This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft File: ZTwsX-3AjoxdH2VGksPkVkDIou0.mft (raw, json) Hash identifier: 8gttElGX7bDdbmqM2sKsXmwrYrlARbbWDwisdB/m8yQ= Subject key identifier: 94:CF:3A:B1:94:41:7C:B1:CA:A8:16:4D:FC:11:3C:61:F4:0F:0D:6D Authority key identifier: 65:3C:2C:5F:ED:C0:8E:8C:5D:1F:65:46:92:C3:E4:56:40:C8:A2:ED Certificate issuer: /CN=653c2c5fedc08e8c5d1f654692c3e45640c8a2ed Certificate serial: 019B2740E67F6EBE3E309AC0910ABF11E7AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTwsX-3AjoxdH2VGksPkVkDIou0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft Manifest number: 0C80 Signing time: Tue 16 Dec 2025 13:02:03 +0000 Manifest this update: Tue 16 Dec 2025 13:02:03 +0000 Manifest next update: Wed 17 Dec 2025 13:02:03 +0000 Files and hashes: 1: ZTwsX-3AjoxdH2VGksPkVkDIou0.crl (hash: 31/KJ0WWUKBd001UPy43DsaSl8qF/kRlobmVt23ab4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZTwsX-3AjoxdH2VGksPkVkDIou0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:e6:7f:6e:be:3e:30:9a:c0:91:0a:bf:11:e7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653c2c5fedc08e8c5d1f654692c3e45640c8a2ed Validity Not Before: Dec 16 13:02:03 2025 GMT Not After : Dec 17 13:02:03 2025 GMT Subject: CN=94cf3ab194417cb1caa8164dfc113c61f40f0d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:cd:2c:be:b8:4a:22:2f:94:d3:6b:61:94: 08:67:a7:68:25:86:87:2c:f4:08:a5:d1:a5:6e:bf: 20:e0:23:85:0a:ee:a1:3d:31:f1:ea:af:ce:d3:92: 24:f2:4e:f8:f0:cb:bd:a7:4b:a4:a2:a8:5d:85:22: fe:5d:fa:d6:e4:a1:24:00:c1:f3:53:e9:84:73:a8: 6b:32:d2:b6:fa:80:33:41:80:a3:72:be:eb:eb:d1: 75:e9:71:57:16:7c:be:e7:9c:38:1d:44:12:65:02: 7e:ed:96:12:ef:58:d7:74:8a:89:64:77:0b:bd:92: 0b:a5:7c:9b:3f:87:51:c6:49:f9:93:88:04:38:d3: 5e:1b:ad:24:04:86:61:b2:3e:44:48:e5:1f:86:b6: 90:ba:23:f1:f2:a7:b7:af:c9:55:e4:dd:1e:00:46: 09:82:0c:8d:da:20:c4:09:a2:1f:0e:6d:9b:71:3e: 20:69:ec:6b:d2:63:4f:5c:69:5b:4c:da:a9:3d:fd: b7:56:a0:f9:28:a3:56:e8:4a:ce:25:2d:88:a6:ab: 60:81:44:0b:f2:ce:88:22:fc:38:d8:29:f0:e8:52: f3:6a:b1:49:aa:0f:f1:ef:8b:72:e4:bf:71:87:89: 31:4e:d4:ae:42:9b:7b:8c:b7:7b:1e:ac:92:66:80: fc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CF:3A:B1:94:41:7C:B1:CA:A8:16:4D:FC:11:3C:61:F4:0F:0D:6D X509v3 Authority Key Identifier: keyid:65:3C:2C:5F:ED:C0:8E:8C:5D:1F:65:46:92:C3:E4:56:40:C8:A2:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTwsX-3AjoxdH2VGksPkVkDIou0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d3:0c:c0:70:62:7e:f1:12:bb:f7:c8:90:1d:32:7a:c6:ab: 