This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft File: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft (raw, json) Hash identifier: /qb2n+JicM+rPXj8uAhVLtAZICQLBNvMRRKSw6t7AYs= Subject key identifier: BC:94:43:E2:85:19:9E:48:EC:F7:42:C1:AF:A9:B5:2F:25:83:D5:56 Authority key identifier: CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81 Certificate issuer: /CN=cda104577266ec9b146736c8cc9da7366b1d9781 Certificate serial: 019B5FAED909FF2D8483A589A8635DA01CB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft Manifest number: 1797 Signing time: Sat 27 Dec 2025 12:00:52 +0000 Manifest this update: Sat 27 Dec 2025 12:00:52 +0000 Manifest next update: Sun 28 Dec 2025 12:00:52 +0000 Files and hashes: 1: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl (hash: hNYjuq7NbxTNITo2pq9nMgI+H/Uo0Atft2Z7ahRWYB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:ae:d9:09:ff:2d:84:83:a5:89:a8:63:5d:a0:1c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cda104577266ec9b146736c8cc9da7366b1d9781 Validity Not Before: Dec 27 12:00:52 2025 GMT Not After : Dec 28 12:00:52 2025 GMT Subject: CN=bc9443e285199e48ecf742c1afa9b52f2583d556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:2c:32:83:c5:53:11:ca:4c:26:49:c4:0d: bd:a8:b5:d7:cd:26:25:5d:1d:83:68:0f:8f:67:63: c4:48:e0:d6:35:69:b0:6d:b9:06:2a:f3:19:46:bd: 90:4a:da:d5:b2:49:77:c8:c6:56:b5:a4:6e:99:da: fd:01:3d:52:7a:1a:c7:6c:ed:a4:c6:6a:de:31:1d: e6:2a:28:1d:1c:28:91:02:08:35:45:1d:ff:8c:aa: 48:bf:d8:a5:06:fd:60:1b:58:c9:05:15:70:b7:9d: 08:cc:e4:fe:1e:d5:07:15:c9:c7:f1:0c:b9:95:d1: 5f:07:30:81:db:39:3d:15:3a:fb:c1:5d:35:3c:9e: 7f:eb:b1:35:05:c2:5c:71:05:aa:a1:20:61:95:aa: 4d:fd:ec:38:f1:5a:4d:4c:62:dd:09:ef:4b:22:68: 86:f5:ce:fb:9f:e6:9a:47:09:f8:3b:3f:2f:de:c0: 67:fc:bb:e1:60:73:2c:fd:99:fb:ef:c6:b3:e8:9b: d5:45:cd:49:ad:1d:40:77:1d:e2:c6:16:ef:83:50: 6d:3e:4e:e4:49:7d:d1:49:a8:7c:44:72:a4:e4:14: 62:35:9f:13:6d:86:f6:ad:fb:ec:06:62:c5:e5:fb: 78:27:b2:95:71:d2:1a:0f:c8:9f:24:f3:6e:94:e6: a5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:94:43:E2:85:19:9E:48:EC:F7:42:C1:AF:A9:B5:2F:25:83:D5:56 X509v3 Authority Key Identifier: keyid:CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:9b:c7:c9:a4:0f:04:e2:92:70:94:f3:ce:fb:06:2e:57:f5: 9b:2f:0f:f0:8f:6e:32:d4:93:41:6a:d4:6e:b6:55:35:cd:9e: ca:59:d9:5f:d6:e3:12:7b:71:c4:04:ba:28:08:77:b2:67:95: 0c:88:5c:b7:34:eb:41:a3:d6:fb:68:85:89:10:bd:af:c2:6d: 79:27:97:ef:8c:a9:9b:52:fe:a9:18:0c:ab:c1:22:f0:d7:be: 87:6c:17:c4:a6:d4:6c:03:c1:58:ea:1a:c2:f8:2f:13:5c:14: 25:72:ef:c8:58:62:ad:11:7c:dc:7e:ae:67:bc:0d:e4:55:56: 67:4a:e7:06:fb:66:9f:d9:5e:26:f8:41:55:d0:b1:1f:92:80: 98:bf:44:9b:0a:d8:a8:9d:8d:fb:3b:fe:30:44:2f:94:6f:0f: 88:c3:dd:b6:76:a7:fd:61:0b:9b:7f:c5:3f:b9:22:cf:1e:e6: 68:a4:32:00:32:b8:9f:79:82:d7:94:73:9a:2a:82:a2:24:c9: 41:d7:28:de:c7:9f:35:84:ff:db:cf:a4:bb:56:92:7a:c3:a3: 84:cb:9e:d1:e6:ff:48:2a:ea:8e:f1:4b:d5:40:09:d0:45:b8: bd:b7:ce:71:db:2c:2e:20:09:46:af:91:1a:d2:22:6f:2d:28: 97:9b:7c:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfrtkJ/y2Eg6WJqGNdoBywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYTEwNDU3NzI2NmVjOWIxNDY3MzZjOGNjOWRhNzM2NmIx ZDk3ODEwHhcNMjUxMjI3MTIwMDUyWhcNMjUxMjI4MTIwMDUyWjAzMTEwLwYDVQQD EyhiYzk0NDNlMjg1MTk5ZTQ4ZWNmNzQyYzFhZmE5YjUyZjI1ODNkNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvEsMoPFUxHKTCZJxA29qLXXzSYl XR2DaA+PZ2PESODWNWmwbbkGKvMZRr2QStrVskl3yMZWtaRumdr9AT1SehrHbO2k xmreMR3mKigdHCiRAgg1RR3/jKpIv9ilBv1gG1jJBRVwt50IzOT+HtUHFcnH8Qy5 ldFfBzCB2zk9FTr7wV01PJ5/67E1BcJccQWqoSBhlapN/ew48VpNTGLdCe9LImiG 9c77n+aaRwn4Oz8v3sBn/LvhYHMs/Zn778az6JvVRc1JrR1Adx3ixhbvg1BtPk7k SX3RSah8RHKk5BRiNZ8TbYb2rfvsBmLF5ft4J7KVcdIaD8ifJPNulOalFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyUQ+KFGZ5I7PdCwa+ptS8lg9VWMB8GA1UdIwQY MBaAFM2hBFdyZuybFGc2yMydpzZrHZeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xZDI2NWEtNmE1Ny00Y2VkLWJkZjYt NWZiMDlmMjFjNjA3LzEvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8xZDI2NWEtNmE1Ny00Y2VkLWJkZjYtNWZiMDlmMjFjNjA3 LzEvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZvHyaQP BOKScJTzzvsGLlf1my8P8I9uMtSTQWrUbrZVNc2eylnZX9bjEntxxAS6KAh3smeV DIhctzTrQaPW+2iFiRC9r8JteSeX74ypm1L+qRgMq8Ei8Ne+h2wXxKbUbAPBWOoa wvgvE1wUJXLvyFhirRF83H6uZ7wN5FVWZ0rnBvtmn9leJvhBVdCxH5KAmL9EmwrY qJ2N+zv+MEQvlG8PiMPdtnan/WELm3/FP7kizx7maKQyADK4n3mC15RzmiqCoiTJ Qdco3sefNYT/28+ku1aSesOjhMue0eb/SCrqjvFL1UAJ0EW4vbfOcdssLiAJRq+R GtIiby0ol5t8VQ== -----END CERTIFICATE-----Generated at Sat Dec 27 20:41:15 2025 by rpki-client