This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft File: zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json) Hash identifier: Y0a6G2TFymWJhzOyyQY/9l9tKJlAvzYrI4Ews+Bba/A= Subject key identifier: 80:CE:DB:15:4E:24:02:4A:ED:E1:09:7B:0C:82:02:73:E7:1D:7B:4F Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F Certificate issuer: /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f Certificate serial: 019AF1D241DE3E463597E2C0FEA160BA8D68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft Manifest number: 14FF Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: fnbSq6UHvYx3EALYEA7kgy4wglXpVyt422LlaUMPTSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:41:de:3e:46:35:97:e2:c0:fe:a1:60:ba:8d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=80cedb154e24024aede1097b0c820273e71d7b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9b:3d:24:20:a6:95:90:cf:c3:45:0f:90:34: 4f:d0:7b:24:bc:d9:d4:5f:ef:30:d2:d0:7c:54:c0: 0b:49:4d:8d:9e:0e:02:db:d7:10:c3:0f:fd:b7:52: 76:78:be:92:48:04:aa:69:a4:e6:d1:18:a6:f9:78: fd:0b:66:37:a2:61:42:be:44:39:a3:c1:c2:80:7c: ff:e2:1f:e2:73:04:bd:eb:45:2a:81:60:fc:1a:9e: 93:db:ed:7c:4a:a4:a4:d1:5e:14:89:4a:53:1d:93: dd:3b:7d:72:9c:1d:f2:01:22:1c:74:34:0d:bf:0d: 15:34:7e:dd:a2:40:31:22:81:26:4b:2e:f7:0a:c6: ef:cb:78:8e:bd:45:0e:66:f1:ed:0a:31:ec:0b:6b: 81:b1:7d:88:9d:6d:ee:08:1a:f0:b6:cf:92:c7:1c: a9:86:51:69:78:f9:58:2c:2e:79:8f:fe:90:d5:e4: be:8d:66:d1:ed:fb:6f:0b:4c:b4:a5:e6:f2:cd:3e: 1a:76:88:4b:5c:76:f2:bd:11:90:93:53:02:c6:71: ed:61:5a:5d:ba:96:a9:2a:7e:e1:7b:7d:28:f9:4d: 76:a1:4b:3c:0d:43:e9:e0:d3:19:00:d1:f0:b6:53: 10:ae:19:b6:39:64:04:87:c5:f1:57:21:5c:13:66: 0c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CE:DB:15:4E:24:02:4A:ED:E1:09:7B:0C:82:02:73:E7:1D:7B:4F X509v3 Authority Key Identifier: keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:84:94:7c:5a:fd:52:bd:f2:05:24:56:e4:ad:8a:ae:9c:02: 0d:13:78:3f:b5:64:ba:6d:c8:95:b5:a8:17:fb:f8:ff:6f:82: a0:24:12:17:92:b7:44:9c:de:b9:f0:57:80:42:17:bc:48:33: f4:38:2f:67:b8:01:e4:8a:e0:6e:e8:6d:f0:58:1a:90:b5:42: 4f:bd:6b:4e:67:6f:77:ae:e5:39:5c:b9:fa:5d:d0:88:3f:8b: 98:8d:c4:43:87:18:42:4d:84:2d:b1:e2:5f:be:e4:d1:be:f1: e3:72:57:d5:5c:cf:fa:7d:9c:23:5d:66:3a:12:91:68:ca:9c: 42:96:97:f1:2a:6a:22:91:03:b6:d7:90:bc:5e:18:5f:da:f7: 82:4b:07:08:d1:84:8e:54:e3:0d:35:90:97:11:fb:84:e3:3a: 67:d2:f1:6e:78:ac:1b:03:e3:cc:f3:09:45:a2:d2:57:ed:0c: b2:bc:d4:3b:5c:9e:85:8a:ff:8c:39:bb:5f:84:07:65:e4:24: 0f:10:2b:c5:16:dd:3a:f4:ff:0b:73:0e:39:30:e8:53:e1:ae: 53:9c:d3:1a:b6:e5:5a:b4:d4:0a:60:6e:c6:1f:06:71:dc:bd: f7:be:7c:eb:65:56:82:de:85:58:53:49:f7:51:3e:b8:af:ff: 93:c7:94:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kHePkY1l+LA/qFguo1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOWExY2JlOWIwYjRiYTdiNDdkNDJhYWQ2NzI1NzE0ODRl NTU5NWYwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD Eyg4MGNlZGIxNTRlMjQwMjRhZWRlMTA5N2IwYzgyMDI3M2U3MWQ3YjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAips9JCCmlZDPw0UPkDRP0HskvNnU X+8w0tB8VMALSU2Nng4C29cQww/9t1J2eL6SSASqaaTm0Rim+Xj9C2Y3omFCvkQ5 o8HCgHz/4h/icwS960UqgWD8Gp6T2+18SqSk0V4UiUpTHZPdO31ynB3yASIcdDQN vw0VNH7dokAxIoEmSy73Csbvy3iOvUUOZvHtCjHsC2uBsX2InW3uCBrwts+Sxxyp hlFpePlYLC55j/6Q1eS+jWbR7ftvC0y0pebyzT4adohLXHbyvRGQk1MCxnHtYVpd upapKn7he30o+U12oUs8DUPp4NMZANHwtlMQrhm2OWQEh8XxVyFcE2YMuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDO2xVOJAJK7eEJewyCAnPnHXtPMB8GA1UdIwQY MBaAFM2aHL6bC0untH1CqtZyVxSE5VlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84ZmNiMjQtNjU2ZC00YTBkLWI5ZDgt N2UxZWYyMTU2NjQ4LzEvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi84ZmNiMjQtNjU2ZC00YTBkLWI5ZDgtN2UxZWYyMTU2NjQ4 LzEvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYSUfFr9 Ur3yBSRW5K2KrpwCDRN4P7Vkum3IlbWoF/v4/2+CoCQSF5K3RJzeufBXgEIXvEgz 9DgvZ7gB5Irgbuht8FgakLVCT71rTmdvd67lOVy5+l3QiD+LmI3EQ4cYQk2ELbHi X77k0b7x43JX1VzP+n2cI11mOhKRaMqcQpaX8SpqIpEDtteQvF4YX9r3gksHCNGE jlTjDTWQlxH7hOM6Z9LxbnisGwPjzPMJRaLSV+0MsrzUO1yehYr/jDm7X4QHZeQk DxArxRbdOvT/C3MOOTDoU+GuU5zTGrblWrTUCmBuxh8Gcdy9975862VWgt6FWFNJ 91E+uK//k8eUtg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:15 2025 by rpki-client