This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft File: zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json) Hash identifier: iKgvumUDOcLJNeX/XymThgKRmubtRboDGaGo7c1WotM= Subject key identifier: EE:A0:42:38:3E:70:B4:B4:62:0D:C7:5F:91:5E:35:75:00:C4:BC:87 Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36 Certificate issuer: /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36 Certificate serial: 019B3C7E7EED7B3788B39D606F60A15DDFE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft Manifest number: 1419 Signing time: Sat 20 Dec 2025 16:01:21 +0000 Manifest this update: Sat 20 Dec 2025 16:01:21 +0000 Manifest next update: Sun 21 Dec 2025 16:01:21 +0000 Files and hashes: 1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: gASffnjYmxIrkg6ZoIDw+JAlrP0RStQ3zxIPLLChq1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:7e:ed:7b:37:88:b3:9d:60:6f:60:a1:5d:df:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36 Validity Not Before: Dec 20 16:01:21 2025 GMT Not After : Dec 21 16:01:21 2025 GMT Subject: CN=eea042383e70b4b4620dc75f915e357500c4bc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:45:21:fa:80:88:06:46:3f:16:3f:23:35: 77:fa:32:cb:41:b8:98:74:2d:d9:9b:f1:1c:77:60: e8:64:56:43:c9:68:3d:fb:ab:c6:0b:06:3e:c7:c8: 5c:b5:43:26:bc:07:e5:15:87:81:8c:a3:fd:27:58: a8:7a:bf:fd:93:6b:11:0c:1f:56:10:66:02:86:d8: a7:18:b3:3e:bd:0a:71:53:64:0f:7f:50:09:48:f5: 5f:30:c2:eb:18:ae:a7:30:a8:40:9b:21:3c:a7:5c: 05:98:81:37:d7:0d:b4:58:c5:12:b3:9e:9c:70:11: b4:4c:a5:99:05:eb:b4:83:15:d6:e5:04:49:9b:c2: 75:63:ae:82:3c:26:12:d8:26:5b:da:f4:29:33:52: e7:02:e9:2f:de:1c:30:3e:4e:95:31:7a:f1:e3:61: f0:8f:ab:c0:fd:a2:19:85:db:d6:9a:6d:f3:e3:cf: 67:3a:27:42:f4:e9:23:a9:27:90:23:1b:f6:ff:ea: 62:ee:42:a5:42:e5:84:0b:63:de:14:1a:54:4d:4d: b8:42:5a:83:f4:b2:b6:f0:9d:ac:9f:26:dc:fa:16: 22:f8:27:85:e1:44:10:9a:dc:ca:43:81:8c:e1:38: 8b:d5:bf:2f:80:42:0b:bf:d6:16:08:63:9c:e5:91: 02:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A0:42:38:3E:70:B4:B4:62:0D:C7:5F:91:5E:35:75:00:C4:BC:87 X509v3 Authority Key Identifier: keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:39:c2:d2:ab:2a:c5:66:b6:2e:70:d5:ee:c7:b9:46:4a:fe: 57:a2:39:ca:ef:4f:59:c5:f9:8e:0c:ae:4c:ec:36:25:ef:6d: 29:50:cb:3e:1f:d0:90:f0:e9:aa:0e:9b:08:26:01:3d:55:6b: b9:97:28:7e:f1:6d:3f:64:3a:58:66:6f:40:5e:b0:39:f2:5a: 78:b2:c8:bb:8b:35:dc:09:c9:0f:17:0a:9a:b9:ea:f3:b2:6d: 9b:f8:16:69:48:8f:9e:5a:b1:88:43:80:ed:c2:6e:87:0f:df: 68:63:be:bd:af:ac:d1:4c:ae:e6:84:e7:4e:1a:17:a3:34:a7: 14:ac:89:ad:1f:50:64:3b:c7:00:91:30:02:8c:cd:8e:e2:d5: 70:3f:fe:4a:21:1b:34:b2:a3:93:6e:8e:1c:36:5e:57:aa:ca: e8:98:b0:23:7c:96:5d:25:d9:df:ca:f0:28:23:96:17:fe:7d: cd:8f:6a:45:8a:cd:6a:b2:b6:e8:09:cd:a8:e4:d8:c9:55:88: 81:4e:b4:2c:93:7a:4f:58:2a:f1:01:b7:2a:7e:4b:f2:3e:19: 07:49:54:b8:d6:cb:73:a6:c8:ed:73:3b:b9:14:50:8d:f4:70: cb:f8:6a:8c:39:90:92:2a:f4:9c:b5:af:36:3a:4d:fd:3f:45: 96:81:d4:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fn7tezeIs51gb2ChXd/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDFjM2FmMmNkNTk4NjU3NWQxYmNmNjVlYzllODc3NjY2 ZWRlMzYwHhcNMjUxMjIwMTYwMTIxWhcNMjUxMjIxMTYwMTIxWjAzMTEwLwYDVQQD EyhlZWEwNDIzODNlNzBiNGI0NjIwZGM3NWY5MTVlMzU3NTAwYzRiYzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJlFIfqAiAZGPxY/IzV3+jLLQbiY dC3Zm/Ecd2DoZFZDyWg9+6vGCwY+x8hctUMmvAflFYeBjKP9J1ioer/9k2sRDB9W EGYChtinGLM+vQpxU2QPf1AJSPVfMMLrGK6nMKhAmyE8p1wFmIE31w20WMUSs56c cBG0TKWZBeu0gxXW5QRJm8J1Y66CPCYS2CZb2vQpM1LnAukv3hwwPk6VMXrx42Hw j6vA/aIZhdvWmm3z489nOidC9OkjqSeQIxv2/+pi7kKlQuWEC2PeFBpUTU24QlqD 9LK28J2snybc+hYi+CeF4UQQmtzKQ4GM4TiL1b8vgEILv9YWCGOc5ZECowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6gQjg+cLS0Yg3HX5FeNXUAxLyHMB8GA1UdIwQY MBaAFMxBw68s1ZhlddG89l7J6Hdmbt42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YTZlNTEtNGE4Zi00MGQzLWIwZmEt NGM2NTIyNDUzYzlhLzEvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YTZlNTEtNGE4Zi00MGQzLWIwZmEtNGM2NTIyNDUzYzlh LzEvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjnC0qsq xWa2LnDV7se5Rkr+V6I5yu9PWcX5jgyuTOw2Je9tKVDLPh/QkPDpqg6bCCYBPVVr uZcofvFtP2Q6WGZvQF6wOfJaeLLIu4s13AnJDxcKmrnq87Jtm/gWaUiPnlqxiEOA 7cJuhw/faGO+va+s0Uyu5oTnThoXozSnFKyJrR9QZDvHAJEwAozNjuLVcD/+SiEb NLKjk26OHDZeV6rK6JiwI3yWXSXZ38rwKCOWF/59zY9qRYrNarK26AnNqOTYyVWI gU60LJN6T1gq8QG3Kn5L8j4ZB0lUuNbLc6bI7XM7uRRQjfRwy/hqjDmQkir0nLWv NjpN/T9FloHULQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:04 2025 by rpki-client