de:5f:5a:e6:47:45:63: 35:f8:f5:cf:1f:b2:08:99:d7:7c:6c:4a:44:99:a2: c4:ee:b7:dd:ab:dd:83:69:4a:73:35:41:e1:24:9d: d9:fe:e6:d5:03:61:c5:94:99:a8:ae:02:5f:91:22: db:e6:4a:b5:46:1b:71:bb:8e:35:c1:de:cf:68:a6: 4c:80:74:6a:31:07:35:7e:61:cc:6d:e0:5f:f5:12: dd:2d:53:78:30:4b:0f:f0:02:37:c3:f3:4f:22:50: ea:c1:14:ba:00:9c:3b:64:7f:a2:4a:00:f0:c7:a5: a2:c5:e8:51:a9:95:3c:09:6c:36:d2:f0:b9:61:eb: a8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F6:82:B8:73:40:3E:77:12:AC:55:71:8B:47:30:B3:8C:D3:E0:20 X509v3 Authority Key Identifier: keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:af:04:3f:87:dc:04:ca:7d:f6:07:46:97:98:89:a8:6c:82: 5a:0d:2d:c0:07:da:ce:9c:da:fb:d3:6a:62:78:51:2e:45:18: 47:28:d5:08:cb:1f:ae:7d:c0:16:08:90:30:b3:ab:62:de:e1: b6:64:ce:41:b9:1d:fb:ff:23:00:0d:1c:f2:27:a4:a3:8a:79: f1:a5:4b:22:63:12:89:76:b9:f0:c7:43:93:9b:19:b5:cd:98: 91:07:9d:bd:5b:a4:26:28:9c:ce:03:3c:8f:2d:4e:7b:e2:dd: 85:98:63:fd:a9:c7:14:c0:51:bc:33:5d:b7:c8:7d:54:53:05: 5d:3c:a3:36:1b:6f:98:50:34:af:7f:40:7a:87:06:c6:b8:fe: 99:89:3f:e8:a2:e0:f8:b5:09:4e:99:25:e6:f1:d7:f8:a3:09: 84:6f:40:34:11:2e:41:65:d1:04:71:38:7a:51:af:33:18:7f: 41:4b:6a:c2:be:c0:66:9f:f4:53:22:b2:32:a7:05:e2:18:18: 2f:8e:c9:d9:1a:56:e9:af:8c:a8:89:0c:c8:5a:1b:d6:d8:fa: ba:c1:e4:b3:23:f4:c3:f6:0a:eb:d1:93:74:7e:94:b4:d1:a5: 31:37:1a:e2:7b:7c:29:0a:70:f4:e0:fa:e4:c2:87:a7:24:18: 10:00:3b:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CtWcDCC6flW6VwxLZjGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MDNjZmNjODhjMjVkM2U4NzZiNTMyY2YxMTMwMTIyNWVj YTFiMGMwHhcNMjUxMjA2MTkwMTU5WhcNMjUxMjA3MTkwMTU5WjAzMTEwLwYDVQQD EygyNWY2ODJiODczNDAzZTc3MTJhYzU1NzE4YjQ3MzBiMzhjZDNlMDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWfaSi0bY9kH0eBOKW7/pb2TliXV uQaHaxXk0bABps0We1oMc5ziTXBrY3Y4EqelphEPIMD54hKrC0sAp+pEvriG92g0 BbXMjEaZea1dS5uY0tvc9vNZihGtzL9L8ilLdq5/GCwUsoH0cOeERj0Wq4PYWFW9 7iklq6fbrD2eVN5fWuZHRWM1+PXPH7IImdd8bEpEmaLE7rfdq92DaUpzNUHhJJ3Z /ubVA2HFlJmorgJfkSLb5kq1Rhtxu441wd7PaKZMgHRqMQc1fmHMbeBf9RLdLVN4 MEsP8AI3w/NPIlDqwRS6AJw7ZH+iSgDwx6WixehRqZU8CWw20vC5YeuoDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCX2grhzQD53EqxVcYtHMLOM0+AgMB8GA1UdIwQY MBaAFGcDz8yIwl0+h2tTLPETASJeyhsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWndQUHpJakNYVDZIYTFNczhSTUJJbDdLR3d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81ZjBlMGQtNGQ5MC00MGM4LWEwYjgt MmE5YzU2ZjYzMjhiLzEvWndQUHpJakNYVDZIYTFNczhSTUJJbDdLR3d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81ZjBlMGQtNGQ5MC00MGM4LWEwYjgtMmE5YzU2ZjYzMjhi LzEvWndQUHpJakNYVDZIYTFNczhSTUJJbDdLR3d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD68EP4fc BMp99gdGl5iJqGyCWg0twAfazpza+9NqYnhRLkUYRyjVCMsfrn3AFgiQMLOrYt7h tmTOQbkd+/8jAA0c8ieko4p58aVLImMSiXa58MdDk5sZtc2YkQedvVukJiiczgM8 jy1Oe+LdhZhj/anHFMBRvDNdt8h9VFMFXTyjNhtvmFA0r39AeocGxrj+mYk/6KLg +LUJTpkl5vHX+KMJhG9ANBEuQWXRBHE4elGvMxh/QUtqwr7AZp/0UyKyMqcF4hgY L47J2RpW6a+MqIkMyFob1tj6usHksyP0w/YK69GTdH6UtNGlMTca4nt8KQpw9OD6 5MKHpyQYEAA7bA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:18:05 2025 by rpki-client