This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft File: cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft (raw, json) Hash identifier: 8arxx8/dKNy1mmiRTQV45KMTH9/wPwCIPH8SShcR5Lw= Subject key identifier: 37:4A:96:43:4E:53:88:CC:F5:E7:17:3F:3B:C7:00:B1:CC:9B:3F:75 Authority key identifier: 71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62 Certificate issuer: /CN=7192f3560c15b94d1ef497726845d786786bc762 Certificate serial: 019AF12EF331B2364CA22F3FDFE5C670EABF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft Manifest number: 0E95 Signing time: Sat 06 Dec 2025 01:02:57 +0000 Manifest this update: Sat 06 Dec 2025 01:02:57 +0000 Manifest next update: Sun 07 Dec 2025 01:02:57 +0000 Files and hashes: 1: cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl (hash: JqQ+gbjUwl8LkfXzJyHMb+niTVNCjvUeXhne6B5ROnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:f3:31:b2:36:4c:a2:2f:3f:df:e5:c6:70:ea:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7192f3560c15b94d1ef497726845d786786bc762 Validity Not Before: Dec 6 01:02:57 2025 GMT Not After : Dec 7 01:02:57 2025 GMT Subject: CN=374a96434e5388ccf5e7173f3bc700b1cc9b3f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e8:36:51:79:17:59:38:fa:54:8b:f3:b4:ab: c1:99:45:c0:5c:9f:7a:37:93:f4:58:9f:b8:9e:e0: b5:86:eb:a1:96:31:80:5b:c8:aa:d1:a8:b7:45:65: cd:87:11:24:fe:27:8c:b2:5b:e6:59:57:52:9a:48: 50:37:ae:9f:7a:28:a7:bd:86:41:d9:66:bf:ad:00: 35:41:1e:d3:d3:70:ed:87:2b:a6:23:1c:d0:26:a5: 03:22:ea:6a:bb:fb:1c:29:bb:9f:04:16:dc:9f:7d: 18:52:b5:bd:d4:2a:0e:77:91:a4:e1:e5:43:e9:f7: d4:1d:ef:5a:c6:ad:21:e0:39:33:4a:42:c0:3f:5a: 7b:4d:77:03:db:d3:cf:73:9e:34:b4:88:e4:05:e2: bc:a5:e8:4a:74:c3:26:09:b4:13:00:7e:e1:82:68: 9f:63:f8:57:66:8a:2d:6c:82:fe:a6:c2:25:67:ee: 41:50:93:96:aa:f6:de:5f:1d:b0:d7:ec:b9:f4:52: 81:4e:1a:48:63:bd:b5:8b:ee:58:04:60:75:9f:d5: f8:41:f2:31:d9:16:be:d1:26:ea:10:1b:4d:30:a1: fe:91:9b:3b:2b:c0:1c:91:23:cc:7c:8f:c2:e7:36: 2e:7e:02:44:56:6b:4a:73:9a:c3:49:d1:ce:75:05: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4A:96:43:4E:53:88:CC:F5:E7:17:3F:3B:C7:00:B1:CC:9B:3F:75 X509v3 Authority Key Identifier: keyid:71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:89:98:f0:0b:5f:a5:eb:fc:c0:44:88:da:55:3e:08:1e:fe: 58:74:8e:66:ec:ba:a1:a7:73:70:e4:01:01:d4:06:7b:29:47: 46:8a:18:42:a2:ce:c0:35:8b:d6:6f:8f:3d:c6:31:ce:f9:21: c1:55:4a:a0:73:da:10:4b:6b:27:5f:b3:2a:da:a1:df:bd:ff: 0d:c1:d3:1e:e0:e0:38:76:9d:25:d1:9d:81:cf:ba:bf:28:01: 3b:1a:4c:6f:98:e4:96:db:04:95:ea:80:86:d5:cd:4c:46:7f: 62:e1:01:43:65:ae:b4:08:9b:4e:95:00:ed:3c:87:61:b8:5e: 5a:dc:40:18:7d:41:55:81:f7:fb:1f:40:86:51:bd:fb:2e:1c: 37:b9:db:f8:6d:b0:9d:93:55:40:06:ab:28:b6:65:78:68:a4: bb:be:b5:74:cb:e1:ba:b1:c3:54:26:48:14:96:e7:1d:11:0e: 9c:ec:dc:7c:e4:ae:eb:f9:9d:5a:40:ed:4f:ae:c6:50:d3:51: 92:99:e0:77:64:72:8f:e8:aa:aa:b9:82:e4:a3:81:62:45:af: c3:15:c2:92:e6:b9:8b:25:99:4f:8c:d2:a1:d0:af:a9:54:20: 46:a7:4b:bb:73:0c:52:da:46:12:25:ce:7e:1a:a2:29:a8:57: 80:a6:e6:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvMxsjZMoi8/3+XGcOq/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTJmMzU2MGMxNWI5NGQxZWY0OTc3MjY4NDVkNzg2Nzg2 YmM3NjIwHhcNMjUxMjA2MDEwMjU3WhcNMjUxMjA3MDEwMjU3WjAzMTEwLwYDVQQD EygzNzRhOTY0MzRlNTM4OGNjZjVlNzE3M2YzYmM3MDBiMWNjOWIzZjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+g2UXkXWTj6VIvztKvBmUXAXJ96 N5P0WJ+4nuC1huuhljGAW8iq0ai3RWXNhxEk/ieMslvmWVdSmkhQN66feiinvYZB 2Wa/rQA1QR7T03DthyumIxzQJqUDIupqu/scKbufBBbcn30YUrW91CoOd5Gk4eVD 6ffUHe9axq0h4DkzSkLAP1p7TXcD29PPc540tIjkBeK8pehKdMMmCbQTAH7hgmif Y/hXZootbIL+psIlZ+5BUJOWqvbeXx2w1+y59FKBThpIY721i+5YBGB1n9X4QfIx 2Ra+0SbqEBtNMKH+kZs7K8AckSPMfI/C5zYufgJEVmtKc5rDSdHOdQWB1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdKlkNOU4jM9ecXPzvHALHMmz91MB8GA1UdIwQY MBaAFHGS81YMFblNHvSXcmhF14Z4a8diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82OWEwMzQtYjUwOC00MmU4LTk5ZTgt NzVlZTI0YTNmOTZiLzEvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82OWEwMzQtYjUwOC00MmU4LTk5ZTgtNzVlZTI0YTNmOTZi LzEvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYmY8Atf pev8wESI2lU+CB7+WHSOZuy6oadzcOQBAdQGeylHRooYQqLOwDWL1m+PPcYxzvkh wVVKoHPaEEtrJ1+zKtqh373/DcHTHuDgOHadJdGdgc+6vygBOxpMb5jkltsEleqA htXNTEZ/YuEBQ2WutAibTpUA7TyHYbheWtxAGH1BVYH3+x9AhlG9+y4cN7nb+G2w nZNVQAarKLZleGiku761dMvhurHDVCZIFJbnHREOnOzcfOSu6/mdWkDtT67GUNNR kpngd2Ryj+iqqrmC5KOBYkWvwxXCkua5iyWZT4zSodCvqVQgRqdLu3MMUtpGEiXO fhqiKahXgKbmRA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:18 2025 by rpki-client