This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft File: zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft (raw, json) Hash identifier: YhpiVjyEhg1ubLaA8scoCicTvxGb0t/d4ivV++HfCiI= Subject key identifier: DD:64:B5:7E:D1:E1:A7:74:94:B2:50:53:C4:16:CA:30:48:ED:4D:1F Authority key identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14 Certificate issuer: /CN=cd35f6ff567bde93394fff282fad417da0b53614 Certificate serial: 019B3DC7EDF3AC4F8D3F5A9AD4107A33B63C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft Manifest number: 0E60 Signing time: Sat 20 Dec 2025 22:01:11 +0000 Manifest this update: Sat 20 Dec 2025 22:01:11 +0000 Manifest next update: Sun 21 Dec 2025 22:01:11 +0000 Files and hashes: 1: zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl (hash: wP5O5QEGdRR0ZrQovXqOcrWVwpDxv00yoUIuZPio5po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:ed:f3:ac:4f:8d:3f:5a:9a:d4:10:7a:33:b6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd35f6ff567bde93394fff282fad417da0b53614 Validity Not Before: Dec 20 22:01:11 2025 GMT Not After : Dec 21 22:01:11 2025 GMT Subject: CN=dd64b57ed1e1a77494b25053c416ca3048ed4d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:96:ba:dd:f9:25:4a:23:f4:a6:15:98:95: 87:af:05:53:ef:9e:22:74:41:ae:1a:dc:32:42:86: 9b:42:12:ee:53:6f:74:9b:d4:eb:c1:f9:c6:76:f0: 16:ce:05:d1:e8:5a:8e:88:ef:3e:5e:42:21:6c:fb: 22:ac:41:e6:0c:60:50:99:fa:6f:24:a2:a6:49:55: d0:8e:f1:77:fb:ff:a2:68:b4:d8:96:55:2e:67:e5: d7:e2:d6:b7:9a:ff:52:19:cf:b1:97:18:43:0f:1c: fc:96:16:57:73:f7:0e:1d:48:aa:d0:f5:a5:99:bf: 2a:2a:db:15:ae:63:d0:4c:2b:16:65:da:0f:8c:f2: 42:ee:76:df:9a:21:5c:04:f0:59:90:53:14:25:50: c9:af:11:1c:18:5c:94:f2:22:75:5a:8d:37:e7:f0: 6a:6f:b9:41:71:aa:4b:2b:ca:41:14:e8:45:2b:8b: 19:92:44:75:1b:74:7c:40:a9:13:4a:19:62:24:1e: 80:85:93:f6:68:60:99:bd:b3:15:c1:e1:8e:b4:f4: e0:d0:c3:a5:87:bf:c4:60:2d:62:f0:d7:83:6e:fb: ce:e3:0a:c8:30:07:b0:fd:cd:84:bb:9e:27:1b:36: df:d7:c1:8e:f5:08:40:4a:7d:89:d8:9b:c0:44:4c: 40:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:64:B5:7E:D1:E1:A7:74:94:B2:50:53:C4:16:CA:30:48:ED:4D:1F X509v3 Authority Key Identifier: keyid:CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:20:46:e7:db:f3:7a:65:03:da:58:44:f0:4e:22:5e:b9:1a: 5d:25:78:78:5a:13:63:0a:60:f6:bf:48:13:16:f5:48:47:1d: b2:da:f2:f6:e6:87:2a:ad:bc:0d:c4:72:40:b2:a8:82:8c:e2: b0:6e:7c:b0:7b:81:c2:59:50:55:72:41:ec:51:16:39:38:cf: fb:fd:37:eb:94:fc:4e:e8:5f:33:1d:ef:70:84:20:ab:99:bb: dc:b1:7b:00:1b:97:0e:4d:99:b8:bb:1e:48:29:96:2e:02:94: 0e:be:6f:a4:8b:63:13:89:28:5e:19:7b:67:e7:cd:20:a4:9d: 46:23:40:1a:ce:5c:c0:00:92:5b:64:dd:12:58:2e:9e:c6:8d: a6:28:6b:38:60:28:0a:b1:82:48:cb:12:b3:61:eb:e1:d6:2e: 8f:4f:78:3e:20:5a:77:20:91:43:70:03:02:29:9b:af:7b:41: 92:df:c7:2f:46:74:12:7c:4d:00:b3:9e:07:6f:0c:13:6c:4f: 91:8f:1f:fb:49:ef:f0:06:95:38:5d:68:80:2d:45:97:03:86: b7:6b:fe:fc:87:d4:6b:5c:3f:28:0c:7a:19:70:6c:d4:39:63: 58:84:2d:77:81:88:31:d5:95:b6:3d:dc:ed:20:c0:ff:cd:0a: 55:c3:6a:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x+3zrE+NP1qa1BB6M7Y8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMzVmNmZmNTY3YmRlOTMzOTRmZmYyODJmYWQ0MTdkYTBi NTM2MTQwHhcNMjUxMjIwMjIwMTExWhcNMjUxMjIxMjIwMTExWjAzMTEwLwYDVQQD EyhkZDY0YjU3ZWQxZTFhNzc0OTRiMjUwNTNjNDE2Y2EzMDQ4ZWQ0ZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY2Wut35JUoj9KYVmJWHrwVT754i dEGuGtwyQoabQhLuU290m9TrwfnGdvAWzgXR6FqOiO8+XkIhbPsirEHmDGBQmfpv JKKmSVXQjvF3+/+iaLTYllUuZ+XX4ta3mv9SGc+xlxhDDxz8lhZXc/cOHUiq0PWl mb8qKtsVrmPQTCsWZdoPjPJC7nbfmiFcBPBZkFMUJVDJrxEcGFyU8iJ1Wo035/Bq b7lBcapLK8pBFOhFK4sZkkR1G3R8QKkTShliJB6AhZP2aGCZvbMVweGOtPTg0MOl h7/EYC1i8NeDbvvO4wrIMAew/c2Eu54nGzbf18GO9QhASn2J2JvARExALQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1ktX7R4ad0lLJQU8QWyjBI7U0fMB8GA1UdIwQY MBaAFM019v9We96TOU//KC+tQX2gtTYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelRYMl8xWjczcE01VF84b0w2MUJmYUMxTmhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wOWRkZGYtZjgzZi00NjUwLWEzNDct NDRhMzA3NTQ1ZDc0LzEvelRYMl8xWjczcE01VF84b0w2MUJmYUMxTmhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wOWRkZGYtZjgzZi00NjUwLWEzNDctNDRhMzA3NTQ1ZDc0 LzEvelRYMl8xWjczcE01VF84b0w2MUJmYUMxTmhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyBG59vz emUD2lhE8E4iXrkaXSV4eFoTYwpg9r9IExb1SEcdstry9uaHKq28DcRyQLKogozi sG58sHuBwllQVXJB7FEWOTjP+/0365T8TuhfMx3vcIQgq5m73LF7ABuXDk2ZuLse SCmWLgKUDr5vpItjE4koXhl7Z+fNIKSdRiNAGs5cwACSW2TdElgunsaNpihrOGAo CrGCSMsSs2Hr4dYuj094PiBadyCRQ3ADAimbr3tBkt/HL0Z0EnxNALOeB28ME2xP kY8f+0nv8AaVOF1ogC1FlwOGt2v+/IfUa1w/KAx6GXBs1DljWIQtd4GIMdWVtj3c 7SDA/80KVcNq5g== -----END CERTIFICATE-----Generated at Sun Dec 21 01:51:37 2025 by rpki-client