80:46:5e:e3:47:1b:4f:d3:a4:be:f9:58:4e:db:80:95:e8:1f: 20:11:be:9a:bd:6a:4b:35:2b:90:1e:bc:d5:84:8b:30:26:48: 50:ee:e9:03:be:a1:45:43:40:b5:21:84:13:7c:94:83:7a:14: ed:06:e0:e0:ae:af:af:91:c7:de:b7:40:82:d8:98:bd:08:8b: 67:40:3b:dc:a3:74:f6:0a:a1:4b:15:21:bf:0c:c4:d4:53:45: a9:19:de:22:e3:ee:ef:f2:fc:76:a3:aa:f9:af:8a:1e:a8:1f: bd:49:fc:5d:1e:d7:24:e8:4e:d1:da:b9:4e:97:f4:25:57:d3: b2:60:01:74:9e:fd:9b:b4:45:eb:17:f9:95:40:df:24:91:b7: a6:e4:9b:a9:58:2d:16:2f:57:e8:69:d2:a7:65:6b:f4:3a:35: bb:24:6b:32:85:fe:bf:eb:a4:0f:d4:60:34:05:fd:88:ca:bd: 92:b1:6e:16:ab:d1:95:da:44:09:2b:74:65:f8:c3:53:b0:f8: 7b:d0:72:4d:94:78:c4:40:ab:af:de:08:93:bf:a5:ab:01:09: c3:c1:b9:3a:fa:9a:9d:90:42:af:5f:af:c5:8f:6c:c0:99:0c: 11:68:6e:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQOZ/br4+MJrAkQq/EeevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1M2MyYzVmZWRjMDhlOGM1ZDFmNjU0NjkyYzNlNDU2NDBj OGEyZWQwHhcNMjUxMjE2MTMwMjAzWhcNMjUxMjE3MTMwMjAzWjAzMTEwLwYDVQQD Eyg5NGNmM2FiMTk0NDE3Y2IxY2FhODE2NGRmYzExM2M2MWY0MGYwZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaXNLL64SiIvlNNrYZQIZ6doJYaH LPQIpdGlbr8g4COFCu6hPTHx6q/O05Ik8k748Mu9p0ukoqhdhSL+XfrW5KEkAMHz U+mEc6hrMtK2+oAzQYCjcr7r69F16XFXFny+55w4HUQSZQJ+7ZYS71jXdIqJZHcL vZILpXybP4dRxkn5k4gEONNeG60kBIZhsj5ESOUfhraQuiPx8qe3r8lV5N0eAEYJ ggyN2iDECaIfDm2bcT4gaexr0mNPXGlbTNqpPf23VqD5KKNW6ErOJS2IpqtggUQL 8s6IIvw42Cnw6FLzarFJqg/x74ty5L9xh4kxTtSuQpt7jLd7HqySZoD86wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTPOrGUQXyxyqgWTfwRPGH0Dw1tMB8GA1UdIwQY MBaAFGU8LF/twI6MXR9lRpLD5FZAyKLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlR3c1gtM0Fqb3hkSDJWR2tzUGtWa0RJb3UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMTUyZTAtYTdmYi00YWZjLTljNzAt MWNjYjU0ZjM3MmFhLzEvWlR3c1gtM0Fqb3hkSDJWR2tzUGtWa0RJb3UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mMTUyZTAtYTdmYi00YWZjLTljNzAtMWNjYjU0ZjM3MmFh LzEvWlR3c1gtM0Fqb3hkSDJWR2tzUGtWa0RJb3UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdMMwHBi fvESu/fIkB0yesargEZe40cbT9OkvvlYTtuAlegfIBG+mr1qSzUrkB681YSLMCZI UO7pA76hRUNAtSGEE3yUg3oU7Qbg4K6vr5HH3rdAgtiYvQiLZ0A73KN09gqhSxUh vwzE1FNFqRneIuPu7/L8dqOq+a+KHqgfvUn8XR7XJOhO0dq5Tpf0JVfTsmABdJ79 m7RF6xf5lUDfJJG3puSbqVgtFi9X6GnSp2Vr9Do1uyRrMoX+v+ukD9RgNAX9iMq9 krFuFqvRldpECSt0ZfjDU7D4e9ByTZR4xECrr94Ik7+lqwEJw8G5OvqanZBCr1+v xY9swJkMEWhuVw== -----END CERTIFICATE-----Generated at Tue Dec 16 22:32:48 2025 by rpki-client